Can HMRC Access Your Bank Account? What They Can See, When, and the New DRD Rules

June 17, 2026 George 0 Comments

HMRC cannot simply log into your online banking and check your balance. But they do have substantial legal powers to obtain bank account information — and since 2021, they can request it without your permission and without needing a court or tribunal to approve the request. Since 2025, HMRC has also restarted the power to take money directly from bank accounts to recover tax debts under the Direct Recovery of Debts (DRD) scheme.

This is the plain-English guide: what HMRC can actually see, the three legal powers they use, when they can take money from your account, what triggers an investigation, and what protections you have under UK law.

If you are self-employed or have income from a side hustle, also see our guide to HMRC side hustle tax rules — eBay, Vinted, and what you need to declare — covering what the digital platform-reporting rules mean for your income.

Can HMRC See Your Bank Account? Quick Answer Table

Question	Answer
Can HMRC log into your online banking?	No — they have no live access to your account
Can HMRC request your bank statements?	Yes — via Financial Institution Notice (FIN) since 2021, without your consent
Can HMRC take money from your bank?	Yes — via Direct Recovery of Debts (DRD), restarted 2025; strict conditions apply
Can HMRC check your account at random?	No — must have specific grounds: discrepancy, investigation, or debt collection
Do they need a court order?	Not for FINs since 2021 — previously a tribunal was required
Will you be notified?	Usually yes — except in specific fraud investigation cases
Does HMRC monitor accounts in real time?	No — no live monitoring of personal bank feeds

The Three Main Powers HMRC Uses to Access Bank Information

1. Financial Institution Notices (FINs) — Introduced 2021

The Finance Act 2021 introduced Financial Institution Notices — the most significant expansion of HMRC’s information-gathering powers in years. FINs allow HMRC to request information directly from banks and financial institutions without needing your consent or approval from a tax tribunal. Before 2021, HMRC had to ask for your permission or obtain a judge’s approval to access your bank information. That tribunal requirement was removed by the Finance Act 2021 and no longer applies.

What FINs allow HMRC to obtain from your bank: bank statements, account ownership details, loan and overdraft information, investment and savings account information, and deposit histories. HMRC must still demonstrate that the information is reasonably required for a compliance purpose — but the approval is now made at internal HMRC officer level rather than at tribunal.

FIN Statistics	Detail
FINs issued 2024-25	1,307
FINs issued 2023-24	1,143
Used for debt collection	Only 4 of 1,307 in 2024-25
Used for compliance checks	Vast majority — over 1,300
Rejected by HMRC’s own officers	Over 200 proposed FINs in 2024-25

The internal rejection rate of over 200 proposed FINs shows that HMRC does apply internal scrutiny before issuing them — they are not issued indiscriminately. The increase from 1,143 to 1,307 year-on-year reflects HMRC’s growing use of the power as it becomes more embedded in compliance operations.

2. Schedule 36 Notices (Finance Act 2008)

Before FINs existed, Schedule 36 of the Finance Act 2008 was HMRC’s primary tool for compelling information disclosure. It remains in use alongside FINs. Under Schedule 36, HMRC can issue a notice requiring you — or a third party such as your bank — to provide information that is ‘reasonably required’ to check your tax position.

A notice issued to you directly does not require tribunal approval
A third-party notice to your bank typically does require tribunal approval — though there are exemptions
You have the right to appeal a Schedule 36 notice in most circumstances
Penalties for non-compliance with a Schedule 36 notice can be significant — up to £300 initial penalty plus £60 per day for continued failure

Schedule 36 notices are broader in scope than FINs and can compel the production of documents, records, and information beyond bank account data — including business records, correspondence, and accounting data.

3. Direct Recovery of Debts (DRD) — Restarted 2025

Direct Recovery of Debts is the power that concerns most people — HMRC’s ability to take money directly from your bank or building society account without obtaining a court order. DRD was introduced by the Finance Act 2015, used in only 19 cases between 2016 and 2018 across more than 22,000 reviews, then paused during the COVID-19 pandemic. It formally restarted in 2025 in a ‘test and learn’ phase, with full operational rollout planned for April 2026.

