How to Spot a Compliant Umbrella Company (FCSA and Professional Passport)

The UK umbrella market is large, fragmented and still mixes compliant operators with arrangements that test or breach the disguised remuneration legislation. For a contractor pushed onto an umbrella by an inside IR35 determination, choosing the wrong provider is not merely a cost question; it can mean retrospective tax assessments, payslip discipline failures that expose the supply chain, and in the worst cases personal exposure under the Loan Charge regime. Vetting an umbrella is a discrete skill that every inside-IR35 contractor needs.

This piece sets out the two voluntary accreditation regimes that carry weight in the UK market, the payslip checks that catch non-compliance early and the red flags that point to disguised remuneration arrangements. Sister piece A Granular Cost-Benefit Analysis of Ltd Company vs PAYE Umbrella covers the prior question of when an umbrella is the right structural choice at all. Sister pieces in the IR35 hub cover the fee-payer liability chain and why CEST does not stand alone as reasonable care. The wider Ltd vs umbrella hub frames the structural choice end to end.

Why umbrella compliance matters

An umbrella sits in the contractor's tax chain at the point where PAYE and National Insurance are operated. A compliant umbrella deducts tax correctly, issues clean payslips that reconcile from gross to net, and reports through Real Time Information accurately. A non-compliant umbrella can under-deduct PAYE, route income through artificial loan or expense structures, or sit on contractor money that should have been paid through. The downstream consequences include HMRC enquiries, retrospective tax demands and, where the arrangement crosses into disguised remuneration territory, Loan Charge exposure that can reach back many years.

FCSA: the largest accreditation

The Freelancer and Contractor Services Association (FCSA) is the largest umbrella accreditation body in the UK. FCSA membership requires the umbrella to submit to an annual independent audit against the FCSA Compliance Code, covering employment compliance, tax deduction accuracy, payslip clarity and the supplier's financial standing. A current FCSA accreditation is the strongest single signal of operational compliance in the market. It is not a guarantee, because compliance is a moving picture, but it is a meaningful filter and an FCSA-accredited umbrella is significantly less likely to be operating a disguised remuneration arrangement than an unaccredited one.

Professional Passport: the alternative

Professional Passport runs a parallel accreditation regime with broadly similar audit-based compliance verification. The market position is smaller than FCSA but the standards are comparable. Some umbrellas hold both accreditations; many hold only one. Either accreditation in current good standing is acceptable for contractor vetting purposes. The absence of either should prompt a closer look before signing.

Compliance signals at a glance

Reading the payslip line by line

A compliant umbrella payslip reconciles from the agency's gross payment to the contractor's net pay with every deduction visible. The standard structure runs as follows. The agency pays the umbrella a gross figure for the period. The umbrella deducts its margin (the fee the umbrella keeps), employer National Insurance and the Apprenticeship Levy where applicable. The remaining figure is the contractor's employer cost. From that the umbrella pays the contractor a basic salary, holiday pay accrual and any salary-sacrifice pension contribution. Tax and employee NI are then deducted from the salary line through PAYE, and the net is paid to the contractor.

• Gross payment from agency: the headline figure agreed with the agency, including holiday pay.
• Umbrella margin: the umbrella's own fee, deducted before any contractor income is calculated.
• Employer National Insurance: 15 percent on the salary above the secondary threshold from April 2025.
• Apprenticeship Levy: 0.5 percent on the pay bill where the umbrella's wider pay bill exceeds £3 million annually.
• Salary, holiday pay accrual and pension contribution as the contractor income lines.
• PAYE and employee NI deducted through standard payroll, with the net paid to the contractor.

A payslip that does not reconcile, that conceals one of these lines inside a single "processing fee", or that shows loan elements, expense advances or rolled-up margin should be treated as a compliance failure regardless of any verbal explanation from the umbrella.

Disguised remuneration: the unforgiving territory

How the schemes are presented

Disguised remuneration arrangements are typically marketed as tax-efficient umbrella alternatives. The presentation language includes phrases such as "HMRC-approved structure", "tax-efficient overseas treaty", "loan-based payment with no tax on the loan element" or "compliant alternative to PAYE". The structures route a small element of pay through PAYE for visibility and the bulk through some other route, often a loan, an annuity or an offshore intermediary, that the promoter claims is not income for tax purposes.

Why they are not legitimate

HMRC and the courts have consistently treated these arrangements as taxable income for the contractor at the point of payment. The Loan Charge legislation, refined in successive finance acts, allows HMRC to assess the contractor on all amounts received under such arrangements going back many years. The contractor, not the promoter, carries the tax bill. The promoters are frequently overseas, beyond practical UK enforcement, by the time the contractor is assessed. The take-home rates of 75 to 85 percent that disguised remuneration arrangements quote are not a saving; they are an unsecured loan against a future HMRC assessment that, when it arrives, can be catastrophic.

