
HMRC Fraud Investigations
The letter is unmistakable once you have seen one. Headed “Code of Practice 9”, it invites the recipient to enter the Contractual Disclosure Facility within 60 days, HMRC’s formal offer to treat suspected tax fraud civilly rather than criminally, in return for a full, honest disclosure of all deliberate conduct that led to tax loss.
Accepting, rejecting, or ignoring the offer each produces radically different consequences. The 60-day clock is unforgiving. And the “full disclosure” requirement is not partial. If you accept COP9 and then omit material facts, you lose the civil-track protection and face criminal proceedings on top of the tax bill.
Below you will find what an HMRC fraud investigation is, the civil vs criminal track distinction, the COP9/CDF mechanics, your risks as a director, and the specific response pattern that protects your position without tipping the investigation into the criminal track.
- Why HMRC Investigates Tax Fraud and Why It Matters
- Signs and Triggers That Could Lead to an HMRC Fraud Enquiry
- Civil vs Criminal Investigations: Key Differences for Directors
- Consequences of Delaying or Not Cooperating with an HMRC Fraud Investigation
- Understanding the Contractual Disclosure Facility (COP9)
- Criminal Investigation Powers and Potential Outcomes
- Responding to a COP9 Letter in the First 48 Hours
- Your Next Step on an HMRC Fraud Investigation
- FAQs on HMRC Fraud Investigations
Why HMRC Investigates Tax Fraud and Why It Matters
HMRC opens a formal fraud investigation where its intelligence, internal data analysis, third-party information, and previous enquiry findings, suggests deliberate conduct leading to tax loss. The investigation is handled by the Fraud Investigation Service (FIS). In our advisory work, we rarely see a COP9 case where HMRC’s intelligence picture turns out to be thinner than the letter implies.
The distinction from ordinary compliance checks:
- Compliance check (COP1), routine review, no assumption of dishonesty.
- Code of Practice 8 (COP8), serious enquiry, no fraud suspicion stated. Handled by FIS.
- Code of Practice 9 (COP9), civil investigation where HMRC suspects fraud. CDF offered.
- Criminal investigation, conducted under PACE, with prosecution as the objective.
COP9 sits on the edge of the civil/criminal boundary. It offers one route out of criminal prosecution, full and accurate disclosure under the CDF, while preserving HMRC’s ability to prosecute if the recipient declines or mishandles the opportunity.
Signs and Triggers That Could Lead to an HMRC Fraud Enquiry
HMRC fraud investigations are almost never opened without substantial prior intelligence. Common triggers:
- Lifestyle mismatches, reported income inconsistent with visible lifestyle (property portfolio, vehicles, travel patterns) that intelligence analytics flag.
- Third-party reporting, bank data under the Common Reporting Standard, overseas intelligence sharing, former-employee disclosures, whistleblower reports.
- Related-case referrals, directors connected to prosecuted cases attract review of their own positions.
- Sector patterns, construction, hospitality, and cash-intensive retail sectors have elevated fraud-risk profiles in HMRC’s internal risk models.
- VAT irregularities that do not reconcile across the supply chain, MTIC fraud intelligence.
- Unusual asset movements pre-insolvency or pre-dissolution that flag to HMRC’s risk team.
By the time a COP9 letter arrives at your address, HMRC has typically been gathering evidence for months. The letter is not the start of the investigation. It is the formal opening of your engagement with a process already well under way.
Civil vs Criminal Investigations: Key Differences for Directors
| Factor | Civil (COP9/CDF) | Criminal |
|---|---|---|
| Objective | Recover tax; civil penalty | Conviction and sentence |
| Standard of proof | Balance of probabilities | Beyond reasonable doubt |
| Outcome | Settlement, penalty up to 200% | Custodial sentence; confiscation order |
| Representation | Tax specialist | Criminal-defence solicitor |
| Records | Not public | Criminal record; published sentence |
| Director impact | Disqualification possible | Disqualification automatic on indictable conviction |
The civil track produces a larger financial bill than the equivalent criminal outcome in some cases, civil penalties for deliberate concealment can reach 200% of the tax lost, but avoids the custodial and reputational consequences. In our experience, for most directors, civil settlement via full CDF disclosure is the preferred outcome where the conduct falls into that category.
Consequences of Delaying or Not Cooperating with an HMRC Fraud Investigation
The 60-day COP9 window is firm. The consequences of inaction are ones we see directors underestimate every time:
- Default to HMRC’s own investigation, HMRC proceeds without the protection the CDF would have offered. Full criminal track is open.
- Loss of penalty reduction. Full, unprompted disclosure within the CDF can reduce behaviour-based penalties substantially. Rejection or silence forfeits that mitigation.
- Criminal referral. HMRC can refer the case to the Crown Prosecution Service for prosecution, with the full weight of criminal investigation powers (search warrants, arrests, PACE interviews).
- Account Freezing Orders under the Proceeds of Crime Act 2002, see What Happens If HMRC Freezes Your Business Bank Account.
- Restraint orders preventing dissipation of assets pending any confiscation.
- Personal criminal exposure where dishonest conduct is established, custodial sentences, confiscation orders reaching personal assets including the family home.
Non-cooperation does not make your problem go away. It removes the civil-track protection and substitutes the criminal one. Our advice to any director receiving a COP9 letter is the same: instruct a specialist before you respond to anything.
Understanding the Contractual Disclosure Facility (COP9)
The CDF is the formal mechanism by which HMRC offers civil treatment of suspected tax fraud in return for full disclosure. Our specialist colleagues and licensed IPs work through these mechanics together where settlements threaten business viability:
- Offer letter, HMRC sends the COP9 letter with the CDF offer. The 60-day window starts from the date of the letter.
