Umbrella Companies and the 2026 Joint and Several Liability Regime

What the new rules do

Umbrella companies employ temporary workers and run PAYE on their pay, sitting between the worker and the agency or client that books the work. Most operate properly. A persistent minority have not, skimming the tax and National Insurance they deducted, or running disguised remuneration schemes that leave the worker with a tax debt years later. Because the umbrella was the employer, the liability for unpaid PAYE historically stopped with the umbrella, and a fraudulent operator could fold, leave the debt behind and reappear under a new name.

The reform that took effect on 6 April 2026 changes who carries that risk. A new Chapter 11 was inserted into Part 2 of the Income Tax (Earnings and Pensions) Act 2003, making other parties in the labour supply chain jointly and severally liable for the income tax and National Insurance the umbrella should have paid. Joint and several liability means HMRC can pursue any liable party for the whole amount. It does not need to exhaust its remedies against the umbrella first, and it does not need to show that the agency or client knew anything was wrong.

Who HMRC pursues, and in what order

The regime sets a clear hierarchy. Where a UK recruitment agency sits in the chain, the agency that contracts with the end client is the primary target for recovery alongside the umbrella itself. Where there is no UK agency, for example where a client engages umbrella workers directly or the only agency is offshore, liability attaches to the end client instead. The debt follows the chain to whichever UK party is best placed to have policed it.

The feature that has reshaped agency behaviour is that liability arises regardless of fault. An agency that ran credible checks, used an accredited umbrella and was deceived by professional-looking payslips is in the same legal position as one that took a kickback to route workers through a scheme. Due diligence does not provide a statutory defence; what it does is reduce the chance of ever standing behind a defaulting umbrella. That design choice is deliberate. Fault-based tests in earlier anti-avoidance regimes proved slow and easy to litigate around, and Parliament chose certainty of recovery over fairness to the diligent.

For workers, the change is protective. The PAYE the umbrella deducted from your pay is no longer at risk of vanishing with the umbrella, because someone solvent further up the chain now answers for it. The pressure of the regime falls on agencies and clients, and through them on the umbrella market itself.

What counts as an umbrella arrangement

The rules are drafted around substance rather than labels. Broadly, they catch arrangements where a worker is supplied to a client through a chain, the worker is employed by a business whose role is to employ workers for supply to others, and that business operates the payroll. Calling the entity a payroll bureau, an employment services provider or a portfolio employer does not take it outside the regime if it performs the umbrella function. Nor does inserting an extra company between the umbrella and the agency, a structure some promoters used to blur the chain before the change.

Some arrangements sit outside the regime because the employment relationship is genuine and direct. A worker on an agency's own payroll is employed by the agency, which already carries the PAYE obligation as employer. A contractor trading through a personal service company is in a different framework entirely, governed by the IR35 and off-payroll rules described in the complete guide to IR35 in 2026/27. The new chapter targets the specific gap where employment and payroll were outsourced to an intermediary with no other commercial purpose.

Payslip anatomy: how umbrella pay actually works

Auditing an umbrella starts with understanding the two numbers that get confused. The assignment rate is what the agency pays the umbrella for your work. Your gross pay is what is left of that after the umbrella covers its own employment costs. Those costs come out of the assignment rate before tax is calculated, which is why an advertised umbrella rate always overstates what a payslip will show.

What comes off the assignment rate

• Employer National Insurance at 15% on earnings above the £5,000 secondary threshold, the largest single deduction.
• The umbrella's margin, a fixed weekly or monthly fee for running the employment.
• Holiday pay, either rolled up into each payment or accrued and paid when leave is taken.
• Employer pension contributions under auto-enrolment, unless you have opted out.
• Apprenticeship levy where the umbrella's pay bill makes it liable.

What comes off your gross pay

After those employment costs, the remainder is your gross taxable pay, and the deductions from it should look like any employee's: income tax through your PAYE code against the £12,570 personal allowance, employee National Insurance at 8% on the main band and 2% above the upper limit, and your own pension contribution. Since April 2025 umbrellas have been required to show how the assignment rate breaks down, so a compliant payslip, read with the key information document the agency must provide, lets you reconcile every pound from assignment rate to bank transfer.

The audit itself is three checks. First, does the assignment rate on the payslip match what the agency agreed. Second, do the employment costs reconcile, with employer National Insurance consistent with the 15% rate and the margin matching the contract. Third, do the tax and National Insurance figures on the payslip match what HMRC has actually received, which you can verify against your record in your HMRC personal tax account. A payslip that shows deductions HMRC never received is the single clearest sign of a skimming operation.