Mini-umbrella fraud and the supply-chain risk

Mini-umbrella arrangements break a workforce up into hundreds of small umbrella companies, each one apparently small enough to claim the Employment Allowance or operate below specific compliance thresholds. The arrangement is fraudulent and HMRC has been progressively dismantling it through the courts. For a contractor, the practical risk is that the umbrella named on the contract may not be the entity that pays through, and the chain of small companies is often financially fragile. The supply-chain transfer-of-debt route covered in the fee-payer liability piece means liability can move up the chain when a mini-umbrella defaults, sometimes back to the end-client that engaged the labour.

Practical due diligence in 10 minutes

• Check the FCSA member directory or Professional Passport accreditation list for current standing.
• Look up the umbrella at Companies House for filing history, accounts on time and reasonable financial scale.
• Ask for a sample payslip and walk the reconciliation from agency gross to contractor net.
• Verify the take-home figure quoted is consistent with legitimate PAYE arithmetic at the contractor's rate.
• Confirm the margin is disclosed in writing as a fixed weekly or monthly figure, not a percentage of pay.
• Confirm auto-enrolment pension arrangements and the salary-sacrifice route if applicable.
• Read the contract: there should be a written employment contract between contractor and umbrella, separate from the supply-chain contract.
• Verify the agency is paying the named umbrella directly, not a downstream mini-umbrella with a similar name.

What if the agency only allows one umbrella?

Some agencies operate preferred-supplier lists or even single-supplier policies. Where the contractor is required to use a specific umbrella, the vetting checks above still apply. If the required umbrella fails any of the compliance signals, particularly the accreditation and the payslip reconciliation tests, the contractor's options narrow to: negotiating the use of a compliant umbrella, declining the engagement, or accepting the exposure with full knowledge of the risk. In practice, large agencies typically support at least one FCSA-accredited umbrella on the list, even where the headline policy points elsewhere. The cost of switching to a compliant supplier is small compared with the cost of remediating an arrangement that later proves non-compliant.

How umbrella choice interacts with IR35 and the fee-payer chain

On an inside-IR35 engagement, the umbrella usually is the fee-payer. It receives the gross payment from the agency, operates the PAYE deductions and reports through RTI. A non-compliant umbrella that fails to operate the deductions correctly exposes the supply chain to the transfer-of-debt route described in the fee-payer liability piece, which can pull the unpaid tax up to the agency and ultimately to the end-client. The contractor sits at the bottom of that chain but can be exposed too where the arrangement crosses into disguised remuneration. Vetting the umbrella is therefore a service to the wider supply chain as well as to the contractor.

Switching umbrellas mid-engagement

A contractor who discovers their umbrella is non-compliant can usually switch mid-engagement. The mechanics involve a new contract with the replacement umbrella, instruction to the agency to redirect payment to the new umbrella from a specified date and reconciliation of any holiday pay accrual on the outgoing umbrella. The switch is generally smoother than a structural change to a Ltd company, because it does not change the contractor's employment status with respect to the agency or the end-client. The cost is administrative rather than financial. The penalty for not switching, where the existing umbrella is operating outside compliance, can be materially higher.

When the umbrella choice points back at the Ltd

For a contractor with material doubt about umbrella compliance, no compliant option available on the agency's preferred list and a day rate that supports the Ltd structure, the cleanest answer is sometimes to return to a Ltd with the inside-IR35 PAYE deduction operated through the fee-payer machinery. The Ltd route on an inside engagement is administratively heavier than an umbrella but it removes the umbrella compliance risk entirely. The decision turns on the trade-off set out in the cost-benefit piece.

The HMRC umbrella check service

HMRC operates a check service for umbrella companies that allows contractors and agencies to verify whether a specific umbrella is on its watch list of arrangements suspected of disguised remuneration involvement. The service does not give a positive certification, but it does flag known problem arrangements. Where the contractor or agency is in any doubt, a check against the HMRC list is a useful additional signal alongside the accreditation and payslip checks.

What good looks like in summary

A good umbrella is FCSA or Professional Passport accredited in current standing, issues a payslip that reconciles cleanly from agency gross to contractor net, discloses its margin as a fixed weekly or monthly figure, operates auto-enrolment pension and salary sacrifice on request, and has a financial profile at Companies House consistent with the volume of contractors it claims to support. The take-home it quotes matches the legitimate PAYE arithmetic for the contractor's rate. Where any of those signals fails, the answer is to keep looking. The cost of the search is small compared with the cost of an HMRC assessment under the Loan Charge regime years later.