Payslip verification is what tells you whether the tax shown was ever paid to HMRC

News · Recruitment agencies and end-hirers · OPRaaS Platform

Payslip verification is the difference between a deduction printed on a payslip and tax that has actually reached HMRC. On paper the two look identical. Only one of them is a fact.

HMRC published worker-facing guidance on 25 August 2026 under the title “How to avoid payslip fraud”. Its published summary asks agency workers, temporary workers, contractors and anyone paid through an umbrella or payroll company to check that the tax and National Insurance shown on their payslip, or on their deduction statement, has been paid correctly.

That is a supply chain question, addressed to the person with the least leverage in the chain. HMRC’s policy paper on umbrella company non-compliance, published on 21 July 2025, estimates that the reform may affect approximately 700,000 individuals who work through umbrella companies. Since 6 April 2026, what those workers find moves up the chain.

A payslip records what the payer says it deducted. Something else has to record that the money arrived.

Why payslip verification is a supply chain control, not a payroll task

HMRC describes the underlying pattern as outsourced labour payroll fraud, and notes in its published guidance that it is sometimes called payslip fraud. A legitimate business transfers its workers and payroll to another business, which then does not declare or pay the correct taxes. HMRC adds that the legitimate business is often unaware of any fraud at all.

That last point is the one worth sitting with. Unawareness is the normal condition, not the exception, because nothing in the ordinary flow of a placement surfaces the problem. Timesheets go in, an invoice comes back, the worker is paid, and no one downstream sees an RTI submission.

So payslip verification belongs with supplier due diligence rather than with payroll administration. For recruitment agencies and end-hirers, it answers a question about a supplier, not about a pay run. It also decides, in practice, who picks up the tab when a shortfall surfaces years later.

What a payslip proves, and what it cannot

A compliant PAYE payslip in the UK has to show gross pay, itemised statutory deductions for Income Tax and employee National Insurance, any itemised non-statutory deductions such as pension, student loan or umbrella margin, and net pay. Where pay varies by the number of hours worked, the hours paid must appear too, a requirement in force since April 2019.

Every one of those lines is produced by the payer. That is the limit of the document. A payslip is the payer’s own account of its own conduct, which means it cannot serve as the audit trail for conduct that is in question.

Put plainly, a payslip that shows the correct Income Tax and National Insurance is exactly what a compliant payer and a non-compliant payer both produce. The divergence happens afterwards, at the moment the money either reaches HMRC or does not. This is where payslip verification sharply comes into focus, because it is the only step in the sequence that looks past the document to the payment behind it.

The five records that turn a payslip into evidence

Module 8 of the OPRaaS LSCA Self-Certification Course covers payslip verification under its topic on auditing workforce payslips, which sets out the supporting documentation to gather and cross-check against the payslips themselves. Five record types do the work:

1. Timesheets. Check that the hours worked match the payslip data, which is the first place a fabricated pay run stops agreeing with the placement.
2. Expense claims. Verify that claims are legitimate and supported by valid invoices or receipts, rather than used to reclassify taxable pay.
3. Bacs transfer data. Confirm that net pay aligns with the amount actually received by the worker, since a mismatch between the two is HMRC’s clearest published warning sign.
4. RTI reports and HMRC Business Tax Account receipts. Confirm that the deductions shown were actually remitted. This is the step that converts a claim into a fact.
5. CIS300 returns and subcontractor statements. For construction, check verification numbers and rates, and that deductions exclude VAT and materials.

The course also names red flags to watch for, among them missing or inconsistent statutory deductions, no Real Time Information submissions for workers, prolonged use of emergency tax codes without correction, and umbrella employer on-costs charged to the worker. Each is visible only to someone holding two documents at once. Payslip verification is a two-document exercise by definition, and a single-document review runs head-on into that limit every time.

Where payslip verification sits under joint and several liability

The new joint and several liability rules for umbrella arrangements were introduced by Finance Act 2026, which inserts Chapter 11 into Part 2 ITEPA 2003, with effect for payments made on or after 6 April 2026. This is the umbrella-market regime, distinct from the older PAYE debt transfer powers that sit outside Chapter 11.

