How to verify a compliant umbrella company: FCSA, SafeRec and HMRC checks

Verification is a different job from selection

There is a practical gap between choosing an umbrella that looks compliant and confirming that the one you actually use is operating a compliant payroll every pay run. Our companion guide, how to choose a compliant umbrella company, sets out the selection framework: accreditation, a reconcilable Key Information Document, the take-home red flag and a transparent margin. This page picks up where selection ends. It is the verification toolkit: the specific, externally checkable evidence that proves an umbrella is doing what it claims, rather than simply saying it does.

The distinction matters because an umbrella can present well on its marketing, quote a plausible margin, and still run a non-compliant payroll behind the scenes, or lapse from an accreditation it still advertises, or sit within a group that HMRC has named. Verification does not take the umbrella's word for anything. Every check below relies on a source you control: a live public register, an independent payslip audit, HMRC's own published lists, your own tax record, and the Companies House register. If an umbrella passes selection but fails any of these verification checks, the verification result wins.

Since 6 April 2026, this has become materially more important. Finance Act 2026 introduced joint and several liability, making the recruitment agency (or the end client where there is no agency) liable alongside the umbrella for any PAYE and NIC the umbrella fails to remit. Agencies have responded by tightening their preferred-supplier lists, but the ultimate exposure to an avoidance scheme still lands on the worker, so your own verification remains the decisive safeguard. The legislative detail of that reform is covered in our umbrella companies explained guide; this page assumes it and focuses on the checks.

What "compliant" actually means for an umbrella

Before verifying compliance it helps to be precise about what is being verified. A compliant umbrella does a small number of unglamorous things correctly and consistently:

• It employs you under a genuine overarching contract of employment and is your legal employer.
• It receives the assignment rate and deducts only legitimate employer-side costs from it: employer NIC at 15% on earnings above the £5,000 secondary threshold (2026/27), the Apprenticeship Levy at 0.5% of the pay bill above its allowance, and a stated margin.
• It pays you a gross salary from the remainder and operates PAYE and employee NIC on it, at 8% between £12,570 and £50,270 then 2% above, with income tax at the standard rUK bands.
• It reports each pay run to HMRC under Real Time Information (RTI) and remits the tax and NIC it deducts.
• It gives you a Key Information Document before you start, an itemised payslip each period, a P60 at year end, and genuinely funds your statutory holiday pay.

Non-compliance is any departure from that, but the departures that cause real damage are the ones that route part of your pay outside PAYE (loans, advances, grants, annuities, trust distributions) or that fragment the employer to abuse allowances (mini-umbrella structures). Verification is about catching those, and the tools below are ordered from the quickest external check to the deepest.

Check one: the FCSA and Professional Passport registers

The two independent accreditation bodies that audit UK umbrella companies are the Freelancer and Contractor Services Association (FCSA) and Professional Passport. Both publish a live member register, and verifying against the register (not the umbrella's own claim) is the first and fastest check.

How to verify on the FCSA register

1. Go directly to fcsa.org.uk and open the member directory. Do not follow a link from the umbrella's own site; navigate there yourself.
2. Search for the umbrella's exact registered company name, which you can confirm on the Companies House register, rather than a trading or brand name. Non-compliant operators sometimes trade under a name that resembles an accredited firm.
3. Confirm the entry shows current full membership, not affiliate, provisional or a former-member note. Full membership is the level that reflects the substantive independent accountancy, legal and tax audit.
4. Do this on the day you are deciding. Accreditation can lapse, and a logo on the umbrella's website can outlast the membership behind it.

Professional Passport

Professional Passport operates a comparable independent assessment and publishes its own register at professionalpassport.com. Some agencies specify one mark, some accept either; in verification terms the process is identical. Search the exact company name, confirm current assessed status, check on the day.

What accreditation covers and what it does not is worth being honest about. Accreditation confirms the umbrella passed an audit against a recognised standard at a point in time. It is a strong signal, but it is a snapshot renewed annually, not a guarantee that this week's payroll is correct. That limitation is exactly why the next two checks exist.

