Whether you’re a recruitment agency assessing your supply chain, a worker wondering about your employer, or an end hirer reviewing your MSP’s umbrella panel — knowing how to check umbrella company compliance is essential. Especially now, with Joint and Several Liability making the entire supply chain liable for PAYE failures from April 2026.

Here’s a step-by-step guide to checking whether an umbrella company is genuinely compliant — or just claiming to be.

Start with the strongest compliance indicator available: FCSA accreditation. If an umbrella is FCSA accredited, it has passed 700+ compliance checkpoints assessed annually by independent third-party auditors.

Check the FCSA website or use Diligence Hub to verify current accreditation status. Key things to confirm: is the accreditation current (not lapsed)? When was the last audit? Has the company maintained accreditation continuously?

Not being FCSA accredited isn’t automatically disqualifying — but it means you need to work harder on every other check. FCSA accreditation is the single strongest compliance signal available.

Every UK umbrella company is registered at Companies House. Check:

• Incorporation date — How long have they been trading? Very recently incorporated companies with no trading history are a red flag.
• Director information — Who runs the company? Are directors experienced in payroll and employment?
• Filing history — Are accounts filed on time? Late filings suggest poor governance.
• Registered address — Does it look like a real business address or a virtual office?
• Active status — Is the company active, or are there any strike-off notices?

Diligence Hub pulls this data automatically and monitors it continuously — so you don’t need to check Companies House manually every month.

Use CreditSafe or an equivalent credit reference agency to check the umbrella’s financial health. Look for:

• Credit score and trend (improving or declining?)
• County Court Judgements (CCJs)
• Winding-up petitions or insolvency proceedings
• Payment performance (do they pay their own bills on time?)

An umbrella under financial pressure may be tempted to cut corners on PAYE — exactly the scenario that creates JSL liability for agencies.

This is the most important check — and the one most agencies skip. Accreditation and financial health tell you about the company; payslip verification tells you about what they’re actually doing with workers’ money.

veriPAYE validates umbrella payslip calculations against current HMRC tax tables, NIC rates, NMW thresholds, and holiday pay requirements. It’s deterministic — the same inputs always produce the same answer, because it’s checking against source data.

If an umbrella’s payslips consistently fail verification, that’s your clearest signal of non-compliance — regardless of what their accreditation status says.

Request sample Key Information Documents and employment contracts. Check whether:

• KIDs are provided before assignments start (legal requirement)
• KID calculations match actual payslip figures
• All deductions are clearly disclosed
• Holiday pay methodology is explained
• Employment contracts are compliant and clear

If there’s a gap between what the KID promises and what the payslip delivers, that’s a compliance failure. Learn more about KID requirements.

During your compliance check, watch for these warning signs:

• Promises of unusually high take-home pay (likely a tax avoidance scheme)
• Reluctance to share payslip breakdowns or sample KIDs
• No FCSA accreditation and no willingness to participate in independent verification
• Recently incorporated with no trading history
• Multiple CCJs or declining credit score
• Umbrella asks workers to set up personal service companies
• Deductions labelled as “admin fees” or “processing charges” without clear explanation

Any single red flag warrants further investigation. Multiple red flags mean you should reconsider the relationship.

Checking compliance manually for every umbrella in your supply chain isn’t practical on an ongoing basis. That’s why Diligence Hub exists — to automate the checks above and provide continuous monitoring.

Diligence Exchange (DEX) centralises compliance data. veriPAYE verifies payslips automatically. Together, they create the documented, continuous due diligence trail that JSL demands.

All tools are free for recruitment agencies. Register here.