Short answer: HMRC cannot log in and scroll through your transactions on a whim. But it can obtain information about your accounts from your bank without asking you first, and in some cases without you even knowing in advance.
If you sell on eBay, run a side hustle, or file a tax return that doesn't quite match what HMRC already knows, it's natural to wonder how much they can actually see. The reality sits somewhere between the two extremes you'll read online. HMRC has no general power to surveil your spending, but it has a sophisticated data-matching system and specific legal tools to demand bank records. This guide explains exactly what HMRC can and can't do, and the important difference between HMRC seeing your money and HMRC taking it.
Can HMRC see my bank account directly?
No. HMRC does not have a live feed into your current account and cannot watch your balance go up and down in real time. There is no button an inspector presses to read your statements on demand.
What HMRC does have is a huge amount of data reported to it by third parties, plus the legal power to formally request specific records from your bank when it is running a check. The myth of HMRC "freely browsing" your account comes from confusing these data-gathering powers with open surveillance. They are not the same thing.
How HMRC actually gathers information: the Connect system
HMRC's main intelligence tool is a data-matching system called Connect. It pulls together information from dozens of sources, including bank interest reported by UK banks, Land Registry records, DVLA, the electoral roll, credit reference agencies, overseas tax authorities and digital platforms. Connect cross-references all of this against what you've declared on your tax return.
If your declared income looks too low to support a property purchase, or your reported bank interest implies far more savings than your stated earnings would allow, Connect flags the mismatch. That flag is often what triggers a letter or a formal enquiry. If you want to understand what happens next, see our guide on what triggers an HMRC investigation.
Digital platform reporting (DAC7)
Since 1 January 2024, online platforms have been legally required to report seller income and identity details to HMRC every year. This rule, often called DAC7, covers marketplaces and apps such as eBay, Vinted, Airbnb and TikTok Shop. The platform tells HMRC how much you received, and HMRC cross-checks it against your tax return.
This is why so many people have received "nudge letters" recently. HMRC isn't reading your bank account; it's comparing platform payout data with what you declared. If you sell online, read how TikTok Shop reports to HMRC under DAC7 and our breakdown of the side hustle tax rules so you know where you stand.
Financial Institution Notices: HMRC asking your bank directly
This is the power most people don't know about, and it's the real answer to the headline question.
Under the Finance Act 2021, HMRC can issue a Financial Institution Notice (FIN). A FIN requires a bank, building society or other financial institution to hand over information and documents about a taxpayer — without the taxpayer's consent and without needing approval from a tax tribunal first.
Before this power existed, HMRC generally needed tribunal approval to force a third party to provide your records. The FIN removed that hurdle for financial institutions specifically, which is why it caused such a stir when it was introduced.
Do you get told?
Usually, yes. When HMRC issues a FIN to your bank, you are normally given a copy of the notice and told the reasons for the request. There is an important exception: if HMRC applies to a tribunal and the tribunal agrees that telling you would prejudice the assessment or collection of tax, the notice can be issued without informing you.
So the honest summary is: HMRC can require your bank to disclose your records without your permission, and there are limited circumstances where you won't be told beforehand. This is a targeted compliance power used during a check, not a general licence to snoop.
The crucial difference: seeing your money vs. taking it
Everything above is about HMRC gathering information. A completely separate question is whether HMRC can reach into your account and take money. That power exists too, but it's far more tightly controlled.
Direct Recovery of Debts (DRD): HMRC bank account deductions
The formal name for HMRC bank account deductions is Direct Recovery of Debts (DRD). It lets HMRC recover tax owed straight from your bank or building society accounts, including some ISAs, by deducting the debt directly from your balance. But the safeguards are strict:
- The debt must be established and over £1,000. HMRC can't use DRD for a disputed or estimated figure.
- HMRC must leave at least £5,000 across all your accounts combined after recovery, so you're not left with nothing.
- You receive a notice and a 30-day window to object before any money is taken.
In practice, DRD is a last resort used against people who can clearly afford to pay but won't. It is not how a routine tax bill gets collected, and you'll always have warning.
| Financial Institution Notice (FIN) | Direct Recovery of Debts (DRD) | |
|---|---|---|
| What it does | Sees information — requires your bank to hand over records | Takes money — deducts an established debt from your account |
| Legal basis | Finance Act 2021 | Direct Recovery of Debts rules |
| Your consent needed? | No | No, but only after notice |
| Are you told? | Normally yes, unless a tribunal agrees otherwise | Always — 30-day window to object |
| Threshold | None | Established debt over £1,000; £5,000 left across your accounts |
A worked example
Say you run a small Vinted reselling operation alongside your job. In 2026/27 you receive £14,000 of gross sales through the platform but don't register for Self Assessment, assuming it's "just selling old clothes".
