The HMRC Small Business Evasion Team is HMRC’s newest fraud-focused unit. HMRC launched its Small Business Evasion Team in 2026. Approximately 350 specialists — tax inspectors, forensic accountants, and AI analysts — now work exclusively on fraud among businesses with turnover under £2 million. The unit targets VAT under-declaration, PAYE irregularities, understated profits, and cash businesses. It operates with expanded whistleblower intelligence, AI-driven Connect analysis, and direct bank data access through Financial Institution Notices. Every SME is now operating in an enforcement environment where the probability of investigation has risen materially in 24 months. Here is what the unit investigates, how it identifies targets, and what defensible records look like before a letter arrives.
HMRC Small Business Evasion Team: What It Is and Why It Matters
The Small Business Evasion Team emerged from HMRC’s 2024 Enforcement Strategy Review, which identified SMEs as the single largest contributor to the UK tax gap. SMEs represent approximately 60% of the estimated £39 billion annual tax gap — larger than wealthy individuals, large corporates, and the hidden economy combined. The team’s remit is specifically to close the SME portion of that gap through targeted investigation rather than broad compliance campaigns.
The team’s operational model is different from earlier HMRC units. Three features stand out:
- AI-driven target selection using HMRC’s Connect platform cross-referenced against 30+ data sources — bank data, Companies House filings, Land Registry, VAT returns, PAYE, Digital Platform Reporting data, and crypto exchange records under CARF
- Direct integration with the HMRC whistleblower reward scheme (live since November 2025), which has generated over 40,000 tip-offs in the first six months of operation
- Focus on specific high-risk behaviours rather than specific sectors — cash handling, margin outliers, expense anomalies, and inconsistency between declared income and lifestyle markers
The unit’s initial targets have been announced through HMRC guidance notes and industry press: VAT under-declaration in hospitality and construction, PAYE and CIS irregularities in construction and cleaning, understated profits in online retail businesses whose Digital Platform Reporting data does not match declared turnover, and cash businesses across retail, beauty, and catering. The common thread is not the sector — it is the data pattern. Businesses in those sectors whose numbers look clean are not investigated. Businesses in lower-risk sectors whose numbers look wrong are.
How the HMRC Small Business Evasion Team Affects Your Business
The practical risk for an SME is twofold. First, the probability of investigation has risen: HMRC’s own statistics show SME investigations opened in 2025/26 were 28% higher than the prior year, and the 2026/27 run-rate is expected to exceed that. For a business that has historically considered HMRC investigation a remote risk, the current probability is now closer to 1 in 20 across any given five-year period for the average SME, and significantly higher where specific risk indicators are present in the data.
Second, the consequence of investigation has become harsher. The combination of AI-driven target selection and direct bank data access via Financial Institution Notices means HMRC typically arrives at the investigation already holding substantial evidence. The days of an HMRC investigator asking open questions and relying on the taxpayer’s response to build a case have largely gone. The modern enquiry starts with HMRC holding the data and asking the taxpayer to reconcile it — a different exercise entirely.
The HMRC Small Business Evasion Team concentrates resources in a small number of high-yield areas.
Focus Areas — Where the Unit Concentrates Resources
Based on HMRC guidance notes and early case patterns, the unit’s primary focus areas are:
1. VAT Under-Declaration
Connect cross-references declared VAT outputs against card payment data (from Faster Payments and card schemes), online platform reports, and invoicing software integrations. Margins that fall outside sector norms — turnover consistent with a higher VAT output — flag automatically. Cash businesses where card-payment turnover has grown without VAT output growing proportionally are particularly visible.
2. PAYE and CIS Irregularities
The unit cross-references PAYE returns against bank data for director drawings, dividend patterns, and loan account movements. Undeclared benefits in kind, unrecorded cash wages, and CIS deductions that do not reconcile against subcontractor tax returns are high-priority targets. Construction sector businesses are particularly exposed because the CIS regime generates a detailed paper trail that is easy for HMRC to cross-check.
3. Understated Profits
Online retail businesses with Digital Platform Reporting data (from eBay, Amazon, Etsy, Vinted, Airbnb and others) are matched against declared turnover. Gross margins that look implausible for the sector — for example, a declared 40% margin in a sector where the typical range is 15–25% — flag for review. Expense categories that grow disproportionately to turnover trigger specific aspect enquiries.
4. Cash Businesses
Businesses in retail, beauty, catering, and similar sectors where a material cash component remains are routinely targeted. HMRC’s approach combines lifestyle analysis (property, vehicles, overseas travel identified through the Connect data mesh) with transactional analysis (business rates paid, utilities consumed, VAT inputs declared) to estimate what turnover ‘should be’ — then compares against what is declared.
