HMRC Security Bonds
The Notice of Requirement is the procedural document, the formal letter HMRC sends demanding a cash security. A director who has never seen one before tends to mistake the NOR for a bill (it is not) or for an invitation to negotiate (it is, but on defined grounds).
Understanding which statutory power HMRC has invoked, which calculation basis applies, and which response window is open is your first useful step.
If you have received a Notice of Requirement, you have a 30-day window to respond. Below we cover the document, the deadline, and your options for response and challenge. For the broader framework of how HMRC security bonds work and why they are imposed, see our main guide on HMRC Security Bonds.
- What a Security Bond Notice (Notice of Requirement) Is
- Why HMRC Issues Security Bond Notices
- How to Respond to a Security Bond Notice
- Criminal Consequences of Not Paying a Security Bond Notice
- Challenging a Security Bond Notice
- When a Security Bond Notice Forces Insolvency Decisions
- Your Next Step on an HMRC Security Bond Notice
- FAQs on HMRC Security Bond Notices
What a Security Bond Notice (Notice of Requirement) Is
The Notice of Requirement (NOR) is the formal letter issued by HMRC against your business under:
- Schedule 11, paragraph 4(2) of the Value Added Tax Act 1994, for VAT security.
- Finance Act 2008 (section 119), for PAYE security.
- Social Security Administration Act 1992, for NIC security, parallel to the PAYE provisions.
- Parallel provisions in specific tax Acts, for Landfill Tax, Insurance Premium Tax, ATED, and certain other taxes.
The NOR specifies:
- The amount of security required.
- The taxes covered (VAT, PAYE, NIC, or combinations).
- The acceptable forms of security (cash deposit, bank guarantee from authorised UK institution).
- The deadline for provision, typically 30 days.
- The named officer and the reasons HMRC considers security is required.
Defects in the NOR (missing required elements, incorrect calculation basis, wrong addressee) are your starting point for challenge.
Modern HMRC templates rarely contain procedural defects, but we have seen NORs issued against the wrong corporate entity after a group restructure, and the template signed by an officer whose delegated authority had lapsed. Both are worth checking on the day the letter lands.
Why HMRC Issues Security Bond Notices
HMRC issues an NOR where there is a “serious risk” of future tax non-payment. The common triggers:
- Phoenix trading pattern, same directors operating a new company after a previous liquidation with HMRC arrears.
- Persistent late compliance, repeated late VAT or PAYE filings, TTP breaches.
- Sector-risk indicators, HMRC applies elevated scrutiny in specific industries (construction labour supply, certain cash-intensive retail).
- Intelligence-driven referral, HMRC Connect data, third-party information, or targeted investigation findings.
The NOR is prospective: it is not a penalty for your past non-compliance, and not a payment of any existing tax debt. It is a cash deposit held against liabilities HMRC expects your business to generate in future.
How to Respond to a Security Bond Notice
Four substantive response routes within the 30-day window:
- Provide the security in the required form. Cash is universal; bank guarantee from an authorised UK institution is the common alternative. The security is held by HMRC against future liabilities and released when the risk profile improves.
- Make written representations challenging the NOR. Grounds include:
• The calculation basis overstates genuine anticipated liabilities.
• The risk assessment is unreasonable given current trading.
• The NOR is procedurally defective.
• The directors or trading circumstances have changed materially since the trigger event. - Appeal to the First-tier Tribunal (Tax Chamber) within 30 days. Specialist tax counsel required; appeal runs parallel to representations.
- Negotiate an instalment arrangement for very large bonds where immediate full provision would itself cause insolvency. Discretionary and rare but sometimes granted.
Ignoring the NOR is the most expensive option. If you fail to provide the required security, you commit a summary criminal offence under section 72 VATA 1994 and parallel provisions for other taxes.
Criminal Consequences of Not Paying a Security Bond Notice
Unlike most tax matters, NOR non-compliance produces direct criminal liability:
- Summary offence under section 72 VATA 1994, fines up to £5,000 per tax period (i.e. per quarter for quarterly VAT).
- Continuing offence, each subsequent trading period without the security is a separate offence.
- Director personal liability, where the company’s failure is attributable to director consent, connivance, or neglect, the director can be prosecuted personally. Parallel director disqualification proceedings commonly follow.