The critical point about DRD is that it is not a power HMRC can use freely or at low thresholds. Strict cumulative conditions must all be satisfied before any money can be taken:

Direct Recovery of Debts: Complete Rules and Conditions

DRD Condition	Detail
Minimum debt	You must owe more than £1,000 in unpaid tax or tax credit overpayments
Multiple contact attempts	HMRC must have made at least four contact attempts first
Ability to pay	HMRC must show you have means to pay but are refusing to engage
Minimum remaining balance	At least £5,000 must remain across all your accounts after any deduction
Hold notice period	30 days to object, pay in full, or set up a payment plan
Response window	14 days after hold notice to contact HMRC before money is taken
Hardship protection	Those experiencing genuine financial hardship are excluded
Joint accounts	HMRC assumes 50% is yours; joint holder can object if their share is higher
Challenge route	County court if debt is disputed, notification was incorrect, or joint account affected unfairly

The £5,000 minimum remaining balance rule is one of the most significant protections. HMRC cannot empty your account — after any DRD deduction, £5,000 must remain across all your UK bank and building society accounts combined. If you have less than £5,000 across all your accounts after accounting for the debt, DRD cannot be used against you.

The 30-day hold notice period and 14-day response window give you meaningful time to respond. If you contact HMRC within 14 days of the hold notice and agree a payment plan, the money is not taken. The 19 cases in which DRD was actually used between 2016 and 2018 — out of 22,000+ reviews — reflects how high the threshold is in practice, and how rarely it reaches the point of actual deduction.

HMRC’s Connect System: The Data It Cross-Checks

Much of HMRC’s intelligence comes not from direct bank access but from its Connect software — an automated data-matching system that cross-checks your tax returns against data from multiple external sources simultaneously. Connect is one of the most powerful tax compliance tools in the world and is a primary reason HMRC’s investigation capability has expanded significantly in recent years.

Connect cross-references your declared income against:

Bank deposit data provided periodically by financial institutions
Online marketplace sales data — eBay, Etsy, Vinted, Amazon Seller, Airbnb (platforms now required to report seller income to HMRC)
Payment platform data — PayPal, Stripe, Square
Land Registry records — property purchases and sales
Companies House data — director roles, shareholdings, company accounts
DVLA vehicle ownership records
Social media and online presence reviewed for lifestyle inconsistency with declared income
Foreign exchange transaction data and overseas account reports under Common Reporting Standards (CRS) and the US FATCA agreement
HMRC’s own records — VAT returns, PAYE data from employers, previous tax returns

From April 2027, savings providers will be required to provide customers’ National Insurance numbers to HMRC, making it significantly easier to match savings interest against Personal Savings Allowance limits — important for those with savings across multiple accounts.

What Triggers an HMRC Investigation Into Your Bank Account?

HMRC does not investigate everyone — it focuses its resources on cases where the risk of non-compliance is highest. The most common triggers for a compliance check that may involve bank account access:

A discrepancy between income declared on your Self Assessment return and bank deposits visible to HMRC via the Connect system
Your lifestyle — property, vehicles, holidays, social media presence — appearing inconsistent with your declared income
A tip-off or whistleblower report submitted via HMRC’s fraud reporting service
Operating in an industry sector with a known high rate of undeclared income — cash-in-hand trades, letting agents, taxi drivers
A sharp or unexplained increase in income year-on-year without a corresponding explanation
Inconsistencies flagged by the Connect data-matching system — particularly income from online platforms not declared on Self Assessment
Random compliance check selection — HMRC conducts a proportion of checks on randomly selected returns regardless of risk profile
Discrepancies in VAT returns versus declared income for VAT-registered businesses

Personal Bank Accounts vs Business Bank Accounts: What HMRC Checks

HMRC will typically examine business bank accounts first when investigating the self-employed, sole traders, limited company directors, and landlords. However, personal accounts are also subject to scrutiny, particularly where:

Business and personal finances are mixed in the same account — common among sole traders who are not legally required to hold separate business accounts
Significant unexplained deposits appear in a personal account
A FIN is issued — it covers all accounts held at the institution, not just business ones

Limited companies are legally required to hold business accounts separate from directors’ personal accounts. Sole traders are not legally required to do so, but maintaining separate accounts significantly reduces the risk of personal finances being drawn into a compliance check and makes the investigation process more straightforward if one occurs.

Making Tax Digital and Open Banking: What HMRC Can and Cannot See

Making Tax Digital (MTD) is HMRC’s phased programme requiring digital record-keeping and quarterly income reporting, expanding from April 2026 to self-employed individuals and landlords with income over £50,000 and to lower income thresholds in subsequent years. A common misconception about MTD is that connecting your bank account to MTD-compatible accounting software gives HMRC live visibility of your bank transactions. This is not correct.

When you connect your bank account to MTD-approved software (such as QuickBooks, Xero, or FreeAgent), the data flows to the software provider — not directly to HMRC
HMRC only receives what you formally submit in your quarterly updates and annual tax return
The bank connection feature in accounting software is for your own record-keeping and categorisation — it does not open a live data feed to HMRC

Open Banking connectivity — which allows apps and software to read your bank transactions with your permission — operates under FCA regulation and requires your explicit authorisation. HMRC does not use Open Banking to access your account.