- The trading allowance is £1,000 gross. Because your gross trading income is well over that, you were required to register for Self Assessment and declare the income.
- Vinted reports your £14,000 of payouts to HMRC under DAC7.
- HMRC's Connect system finds no matching tax return. You get a nudge letter.
- If you ignore it, HMRC opens a check. To verify the figures it can issue a FIN to your bank for statements showing the platform payouts — without needing your sign-off.
- If tax is then assessed, becomes final, and exceeds £1,000 while you refuse to pay, HMRC could ultimately consider DRD — but only after notice, a 30-day objection window, and leaving £5,000 across your accounts.
The lesson: the entire chain starts because the income wasn't declared. Declare it, and none of this machinery ever turns toward you. Profits on genuine trading like this are taxed at your marginal self-employed income tax rate plus Class 4 National Insurance.
What rights do you have?
You are not powerless. When HMRC uses these powers you generally have the right to:
- Receive a copy of a FIN and the reasons for it (unless a tribunal has agreed otherwise).
- Be told a DRD debt and given 30 days to object before any money moves.
- Appeal assessments and dispute figures you believe are wrong.
- Be represented by an accountant or adviser throughout a compliance check.
If you do receive a formal enquiry, our guide to an HMRC compliance check walks through what to expect and how to respond calmly.
How to stay off HMRC's radar (the legitimate way)
The single best protection against any of these powers being aimed at you is simple: have nothing to hide and good records to prove it.
Declare all your income
Register for Self Assessment once your gross trading income exceeds £1,000 in a tax year. That includes side hustles, marketplace sales and rental income. If you're unsure whether you need to file, start with do I need to do a Self Assessment.
Keep clean records
Keep records of income and expenses, and reconcile your marketplace payouts against your bank deposits. Solid bookkeeping means that if HMRC ever does request bank data, the figures match your return and the check closes quickly. Our small business bookkeeping basics guide covers the essentials.
Respond to nudge letters
Never ignore a nudge letter. They are an invitation to put things right before a formal enquiry — usually with lower penalties. If you've under-declared online sales, see our guide on the HMRC nudge letter for eBay and Vinted sellers.
The bottom line
HMRC cannot freely browse your bank account. It builds a picture from Connect and third-party data, and where it needs your actual bank records during a check it can compel your bank to provide them via a Financial Institution Notice — without your consent, though normally with you informed. Taking money directly through DRD is a separate, heavily safeguarded process with a £1,000 floor, a £5,000 protected minimum and a 30-day objection window. Declare your income, keep records, and engage with letters, and these powers stay theoretical.
Sources
- HMRC Compliance Handbook CH23120 — Financial Institution Notices
- HMRC Debt Management and Banking Manual DMBM585160 — Direct Recovery of Debts
- GOV.UK — Selling goods or services on a digital platform
- GOV.UK — Register for Self Assessment
- GOV.UK — Dealing with HMRC: paying HMRC
Frequently asked questions
Can HMRC look at my bank account without telling me?
HMRC can require your bank to provide your records through a Financial Institution Notice without your consent. You are normally given a copy of the notice and the reasons, but if a tribunal agrees that telling you would prejudice the check, the notice can be issued without informing you first.
Can HMRC take money directly from my bank account?
Yes, through Direct Recovery of Debts, but only if the debt is established and over £1,000. HMRC must leave at least £5,000 across all your accounts combined, and you get notice plus a 30-day window to object before any money is taken.
What are HMRC bank account deductions?
HMRC bank account deductions are made under the Direct Recovery of Debts power, which lets HMRC deduct an established tax debt straight from your bank, building society or some ISA accounts. The deduction can only be made if the debt is over £1,000, must leave at least £5,000 across your accounts combined, and follows a notice and a 30-day objection window, so it is never a surprise.
How does HMRC know about my eBay or Vinted sales?
Since 1 January 2024, digital platforms such as eBay, Vinted and TikTok Shop report seller income and identity details to HMRC every year under the DAC7 rules. HMRC cross-checks this against your tax return, which is why many sellers receive nudge letters.
Do I have to declare income from a side hustle?
If your gross trading income exceeds the £1,000 trading allowance in a tax year, you must register for Self Assessment and declare it. Keeping good records and declaring everything is the most effective way to avoid HMRC compliance checks.
