Umbrella Company PAYE Reforms: What Changed for Agencies from April 2026

Umbrella companies sit between recruitment agencies and contractors, handling payroll so agencies don't have to run it themselves. For years, that arrangement also meant the umbrella company carried the legal responsibility for correctly accounting for PAYE income tax and National Insurance on the payments it made. From 6 April 2026, that responsibility has moved. Recruitment agencies placing workers through umbrella companies — and end clients who engage umbrella-paid workers directly, without an agency in the chain — now carry the PAYE liability themselves, even though the umbrella company still runs the day-to-day payroll.

This is a significant shift in commercial risk for any business that relies on umbrella companies to supply flexible or contract labour, and it changes what "reasonable" due diligence looks like. This guide sets out what changed, why, and what agencies and end clients need to do differently.

Why the liability moved

HMRC's rationale for the change is that the previous model made it too easy for tax liabilities to disappear. Where an umbrella company involved in disguised remuneration schemes, mini umbrella company fraud, or simple skimming of deductions failed to account for PAYE properly, HMRC was often left pursuing a dissolved or insolvent entity with no assets left to recover the debt from. Moving the liability to the recruitment agency or end client puts it with a party HMRC has described as "best placed to police" the arrangement — a solvent, traceable business with an ongoing commercial relationship with the umbrella company, rather than a shell that can be wound up once a scheme is questioned.

Who is actually liable now

The practical effect is straightforward to state even though the underlying arrangements can be complex: where an agency places a worker with an umbrella company handling payroll, the agency now carries the PAYE and National Insurance liability if that umbrella company fails to account for it correctly. Where there is no agency in the chain at all — an end client engaging directly with an umbrella-paid worker — the liability sits with the end client instead. The umbrella company continues to run payroll operationally, deducting tax and National Insurance and handling RTI submissions, but it is no longer the party HMRC will necessarily look to first if something goes wrong.

What due diligence now looks like

Because the liability now sits with the agency (or end client), "we outsourced payroll to an umbrella company" is no longer a sufficient answer if HMRC comes asking questions. Agencies need to treat umbrella company oversight as an active, ongoing compliance function rather than a one-off supplier onboarding check. In practice, this means:

• Mapping the full supply chain. Agencies should identify every umbrella provider they place workers through and confirm exactly who is operating payroll at each step, rather than assuming a single named umbrella company is the only party involved.
• Reviewing contracts and indemnities. Contractual terms with umbrella providers should be reviewed to ensure they reflect the agency's statutory duties under the new rules, including appropriate indemnity provisions where the commercial relationship allows for them.
• Setting clear evidence standards. Agencies should define what payroll data, RTI submission evidence, and deduction records they require from umbrella providers on an ongoing basis, not just at the point of engagement.
• Rationalising preferred supplier lists. A shorter, more tightly monitored list of umbrella providers is easier to keep genuine oversight over than a long list accumulated informally over time.
• Briefing internal teams. Recruitment consultants and finance teams need to understand the cash-flow and reporting implications of carrying this liability, since it changes the risk profile of placing a candidate through a given umbrella provider.

Accreditation schemes such as FCSA accreditation can provide a useful baseline signal of a given umbrella provider's compliance standards, but accreditation is not a substitute for an agency's own ongoing due diligence — the legal liability sits with the agency regardless of a provider's accreditation status.

Why this matters beyond payroll teams

This reform sits within the same broader push toward stronger labour market enforcement as the Fair Work Agency, and reflects a consistent pattern across 2026's employment compliance changes: responsibility is increasingly being placed with the party in the supply chain best able to prevent non-compliance, rather than left with whichever entity happens to be doing the day-to-day administrative work. Businesses relying on flexible, contract, or gig-style labour arrangements — a workforce model also affected by the EU Platform Workers Directive for those operating across EU jurisdictions — should treat 2026 as a year in which supply-chain compliance obligations for non-standard work arrangements have meaningfully tightened across the board.

Frequently asked questions

When did the umbrella company PAYE liability change take effect?

The change took effect on 6 April 2026.

Does this mean umbrella companies no longer run payroll?

No — umbrella companies continue to operate payroll day to day. What has changed is who carries legal liability if PAYE and National Insurance are not correctly accounted for: that responsibility now sits with the recruitment agency, or the end client where there is no agency involved.

Is FCSA accreditation enough to satisfy an agency's due diligence obligations?

Accreditation provides a useful baseline of assurance about a provider's standards, but it is not a substitute for an agency's own ongoing due diligence, since the legal liability for PAYE compliance now sits with the agency regardless of a provider's accreditation status.

The shift in PAYE liability from umbrella companies to agencies and end clients is one of the more consequential, if less publicised, employment compliance changes of 2026, and it rewards businesses that treat umbrella oversight as an active function rather than a paperwork exercise completed once at onboarding. Learnsignal's CPD courses cover payroll and employment compliance developments across the UK and Ireland through 2026.