Key takeaways

  • Since 6 April 2026, when an umbrella company in a UK labour supply chain fails to remit PAYE and NICs, other parties in that chain are jointly and severally liable for the shortfall.
  • The recruitment agency closest to the end client usually carries that liability. If no agency sits between the end client and the umbrella, it falls on the end client.
  • You can't hand this off to the umbrella anymore. HMRC now expects end clients and agencies to show they actively oversee the supply chain.

Umbrella companies employ a large share of the UK's contingent workers. The worker is employed by the umbrella, which runs PAYE, and the umbrella invoices an agency or the end client. The model works when the umbrella is compliant. When it isn't, the tax gap has historically been HMRC's problem to chase. Tax-avoidance schemes disguised as umbrella payroll have been among HMRC's most persistent enforcement targets.

From 6 April 2026 the burden moves. The new rules make umbrella companies and other "relevant parties" in the labour supply chain jointly and severally liable for PAYE that the umbrella should have remitted and didn't.

Who carries the exposure

  • Agency-led chains. Where a recruitment agency supplies workers through an umbrella, the agency with the contract with the end client is typically the party that becomes liable.
  • Direct chains. Where the end client contracts with the umbrella directly, with no intermediate agency, liability can pass straight to the end client.
  • Offshore and multi-tier chains. Offshore intermediaries and long sub-supplier chains are exactly where HMRC expects non-compliance. Mapping who sits where in the chain is the first control, not the last.

Six controls every UK contingent program should have now

  1. Map every labour supply chain end to end, including offshore suppliers and sub-tier umbrellas. You can't manage a liability you can't see.
  2. Tighten supplier due diligence on PAYE accuracy and Real Time Information (RTI) compliance, not just onboarding paperwork.
  3. Monitor continuously. Sample-check payslips against assignment rates and look for tell-tale deductions and "loans."
  4. Update contracts to require compliance attestations, grant audit rights, and allow removal of non-compliant umbrellas.
  5. Reconsider the engagement model. For some populations, agency PAYE or an Employer of Record removes the umbrella layer entirely.
  6. Train hiring managers and procurement. Rogue umbrellas get into programs through the side door when a manager engages a contractor outside the program.

How IR35 fits

The umbrella reform sits alongside the off-payroll working rules. Since April 2021, medium and large private-sector end clients have been responsible for deciding whether a contractor working through a personal service company falls inside IR35, and for issuing a Status Determination Statement. Many "inside IR35" workers are then engaged through umbrellas. That puts both regimes on the same engagements, and the end client now has a stake in each.

How Elevated Resources handles it

Our UK programs combine three layers. IC Compliance handles IR35 determinations with CEST logic and documented Status Determination Statements. Continuous supplier credentialing in Altitude Workspace covers RTI and PAYE attestations, insurance, and audit-right tracking across the approved supplier panel. And our UK Employer of Record runs direct PAYE, NICs, and pension auto-enrolment for populations where removing the umbrella tier is the cleaner answer. It's one program, one audit trail, and one steady-state team.

This article is general information, current as of its publication date. It is not tax or legal advice. Consult a UK tax adviser about your specific supply chain. Sources: HMRC guidance on the April 2026 umbrella company legislation and Grant Thornton UK analysis.