What to Do if You Receive an HMRC Contact About Your Bank Account

Do not ignore it — whether it is a compliance check letter, a notice under Schedule 36, or notification of a FIN, failing to respond increases your risk of penalties
Check it is genuine — HMRC contact letters come on headed paper with a specific reference number; you can verify genuineness by calling HMRC’s general enquiries line (0300 200 3300) with the reference number
Seek professional advice early — a tax adviser or accountant can help you respond correctly and avoid inadvertently providing information that creates problems beyond the original query
If you receive a DRD hold notice — contact HMRC immediately to discuss a payment plan or dispute the debt. The 14-day response window closes quickly
Keep records — if you believe HMRC’s assessment is wrong, documented evidence of your actual income and expenditure is your most important protection

For further guidance on HMRC’s savings tax rules including the Personal Savings Allowance and the 2027 NI number reporting change, see our guide to HMRC savings tax rules and what the changes mean for your account.

For the official HMRC guidance on Direct Recovery of Debts and the formal legal framework, see GOV.UK — HMRC debt collection powers. For the Finance Act 2021 text governing Financial Institution Notices, see the UK legislation — Finance Act 2021.

Bottom Line


Can HMRC access your account?	Yes — via FINs (no court approval needed since 2021) and Schedule 36 notices
Can they take money directly?	Yes — DRD restarted 2025; debt over £1,000; £5,000 must remain; 30-day notice
Real-time monitoring?	No — no live bank feed access by HMRC
FINs issued 2024-25	1,307 — only 4 for debt collection; 200+ rejected by HMRC’s own officers
DRD historically used	19 cases 2016-18 out of 22,000+ reviews — strict threshold in practice
Main investigation trigger	Connect system data mismatch or lifestyle inconsistency with declared income
DRD protection	£5,000 must remain; 30-day hold notice; hardship exemption; county court challenge
Best protection	Accurate records, on-time filing, separate business and personal accounts
HMRC helpline	0300 200 3300 — to verify genuine HMRC contact or discuss a payment arrangement

Frequently Asked Questions

Can HMRC access your bank account without telling you?

In most cases, HMRC notifies you before accessing your bank information. However, Financial Institution Notices (FINs) allow HMRC to go directly to your bank without your consent — though they must still notify you that a FIN has been issued. A specific exception exists for fraud investigations where prior notice could hinder the enquiry. Outside fraud cases, you will normally receive a letter from HMRC before any investigation into your accounts begins.

Can HMRC take money directly from my bank account?

Yes — via Direct Recovery of Debts (DRD), restarted in 2025. But only if you owe more than £1,000, HMRC has made at least four contact attempts, you have the means to pay but are not engaging, and at least £5,000 remains across all your accounts after any deduction. You receive a 30-day hold notice and a 14-day response window before money is taken. Between 2016 and 2018 when DRD was previously active, it was used in only 19 cases out of more than 22,000 reviews.

What is a Financial Institution Notice from HMRC?

A Financial Institution Notice (FIN) is a legal power introduced by the Finance Act 2021 that allows HMRC to request financial information directly from your bank without your permission or tribunal approval. HMRC can use FINs to obtain bank statements, account ownership details, loan information, and investment records. In 2024-25, HMRC issued 1,307 FINs — the vast majority for tax compliance checks rather than debt collection, with only 4 used for direct debt collection purposes.

What does HMRC’s Connect system do?

Connect is HMRC’s automated data-matching software that cross-references your tax return against data from banks, online marketplaces (eBay, Vinted, Etsy, Airbnb), payment processors (PayPal, Stripe), Land Registry, Companies House, and international data-sharing agreements. Discrepancies flagged by Connect are a primary trigger for compliance checks and investigations. Connect does not give HMRC real-time access to your bank — it processes data batches and flags inconsistencies for human review.

Does Making Tax Digital give HMRC access to my bank account?

No. When you connect your bank account to MTD-compatible accounting software, the data goes to the software provider for your record-keeping purposes — not directly to HMRC. HMRC only receives what you formally submit in your quarterly updates and annual return. MTD does not create a live bank account feed to HMRC, and connecting to accounting software via Open Banking requires your explicit authorisation under FCA-regulated protocols.

What triggers HMRC to check your bank account?

The most common triggers are: a discrepancy between declared income and bank deposits flagged by HMRC’s Connect system, lifestyle appearing inconsistent with declared income, online marketplace income not declared on Self Assessment (platforms now report seller income to HMRC), a tip-off or fraud report, operating in a high-risk cash sector, or random compliance check selection. HMRC does not check bank accounts at random — investigations are triggered by specific risk indicators.