UK Umbrella Reform 2026: What End Clients and Agencies Need to Do Now It’s Live

The UK umbrella reform took effect on 6 April 2026. Every competing guide you will find was written before that date, explaining what was about to happen. This one is different. The rules are now live, liability is accruing, and this is your post-implementation action plan.

For years, HMRC’s approach to labour market enforcement felt reactive – pursuing small entities that disappeared before liabilities could be recovered. As Shaziya Kermani, Associate Director at Osborne Clarke, described it on the CXC podcast: “HMRC was playing whack-a-mole. Every time umbrella companies would come up with something new, another avoidance model would just pop up. And it was looking to be a struggle for them to keep up.”

The new Joint and Several Liability regime ends that approach. Instead of focusing on the smallest players, HMRC is placing accountability higher up the supply chain. Agencies and end clients with financial substance now sit firmly within scope.

This is a structural reset. And it requires an organisational response to match.

What actually changed under the UK umbrella reform on 6 April 2026?

Before getting into what your organisation needs to do, it is worth being precise about scope. This reform is specifically a tax compliance measure under Chapter 11 of ITEPA 2003. It is not a full regulatory overhaul of umbrella employment models, and it is separate from broader employment rights reforms expected under wider legislation.

Umbrella companies can still operate legitimate PAYE payroll models where compliant. The reform does not end umbrella working – it increases the financial risk of using non-compliant providers.

What changed is this: HMRC is targeting an estimated £1 billion annual tax gap linked to non-compliant umbrella structures, including:

• Mini-umbrella company (MUC) structures exploiting NIC reliefs
• Disguised remuneration schemes using loans, credits or inflated take-home pay
• Artificial pay models where workers are treated as employed for PAYE but self-employed for expenses
• Gross payment structures presented as umbrella arrangements

As Kermani explained: “The idea of the new umbrella reform legislation is to make it as inexpensive and simple as possible for HMRC to recover these unpaid taxes. It also provides HMRC with mechanisms to go after upstream parties – another issue they’ve historically faced is that umbrella companies don’t tend to hold much value within them. So when they pursue them, there’s very little to recover against.”

To close these avoidance models, the reform shifts PAYE accountability upstream. Responsibility now sits with the “relevant party” in the supply chain – typically the agency, or the end client where no qualifying agency exists – rather than relying solely on the umbrella company to account for PAYE correctly. Where there is no agency, responsibility passes to the end client. Agencies and end clients may be jointly and severally liable depending on their position in the supply chain if an umbrella company fails to account for PAYE and NICs correctly.

Strict liability under the 2026 umbrella reform: what it means for your organisation

The introduction of strict liability is what makes this reform fundamentally different from IR35 – and from every previous piece of legislation in this space.

Under IR35, reasonable care can reduce penalties. Under the Criminal Finances Act, due diligence can form part of a statutory defence. Under the 2026 umbrella reform, the regime operates on a strict liability basis, meaning liability can arise regardless of fault and traditional “reasonable care” defences are not available.

Kermani was unambiguous on this point: “This is the first time we’ve seen any legislation in this space where there’s absolutely no defence. Even with the agency worker tax reforms in 2014, if you’re provided with fraudulent documents, you could argue you’ve got a defence. Here, there’s nothing.”

She explained why HMRC took this approach: “HMRC got so caught up in their whack-a-mole situation – they would go after a party and the party would be like Teflon. The umbrella companies would say ‘I was deceived’ and HMRC was struggling to pin any of it down on anyone. This legislation means they don’t have to get engaged in that slippery situation anymore.”

If PAYE or NICs go unpaid, HMRC may recover the full amount from:

• The top agency in the contractual chain
• The end client, where no qualifying agency sits between them, or where structures are offshore or connected

HMRC does not need to exhaust recovery attempts against the umbrella first. It has full discretion over which party in the chain it chooses to pursue. As Kermani put it: “Rather than have to expend energy trying to recover taxes from an entity that may have little to no money to recover from, it’s keeping its options open to recover from the bigger pockets.”

If an umbrella provides false payslips or incorrect remittance confirmations, liability may still transfer upstream once a tax default is established. This creates potential balance sheet exposure that cannot be managed through contracts alone.

