From 2026, HMRC can impose penalties directly on the promoters of tax-avoidance schemes without first fighting each case through the tribunal, and a new criminal offence applies for failing to disclose a scheme. For anyone operating in or supplying the umbrella market, HMRC scheme-promoter penalties change the calculation entirely: the enforcement door that used to open slowly now opens fast, and it reaches further than the scheme itself.
This matters because the umbrella sector has long been where disguised remuneration and loan-charge-style arrangements find a home. FCSA’s position is unchanged and unambiguous: compliant payroll is PAYE payroll, and any “take-home enhancement” that undercuts it will eventually generate a tax bill someone has to pay.
What Has Actually Changed?
HMRC’s new powers let it act against promoters directly rather than fighting each case through the First-tier Tribunal first. That removes the delay that promoters have relied on for years.
The key changes are:
- Direct penalties, issued by HMRC without a prior tribunal ruling, up to £1,000,000 plus £5,000 per participant under section 162 of the Finance Act 2026. HMRC must notify the promoter and allow 30 days for representations before the penalty is imposed, but it no longer needs a tribunal ruling first.
- A new criminal offence for failing to disclose an avoidance scheme under the Disclosure of Tax Avoidance Schemes (DOTAS) regime.
- A wider net that captures not only scheme designers but the payroll software providers, brokers, banks, insurers and platforms that facilitate non-compliant arrangements, backed by new tools such as Universal Stop Notices and Promoter Action Notices.
That third point is the significant one. Enforcement no longer stops at the entity marketing the scheme. If your business sits in the chain that makes a non-compliant arrangement work, you are within reach.
Why This Closes the Rebrand Loophole
The umbrella market’s oldest trick is the phoenix: shut down a non-compliant company the moment HMRC gets close, and restart under a new name with the same model and the same clients.
Direct penalties and criminal liability make that far harder going forward — but the exposure was already tightening under the existing rules. In April 2026 the First-tier Tribunal imposed the statutory maximum penalty of £1,178,800 on Tailored UK Services Limited for a deliberate failure to notify an “enhanced umbrella scheme” under DOTAS, and a joint and several liability notice was served on a director despite the company having entered liquidation. That penalty was issued through the tribunal under the long-standing DOTAS failure-to-notify provisions — precisely the slower route that the 2026 direct-penalty powers are designed to accelerate. The lesson stands regardless of which regime bites: a new trading name does not reset personal exposure.
For recruiters, the point is practical. A provider that has rebranded more than once, or whose directors reappear behind fresh entities, is not a provider you want in your supply chain in 2026. The paperwork may look tidy; the risk history does not.
What Recruitment Agencies and End Clients Should Do Now
The promoter crackdown lands on top of the joint and several liability rules that took effect on 6 April 2026, under which the agency that supplies the worker — or, where there is no agency, the end client — becomes liable for PAYE and National Insurance when an umbrella company fails to account for it. Read together, the message from government is consistent: the supply chain is expected to police itself.
Agencies and end clients should:
- Review every umbrella on the preferred supplier list against its ownership and trading history, not only its current compliance statements.
- Treat marketing claims of enhanced take-home pay as a red flag, not a selling point.
- Document the due diligence behind each supplier decision, so that a defensible record exists before any compliance check, not after one.
- Confirm that payroll runs through PAYE with clear, itemised payslips and no unexplained deductions.
Self-declarations from providers are no longer enough on their own. HMRC’s data-matching cross-references PAYE, self-assessment and company records, and the Fair Work Agency — launched in April 2026 — operates on the same intelligence-led model. Where a scheme surfaces, “the umbrella told us it was compliant” carries little weight.
FCSA Accreditation and Supply-Chain Confidence
FCSA assessment tests a provider’s payroll, contractual arrangements and financial standing against a published standard. It is an assessment, not a rubber stamp, and it is repeated. That is the assurance the 2026 enforcement regime demands.
An FCSA Member has demonstrated that its payroll operates on PAYE, that deductions are lawful and transparent, and that its structure does not depend on the arrangements HMRC is now empowered to prosecute. For an agency carrying joint and several liability, that evidence is the difference between a documented, defensible supply chain and a PAYE bill it did not budget for.
The promoters of avoidance schemes have spent years relying on delay and reinvention. Both of those advantages are being stripped away. The businesses that survive 2026 will be the ones that never needed them.
The Bottom Line
HMRC’s direct penalty powers mark the end of the slow-enforcement era. Promoters, facilitators and the platforms that enable non-compliance are all now in scope, and criminal charges are on the table for non-disclosure. Combined with joint and several liability, the compliant route is now the only one that survives scrutiny.
Agencies and end clients that want certainty should build their supply chains from providers whose compliance is independently tested. Check the FCSA directory of members to confirm a provider’s accredited status, and read the FCSA Charter and Codes to understand what FCSA Accreditation requires before you commit a worker to any payroll arrangement.