How AI and the Whistleblower Scheme Generate Leads
HMRC’s Connect platform now processes over 60 billion data points annually, cross-referencing 30+ data sources. The AI layer identifies anomalies at three levels: intra-business (inconsistencies within a single taxpayer’s records), peer-group (businesses whose figures fall outside sector norms), and lifestyle (individuals whose declared income does not match their observable lifestyle). Each anomaly generates a risk score; scores above defined thresholds feed the investigation queue.
The whistleblower reward scheme, live since November 2025, adds a complementary intelligence stream. HMRC pays up to 25% of recovered tax to informants whose tips lead to successful prosecutions or settlements. Over 40,000 tip-offs were received in the first six months, many from disgruntled former employees, ex-partners, or competitors. Whistleblower-sourced leads are often more specific than AI-sourced ones — particular transactions, particular dates, particular individuals. The two streams together have sharply increased the quality of the unit’s case selection.
What ‘Defensible Records’ Actually Look Like
The test for defensible records is not perfection — HMRC accepts that SMEs make errors. The test is whether the records allow the taxpayer to explain and support every significant position when asked. Five characteristics of defensible records:
1. Contemporaneous, Not Retrospective
Records created at or near the time of the transaction carry materially more weight than records reconstructed months or years later. A sales ledger entry posted on the day of sale is defensible; a bulk reconstruction from bank statements at year-end is less so, even if the underlying numbers are the same. Cloud accounting software with bank feeds creates contemporaneous records as a byproduct — one of several reasons HMRC prefers to see MTD-compliant software in use.
2. Reconciled Against Third-Party Data
HMRC’s investigation starts from third-party data — bank statements, card processor reports, platform statements, Land Registry records. Records that reconcile cleanly against those sources are straightforwardly defensible. Records that do not reconcile without adjustment create immediate friction. For every reconciling adjustment, the taxpayer needs to be able to explain what the adjustment is and why it is correct — which requires the underlying documentation to be available.
3. Categorised Consistently
Category consistency matters. Expenses described as ‘travel’ in 2023 and ‘subsistence’ in 2024 attract attention even if the underlying spend is identical. A consistent chart of accounts and consistent application of it across years produces records that HMRC’s analytical tools match easily. Inconsistent categorisation — common where bookkeeping has been done by multiple people over the years — flags for review.
4. Supported by Contracts and Commercial Logic
For larger transactions or unusual categories, defensibility requires documentation of the commercial reason. Director loan account movements need supporting minutes or agreements; substantial expense categories need evidence of business purpose; unusual receipts need contracts or invoices. HMRC’s inspectors are experienced in distinguishing commercial reality from paper-only documentation — the test is whether the commercial logic is real, not just recorded.
5. Retained for the Correct Period
HMRC requires business records to be kept for 6 years from the end of the accounting period. For records relating to CGT, the period runs to 4 years after the relevant disposal. For records relating to deliberate behaviour, HMRC can assess up to 20 years back — so records destroyed at the 6-year mark may become inaccessible before HMRC asks for them. Schedule 36 makes destruction of records pursuant to a notice an offence attracting £300 per day penalties.
The £300/Day Penalty for Failing to Provide Information
HMRC’s Schedule 36 information powers allow them to issue a formal notice requiring specific documents or information. Failure to comply attracts initial penalties of £300 per day, continuing until compliance. For taxpayers who genuinely do not have the information — because records were destroyed, lost, or never maintained — the penalty is still chargeable, and in practice HMRC’s remedy is to assume the worst about the missing period and assess accordingly.
Schedule 36 notices cannot be ignored, responded to partially, or delayed without formal application. The correct response to a Schedule 36 notice is always to engage a specialist investigation adviser immediately — the 30-day response window is short, the scope of the request often wider than strictly necessary, and scoping the response correctly can save weeks of subsequent argument.
Time Limits for HMRC Assessment
HMRC’s assessment windows depend on the behaviour category concluded. These time limits are critical both to the maximum exposure of a retrospective investigation and to planning record retention:
| Behaviour Category | Assessment Window | Penalty Range |
|---|---|---|
| Reasonable care (genuine error) | 4 years from end of tax year | 0% (typically no penalty) |
| Careless | 6 years from end of tax year | 0–30% |
| Deliberate (not concealed) | 20 years from end of tax year | 20–70% |
| Deliberate and concealed | 20 years from end of tax year | 30–100% |
The 20-year window matters because it covers the full commercial life of most SMEs. A business that started trading in 2010 and has never declared a specific income stream can face assessment for every year from 2010 onwards if HMRC concludes the behaviour was deliberate. Interest at 7.75% simple over 17 years adds more than 130% to the original tax at stake before penalties are applied.