“A certificate on file is no longer enough. From 2026, organisations need clear visibility across their contingent workforce supply chain – understanding how each entity is structured, how workers are classified, and whether PAYE and NICs are genuinely being remitted.”

Download the CXC UK Umbrella Reform 2026 Guide

Who is the “relevant party” under the UK umbrella reform – and the purported umbrella trap

Under the new legislation, HMRC introduces the concept of a “relevant party” – the organisation that sits at the top of the labour supply chain and contracts with the end client. If an umbrella company fails to account for PAYE correctly, HMRC may transfer the unpaid tax debt to the relevant party through the joint and several liability mechanism.

The 2026 rules also widen the definition of what counts as an umbrella company. The intention is to close off structures designed to sit just outside existing rules. If an organisation appears to act as an employer in the chain, it may fall within scope regardless of how it describes its services.

Entities that may be caught include:

• Traditional umbrella companies
• Consultancies and MSPs employing workers as part of a managed service
• Staffing agencies using contracts of service
• “Purported umbrellas” – arrangements that appear compliant but fail PAYE obligations

The purported umbrella category deserves particular attention. It includes:

• Disguised PSC arrangements presented as PAYE
• Material interest structures where workers hold a financial interest in the employing entity
• Payroll-only models where the company did not source the assignment

Kermani highlighted an important nuance for end clients who assume they are protected by having an agency in their chain: “Where the agency is offshore, or connected to the umbrella company, even where there’s an agency in the supply chain, the end user may end up jointly and severally liable. On this basis, end users will want to look more closely at their contingent workers’ supply chains just to ensure there are no gremlins they’re not aware of.”

Certain arrangements remain outside scope: genuine agency payroll already covered by existing rules, compliant PSCs under IR35, and legitimate CIS subcontractors. But once an entity falls within the definition, strict financial exposure follows.

The honest reality of due diligence under the 2026 umbrella reform

Every guide on this topic will tell you to do due diligence. This one will tell you what due diligence actually achieves – and what it does not.

Kermani was direct: “Due diligence on umbrella companies is still critically important – it does still weed out the bad actors. While it’s no defence if something goes wrong, your due diligence makes it much less likely that something is going to go wrong. Additionally, there are reasons other than employment tax liability that make it important to check your suppliers – the Criminal Finances Act still applies, and the defence to that offence is undertaking reasonable checks.”

However, she was equally clear about the limits: “No accreditation is completely risk proof. You still can be jointly and severally liable if that accreditation fails. It’s an additional tool. It helps build your defence and make you feel safer, but it’s not going to help if they come knocking and it’s all gone wrong in spite of that.”

One specific area Kermani flagged that is often overlooked: real-time remittance verification. Payslip compliance checks confirm deductions have been made – they do not confirm that the corresponding payments have actually reached HMRC. As she noted: “None of the reasons for tax default would be uncovered by payslip or payroll compliance checks alone.” New accreditation platforms are emerging that check remittance in real time, and compliant umbrella companies are expected to adopt these.

Practical checks that actually matter:

• Evidence of real-time HMRC remittance – not just deductions shown on payslips. Payslip deductions and actual remittance to HMRC are not the same thing
• Clear payslip breakdown of taxable pay, margin and holiday pay – unusual structures or unexplained uplifts are red flags
• Immediate review of any off-payroll credits within the pay structure
• Alignment between contractual terms and actual working practices
• National Minimum Wage compliance after all umbrella deductions
• Modern Slavery checks across the supply chain

Accreditations such as FCSA or Professional Passport indicate standards, but they are not recognised in legislation and do not limit liability. Insurance products are entering the market, but as Kermani cautioned: “With any insurance product, while it may seem preferable, the key will be to check the fine print and the cover offered. Will this in fact provide enough cover, and will that cover be for the right things?”

Contractual warranties from umbrella companies are not sufficient protection. The focus must be on prevention – not reliance on paper safeguards.

The four-year HMRC window: why silence is not safety after the 2026 umbrella reform

HMRC typically has a four-year limitation period (and longer in cases involving carelessness or deliberate default). Liabilities can accrue quietly from 6 April 2026 onward, even if enforcement activity appears limited at first.