Check two: a SafeRec payslip audit

SafeRec addresses the snapshot limitation of annual accreditation. It is an independent auditing technology that checks every individual payslip an umbrella issues against the umbrella's own RTI submission to HMRC and its reconciliation of the assignment rate. Rather than confirming that an umbrella was compliant when its auditor last visited, it confirms that the specific payslip in front of you reconciles to what the umbrella actually reported and remitted.

For verification purposes this is a stronger real-time signal than an accreditation logo, because it operates on the live pay run rather than the annual audit cycle. Practically:

• If your umbrella is SafeRec certified, you can typically obtain an audit report confirming that your own payslip reconciles: the assignment rate, the employer-side deductions, the gross salary, and the PAYE and NIC all tie out to the RTI submission.
• A growing number of agencies now require SafeRec certification on their preferred-supplier lists precisely because it reduces their joint and several liability exposure under the April 2026 reform.
• SafeRec certification does not replace the register check: use both. Accreditation covers the umbrella as an employer; SafeRec covers your individual payslip.

SafeRec is not the only technology in this space, and certification is not yet universal, so its absence is not by itself a red flag. Its presence, however, is strong positive evidence, and a certified umbrella that will not produce your individual audit report on request is worth questioning.

Check three: HMRC's named tax-avoidance scheme list

HMRC publishes, on gov.uk, a named list of tax-avoidance schemes, their promoters, and enablers and suppliers. It sits alongside the HMRC Spotlight briefings, which describe specific arrangements HMRC considers to be avoidance, including several aimed squarely at the umbrella and disguised-remuneration market.

To verify against it:

1. Search HMRC's named-scheme and Spotlight pages for the umbrella's company name and for the names of any connected companies, directors or promoters you can identify from the contract or Companies House.
2. Treat any match as a definitive disqualifier. Being named is a strong, deliberate HMRC signal; it is not a grey area.
3. Understand the limit of the check: the list is not exhaustive and lags behind the market, so absence from the list does not prove compliance. It is a fast way to rule an umbrella out, not a way to rule one in.

HMRC also runs the "Tax avoidance: don't get caught out" campaign, which includes a payslip-checking guide and a route to report a suspected scheme. If your own verification raises concerns, that reporting route exists. The broader pattern of HMRC's warnings on specific umbrella arrangements is set out in our HMRC umbrella warning list guide, which tracks the named schemes and Spotlight briefings relevant to contractors.

Check four: reconcile your own HMRC record

The most direct evidence that PAYE is genuinely reaching HMRC is your own record. A compliant umbrella reports each pay run under RTI, so what your payslip shows should appear in your HMRC account within a pay cycle or two.

1. Log into your Personal Tax Account at gov.uk and open the pay and income tax record for the current tax year.
2. Compare the gross pay and income tax it shows against the cumulative figures on your payslips.
3. A rough match (allowing for RTI timing) is what you want. A gap where your payslips show tax deducted but HMRC has recorded little or none is a serious warning sign that the deductions may not be reaching HMRC.
4. Raise any discrepancy with the umbrella in writing first, keep the response, and escalate to HMRC if it is not resolved.

This check is uniquely valuable because it cannot be gamed by marketing. It reflects what the umbrella actually reported, not what it told you it would do. The full mechanics of the deduction chain that these figures should reconcile to are set out in our umbrella company deductions guide, and you can sanity-check the expected net figure using our umbrella take-home calculator before you even receive your first payslip.

The red flags that override every reassurance

Some signals are serious enough that they override an accreditation logo, a friendly account manager or a place on an agency list. If you see any of these, stop and re-verify before proceeding.

