What Happens During an HMRC Customs Audit? A Step-by-Step Guide
Receiving a letter from HMRC's National Customs Audit Team is an uncomfortable experience for most businesses. Even if your customs records are largely in order, the prospect of having HMRC scrutinise years of import and export declarations is stressful, particularly when you know, as most businesses do, that absolute perfection across every entry is unlikely.
The good news is that a customs audit is a structured, predictable process. Understanding exactly how it works, who HMRC target, what they actually look at, and how they arrive at their conclusions, makes it significantly less daunting and, crucially, gives you time to prepare properly.
This guide walks through the entire HMRC customs audit process from selection through to conclusion, including what happens when errors are found and how the outcome compares depending on whether you've been proactive about compliance.
How Does HMRC Select Businesses for Customs Audit?
HMRC does not audit businesses at random. Their risk-based selection process uses a combination of data analysis, intelligence, and sector-wide compliance programmes. The most common triggers include:
Risk-profiling and data analysis
HMRC's systems continuously analyse customs declaration data across all UK importers and exporters. They look for statistical anomalies, commodity codes that appear inconsistently, values that are significantly below industry averages, origin declarations that don't match trading patterns, or significant fluctuations in declared volumes.
Sector-wide compliance programmes
HMRC periodically runs sector-specific audit programmes targeting industries with historically high rates of customs error. If your sector is selected, a proportion of all businesses operating in it may receive audit notices regardless of their individual compliance history. Textiles, electronics, chemicals, food products, and automotive parts have all been subject to targeted programmes in recent years.
Third-party intelligence
HMRC receives information from other government agencies, overseas customs authorities, and in some cases competitors or anonymous sources. Intelligence that a specific business may be undervaluing goods, misdescribing origin, or failing to maintain required authorisation conditions can trigger a targeted audit.
Routine re-assessments
If your business holds HMRC authorisations such as AEO status, an Inward Processing approval, or a customs warehousing authorisation, you will be subject to periodic re-assessments as a standard condition of that authorisation. These are planned rather than triggered by a specific concern, but they follow the same process as a compliance audit.
Post-transaction checks
HMRC sometimes conducts post-clearance checks on specific consignments, for example, reviewing the documentation and classification of a particular import shortly after it clears. These can escalate into full compliance audits if the initial check reveals concerns.
The Audit Notification
In the majority of cases, HMRC will write to your business giving advance notice of the audit. The notification will typically:
• Identify the HMRC officer or team conducting the audit
• State the scope of the audit: which declarations, which years, which specific aspects of compliance
• Request that you provide specified documents by a certain date
• Propose a date for a meeting, either at your premises or by phone
The notice period is typically 2–4 weeks. This is your window to prepare. Use it.
Important: An unannounced visit from HMRC is rare but does happen, typically where there is suspicion of deliberate fraud. If HMRC officers arrive at your premises without prior notice, you have the right to request that the visit be rescheduled to allow you to have your customs consultant or advisor present. You should always exercise this right.
What Documents Will HMRC Ask For?
The document request will depend on the scope of the audit, but a typical customs compliance audit will request some or all of the following:
• Import and export customs declarations (C88, SAD or CDS equivalents) for the period under review
• Commercial invoices for all imports and exports in the audit period
• Packing lists and delivery notes
• Transport documents (bills of lading, air waybills, CMR consignment notes)
• Proof of origin for any goods imported under preferential tariff rates (EUR.1 certificates, supplier declarations, origin declarations on invoices)
• Records relating to customs value — including any royalty agreements, assists, or related-party pricing documentation
• Where special procedures are held: stock accounts, Bills of Discharge, and authorisation documents
• Evidence of payment of import duty and VAT
• Commodity code classification records, including any Binding Tariff Information rulings held
• Import VAT accounts and C79 certificates (confirming import VAT has been reclaimed correctly)
If you hold any HMRC authorisations, the auditor will also want to review the operational records specific to those authorisations — for example, inward processing stock accounts or customs warehouse records.
The Audit Meeting
Once documents have been reviewed, HMRC will typically request an in-person or video meeting. This is a structured discussion with the auditor and relevant members of your team, usually including whoever manages customs declarations day-to-day and a senior manager or director.
The meeting covers:
• How your business operates: your supply chain, the nature of goods imported and exported, how you use your freight agents
• Your internal customs compliance processes: who is responsible, what checking is done, how instructions are given to freight forwarders
• Specific questions arising from the document review: the auditor will have prepared questions about any items they found unusual or unclear
• If you hold HMRC authorisations: how the conditions are being maintained in practice
This meeting is not an interrogation. It is a structured professional exchange. However, what you say becomes part of the audit record, and inconsistencies between what you describe and what the documents show are taken seriously.
