The letter arrives on a Tuesday morning, or it lands in your portal when you're already behind on client work, payroll, and VAT. You open it, see HMRC compliance check, and your first thought is usually the same, whether you run a small PSC or a growing limited company, how bad is this?
The honest answer is that it depends on the facts, but panic is a waste of time. Most directors need two things fast: a clear read on what HMRC is asking, and a clean plan for what to send, what to challenge, and what to hold back until they've reviewed the risk properly. If you're trying to work out whether this is a routine check or the start of something more serious, keep your Gov Gateway access handy, because basic login problems can slow everything down before the substance even starts, and this guide on recovering a Gov Gateway number is the sort of practical fix people end up needing at the worst possible moment.
When the Letter Lands
A director usually goes through four reactions in the first five minutes. Panic, because HMRC has written. Confusion, because the letter sounds broader than the issue you thought existed. Guilt, because every old expense claim suddenly feels suspect. Denial, because you want this to be a routine admin query and not a real problem.
Read the letter like a business document, not a verdict
That emotional reaction is normal, but it's also misleading. A compliance check is HMRC asking questions about a return, records, or a claim, not announcing that you've committed fraud. GOV.UK says HMRC can review any taxes you pay, including Self Assessment, Company Tax Returns, and PAYE records if you employ staff, so the letter is often about reconciling facts, not accusing you of wrongdoing.
The key mistake is treating every HMRC letter the same. A short information request, a phone check, and a wider review are not interchangeable, and the way you respond should change with each one. If the letter only asks for a narrow set of records, don't dump a box of irrelevant files into HMRC's lap and hope for the best.
Practical rule: answer the question you've been asked, nothing more, nothing less.
What matters in the first hour is scope. If the issue is one CT600, one payroll point, or one dividend pattern, handle it as a contained exercise. If HMRC is already pulling in personal tax, payroll, and company records together, take that seriously and slow the response down long enough to organise it properly.
What HMRC Compliance Checks Actually Are
Think of HMRC compliance checks as the tax equivalent of an MOT, not a roadside raid. Most are desk-based, some turn into calls or meetings, and only a minority need anything more intrusive. The point is to test whether the figures, records, and explanations line up, not to punish every mismatch automatically.
The main tools in HMRC's kit
A compliance check is the broad term. A full enquiry is usually a deeper review of a return or a claim. A discovery assessment is different again, because HMRC uses it where it believes tax has been under-assessed outside the normal enquiry window. A visit is the format of contact, not a separate tax issue in itself.
For a limited company director, the danger is cross-over. A Corporation Tax review can quickly touch payroll, dividend evidence, or bookkeeping if the records don't reconcile cleanly across returns. HMRC's published compliance guidance makes that breadth clear, and ACCA's commentary on the compliance regime notes that HMRC can cross-check books, records, third-party information, and different taxes in one visit, which is exactly why tidy records matter from the start.
| Check Type | What It Reviews | Typical Trigger | Realistic Outcome |
|---|---|---|---|
| Compliance check | One or more tax issues, records, calculations, or claims | A mismatch, risk flag, or request for clarification | No change, a correction, or a wider review |
| Full enquiry | A return in detail | A return that needs deeper testing | Amendments, tax due, interest, or closure with no change |
| Discovery assessment | Tax HMRC thinks was not properly assessed | Something outside the normal enquiry period | Back tax plus interest, sometimes penalties |
| Visit | Records or explanations in person or by call | HMRC wants direct access to evidence | Narrower questions, or a broader case depending on what it finds |
The important point is simple. If HMRC can't make the numbers reconcile on paper, it will keep asking until they do. That's why the first job is always evidence control, not rhetoric.
What Triggers a Compliance Check for Limited Companies
HMRC doesn't need a dramatic reason to look at a company. In practice, it looks for mismatches, patterns that don't make commercial sense, and records that don't line up across taxes. That's especially relevant now that HMRC case selection leans on risk and intelligence rather than a random knock on the door, with third-party data feeds and cross-checking used to flag discrepancies before a letter goes out.
