HMRC is reviewing 27,000 “high risk” cases that could have been paid out wrongly or fraudulently.