Business Scam Warning: How to Protect Your Business
Running a business involves enough challenges without cybercriminals trying to steal your money, personal information or company details. Unfortunately, scams targeting small business owners, sole traders and company directors are becoming increasingly sophisticated. Fraudsters routinely impersonate government organisations, including HMRC and Companies House, using emails, phone calls, text messages, WhatsApp messages and even printed letters to catch people off guard.
Good news: most scams can be avoided if you know what to look for.
Why business owners are being targeted
Criminals know that tax deadlines, company filing requirements and regulatory changes can create uncertainty, something that’s exploited to pressure business owners into making rash decisions.
Common tactics include fake tax refund offers, demands for urgent payments, threats of legal action and warnings about late filing penalties. Many scams are designed to create panic, encouraging you to act before you’ve had time to think – this is exactly what fraudsters are counting on.
The scams currently doing the rounds
Some of the most common scams include:
- WhatsApp messages impersonating HMRC.
- Emails promising tax refunds.
- Phone calls threatening legal action or arrest.
- Fake Companies House letters requesting payment.
- QR codes leading to fraudulent websites.
- Emails asking you to download attachments or verify company details.
- Calls from fictitious departments demanding payment for alleged breaches.
Many of these communications look convincing. Some even use official logos, realistic language and telephone numbers that appear genuine.
Your anti-scam checklist
When it comes to suspicious communications, a few simple rules can dramatically reduce your risk.
- Don’t click – Never click links in unexpected emails or text messages. If a message claims to be from HMRC or Companies House, visit the official website independently rather than using the link provided.
- Don’t open attachments – Unexpected attachments are one of the easiest ways for criminals to gain access to your systems. If you’re not expecting a document, leave it unopened until you’ve verified its source.
- Don’t scan QR codes automatically – Bogus QR codes direct you to fake websites designed to capture passwords, banking details and personal information. Always check where a QR code is taking you before entering any information.
- Don’t trust caller ID – Fraudsters can make telephone numbers appear legitimate. If someone claims to be calling from HMRC or Companies House and asks for information or payment, end the call and contact the organisation directly using details from its official website.
- Don’t share passwords or banking details – Government organisations will never ask you to reveal passwords, access codes or sensitive banking information by email, text message or social media.
- File early – Leaving tax returns or company filings till the last minute creates pressure. Pressure creates mistakes – something that scammers thrive on. Completing your tax return early means you’re less likely to be caught out by fake refund offers, urgent payment demands or last-minute scam messages designed to exploit approaching deadlines.
Trust your instincts
If something feels rushed, threatening or unexpected, pause before acting.
Legitimate organisations understand that business owners may wish to verify communications. Genuine requests can wait; scammers want immediate action.
Cybercriminals continue to develop new tactics, but the basic defence remains the same: stop, think and verify. A few moments of caution today could save your business from a costly mistake tomorrow.
Recent News Articles
Your end-of-tax-year checklist for 2026/27 – key allowances to use before the 5 April deadline
Capital Gains Tax – why more people are paying it and how to prepare