This criminal exposure is the feature that distinguishes NOR non-compliance from ordinary tax arrears. In the cases we handle, directors who have never seen an NOR before routinely file it in the same drawer as a VAT assessment and discover six months later that a summons has followed. Treat the letter as a criminal-risk document from day one.
Challenging a Security Bond Notice
The practical challenge routes:
Written representations
Submitted to HMRC within your 30-day window. Best evidence to support your representations:
- Recent management accounts showing trading levels.
- Cash-flow forecasts demonstrating genuine future liabilities.
- Evidence of management changes since the trigger event.
- Evidence of sustained recent compliance.
Successful representations often reduce your bond to a fraction of the original figure. This process is faster and cheaper than tribunal, and we strongly recommend it as your first step.
First-tier Tribunal appeal
Within 30 days of the NOR. Grounds:
- Unreasonable risk assessment by HMRC.
- Incorrect calculation of required amount.
- Procedural defects in the NOR itself.
- Jurisdictional issues (statutory basis not properly invoked).
Tribunal appeal is slower (typically several months) and more expensive. Interim relief can be sought where the bond demand would itself trigger insolvency.
When a Security Bond Notice Forces Insolvency Decisions
The typical NOR recipient pattern:
- Director previously involved in a liquidated company with HMRC arrears.
- Current business continuing similar trading activity.
- Cash position unable to support a six-figure deposit.
- Current compliance actually reasonable, returns filed, current liabilities being paid.
For such recipients, the NOR demand effectively forces a financial decision inside 30 days: either raise the security (often requiring external funding or your own second-charge against the house), or enter formal insolvency. Licensed insolvency practitioner advice needs to be part of your first week after NOR receipt, not the last.
Where formal insolvency is the right answer for your situation, administration is frequently the cleanest route. The statutory moratorium under Schedule B1 of the Insolvency Act 1986 halts the NOR enforcement along with other HMRC action.
Your Next Step on an HMRC Security Bond Notice
Two calls within 48 hours of NOR receipt:
- Specialist tax adviser or solicitor to prepare written representations challenging the amount.
- Licensed insolvency practitioner to assess whether the bond is affordable and to model formal-process alternatives if it is not.
Our licensed IPs and business rescue specialists can handle the HMRC conversation, coordinate with tax counsel on representations, and implement a formal process if the bond cannot be provided cleanly. Call us free on 0800 074 6757 for confidential advice before the 30-day deadline.
FAQs on HMRC Security Bond Notices
How long do I have to respond to a Notice of Requirement?
Typically 30 days from the date of the NOR. Representations challenging the amount and tribunal appeals must both be filed within this window. Extensions are rare and only granted for exceptional circumstances.
Is non-compliance with a security bond notice a criminal offence?
Yes, summary offence under section 72 VATA 1994 (and parallel provisions for other taxes). Fines up to £5,000 per tax period; directors can be prosecuted personally where the failure is attributable to their consent, connivance, or neglect. This criminal aspect is the key feature that distinguishes NOR non-compliance from ordinary tax arrears.
Can I negotiate the amount of a security bond?
Yes, through written representations to HMRC within the 30-day window. Best ground: the calculation basis overstates genuine anticipated liabilities. Supporting evidence, filed returns, management accounts, cash-flow forecasts, shifts outcomes. Successful representations can reduce the bond to a fraction of the original figure.
How is a security bond calculated?
For VAT: typically 4 months of expected VAT liability (quarterly filers) or 6 months (monthly filers). For PAYE/NIC: typically 4 months of expected payroll-related liabilities. Six-figure bonds are common; seven-figure bonds appear on larger operations. The calculation basis must be specified in the NOR and can be challenged in representations.
Can the bond be refunded?
Yes, subject to sustained compliance. HMRC typically reviews the risk profile after 12–24 months of compliant filing and payment. Where the compliance record demonstrates that the business no longer presents a tax-loss risk, the bond is released back to the taxpayer (with interest where applicable).
What forms of security does HMRC accept?
Cash deposit lodged with HMRC is the universal form. Bank guarantee from an authorised UK financial institution is accepted in most cases, the guarantee is typically backed by security against the director’s own assets, so is not a cost-free alternative. Third-party guarantees are generally not accepted.







