The fear of an HMRC investigation is one of the most common anxieties among sole traders and landlords. A Reddit user in the first MTD quarterly update thread expressed a fear that many share:

“HMRC having granular data about every single transaction filled me with fear, as I felt it was something they could use to harass you with especially if they start using AI to look at patterns. For example ‘we’ve noticed that you spend comparably more on travel than other people working in your industry’.”

That fear is understandable, but it’s based on a misunderstanding of how HMRC actually works. The reality is both less scary and more systematic than most people imagine. Here’s what actually triggers an HMRC investigation, what happens during one, and what your rights are if you receive that letter.

How HMRC Decides Who to Investigate: The Connect System

Most HMRC investigations aren’t random, and they’re not triggered by a human reading your return. They’re triggered by a system called Connect.

Connect is HMRC’s data-matching and risk-scoring system, built by BAE Systems and operational since 2010. According to BKL’s analysis of HMRC case selection, Connect identifies over 500,000 cases per year for HMRC to investigate, and contributed £4.6 billion in additional tax revenue in 2024-25.

Connect works by cross-referencing every UK tax return against data from more than 30 external sources, including:

  • Banks and building societies — interest reports, transactions, overseas balances
  • Employers — PAYE real-time information submissions
  • Land Registry and council tax data — property ownership and occupancy
  • DVLA — vehicle ownership
  • Companies House — company directorships and shareholdings
  • Digital platforms — eBay, Vinted, Airbnb, Etsy, Just Eat (under digital platform reporting rules)
  • Payment providers — PayPal, Stripe, digital wallets
  • Overseas tax authorities — via the Common Reporting Standard (CRS)
  • Credit reference agencies — lifestyle and spending indicators
  • Data leaks — HSBC, Panama Papers, and similar disclosures
  • HMRC’s own data — previous returns, VAT, PAYE, CIS

When you submit your tax return, Connect runs it through a battery of consistency checks. According to ARB Accountants’ analysis of Connect, the questions it’s asking are simple:

  • Does the savings interest declared match what UK banks reported about you?
  • Does the rental income (or absence of it) match Land Registry ownership records?
  • Does the employment income match the PAYE feed from your employer?
  • Does platform income (eBay, Airbnb, Etsy) match what the platforms reported?
  • Do overseas balances match what foreign tax authorities sent under CRS?
  • Are expense claims unusually high for your trade sector?
  • Does your lifestyle (car, property, spending) match your declared income?

Where your return doesn’t match the third-party data, Connect assigns a higher risk score. High-scoring returns escalate to human compliance officers; low-scoring ones don’t. According to LegalClarity’s analysis, over 90% of enquiries now start because Connect spotted a mismatch.

What this means for the “AI watching your transactions” fear

The Reddit user’s fear — that HMRC will use AI to flag you for spending too much on travel — misunderstands what Connect actually sees. Under MTD with simplified reporting (turnover under £90,000), HMRC receives category totals, not individual transactions. They don’t see that you spent £4.50 at Costa Coffee. They see “total expenses: £1,247” for the quarter.

Even with full categorisation (turnover over £90,000), HMRC sees category totals (travel: £X, office costs: £Y) — not line-by-line transactions. The granular data stays in your software. Connect compares your category totals against industry benchmarks, not your individual purchases.

The Main Triggers for an HMRC Investigation

Based on HMRC’s Enquiry Manual, the Connect system’s risk factors, and analysis from tax professionals, here are the triggers that actually matter:

1. Income that doesn’t match third-party data

This is the single biggest trigger. If you declared £30,000 in rental income but Land Registry records show you own three rental properties, Connect flags it. If you didn’t declare any eBay sales but eBay reported £15,000 in sales under the digital platform reporting rules, Connect flags it.

Common mismatches:

  • Undeclared rental income — you own a property you didn’t report on your return
  • Undeclared platform income — eBay, Airbnb, Vinted, Etsy sales not declared. If you earn from gig platforms like Deliveroo or Uber, see our gig economy tax guide for how digital platform reporting works and when you need to declare.
  • Undeclared interest — bank interest on your return doesn’t match what banks reported
  • Undeclared foreign income — overseas accounts reported under CRS but not on your return
  • PAYE mismatch — your employer reported different pay than you declared

This is why the Reddit user’s fear about “AI looking at patterns” is misplaced — Connect isn’t looking at your spending patterns in that much detail. It’s looking for income you didn’t declare that someone else already told HMRC about.