HMRC’s published position is that the liability allows it to pursue an agency in the first instance for payroll taxes a non-compliant umbrella company failed to remit, with the end client liable where it contracts directly with the umbrella. HMRC’s own costing, certified by the Office for Budget Responsibility, projects an Exchequer effect of £895 million in 2026 to 2027.

OPRaaS reads that number as a description of behaviour rather than of enforcement volume. A costing on that scale assumes the liability changes what agencies and end-hirers do before a placement starts, not only what HMRC recovers afterwards. Either way, the agency or the client carries the bill. Payslip verification is what makes that exposure knowable in advance.

HMRC’s Guidelines for Compliance GfC12 asks organisations to verify information gathered from others and to keep records of the steps taken. Applied to pay, that is payslip verification with a date on it.

How the OPRaaS Virtual Compliance Director keeps payslip verification continuous

OPRaaS, On-Pay-Roll-as-a-Service, is a systemised governance and workforce management partner for organisations that rely on temporary, contractor and contingent labour. Through the OPRaaS Virtual Compliance Director (OPRaaS VCD) solutions we embed senior governance leadership into your business without the cost of a full-time director, building audit-ready controls across JSL, IR35, CIS, GLAA, modern slavery and HMRC labour supply chain expectations, for end-hirers, recruitment agencies, umbrella companies, MSPs and public sector buyers.

Two examples show what continuous payslip verification means in practice. Payslip and RTI data are sampled by the OPRaaS VCD platform on a defined cycle to test whether the deductions displayed reconcile to submissions and remittances, with exceptions raised to the agency and the end-hirer inside the same record.

Preferred supplier list umbrellas are monitored against Companies House for director and ownership changes and against Creditsafe for credit-risk movements such as county court judgments and financial-strength reclassifications, so a supplier’s condition is known before the next pay run rather than after it.

Each check is dated and retained, which is what turns a scattered set of assurances into an evidence file the platform can output on demand. The OPRaaS LSCA 2.0 platform runs the same map, train, audit and evidence sequence across every supplier tier. With the new rules still bedding-in, that cadence matters more than any single review.

OPRaaS is approved on the UK Government Commercial Agency (formerly Crown Commercial Service) frameworks including RM6310 Audit & Assurance Services (Lots 2 & 4), RM6219 Learning & Training Services DPS, and RM6237 Learning & Training Services DPS, covering temps, freelancers, contractors, interims and consultants.

What board directors should be able to ask for

The useful board question about payslip verification is not whether payslips are compliant. It is narrower than that, and harder to answer on the spot: for a named supplier and a named month, can we show that the deductions on our workers’ payslips were submitted and remitted?

An organisation that can answer inside a day comes out ahead of one that has to ask its supplier for reassurance, because reassurance from the party under question is the thing HMRC’s guidance tells workers not to rely on. The same logic applies one tier up. Boards at end-hirers and at agencies are relying on documents produced by the businesses whose conduct the liability now reaches.

Module 8 of the OPRaaS LSCA Self-Certification Course sets out the operational version of this discipline, alongside the wider labour supply chain assurance methodology it belongs to. It is a short module. The habit it describes is the part that takes time.

Compliance is your asset. Evidenced daily.

Read next

“Supplier self-certification is where labour supply chain assurance starts, not where it finishes.”

Drawing on HMRC guidance “How to avoid payslip fraud”, published on 25 August 2026; HMRC guidance “Check for signs of outsourced labour payroll fraud”, last updated on 4 February 2026; the HMRC collection “Organised labour fraud”, published on 10 June 2026; the HMRC policy paper “Umbrella companies, tackling non-compliance in the umbrella company market”, published on 21 July 2025; HMRC Guidelines for Compliance GfC12; the Income Tax (Earnings and Pensions) Act 2003; and the OPRaaS LSCA Self-Certification Course, Module 8, topic on auditing workforce payslips.