The usual red flags directors create themselves
Unexplained turnover movement is an obvious one. If your numbers jump or fall sharply and you can't explain it with contracts, seasonality, or customer loss, HMRC notices. So does a mismatch between sales reported in accounts, VAT returns, and bank receipts.
Salary and dividend patterns are another common trigger. A director paying themselves a modest salary with large dividends is not automatically wrong, but if the company has no reserves, weak profits, or no board paperwork, the structure looks engineered rather than earned. Related-party issues deserve the same care, which is why it's worth keeping related-party transactions clean and documented before anyone at HMRC asks.
IR35 mismatches matter for contractors. If the contract says one thing and the working practice says another, HMRC has a reason to look harder. The same applies to VAT versus cash flow gaps, where sales look too high or too low compared with what moved through the bank.
Late or amended returns also stand out. They don't prove anything on their own, but they increase the chance of a closer look. Industry risk matters too, especially where cash payments, subcontractors, or high-volume small transactions are routine.
A director's self-audit before HMRC does it
Run this check against your own filings:
- Revenue logic: do accounts, VAT, and bank receipts tell the same story?
- Pay structure: does salary, dividend, and profit extraction match the company's actual results?
- Contract reality: does the day-to-day working pattern match the written IR35 position?
- Records quality: can you support each return with clean, dated evidence?
If you can't answer those four points without scrambling, HMRC may well ask the same questions for you.
How a Compliance Check Unfolds and How Long It Lasts
ICAEW notes that HMRC normally has 12 months from the date a return is filed to open an enquiry, and if the return is filed late, the window runs for 12 months plus the end of the following quarter day. That matters because directors often assume an old return is safe when it isn't. The filing date controls the risk period, not the year-end in isolation.
What the timeline usually looks like
The first contact is usually a letter or portal message. HMRC states that compliance checks can involve requests for records and information relevant to the issue being checked, and its help-and-support page now includes guidance on why documents are being requested, how to get extra support, and what to do if you disagree with a decision. LITRG's practical advice is sensible, if HMRC asks for something broader than the issue at hand, question whether the request is reasonable and ask for an alternative deadline if the one given isn't workable.
A desk review often starts with a narrow list of records. If your response is clear and complete, the case can close quickly. If the numbers don't reconcile, HMRC may extend the request, ask follow-up questions, or widen the scope to other taxes.
Your first 30 days
- Days 1 to 3: identify the issue, the deadline, and the exact tax head.
- Days 4 to 7: gather the records and check the return against the books.
- Week 2: draft the response, and only then decide what needs explanation.
- Week 3: agree an extension in writing if the deadline is too tight.
- Week 4: send a controlled bundle and log every item you've disclosed.
Keep the response sequence boring. HMRC likes tidy chronology, because messy files create extra questions.
Closure falls into three broad outcomes. No change if the records hold up. A small adjustment if one point needs correcting. An escalated case if HMRC believes the issue reaches earlier years, other taxes, or a behaviour issue that needs a stronger response.
The Evidence HMRC Will Ask You For
HMRC usually wants the records that prove the story behind the return. That sounds obvious, but directors still get caught out because the paperwork is spread across accounting software, personal emails, a company inbox, and a drawer full of PDFs no one has checked for years.
By tax head, not by guesswork
For Corporation Tax, expect HMRC to ask for the trial balance, statutory accounts, CT600, dividend vouchers, and board minutes where dividends were declared. Those last two are the ones that trip people up most often, because directors assume a dividend can be treated like an informal transfer. It can't.
For PAYE, HMRC may ask for payroll runs, RTI submissions, and evidence of the director's employment status. For a one-person company, the question is often whether the salary, timing, and reporting all match the records.
For VAT, the usual request is the sales ledger, purchase ledger, and MTD reports, plus workings for any special treatment. If there's anything unusual about partial exemption or disallowed input tax, you need those workings clean and consistent.