2. Expense claims out of line with industry benchmarks

HMRC doesn’t look at your business in isolation. Connect compares your income, profits, and expenses against others in the same sector using industry benchmarks. If your figures are significantly different from the industry average, it gets flagged.

For example:

  • A restaurant reporting unusually low profits compared to similar establishments
  • A construction business claiming much higher equipment expenses than the industry norm
  • A consultant claiming travel expenses that are 3x the average for their sector

This doesn’t mean your return is wrong — every business is different. But it means HMRC may ask you to explain why your figures differ from the norm. If your records support the figures, the enquiry closes quickly.

3. Significant profit fluctuations

A sudden spike or drop in profits doesn’t automatically mean you’ve done anything wrong, but it can prompt questions. Legitimate reasons include landing a major contract, investing in growth, facing rising costs, or a quieter trading period. Seasonal businesses naturally see year-to-year variation.

The key is whether your records tell the story behind the numbers. If your profits dropped because you invested £20,000 in new equipment, your accounts and receipts explain that. If your profits dropped and you have no documentation explaining why, HMRC may dig deeper.

4. Late or repeated late submissions

Missing a tax deadline does more than trigger a penalty. According to HMRC’s compliance approach, repeated late submissions suggest your records aren’t being kept up to date, which raises concerns about the accuracy of your tax affairs.

Whether it’s a Self Assessment return, VAT return, or MTD quarterly update, a pattern of missed deadlines increases your risk profile. This is one of the easiest triggers to avoid — file on time, every time.

5. Cash-heavy businesses

Businesses that handle a lot of cash face greater scrutiny because cash payments are harder to track than electronic transactions. Industries like hospitality, retail, hair and beauty, and construction naturally handle more cash, and HMRC knows this.

If the figures reported on your tax return seem inconsistent with the type of business you run — for example, a takeaway restaurant reporting very low cash takings — HMRC may ask for more information. Good record-keeping (detailed sales records, issued receipts, regular cash reconciliation) is your best defence.

6. Tips and reports from third parties

HMRC receives tips from the public, ex-partners, employees, and competitors. They also share intelligence across government departments — information from a VAT inspection or a benefits claim can spill into your income tax affairs. These are less common than Connect-triggered enquiries but they do happen.

7. Random selection

A small proportion of enquiries are entirely random. According to HMRC’s Enquiry Manual (EM0091), HMRC runs a programme of random compliance checks “to ensure that HMRC check all areas of the self-assessment population and not just those perceived to be high risk.” You won’t normally be told whether your case was selected randomly or risk-assessed.

What Happens If HMRC Opens an Enquiry

If HMRC decides to look into your tax affairs, the process follows clear rules. According to HMRC’s Self Assessment Legal Framework (SALF402) and the Low Incomes Tax Reform Group’s enquiry guidance:

The enquiry window

HMRC must issue a formal notice of enquiry within a fixed time limit:

  • If you filed your return on time (by 31 January): HMRC has 12 months from the date you filed to open an enquiry
  • If you filed late: the window extends to the quarter day following the first anniversary of the filing date

Once the enquiry is opened, there’s no fixed deadline for completing it — the time taken varies with the complexity of the case. But you have the right to ask the tax tribunal to direct HMRC to close the enquiry if it’s dragging on unreasonably.

What you’ll receive

You’ll get a letter from HMRC stating they’re opening an enquiry into your return. The letter may include informal requests for information or documents. According to HMRC’s Enquiry Manual, HMRC has the right to request information or documents that are “reasonably required” to complete their review — but this power isn’t unlimited, and the courts have balanced it against your right not to be subject to fishing expeditions.

Aspect vs full enquiries

HMRC internally classifies enquiries as:

  • Aspect enquiries — looking at one or a few specific areas of your return (e.g., just your expense claims, or just your rental income)
  • Full enquiries — a comprehensive review of all significant risks in the return, including underlying records and potentially your personal financial affairs

In law, there’s no distinction — once HMRC opens an enquiry, they can look at any part of the return. But in practice, most enquiries are aspect enquiries focusing on specific risk areas. Full enquiries are reserved for cases where HMRC suspects the return is fundamentally incorrect.

