Recently I tweeted that if you get a call a text or an email claiming to be from HMRC it will be from a thief. HMRC has now sent me a link which lists 28 circumstances when it might in fact be from HMRC https://bit.ly/36DQL0r  It is still safest to assume it is from a thief.

It is a sad truth that thieves are quicker, more flexible, better at behavioural psychology, and cleverer than those trying to stop them. The only truly safe solution is refuse to engage put the phone down, delete emails and texts and never ever ever click on a link sent to you

If you are concerned then call HMRC back on one of its helplines. They are numerous and this page https://bit.ly/2X8V8gP  is very long. But is supposed to help you find the right one. Before you call, make a cup of tea and put on some music. It might be a long wait.