The umbrella company tax rules that came into force this April are the sort of policy change that nobody outside payroll and finance notices until it lands on their desk. If you run a small tech business and any of your contractors work through an umbrella, this one is worth understanding properly, because the liability for getting the tax wrong no longer sits neatly with the umbrella. It can now land on the recruitment agency, or on you.
I have used contractors on and off for years across CampSuite and various client projects, and umbrella companies have always been the quiet, boring bit of the supply chain that nobody thinks about until something goes wrong. This year something changed, and it is worth every small business owner actually reading the detail rather than assuming their agency has it covered.
What Actually Changed in April
Before this year, if an umbrella company underpaid PAYE tax or National Insurance on a worker's pay, and plenty of dodgy umbrellas have done exactly that through mini umbrella schemes and disguised remuneration setups, HMRC's practical route to recovering the money was largely limited to chasing the umbrella itself. Umbrellas set up specifically to disappear with the liability were a real and recurring problem, and the workers caught up in it often had no idea anything was wrong until a tax bill turned up years later.
The new rules move the PAYE obligation up the supply chain. Where a recruitment agency places the worker with an umbrella, the agency now carries the responsibility for making sure PAYE is operated correctly on that umbrella's payments. Where there is no agency in the chain and the end client engages the umbrella directly, that responsibility sits with the client. In practice, that means you.
Why This Matters if You Use Contractors Through an Umbrella
You Cannot Just Assume the Agency Has Sorted It
If you engage contractors through a recruitment agency and the agency places them with an umbrella company, the legal responsibility for PAYE compliance now sits with that agency. That sounds like good news for the small business at the end of the chain, and to a point it is. But it only protects you if the agency you are using is actually reputable and is genuinely doing the due diligence on the umbrellas it works with.
A cheap agency offering rates that look too good tends to be cheap for a reason, and that reason is sometimes a payroll arrangement that quietly skims tax and National Insurance that was never properly paid. The rules give HMRC a much clearer route to recovering that money from the agency now, but a badly run agency going under or disappearing still leaves a mess that can end up affecting your project either way.
Direct Engagements Carry the Risk Straight to You
Where things get sharper for small tech businesses is when there is no agency involved at all, and you have engaged a worker directly through an umbrella company. In that scenario the compliance responsibility sits with your business. If the umbrella has been running an underpayment scheme, HMRC can now come to you for the shortfall rather than chasing an umbrella that may have folded and reopened under a different name three times already.
This is exactly the kind of supply chain risk I wrote about when the employer National Insurance rise landed on small businesses, another example of the compliance burden and the financial risk both drifting towards whoever is easiest for HMRC to find, rather than whoever actually caused the problem.
What This Means in Practice for a Small Tech Business
If you use contractors through umbrella companies, whether directly or via an agency, this is worth an actual conversation rather than an assumption. Ask your agency which umbrella companies they work with and what due diligence they run on them. A good agency will have a clear answer. A vague one is a warning sign.
If you engage umbrella workers directly with no agency in the chain, get proper advice before you carry on as normal. The compliance burden that used to sit somewhere else in the supply chain may now sit with you, and that is not something to discover after HMRC has already opened an enquiry.
Keep records of who you have engaged, through which route, and what checks were done. This mirrors the same lesson from IR35, where the businesses that came through the changes with the least pain were the ones who treated compliance as an ongoing job rather than a box ticked once and forgotten.
My Honest Take
I understand why HMRC wanted this change. Umbrella companies running underpayment schemes have been a genuine problem for years, and workers were often the ones left holding an unexpected tax bill through no fault of their own. Moving the liability closer to the top of the supply chain does make it harder for dodgy operators to hide.
What I do not love is how, once again, the compliance burden lands hardest on small businesses without the in house payroll and legal teams to absorb it quietly. A large enterprise has people whose job is precisely this. A five person software company does not, and yet we are now expected to run the same level of due diligence on our supply chain as a business fifty times our size.
None of this means avoid contractors or umbrella companies altogether. It means treat the choice of agency and umbrella the same way you would treat any other supplier decision that carries real financial risk if you get it wrong. Do the checking up front, and revisit it periodically rather than setting it up once and forgetting about it for three years.
If you are working through how contractor engagements fit into your business, whether that is umbrella arrangements, IR35 status, or structuring a team around a mix of employees and contractors, that is exactly the kind of practical decision I help founders work through as part of consulting. Getting the structure right before you commit is the same thinking that runs through The 28 Day Startup, because a compliance problem discovered two years later is always more expensive than one avoided at the start.