If the HMRC Small Business Evasion Team writes to you, the priority is controlled disclosure and documented defence.
How Tax Guard Defence Works
Our Small Business Evasion Team defence process works in two modes. For SMEs not yet under investigation, we conduct a records defensibility review — a structured audit of the five characteristics above, identifying weaknesses that would attract HMRC attention and remediating them before a letter arrives. This typically takes 20–40 hours of professional time and produces a written defensibility report that serves as both a remediation plan and, if investigation follows, a strong starting position.
For SMEs already under investigation, we take over HMRC correspondence immediately, scope Schedule 36 requests to their legal limits, coordinate technical responses across records and commercial evidence, and negotiate settlement where adjustments are warranted. Our team includes former HMRC investigators who have run cases from the inspector’s chair — experience that sharply improves the tactical decisions made at each stage.
Key Facts at a Glance
- HMRC Small Business Evasion Team: approximately 350 specialists, launched 2026
- SME share of UK tax gap: approximately 60% of £39 billion
- SME investigations opened in 2025/26: up 28% year on year
- Whistleblower tip-offs received in first 6 months of scheme: over 40,000
- Schedule 36 penalty for failing to provide information: £300 per day
- Assessment windows: 4 years (reasonable care), 6 years (careless), 20 years (deliberate)
- Record retention requirement: 6 years from end of accounting period (longer in practice)
Speak to Tax Guard Today
If you are reading this before a letter has arrived, the right time to act is now — a records defensibility review typically costs a small fraction of what an investigation defence costs, and creates the records and evidence that reduce the probability of investigation in the first place. If a letter has arrived, the first 30 days set the tone for the entire matter — call us before responding. A free, confidential consultation will tell you exactly what is at stake and what the response strategy should be.
Common Questions About the HMRC Small Business Evasion Team
Q: What is HMRC’s Small Business Evasion Team?
A: A dedicated HMRC unit launched in 2026 employing approximately 350 specialists focused exclusively on fraud among businesses with turnover under £2 million. The team combines tax inspectors, forensic accountants, and AI analysts, using Connect data, Financial Institution Notices, and the whistleblower reward scheme to identify and investigate targets. Primary focus areas include VAT under-declaration, PAYE and CIS irregularities, understated profits, and cash businesses.
Q: How does HMRC decide which businesses to investigate?
A: HMRC’s Connect platform cross-references 30+ data sources, including bank data, Companies House filings, Land Registry, card processor reports, VAT returns, PAYE filings, Digital Platform Reporting data, and crypto exchange records under CARF. AI analysis flags anomalies at three levels — intra-business inconsistencies, peer-group outliers, and lifestyle mismatches with declared income. Whistleblower tip-offs add a complementary stream. Risk scores above defined thresholds feed the investigation queue.
Q: What are defensible records in the context of HMRC investigation?
A: Records that allow the taxpayer to explain and support every significant position when asked. Five characteristics: contemporaneous (created at or near the transaction date, not reconstructed), reconciled against third-party data (bank statements, platform reports), consistently categorised across years, supported by contracts and commercial logic for larger transactions, and retained for the correct period (6 years minimum, longer in practice). Cloud accounting with bank feeds creates defensible records as a byproduct.
Q: What is a Schedule 36 information notice?
A: A formal notice issued by HMRC under Schedule 36 of Finance Act 2008 requiring specific documents or information. Failure to comply triggers initial penalties of £300 per day, continuing until compliance. The 30-day response window is short, and the scope of requests can be wider than strictly necessary under HMRC’s powers. Specialist advice is essential — a well-scoped response can significantly narrow the focus of the subsequent investigation.
Q: How far back can HMRC investigate an SME?
A: Four years from the end of the relevant tax year where there has been no careless or deliberate behaviour. Six years where behaviour was careless. Twenty years where behaviour was deliberate. The 20-year window covers the full commercial life of most SMEs. Interest at 7.75% simple (calculated daily, no compounding) over a long assessment window can substantially increase the original tax at stake before penalties (which can reach 100%) are added.
Q: Should I proactively review my records even if HMRC has not contacted me?
A: For SMEs in the Small Business Evasion Team’s focus areas — hospitality, construction, online retail, cash businesses — proactive review is strongly advised. A records defensibility review typically costs a small fraction of an investigation defence, remediates weaknesses before they are discovered, and creates evidence that reduces investigation probability. For SMEs with any prior years of concern, the review often extends to a formal voluntary disclosure where appropriate, which retains the substantial penalty benefits of unprompted correction.