What Is HMRC SDDS on My Bank Statement?
HMRC SDDS is a recurring direct debit collected by HM Revenue and Customs under an instruction you set up. It is a tax payment — most often PAYE, Class 1A National Insurance, VAT or Self Assessment — collected automatically rather than paid manually each time.
The detail that answers most questions about it: SDDS is the recurring system, NDDS is the one-off one. If your statement says SDDS, you set up an ongoing instruction, not a single payment. That is why it came round again.
At a glance
- SDDS
- HMRC's recurring direct debit system
- NDDS
- HMRC's single, one-off payment
- Usually for
- PAYE, Class 1A NI, VAT, Self Assessment
- Advance notice
- No later than 3 working days before
- Cannot collect
- Interest and penalties
- Protection
- Direct Debit Guarantee
SDDS or NDDS — check which one you have
The two look similar on a statement and mean quite different things.
HMRC SDDS — a recurring direct debit. You authorised an ongoing instruction, and HMRC collects each time a liability falls due. It keeps going until you cancel it.
HMRC NDDS — a single payment. You authorised one collection for one amount. It does not repeat.
If you expected a one-off payment and you are seeing SDDS, the instruction you set up was the recurring kind. That is the most common surprise with this descriptor.
What the payment will be for
- PAYE — employers paying deductions each month
- Class 1A National Insurance — employers, on benefits in kind
- VAT — quarterly returns collected automatically
- Self Assessment — including payments on account
- Corporation Tax and other duties set up the same way
If you run a business or are self-employed, this is almost certainly a liability you filed for. Match the amount against your most recent return or payroll submission.
You should have had notice
HMRC must tell you the date and the amount no later than three working days before the money is collected. That notice goes to your HMRC online account and usually by email.
If a collection took you by surprise, the notification is worth finding — it confirms which tax and which period the payment covers, which is faster than working it out from the amount.
What it cannot take
A useful limit to know: the direct debit cannot collect interest or penalty charges. It covers the tax liability itself.
So if you owe interest or a penalty, that is a separate payment you have to make deliberately. Assuming the direct debit has dealt with everything is a common way for a small balance to sit unpaid and accrue further interest.
Is it a scam?
No. This is a genuine HMRC collection under a mandate you set up, and the descriptor is what HMRC's system produces.
But HMRC impersonation is one of the most common scam formats in the UK, so the distinction matters. A real HMRC SDDS entry is money already collected from your account under an existing instruction. It is not a demand, and it never arrives with a link.
Genuine HMRC will not text or email you asking for card details, threaten immediate arrest, or ask you to pay by voucher or transfer to a "safe account". If you get a message like that, do not engage. Report suspicious texts to 7726 and phishing emails to phishing@hmrc.gov.uk.
Check anything you are unsure about by signing in to your HMRC online account directly, not through a link.
If you do not recognise it
Sign in to your HMRC online account. It shows the direct debit instructions in place, what has been collected, and against which tax and period.
Check whether an accountant or bookkeeper set it up on your behalf. This is extremely common — the instruction exists, you simply did not create it yourself.
Check the business as well as the person. Sole traders and directors often see business tax collections on accounts they think of as personal.
Cancelling it
You can cancel the direct debit with your bank, and it stops immediately.
But cancelling the collection does not cancel the tax. The liability remains due, and paying late attracts interest and potentially penalties — which, as above, the direct debit was never collecting anyway. If cash flow is the problem, HMRC's Time to Pay arrangements exist for precisely that, and agreeing one is far better than a missed payment.
If a payment was taken in error — wrong amount, wrong date, or after you cancelled — the Direct Debit Guarantee entitles you to an immediate full refund from your bank, and HMRC is subject to it like any other originator.
🛡️ Build your recovery plan
Tick what applies to you. The order below is deliberate: most of these organisations will ask for your Action Fraud reference number, so doing it in this sequence saves you making the same call twice.
Nothing ticked yet: the steps below are the ones that apply to everyone. Tick a box above to add the rest.
- 1
Report it to Action Fraud and get your crime reference number
Action Fraud: the national reporting centre for fraud
- Onlinereportfraud.police.uk
- Phone0300 123 2040
Do this second, and do it before you contact anyone else. Almost every organisation in this list (lenders, credit reference agencies, debt collectors) will ask for the crime reference number Action Fraud gives you, and without it you end up making the same call twice. It also creates the official record you'll rely on if you have to dispute anything later. Expect an update within 28 working days, though that's about the investigation, not about clearing your name; that part is on you and starts now.
Have ready: What happened and roughly when · Any account or reference numbers involved
- 2
Get all three credit reports and read every line
Experian, Equifax and TransUnion
- Experian0800 013 8888
- Equifax0800 014 2955
- TransUnion0330 024 7574
All three, not one. Lenders report to different agencies, so a fraudulent account can sit on one file and be invisible on the others: checking a single report is the most common way people miss the second and third account. You're looking for accounts you didn't open, searches you didn't authorise, and addresses linked to your name that you've never lived at. That last one matters more than it sounds: a linked address you don't recognise is often how the fraud was set up in the first place.
Have ready: Your addresses for the last six years
- 3
Add a CIFAS protective registration
CIFAS: the UK fraud prevention service
- Onlinecifas.org.uk
- Phone0330 460 9601
This puts a warning flag against your name in the National Fraud Database, so member organisations run extra identity checks before granting credit in your name. It costs £30 and lasts two years. It does not affect your credit score, and it doesn't touch accounts you already hold, but it will make your own applications slower, which is the trade-off. If someone has your details, that's usually a trade worth making. Note that not every application is checked against the database, so treat it as a strong deterrent rather than a lock.
- 4
Check you're on the electoral register at the right address
Your local council
A quick one that's worth doing while you're here. The electoral roll is one of the main ways lenders confirm you live where you say you do, and being missing from it both weakens your own applications and makes it easier for someone to claim your identity elsewhere.
- 5
Escalate if you get nowhere
Financial Ombudsman Service, or the ICO
- Financial Ombudsman0800 023 4567
- ICOico.org.uk
If a bank refuses to refund you, or a lender won't remove an entry it has accepted is fraudulent, complain to the firm first and give it eight weeks. After that, or as soon as you get a final response, take it to the Financial Ombudsman. It's free and its decisions bind the firm. Where the argument is specifically about inaccurate data staying on your credit file, the Information Commissioner's Office can also look at it. Both routes cost you nothing.
- 6
Close the door behind you
You
Change passwords on your email account first, not your banking: email is the master key, because it's where password resets land. Turn on two-factor authentication wherever it's offered. If documents were lost or stolen, report the passport or driving licence to the issuing body so it can be flagged. And set a reminder to re-check your credit reports in three months: fraudulent applications sometimes surface long after the original breach.
Contact details and process reflect Action Fraud, CIFAS, the credit reference agencies and National Debtline guidance for England and Wales. Scotland reports fraud through Police Scotland on 101 rather than Action Fraud; the rest of the process is the same. General information, not legal advice: free, independent help is available from National Debtline, Citizens Advice and StepChange.
