The United Kingdom's primary tax authority, HM Revenue & Customs (HMRC), has entered into a significant ten-year, £175 million contract with UK-based AI firm Quantexa. The goal of this partnership is to leverage Quantexa's "decision intelligence" platform to enhance HMRC's ability to detect and combat tax fraud and error. By using advanced AI to analyze its vast datasets, HMRC aims to uncover complex criminal networks, identify anomalous patterns indicative of fraud, and close the UK's multi-billion-pound tax gap. This deal marks one of the largest public sector investments in AI for financial crime detection in the UK.
The strategic partnership is designed to address the increasing sophistication of financial crime, which often involves networks of shell companies, money mules, and synthetic identities designed to obfuscate illicit activities. Traditional audit and analysis methods struggle to keep pace with the scale and complexity of this data.
Quantexa's platform works by:
This "context-first" approach allows investigators to see the bigger picture of a fraudulent operation rather than just individual, isolated fraudulent transactions.
The contract is for ten years, suggesting a long-term, phased implementation and continuous development of the platform's capabilities. This is not a short-term project but a strategic transformation of how HMRC approaches compliance and enforcement.
For small businesses and individual taxpayers in the UK, this development underscores the increasing importance of meticulous record-keeping and accurate tax filings. The AI system will be capable of cross-referencing vast amounts of data, making it more likely that discrepancies will be detected.

Cybersecurity professional with over 10 years of specialized experience in security operations, threat intelligence, incident response, and security automation. Expertise spans SOAR/XSOAR orchestration, threat intelligence platforms, SIEM/UEBA analytics, and building cyber fusion centers. Background includes technical enablement, solution architecture for enterprise and government clients, and implementing security automation workflows across IR, TIP, and SOC use cases.
Help others stay informed about cybersecurity threats
Every tactic, technique, and sub-technique used in this threat has been identified and mapped to the MITRE ATT&CK framework for consistent, actionable threat language.
Observables and indicators of compromise (IOCs) have been extracted and cataloged. Risk has been assessed and correlated with known threat actors and historical campaigns.
Detection rules, incident response steps, and D3FEND-aligned mitigation strategies are included so your team can act on this intelligence immediately.
Structured threat data is packaged as a STIX 2.1 bundle and can be visualized as an interactive graph — relationships between actors, malware, techniques, and indicators.
Sigma detection rules are derived from the threat techniques in this article and can be converted for deployment across any major SIEM or EDR platform.