Our advice: Never attend an HMRC customs audit meeting without preparation. Review the documents you have provided, understand your own processes, and ensure all relevant staff have been briefed on what to expect. If you have engaged a customs consultant, they should attend alongside you.
What Are Auditors Actually Looking For?
HMRC's customs auditors are assessing compliance across several key areas:
Commodity code accuracy
They will take a sample of your commodity codes and verify them against the UK Trade Tariff. They look for patterns of misclassification, particularly where codes have been used that attract lower rates of duty than the correct code would. They also check for codes that change inconsistently across similar products.
Customs valuation
They will compare the declared customs values against commercial invoices, freight invoices, and insurance documentation. They check whether Incoterms have been applied correctly to the valuation, whether royalties or assists have been included where required, and whether related-party transactions have been handled correctly.
Origin declarations
They check whether preference has been claimed and whether the required proof of origin documentation exists and is valid. They may request that suppliers' origin declarations be substantiated, or that you obtain statements from overseas suppliers confirming the basis for their origin claim.
Special procedure compliance
If you hold an IP, customs warehousing, or other authorisation, HMRC will scrutinise compliance with the specific conditions of that authorisation, particularly stock accounting and Bill of Discharge records.
General record-keeping
They assess whether your records are sufficient to reconstruct every customs transaction, whether the documentation trail from purchase order through to customs entry is complete and retrievable.
What Happens When Errors Are Found?
HMRC distinguishes between the nature of errors in determining the response:
Careless: Lack of reasonable care: errors that should have been caught with normal diligence. Penalty: 0–30% of unpaid duty, plus duty and interest. Suspended if behaviour changes.
Deliberate: Knowingly providing incorrect information. Penalty: 20–70% of unpaid duty, plus duty and interest. Public naming possible.
Deliberate and concealed: Actively hiding errors or providing false evidence. Penalty 30–100% of unpaid duty. Criminal investigation possible.
For the vast majority of businesses, errors fall into the 'careless' category: made in good faith through insufficient oversight rather than intentional evasion. The penalties are still significant, but the distinction matters.
Where errors result in underpaid duty, HMRC will issue a customs assessment for the additional duty owed, plus interest calculated from the date the duty should have been paid. The penalty is then applied on top of this.
Where errors result in overpaid duty — missed preference claims, incorrect codes applied at too high a rate — HMRC will acknowledge this and you can apply for a refund.
The Voluntary Disclosure Advantage
If you identify errors before HMRC raises them, either through your own review or as a result of engaging a customs consultant, a voluntary disclosure to HMRC is always the right approach. Under HMRC's penalty regime:
• An unprompted disclosure (before HMRC has started investigating) typically results in a penalty between 0% and 30% of the unpaid duty for careless errors — and in many cases, no penalty at all for first-time, non-deliberate mistakes
• A prompted disclosure (after HMRC has already identified the issue) results in higher penalties in the 15–30% range
• In both cases, the duty itself IS PAYABLE, but the financial difference between a voluntary disclosure and an HMRC-initiated finding can be substantial
This is why proactive annual compliance reviews are so valuable. They don't just prevent errors from accumulating — they give you the opportunity to resolve issues on your terms rather than HMRC's.
Outcomes and Next Steps After the Audit
Once the audit is complete, HMRC will issue a written report summarising their findings. This will either confirm that no significant errors were found, set out the errors identified and the resulting financial liability, or recommend changes to your processes without a financial assessment if the errors are minor.
Where a financial liability is established, HMRC will typically offer a payment arrangement if the full amount cannot be settled immediately. The business will usually be placed on enhanced monitoring, meaning more frequent contact from HMRC — for a period following the audit.
The audit findings also inform whether HMRC will return sooner than their normal re-assessment cycle. A business that received a clean audit report in 2024 is unlikely to see HMRC again before 2027. A business that has a significant settlement in 2024 may see them back in 2025.
How to Be Genuinely Audit-Ready
The businesses that experience the least disruption and the smallest financial impact from HMRC customs audits are those that have maintained ongoing compliance rather than scrambling to prepare when the letter arrives.
• Conduct an annual internal review of a sample of your customs declarations against source documents
• Maintain complete, accessible records for every customs transaction — four years of documentation, retrievable within 48 hours
• Ensure your freight agents and forwarders are working from a clear, written instruction register
• Hold periodic discussions with your agents about any classification or valuation queries
• If you hold HMRC authorisations, keep your stock accounts and Bills of Discharge current — do not let reconciliation lag
• Engage an independent customs consultant for an annual health check that mirrors what HMRC would look at
If you've received an HMRC customs audit notice, or want to ensure you're prepared before one arrives, Readyset provides audit preparation, representation, and ongoing compliance management to keep your records clean and your business protected.