Disguised remuneration red flags

Skimming is one failure mode. The other is disguised remuneration, where the umbrella pays a sliver of salary through PAYE and routes the rest to you as something dressed up as non-taxable. The loan charge litigation showed where these schemes end: HMRC treats the disguised amounts as employment income, and historically it was the worker who received the assessment. The new liability rules give workers a backstop on unpaid PAYE, but they are not an amnesty for participating in a scheme, so recognising one still matters. Treat any of the following as a reason to walk away:

• Take-home pay quoted as a high percentage of the assignment rate. Genuine PAYE employment, after employer costs and your own tax, cannot deliver the retention figures schemes advertise.
• Pay split into a small salaried element and a second payment described as a loan, advance, annuity, capital payment, grant or bonus.
• Money arriving from a different entity than the employer named on your payslip, or from an offshore account.
• A payslip showing little more than minimum wage while your bank receives substantially more.
• Marketing built on 'HMRC compliant' or 'QC approved' claims, which compliant umbrellas do not need to make.
• Reluctance to provide a key information document, a full assignment-rate breakdown, or written terms before you start.

HMRC publishes guidance for workers on how umbrella arrangements should operate and names known avoidance schemes and their promoters. Checking a new umbrella against that material takes minutes and is worth doing before the first timesheet, not after the first odd payslip.

Umbrella or PSC after April 2026

The reform also shifts the comparison every inside-IR35 contractor runs. Before the change, the case for an umbrella over a PSC on an inside engagement was administrative simplicity with a counterparty-risk discount: simpler, but you bore the risk of choosing a bad umbrella. The joint and several liability rules transfer much of that risk to the agency, and the agency response, shorter approved umbrella lists and closer payslip scrutiny, makes the average umbrella a safer employer than it was.

That does not make the umbrella the default answer. A contractor with a mix of engagements still usually keeps the PSC, running outside contracts through it while taking inside ones via an umbrella, because closing and reopening a company around each contract is costly. A contractor who is permanently inside, with no realistic prospect of outside work, may find the company is now pure overhead and that closure, potentially through a members' voluntary liquidation, releases the retained funds tax-efficiently. The trade-offs on the inside route, including how umbrella employment compares with a PSC operating the deemed payment rules, are worked through in the inside IR35 guide, and a specialist accountant offering umbrella support for inside-IR35 contractors can vet a specific umbrella's payslips before you commit.

What agencies must now do in practice

For agencies, the regime converts umbrella selection from a commercial preference into a balance-sheet risk. Since liability attaches without fault, the only protections are choosing umbrellas that pay, and contracting for recourse if they do not. In practice, due diligence programmes built since the announcement share a common shape:

• A short preferred supplier list, with every umbrella vetted on ownership, accreditation, financial standing and payroll history before workers are routed to it.
• Ongoing verification rather than onboarding checks alone: sample payslips reconciled against assignment rates, and evidence that the PAYE shown was actually reported and paid to HMRC.
• Mapping of the full supply chain, since an unknown intermediary between agency and umbrella is where mini-umbrella fraud hides.
• Contractual indemnities, payment terms and exit rights that let the agency pull workers quickly when verification fails.
• For some agencies, abandoning the model: taking workers onto their own payroll or operating PAYE on umbrella workers' pay directly, so the obligation never leaves their control.

End clients that engage umbrella workers without a UK agency in the chain need the same machinery, because in that configuration the recovery target is them. A client in that position should know which umbrellas its contingent workers are employed by, and should be asking for the same payslip and payment evidence an agency would.

What workers should do now

The regime protects you from an umbrella stealing tax you already suffered, but it does not file your returns, fix a wrong tax code or unwind a scheme you joined. Keep every payslip and the key information document for each assignment. Reconcile your payslips against your HMRC record at least once a year. If your agency moves you to a new umbrella, run the same checks again from the start, since forced migrations are a common moment for scheme operators to enter a chain. And if a past arrangement now looks like disguised remuneration, take advice before HMRC writes first: disclosure on your initiative is treated very differently from an assessment, and penalties scale from nothing where reasonable care was taken to 30% of the lost tax for carelessness and more for deliberate behaviour.

A specialist accountant can audit an umbrella's illustration and live payslips, confirm the deductions reconcile to the assignment rate, and flag scheme indicators before you are committed. For contractors weighing the umbrella route against keeping a company, that review is now a standard part of taking any inside-IR35 role.