- Outline Disclosure, within the 60 days, the taxpayer submits an Outline Disclosure setting out, at a high level, all deliberate conduct that caused tax loss. The Outline is signed and certified as complete.
- Formal acceptance and commencement, HMRC accepts the Outline (or identifies gaps). The full CDF investigation begins.
- Detailed Disclosure Report, typically submitted 6–12 months later, setting out all facts, tax calculations, and supporting documents.
- Settlement negotiation, penalties calculated on Schedule 24 behaviour framework, with reductions for the quality of disclosure.
- Certificate of Full Disclosure, signed by the taxpayer confirming that all deliberate conduct has been disclosed. This is the document that provides protection against subsequent criminal prosecution for disclosed matters.
The key protection runs through the Certificate. Where your Certificate is genuinely full and accurate, HMRC agrees not to pursue criminal prosecution for the conduct you disclosed. Where the Certificate is incomplete or dishonest, the protection fails and criminal prosecution becomes live on top of everything else.
Criminal Investigation Powers and Potential Outcomes
Where the case moves to criminal investigation, HMRC deploys the full PACE toolkit:
- Search warrants at business and home premises under section 8 of PACE.
- Arrest powers for indictable offences.
- Interviews under caution conducted under PACE procedural rules.
- Production orders for third-party evidence.
- Restraint and account freezing orders under the Proceeds of Crime Act 2002.
Outcomes on conviction:
- Fraudulent evasion of income tax, up to 7 years’ imprisonment.
- Cheating the public revenue, common law offence, indeterminate maximum, sentences routinely 3–7 years for serious cases.
- Fraud by false representation under the Fraud Act 2006, up to 10 years.
- Money laundering offences, up to 14 years.
- Confiscation orders, unlimited amounts, potentially reaching personal assets.
Your director disqualification automatically follows conviction on most indictable offences. Professional licences (accountancy, legal practice) are typically withdrawn on conviction.
Responding to a COP9 Letter in the First 48 Hours
- Instruct a specialist tax solicitor or adviser with COP9 experience immediately. General accountants and tax advisers without specific COP9 expertise are insufficient. This is a narrow specialism.
- Do not destroy records. Destruction is an offence and will be treated as evidence of dishonesty.
- Do not respond informally to HMRC. The 60-day clock runs formally; ad hoc engagement is not useful and can produce statements used later.
- Preserve all documents. Tax returns, accounts, bank statements, director’s loan account records, any schedule documentation, communications with advisers.
- Decide on CDF acceptance within the 60 days. Accepting requires commitment to full disclosure. Rejecting opens the criminal track. Silence has the same effect as rejection.
- Consider parallel insolvency advice if the potential tax bill exceeds business viability. Licensed IPs can work alongside the COP9 response.
Your Next Step on an HMRC Fraud Investigation
Your first call on any COP9 letter should be to a solicitor or tax adviser with specific COP9 experience. The CDF process is complex, time-bound, and unforgiving of procedural missteps. Specialist representation is not optional at this stage, and no general accountant should be handling your initial response without it.
Where the potential settlement threatens your business’s viability, and six-figure or seven-figure CDF settlements are routine, parallel licensed insolvency practitioner involvement is advisable.
Our IPs can model the cash-flow impact of the likely settlement, assess formal-process options (CVA, administration, CVL), and coordinate with the tax specialist handling your CDF. Call us free on 0800 074 6757 for confidential advice.
FAQs on HMRC Fraud Investigations
What is the difference between COP8 and COP9?
COP8 is used for serious civil enquiries where fraud is not suspected, complex planning, avoidance, or large-value errors. COP9 is used where HMRC suspects fraud and offers the Contractual Disclosure Facility. COP8 investigations do not produce the same civil/criminal protection mechanisms; COP9 is specifically designed to handle fraud suspicion civilly in return for full disclosure.
Can I reject a COP9 offer and still avoid prosecution?
Rejection removes the civil-track protection the CDF offers. HMRC can then conduct its own investigation under PACE, with full criminal-track powers. Whether prosecution actually follows depends on the evidence HMRC gathers, but the safety net that the CDF provides is forfeited. Ignoring the COP9 offer is treated the same as active rejection.
How much tax can a CDF settlement cover?
All deliberate conduct leading to tax loss must be disclosed, no minimum, no practical maximum. The Certificate of Full Disclosure is signed on the basis that everything deliberate is included. Where an omission is later discovered, the certificate protection fails and criminal prosecution becomes live.
How long does a COP9 investigation take?
From COP9 offer to final settlement: typically 18 months to 3 years. The Outline Disclosure is due within 60 days; the Detailed Disclosure Report usually 6–12 months after acceptance; settlement negotiation a further 6–18 months after that. Complex cases extend further.
Can a CDF settlement be paid in instalments?
Yes, in principle. HMRC’s Debt Management unit can agree Time to Pay on CDF settlements, typically with 12–24 month schedules on larger amounts. Where the underlying business cannot service the proposed schedule, the CDF amount itself becomes evidence of insolvency. And formal-process options (CVA, administration, CVL) need to be considered.
Are directors personally exposed in a company COP9?
Frequently. Directors can be pursued personally for conduct that benefited them through the company, unpaid PAYE/NIC via Personal Liability Notices, Loan Charge exposure on personal loans received through schemes, wrongful trading findings in subsequent insolvency, and direct criminal prosecution where personal dishonesty is established.
The CDF protects against criminal prosecution for disclosed company-level fraud but does not protect against separate personal liability routes. If you are unsure whether your personal position is exposed, take separate advice on this alongside your COP9 response.