For Self Assessment, HMRC often wants personal bank statements, dividend records, and loan account reconciliations. That last item deserves attention, because director's loan account errors are a classic source of avoidable trouble. If you're not sure which company identifier HMRC will use for the review, keep your company UTR number close to hand and make sure your records are tagged correctly.
What directors should question
HMRC can ask for information outside the narrow tax being checked, but broad isn't the same as unlimited. If a request feels excessive, ask why it's needed and whether a smaller set of documents would answer the point. Don't send personal records just because the letter sounds authoritative.
The goal is relevance. If HMRC can't explain how a document helps the check, that document probably isn't the first thing you should send.
A Practical Preparation Checklist for Directors
Most directors don't need a dramatic rescue. They need a disciplined routine, the kind that turns a compliance check into a paperwork exercise rather than a fire drill. Do the same preparation in the week after a letter arrives, and once a year before any letter arrives.
Gather, review, and control the message
Start with the obvious. Pull together the last three years of accounts, returns, bank statements, dividend paperwork, payroll records, and any correspondence that explains unusual figures. Tell your accountant, and if the issue touches household finances or shared records, tell your spouse or partner as well so nobody deletes or edits something mid-review.
Don't amend returns without advice. Don't send extra personal records just because you think they might help. And don't answer HMRC through five different channels. Use the agreed contact route and keep one chronological log of every call, email, and document sent.
Escalate early when the facts are messy
Bring in specialist help if HMRC raises a discovery assessment, if there's a suspected fraud angle, if the issue crosses into IR35, or if the check spans company and personal tax together. That's where the risk stops being administrative and starts becoming technical. It also usually saves money, because early clarity reduces the chance of a wider enquiry.
The whole job is administrative calm. Directors who keep the records tidy usually get faster closures and fewer arguments.
Two Compliance Check Examples in Practice
A compliance check can look routine on day one and still end up in very different places. The letter is the same kind of letter, but the facts drive everything.
A small contractor company that closes quickly
A contractor with a £40,000 company receives a letter asking about one CT600 year and the dividend pattern around it. HMRC wants the accounts, dividend vouchers, board minutes, and the bank entries that support the payment dates. The director sends a tight bundle, the numbers reconcile, and HMRC spots one small underpayment of tax.
That case closes in a few months with a correction and no penalty. The reason is simple. The records were there, the response matched the question, and the director didn't create noise by sending unnecessary files or arguing about basics.
An IR35 dispute that widens
A different contractor says they are outside IR35, but the working practice doesn't match the contract. HMRC asks for the engagement terms, invoices, emails showing control, payment records, and evidence of who decided how and when the work was done. Once the facts don't fit, the check widens into earlier years through a discovery-style review.
That case costs more because it becomes a tax, interest, and behaviour question rather than a document chase. The practical lesson is blunt. If your contract says one thing and your day-to-day work says another, HMRC will believe the working practice first.
A clean file doesn't guarantee no adjustment, but it usually stops a routine check from becoming a bigger problem.
Penalties, Specialist Advice, and a Pre-Check Routine
The cost of a bad response is rarely just the tax itself. Interest can follow, and penalties can stack depending on behaviour, which is why prompt disclosure is usually the cheapest option once a real error is identified. If you want the filing side of the risk picture as well, the guide on late filing penalties shows why sloppy administration always ends up expensive.
Keep the annual review simple
Each year, review the salary and dividend pattern, reconcile the director's loan account, ensure board minutes exist, and test your IR35 position against what happens on the ground. Keep three years of clean evidence to hand. If you can't explain a number without digging through old email threads, fix that before HMRC asks.
Specialist advice pays for itself when the case touches discovery assessments, multi-year reviews, IR35 disputes, VAT issues, or anything you don't fully understand. Most HMRC compliance checks are manageable if the basics are right. The cheapest check is the one you prepare for before HMRC writes to you.
If you want a sharper view of your own exposure, Tax Compass can help you sanity-check salary, dividends, records, and IR35 risk before a letter turns into a distraction. Visit Tax Compass for practical tax guidance built around the way UK directors run their companies, and get a clearer plan before HMRC asks the questions for you.