Yes, HMRC can check your bank account. It cannot watch your balance in real time, but it can require your bank to hand over your account details, statements, and transaction history whenever it has a legitimate reason to review your tax position. Most of these powers sit in Schedule 36 of the Finance Act 2008. On top of that, HMRC already receives large volumes of financial data about UK taxpayers automatically, from UK banks, overseas tax authorities, and online platforms, without ever issuing a notice about you personally.
What HMRC Already Knows Before It Asks
By the time HMRC contacts you or your bank, it usually holds a fair amount of your financial information. Its data-matching system, Connect, cross-references records from HMRC’s own files, other government databases such as the Land Registry and Companies House, banks and financial institutions, international data shared under the Common Reporting Standard, and online marketplace and property platforms. When Connect spots a mismatch between your declared income and your apparent financial activity, it builds a risk profile that can lead to a compliance check.
So the picture is built first, and the request for your bank records comes second. If your declared income looks low next to property purchases, overseas account balances, or marketplace sales, that gap is often what prompts HMRC to reach for your transaction history.
Information Received Automatically From Overseas
Under the Common Reporting Standard, financial institutions in over 100 participating countries report data on accounts held by non-residents to their local tax authority, which forwards it to the account holder’s home country. If you hold an account abroad, HMRC receives your name, address, date of birth, tax identification number, account number, year-end balance, and income such as interest, dividends, and proceeds from investment sales.1GOV.UK. Automatic Exchange of Information if You Have an Account This exchange happens annually without any suspicion of wrongdoing.
The US Foreign Account Tax Compliance Act (FATCA) works in the opposite direction: UK financial institutions report data on accounts held by US persons to HMRC, which passes it to the IRS.2GOV.UK. HM Revenue and Customs’ Financial Institution Notice Powers
From 1 January 2026, the UK’s Cryptoasset Reporting Framework requires crypto service providers to collect identifying details from users and report aggregate transaction data to HMRC every year, closing a gap that previously left crypto income undetected unless HMRC specifically asked for it.3GOV.UK. Domestic Reporting of UK Resident Cryptoasset Users Under the Cryptoasset Reporting Framework
What Triggers a Direct Check of Your Account
Most investigations are not random, though random checks do happen. The common triggers include incorrect figures on a tax return, a noticeable drop in reported income from one year to the next, working in an industry known for cash transactions, and regularly filing late. Tips from informants and data from third-party platforms also feed in. If your bank activity contradicts what your return says, that discrepancy on its own can justify HMRC asking for your full transaction history.
The Legal Powers HMRC Uses
The main tool for obtaining bank records is the information notice under Schedule 36 of the Finance Act 2008. There are three main types.
Taxpayer Notices
A taxpayer notice is served on you directly and requires you to produce documents or information relevant to your tax position. HMRC needs approval from the First-tier Tribunal or a senior HMRC officer before issuing one, unless you agree to it. You then have at least 30 days from the date of the notice to comply.4Legislation.gov.uk. Finance Act 2008, Schedule 36
Third-Party Notices
A third-party notice goes to your bank, or another organisation holding your data, rather than to you. HMRC normally needs tribunal approval to issue one, and you are usually given a copy along with a summary of why the information is needed. The tribunal can waive the requirement to notify you if doing so might undermine the assessment or collection of tax.5GOV.UK. CH24180 – Information and Inspection Powers: Information Notices: Tribunal Approval: Third Party Notice – Disapplying Conditions The bank can appeal on the ground that compliance would be unduly onerous, but it cannot refuse simply because the request is inconvenient.4Legislation.gov.uk. Finance Act 2008, Schedule 36
Financial Institution Notices
Since July 2021, HMRC has had a further power that bypasses both your consent and tribunal approval. A Financial Institution Notice (FIN) can require a bank to hand over account information without telling you first, if a tribunal agrees that notifying you could undermine the investigation. In the year ending March 2025, HMRC issued 1,307 FINs.6GOV.UK. Report on HM Revenue and Customs Financial Institution Notice Powers 2024 to 2025
Safeguards still apply. The information must be reasonably required to check a known taxpayer’s position or collect a debt. An authorised, trained HMRC officer must approve each notice and must be satisfied that compliance would not be unduly onerous for the financial institution. If a bank is penalised for non-compliance with a FIN, it can appeal that penalty.
