HMRC arrests pair over suspected £153 million TikTok tax fraud

HMRC's cybercrime investigators have arrested two men after blocking £153 million of suspected fraudulent tax claims linked to a scam that used TikTok to harvest people's personal tax details.

The arrests

The two suspects, Romanian nationals aged 22 and 25, were detained by HMRC cybercrime investigators at addresses in the Newham area of east London on 23 April 2026. Both have since been released on bail while the investigation continues.

They were arrested on suspicion of four offences: fraud by false representation under section 2 of the Fraud Act 2006; encouraging or assisting the commission of an offence under section 46 of the Serious Crime Act 2007; unauthorised access with intent under section 2 of the Computer Misuse Act 1990; and money laundering offences under sections 327 to 329 of the Proceeds of Crime Act 2002.

How the scam worked

According to HMRC, the pair are accused of using TikTok to persuade taxpayers to hand over their personal tax account details, dangling the promise of financial rewards in return. HMRC says it has seen similar suspected scams running across other social media platforms, including Instagram and Snapchat, typically using posts that promise "risk free" cash and inviting people to respond via direct message.

The mechanics of the fraud are what make it particularly damaging to victims. Criminals harvest someone's login or personal tax details, then use them to submit fraudulent repayment claims to HMRC while concealing their own identity. Because the claim is made in the victim's name, it is the victim, not the fraudster, who is left owing money to HMRC once the fraud is uncovered — with knock-on risks including identity theft and frozen bank accounts.

HMRC's response and public warning

Simon Grunwell, Head of Cybercrime Investigations at HMRC's Fraud Investigation Service, urged people to treat their tax details with the same caution as their banking information:

"You should protect your personal tax details in the same way you protect your bank details. Claims of quick, risk-free cash in return for sharing your personal information are a scam. They aim to defraud you and the taxpayer. Anyone who comes across adverts on social media or is approached in any way with promises of easy money through their tax credentials should think twice and report it on GOV.UK."

HMRC has reiterated that it will never use social media to offer a tax rebate or to ask for personal or payment information. It is asking anyone who spots a suspicious HMRC-related social media account or message to report it to its security team by emailing branddefence@hmrc.gov.uk, while information about tax fraud more generally can be reported at gov.uk/report-tax-fraud. HMRC has said it is unable to comment further on the specifics of the ongoing investigation at this stage.

Implications

This case is a reminder that HMRC-themed fraud has moved well beyond the phishing email and now runs comfortably on mainstream social platforms, particularly among younger users who may not associate TikTok or Snapchat with financial scams. The scale involved — £153 million in blocked claims from a single investigation — shows this is organised, high-volume fraud rather than opportunistic chancing.

For individuals, the practical takeaway is straightforward: HMRC does not recruit people via social media to share tax details in exchange for payment, and any post suggesting otherwise should be treated as fraudulent. For businesses and payroll teams, it is worth using this case as a prompt to remind staff — especially those managing self-assessment or claiming reliefs on behalf of others — that sharing Unique Taxpayer References or Government Gateway credentials with anyone outside a trusted adviser relationship carries real financial risk, since liability for a fraudulent claim submitted in someone's name can ultimately fall back on them.