From 6 April 2026, recruitment agencies and, in some cases, end‑clients become jointly and severally liable for Class 1 National Insurance when workers are supplied through umbrella companies. The Social Security Contributions (Umbrella Companies) Regulations 2026 were laid on 1 April and come into force today. (statutoryinstruments.parliament.uk)

This shift sits alongside income tax changes inserting a new Chapter 11 into ITEPA 2003 so that PAYE risk also sits with the agency or, where there is no agency, the end‑client. HMRC’s policy paper estimates around 30,000 agencies and 400 umbrella firms will be affected, with roughly 700,000 workers engaged this way. It also puts one‑off familiarisation costs at £9.9m and ongoing annual due‑diligence costs at £21.7m across the sector. (gov.uk)

In practical terms, HMRC can pursue an agency first for payroll taxes a non‑compliant umbrella fails to remit; where there is no agency in the chain, the end‑client is responsible. Where the counterparty is outside the UK, liability can move to the UK‑based party closest to the client, so offshoring risk won’t shield the chain. (gov.uk)

To close down re‑labelling and artificial structures, Regulation 5 creates a ‘purported umbrella company’ concept. If arrangements present as umbrella employment but earnings aren’t being treated as such, the worker is treated as employed by the purported umbrella and all relevant remuneration is treated as earnings for National Insurance-thereby engaging joint and several liability up the chain. (changeflow.com)

The rules also ensure a liable UK entity exists when umbrellas or intermediaries sit offshore. Amendments define a ‘foreign purported umbrella company’ and, in those cases, deem the UK end‑client or the UK agency to be the liable party for National Insurance on qualifying payments. (changeflow.com)

There is a further interaction with the off‑payroll framework. The instrument amends the Intermediaries Regulations so that fraudulent paperwork cannot be used to suggest the umbrella rules apply-a clarification designed to stop debt‑transfer rules being blunted by fabricated evidence. (changeflow.com)

For finance directors, the takeaway is risk concentration. Liability is joint and several: HMRC can choose whom to approach and does not need to exhaust recovery against the umbrella first. That shifts the commercial calculus for PSLs, factoring and margins; agencies that acted as gatekeepers now carry tax risk as well as reputational risk. Some businesses will decide to bring payroll in‑house to assert control and reduce counterparty exposure. (gov.uk)

The numbers are not trivial. HMRC’s own assessment points to a material uplift in due‑diligence activity, with one‑off costs to train staff and embed checks, plus ongoing monitoring costs each year. In practice, that means mapping every labour supply chain, testing residency of counterparties, and insisting on live evidence of remittances-such as RTI submissions and reconciliations-before releasing funds. (gov.uk)

Consider a typical regional recruiter supplying 120 contractors via two umbrellas. If one umbrella withholds deductions but fails to pay HMRC, the agency is exposed for the shortfall and statutory interest; where no agency exists in the chain, the end‑client carries that exposure. Under the new rules HMRC can act quickly, so cash buffers, payment sequencing, and contract clauses on escrow or ‘proof‑of‑payment before margin’ become more than hygiene details. (gov.uk)

For contractors and hiring managers, the headline is stability. The government’s stated objective is to reduce non‑compliance and protect workers from surprise tax bills created by unscrupulous operators, and to restore a level playing field for compliant firms. Expect tighter umbrella onboarding, fewer ‘non‑taxable adjustments’, and more agencies asking to see payslip data in real time. (gov.uk)

Key dates matter. The instrument was laid on 1 April 2026 and applies from 6 April 2026. If you rely on umbrella models for seasonal peaks, today is the point at which due‑diligence, documentation trails and cash controls need to be demonstrably in place-because the liability has arrived. (statutoryinstruments.parliament.uk)