HMRC data is sourced directly from the UK government via the PAYE (Pay As You Earn) system, providing one of the most authoritative sources for verifying employment and income.
What HMRC data includes
Data Field | Example |
Employer name | “Sainsbury’s Supermarkets Ltd” |
Job start date | 15/06/2020 |
Job end date | 10/01/2023 |
Income band | £20,000–£25,000 |
Employment type | Full-time PAYE |
Why does Konfir use HMRC?
HMRC data is:
Official - sourced directly from employer-submitted PAYE records
Tamper-proof - records are uneditable by applicants
Comprehensive - up to 5 years of history, across multiple jobs
Secure - applicant-controlled via Government Gateway
This makes it one of the most reliable ways to verify UK employment.
What are the Limitations?
Some scenarios where HMRC data may not fully verify an activity:
The employment is very recent and hasn’t yet been reported
The role was paid cash-in-hand or not registered via PAYE
Applicant cannot access or log into their HMRC account
Missing employer name or job title (as these are not always reported)
If HMRC data is unavailable or incomplete, Konfir will try Open Banking or Payroll instead.
How does Konfir access HMRC data?
Konfir retrieves HMRC data by inviting the applicant to connect their HMRC account during the Konfir applicant journey. This process involves:
Applicant is securely redirected to the Government Gateway login.
After logging in, they are prompted to consent to share their PAYE data.
Once consented, Konfir retrieves the relevant information and returns the applicant to the verification journey.
Note: If applicants don’t have a Government Gateway account, they’ll be guided to create one during the process.
How is Konfir different from other HMRC-based verification solutions?
While some providers use screen scraping or ask applicants to share credentials, risking data privacy and violating HMRC terms, Konfir does not.
Our implementation is:
Compliant - Access is source-authenticated and follows HMRC’s API guidelines
Credential-free - Konfir never sees or stores Government Gateway passwords
Robust - Built to support high-scale, low-risk use in regulated environments