Kermani flagged this as an immediate concern: “HMRC’s four-year limitation period for PAYE is coming up to an end for earlier periods. We’re expecting to see quite a big explosion of enforcement activity. Silence should not be mistaken for safety.”

Historical enforcement patterns reinforce this. As Kermani observed from her firm’s experience: “There’s been an increase of activity going on in the background. We think the reason we haven’t seen anything formal yet is they’re still not quite at the end of their limitation period. We’re expecting to see quite a big explosion of activity – and people who provide insurance products in this area concur that’s what they’re expecting to see as well.”

The practical implication: records and governance structures you put in place today will be the evidence you rely on in four years’ time. Start the paper trail immediately.

The market impact of the UK umbrella reform: what this means commercially

The reform is already reshaping the contingent workforce market in three significant ways.

Provider consolidation. As Kermani explained: “End clients may end up prohibiting the use of umbrella companies entirely, or providing a small list of umbrella companies they will allow – likely the larger, very easily demonstrably compliant providers. A lot of the smaller umbrella companies are likely to fall away because of this.” Financial strength, transparency and real-time payroll verification are becoming deciding factors.

Agency funding pressure. Many staffing firms rely on umbrella-related funding models. Kermani highlighted a specific risk: “With the joint and several liability in the background, it may well be that asset-based lenders will be unwilling to lend to agencies and MSPs if they are likely to become jointly and severally liable for the umbrella company tax compliance.” Where potential tax risk cannot be quantified, funding terms may tighten.

Contractor behaviour shifts. Kermani noted a potential flight to PSC arrangements: “We anticipate an increase in PSC arrangements. The umbrella reform – combined with the April 2025 employer NI increase and the absence of a fraudulent documents defence – may make PSC engagements look more attractive to some contractors.” However, she was clear this is not a straightforward solution: “IR35 is still there and is still being enforced, even though it’s not visibly being enforced, it is being enforced. Replacing one compliance issue with another is not a solution.”

Connor Heaney, President EMEA at CXC, draws a direct parallel with the IR35 private sector reforms: “A bit like IR35 when we were talking about this in the private sector, it’s never too late to start and it’s never too late to prepare – but you’ve got to start now.”

Your 90-day UK umbrella reform action plan

This is the section every pre-April guide was missing. The rules are live. Here is what your organisation should be doing right now.

1. Map your supply chain end to end

Identify every intermediary between your organisation and each worker. Confirm location, ownership links and contractual relationships. Kermani’s advice was unambiguous: “End users really need to get on top of who’s in their supply chain, how big it is, what their risks are.” If you cannot explain who employs your workers, how they are paid, and who sits between your organisation and the employing entity – that is your first and most urgent risk.

2. Audit your umbrella arrangements

Review all arrangements involving umbrella companies in your supply chain. Request confirmation from all agencies that their umbrella partners are FCSA or Professional Passport accredited – and ask for real-time remittance evidence, not just certificates or payslips.

3. Move beyond standard contract indemnities

Review agency agreements to ensure they include:

• Explicit PAYE and NIC compliance warranties
• Enforceable audit and information rights covering RTI submissions and remittance evidence
• Disclosure obligations around umbrella use
• Step-in and termination rights that are commercially realistic

As Kermani noted: “There may also be a renegotiating of contracts to ensure the protections that they have are as tight as they can be.” Passive indemnities are not sufficient under a strict liability regime.

4. Check for purported umbrella exposure

Review any arrangement where a third party employs your workers, particularly payroll-only models, referred-worker arrangements, and offshore or connected entities. If the structure looks like an umbrella, HMRC may treat it as one.

5. Assign board-level ownership

Umbrella governance can no longer sit with procurement or HR alone. If your board has not yet discussed potential exposure with finance and treasury teams, or considered the impact on lending arrangements or ABL facilities, that conversation needs to happen now.

6. Establish ongoing governance – not a one-off project

Compliance in 2026 will not be achieved through a single review. It requires:

• Centralised reporting across your contingent workforce
• Monitoring for structural red flags
• Periodic supplier recertification (at minimum annually)
• Clear escalation procedures for anomalies

7. Document everything from today

The four-year look-back period means records created now will matter in 2028 and beyond. Every due diligence check, every supplier communication, every governance decision should be documented and retained.