Take-home materially above the compliant range

On a standard assignment rate, the compliant deduction chain (employer NIC at 15% above £5,000, the levy, the margin, then employee NIC at 8% and income tax under PAYE) leaves a net figure typically in the region of 55% to 72% of the assignment rate, lower for higher-rate taxpayers. Any promise of 80% or more cannot come from that chain. The excess is being routed outside PAYE, and HMRC taxes it as employment income and pursues the worker for the shortfall. This is the single clearest red flag, and no other reassurance survives it.

Payments described as anything other than PAYE salary

Loans, advances, salary advances, grants, annuities, credit facilities, discretionary or non-contractual bonuses, and trust or third-party payments are the recurring labels of disguised-remuneration schemes. A compliant umbrella pays you a PAYE salary and nothing else. A second, non-PAYE payment of any description is a disqualifier.

Mini-umbrella indicators

Mini-umbrella fraud fragments a workforce across many tiny companies to abuse the Employment Allowance and sometimes the VAT flat rate scheme. Verification signs include being employed by an unfamiliar company incorporated very recently, the employing company changing between assignments, and a mismatch between the entity on your contract, your payslip and your Personal Tax Account. You can check the employing company's incorporation date, officers and registered address free on the Companies House register; directors or addresses shared across many similar small companies are a further indicator. The full mechanism and its consequences are covered in our mini-umbrella fraud guide.

No KID, or a KID that does not reconcile

A missing Key Information Document, or one whose figures do not reconcile to your first payslip, is both a regulatory breach and a sign that the umbrella cannot transparently show its deduction chain. Reconciling the KID line by line against the payslip is the baseline verification every contractor should perform before the second pay run.

If you are already inside a scheme

Verification sometimes produces an unwelcome answer: that you are already in an arrangement that is not compliant. The position is uncomfortable but the response is clear, and acting early is materially cheaper than waiting.

• Stop using the arrangement. Move future work to a verified compliant umbrella or, where your engagement mix supports it, a limited company.
• Contact HMRC to settle. HMRC has settlement routes for scheme users and will discuss payment terms. Because interest runs from the original due date, the liability grows the longer it is left, so early contact limits the cost.
• Keep your evidence. Retain every payslip, contract, KID and communication showing what you were told and what you were paid. It supports any penalty mitigation and any complaint against a promoter.
• Take specialist advice on your exposure first. The size of the liability and the best settlement approach depend on the years involved and the amounts routed outside PAYE. Advice before you contact HMRC is worthwhile.

The reason speed matters is structural: HMRC pursues the worker for the unpaid tax, not the promoter. Ignorance of the scheme's mechanics is not accepted as a defence where the take-home rate should have put you on notice. The Loan Charge, which fell on contractors who received remuneration as loans, is the clearest illustration that the cost of a promoter's scheme lands on the individual. Verification exists to keep you out of that position; if you are already in it, settlement keeps the damage contained.

A verification checklist

Run this before you start, and again after your first pay run:

1. Confirm the exact registered company name on the Companies House register.
2. Verify current FCSA full membership or Professional Passport assessment on the live register, on the day.
3. Ask whether the umbrella is SafeRec certified and request your individual payslip audit report if it is.
4. Search the umbrella and any connected names on HMRC's named tax-avoidance scheme list and Spotlight pages.
5. Obtain the Key Information Document before signing and reconcile it line by line against your first payslip.
6. Confirm the implied take-home sits in the compliant range; reject anything promising 80% or more.
7. After the first pay run, reconcile your payslips against your Personal Tax Account record.
8. Confirm holiday pay is genuinely funded and the margin is a fixed fee matching the KID, with no joining, leaving or transfer charges.

An umbrella that clears every line of this list is one you have verified, not merely chosen. For the decision of which compliant umbrella to select in the first place, and how the April 2026 joint and several liability reform reshapes agency preferred-supplier lists, see our companion guide to choosing a compliant umbrella company. If you would like the numbers modelled for your specific rate, or help settling an exposure you have discovered, our contractor accountancy services can work through it with current 2026/27 figures and your contract in view.