Your rights during an enquiry

According to LITRG and HMRC’s own guidance, you have:

  • The right to be treated fairly — HMRC must follow their own published procedures
  • The right to appeal — if you disagree with HMRC’s findings, you can appeal to the tax tribunal
  • The right to ask the tribunal to close the enquiry — if HMRC is taking too long, you can apply to the tribunal for a direction that the enquiry be completed
  • The right to representation — you can have an accountant or tax adviser handle the enquiry on your behalf
  • The presumption of innocence — under the Human Rights Act, you’re presumed innocent until proved wrong; penalties require HMRC to demonstrate that you were careless or deliberate

What if they find errors?

If HMRC finds errors in your return, the consequences depend on the nature of the error:

  • Genuine mistake — no penalty if you correct it voluntarily, or a reduced penalty if HMRC finds it
  • Careless error — penalty of 0-30% of the tax due, reduced for cooperation
  • Deliberate error — penalty of 20-70% of the tax due, reduced for cooperation
  • Deliberate and concealed — penalty of 30-100% of the tax due

The key factor is whether the error was accidental, careless, or deliberate — and how cooperative you are when it’s found. See our guide on what to do if you made a mistake on your Self Assessment for the correction process.

How to Reduce Your Risk of an Investigation

You can’t eliminate the risk entirely — random selection exists, and even a perfect return can be checked. But you can dramatically reduce your risk profile:

  1. Declare all your income — especially income that third parties already know about (bank interest, rental income, platform sales, foreign income). This is the single most important thing. If Connect can find it, you should have declared it.

  2. Keep accurate, organised records — if HMRC does ask questions, being able to produce invoices, receipts, and bank statements quickly shows your figures are genuine. See our first-year self-employed checklist for record-keeping basics.

  3. File on time, every time — repeated late filings increase your risk profile. Set reminders for Self Assessment (31 January), VAT (quarterly), and MTD quarterly updates (7 August, 7 November, 7 February, 7 May).

  4. Claim only legitimate expenses — every expense should be wholly and exclusively for business purposes, with supporting documentation. See our guide on whether you need an invoice to claim an expense.

  5. Be consistent — large, unexplained swings in income, expenses, or profit margins attract attention. If there’s a genuine reason for a swing, document it.

  6. Use MTD-compatible software — digital records with bank feeds are inherently more accurate and consistent than manual spreadsheets, which reduces the risk of errors that trigger enquiries. See our cheapest MTD software guide.

  7. Correct mistakes promptly — if you discover an error on a previous return, correct it voluntarily before HMRC finds it. Voluntary disclosure results in lower (or zero) penalties. See our made-a-mistake guide for the process.

The Bottom Line

  1. Most investigations are triggered by Connect, HMRC’s data-matching system — not by a human reading your return. Connect cross-references your return against 30+ data sources and flags mismatches.
  2. The biggest trigger is undeclared income that someone else already told HMRC about — bank interest, rental income, platform sales, foreign income.
  3. HMRC has 12 months from when you filed to open an enquiry into your return.
  4. You have rights — to appeal, to ask the tribunal to close the enquiry, to representation, and to be treated fairly.
  5. Penalties depend on behaviour — genuine mistakes get no penalty if corrected voluntarily; deliberate errors get up to 100% of the tax due.
  6. The best defence is declaring all your income and keeping good records. If Connect can find it, you should have declared it. If HMRC asks about it, your records should explain it.

For the full list of HMRC contact types, investigations, and what to do when HMRC contacts you, see our HMRC contacted me hub.

If you’ve already received an enquiry letter, see our guide on what to do if you made a mistake on your Self Assessment. For the full overview of what happens during an HMRC investigation — the 3 tiers of scrutiny, the enquiry stages, COP9, when to get professional representation, and what an enquiry costs — see our HMRC investigation hub. For help with penalties, see our HMRC penalty appeal guide. For record-keeping basics that prevent problems, see our first-year self-employed checklist.

Back to Panic Room · Back to Guide