UK umbrella reform compliance readiness: how does your organisation score?

Use these questions to assess your current position. If several are unclear or unanswered, the new regime presents material risk.

Supply chain visibility

• Have you mapped every intermediary in your UK contingent workforce supply chain?
• Do you know which entity employs each worker?
• Do you understand whether your organisation could be treated as the “relevant party”?
• Have you identified any payroll-only or referred-worker arrangements?
• Have you identified any offshore or connected entities?

Structural risk

• Do you understand whether any supplier could fall within the “purported umbrella” definition?
• Have you confirmed whether any workers hold a material interest in employing entities?

Contractual protections

• Do contracts include explicit PAYE and NIC compliance warranties?
• Do you have audit and information rights covering RTI submissions and remittance evidence?
• Are disclosure obligations around umbrella use clear?
• Are step-in and termination rights enforceable?

Payroll transparency

• Do you require evidence of actual HMRC remittance – not just payslip deductions?
• Do you monitor National Minimum Wage compliance after all umbrella deductions?
• Do you have defined escalation procedures for anomalies?

Governance

• Does your board understand the balance sheet implications of strict liability?
• Have you discussed potential exposure with finance and treasury teams?
• Have you considered the impact on lending arrangements or ABL facilities?
• Do you review supplier compliance at least annually?
• Do you have a formal policy on umbrella company use?
• Do you operate an approved supplier list or clearly documented prohibition?

Download the full UK Umbrella Reform 2026 Compliance Readiness Checklist for the complete board-ready framework.

Frequently asked questions about the UK umbrella reform 2026

How CXC helps organisations manage UK umbrella reform 2026 exposure

The organisations that manage this well will be those with clear supply chain visibility, disciplined governance and properly structured MSP models.

Where CXC acts as your MSP, we sit between you and the rest of the labour supply chain as the relevant contracting party – provided the structure is maintained and there is no connected relationship with umbrella providers. We design and maintain compliant MSP structures, ensure contractual clarity between client, agency and umbrella, and remove offshore or connected risks where identified.

We apply enhanced onboarding and due diligence standards across agencies and umbrella providers – reviewing employing entity substance and UK presence, assessing payroll processes and real-time remittance evidence, and identifying payroll-only or referred-worker arrangements that may create purported umbrella risk.

We also help organisations define a clear policy on umbrella company use that reflects their risk appetite, sector requirements and international footprint. For global businesses operating across EMEA, North America and APAC, consistency of approach matters as much as local compliance.

Compliance in 2026 is not a one-off project. We provide centralised reporting across contingent workforces, monitoring for structural red flags, periodic supplier recertification and clear escalation processes when issues arise.

As Shaziya Kermani summarised the broader challenge: “The organisations that win will be those that treat contingent talent as part of their single workforce strategy – building models that are flexible, legally robust and fair in practice, not just on paper. More blended, more regulated, and more ethically charged.”

The goal is simple: turn supply chain risk into something visible and manageable, rather than something that appears years later as a balance sheet shock.

Three resources to act on now

• Download the UK Umbrella Reform 2026 Compliance Readiness Checklist – the structured risk review framework for senior decision-makers
• Watch the on-demand webinar – Connor Heaney and Shaziya Kermani, Associate Director at Osborne Clarke, on the real-world implications of strict liability
• Book a free consultation with CXC’s compliance team – to assess your organisation’s specific exposure and next steps

Also relevant: the April 2026 umbrella PAYE changes run in parallel with the IR35 small company threshold changes. If your organisation is also reviewing its IR35 obligations, see our separate guide: IR35 in 2026: What the new small company thresholds mean for your contractor workforce.

Share to:

About CXC

---

At CXC, we want to help you grow your business with flexible, contingent talent. But we also understand that managing a contingent workforce can be complicated, costly and time-consuming. Through our MSP solution, we can help you to fulfil all of your contingent hiring needs, including temp employees, independent contractors and SOW workers. And if your needs change? No problem. Our flexible solution is designed to scale up and down to match our clients’ requirements.

Speak to our team

Share