What Your Bank Hands Over
When HMRC issues a valid notice, the response from your bank can include account balances, full transaction histories covering deposits, withdrawals, and transfers, and the identifying details linking you to the account.7Legislation.gov.uk. Finance Act 2008 HMRC uses this data to test whether your declared income matches your actual financial activity, to find income that was never reported, and to trace money connected to a tax liability. The reach is not limited to current accounts. Building society accounts, cash ISAs, and investment accounts held with financial institutions are all within scope.
Can HMRC Take Money From Your Account?
HMRC’s powers extend beyond viewing your data. Under the Direct Recovery of Debts scheme, HMRC can take money directly from your bank account or cash ISA to settle an established tax debt of £1,000 or more. The power was paused during the COVID-19 pandemic, and HMRC announced in 2025 that it would restart using it.8GOV.UK. Issue Briefing: Direct Recovery of Debts
The safeguards are significant. HMRC must always leave at least £5,000 across your accounts. It can only act on debts that have passed the appeal deadline and where you have repeatedly ignored contact attempts. An HMRC officer must visit you in person before any funds are held. Once a hold is placed, you have 30 days to object, and no money moves until that window expires. Anyone identified as vulnerable during the face-to-face visit is excluded from the scheme entirely.
Penalties for Ignoring a Notice
If you receive an information notice and do nothing, the penalties escalate:
- £300 initial penalty for the failure to comply.
- Up to £60 per day for every day the failure continues after the initial penalty is assessed.
- Up to £1,000 per day where the failure continues and daily penalties have already been charged.
The daily penalties cannot be charged until the £300 has been assessed, so the escalation is structured rather than immediate.9GOV.UK. CH26620 – Information and Inspection Powers: Penalties: What Is the Penalty: Overview HMRC can also charge a separate tax-related penalty based on the amount of tax it believes you owe.
Your Rights if You Receive a Notice
You can appeal a taxpayer notice to the First-tier Tribunal within 30 days of receiving it. The appeal must be in writing and sent to the HMRC officer who issued the notice. Two important exceptions apply. You cannot appeal a requirement to hand over statutory records, meaning the records tax law requires you to keep, such as VAT records or the documents needed to file an accurate return.4Legislation.gov.uk. Finance Act 2008, Schedule 36 You also cannot appeal a taxpayer notice that the tribunal already approved.
If your bank receives a third-party notice about your accounts, it can appeal on the ground that compliance would be unduly onerous, within the same 30-day deadline. For FINs, the financial institution can appeal any penalty imposed for non-compliance, though it cannot challenge the notice itself in the same way.
HMRC must handle your financial data in line with the UK General Data Protection Regulation and the Data Protection Act 2018.10GOV.UK. Data Protection: The UK’s Data Protection Legislation The data must be relevant to a lawful purpose, stored securely, and not kept longer than necessary. HMRC publishes privacy notices covering how it processes information from transaction monitoring and compliance checks.11GOV.UK. HMRC Transaction Monitoring Privacy Notice
If You Know There’s a Problem, Disclose First
If your bank account contains evidence of undeclared income, coming forward before HMRC finds it almost always produces a better outcome. HMRC offers several disclosure routes, including the Digital Disclosure Service for most domestic taxes and a Contractual Disclosure Facility for cases involving deliberate behaviour. A dedicated service exists for unpaid tax on cryptoassets.12GOV.UK. Make a Voluntary Disclosure to HMRC
The penalty reduction for voluntary disclosure is substantial. If you notify HMRC, disclose fully, and pay what you owe within 90 days of HMRC acknowledging your notification, you earn the maximum reduction on any penalty. If you took reasonable care and simply made an error, you may owe no penalty at all. If HMRC finds the issue through your bank records first, that benefit is gone and penalties start at a higher floor.