HMRC IR35 enforcement escalating in 2026 — contractor investigation risk explained
Direct Answer
HMRC has shifted from reactive IR35 investigations to proactive data analytics compliance reviews in 2026-27. They cross-reference SA302 returns, employer PAYE records, and Companies House filings to flag anomalies. With approximately 14,000 more contractors now self-determining IR35 status following the small company threshold changes, this population is a specific enforcement target. A successful HMRC challenge can mean back PAYE, Class 1 NI, 4% annual interest, and penalties up to 100% of the unpaid tax. Robust documentation is no longer optional.
The enforcement shift — from reactive to proactive
For most of its history, HMRC's IR35 compliance activity was reactive: an investigation might be triggered by a tip-off, a sector campaign, or something flagging in a self-assessment return. The odds of any individual contractor being investigated in any given year were low, and many contractors operated on the informal assumption that they were unlikely to be selected.
That model has changed significantly in 2026-27. HMRC has invested heavily in its data analytics infrastructure, and its compliance teams are now running systematic cross-referencing of multiple data sources to generate targeted lists of contractors for compliance review. This is not random sampling — it is pattern-matching against known indicators of disguised employment.
The practical effect is that the probability of being selected for a compliance check is no longer purely random. If your arrangements have the characteristics HMRC is looking for, the risk of investigation has materially increased — regardless of whether you have done anything wrong.
How HMRC's data analytics approach works
HMRC's compliance programme cross-references the following data sources to identify potential non-compliance:
- SA302 self-assessment returns. Where a single-director limited company shows substantially all income from one source over multiple years, HMRC flags this as a disguised employment pattern worth examining.
- Employer PAYE records. The end-client's PAYE submissions show start dates, work patterns, and employment-type data. If these are inconsistent with an arms-length B2B arrangement, that is a signal.
- Companies House filings. Single-person companies with no employees, high director loan account activity, and income flowing directly into director dividends fit a pattern HMRC associates with IR35 non-compliance.
- Industry and sector data. HMRC maintains sector risk profiles. IT contracting, professional services, and financial services have historically carried higher IR35 risk than manufacturing or logistics.
Where multiple signals align — single client, single director, PAYE records suggesting an employment relationship, high dividend extractions — HMRC opens a compliance check. This may start with a simple letter requesting information, or it may proceed directly to a formal enquiry under Section 9A TMA 1970.
The employment status tests — what HMRC is actually checking
The underlying test for IR35 is whether, but for the intermediary (your limited company), you would be regarded as an employee of the end-client. HMRC assesses this through three primary tests and a range of secondary indicators:
Mutuality of obligation
Is there an obligation on the client to offer work, and on the contractor to accept it? A genuine outside IR35 arrangement is project-based: when the project ends, the engagement ends. There is no expectation of ongoing work, no obligation to attend when no project exists, and no contractual requirement to accept future offers.
Control
Does the client control how, when, and where the work is done? Employees are directed by their employer. Genuine contractors agree a deliverable and determine themselves how to achieve it. In practice, the key question is whether the contractor can refuse to follow specific working instructions, or whether they are integrated into the client's day-to-day management structure.
Right of substitution
Does the contractor have a genuine (not merely theoretical) right to send a qualified substitute to perform the services? If the client is actually engaging a specific individual and would refuse a substitute, that is a strong indicator of employment regardless of what the contract says. HMRC looks at whether the right has ever been exercised, and whether the contractor has actually marketed substitute services.
Secondary factors include financial risk (does the contractor bear genuine financial exposure, such as fixing defects at their own cost?), equipment ownership, whether the contractor works for multiple clients, and whether they are integrated into the client's organisation.
For a full breakdown of each test, see our IR35 guide.
What a successful HMRC challenge actually costs
If HMRC opens a compliance review and concludes that your engagement was inside IR35, the financial consequences are substantial. The liability is calculated for each affected tax year, and can compound rapidly across multiple years:
- PAYE underpayment: the difference between what PAYE should have been deducted and what was actually paid. This is calculated on the "deemed salary" — broadly, the income received through the company minus a 5% expenses allowance and legitimate company costs.
- Class 1 National Insurance Contributions: both the employee primary (8%/2% above the upper earnings limit) and employer secondary (13.8%) NIC elements are owed on the deemed employment income. NIC liabilities can be substantial in aggregate.
- Statutory interest: currently 4% per annum from the date the tax was originally due. On a multi-year investigation, this adds up — a three-year investigation on a £50,000 annual deemed salary could accumulate significant interest charges alone.
- Penalties: range from 0% for innocent errors, through 15-30% for careless errors, to 70-100% for deliberate non-compliance. Deliberate errors with active concealment carry the maximum 100% penalty. Penalties are calculated as a percentage of the "potential lost revenue."
The PAYE set-off mechanism introduced in 2024 reduces the risk of double taxation — tax already paid through the company offsets the PAYE liability. But the NIC exposure, interest, and penalty risk remain real and significant.
At a rate of £400/day (approximately £80,000 annual contract income), the total PAYE and NIC liability for a single inside IR35 year where no deduction was made could easily exceed £20,000. Across three years with interest and a careless penalty, the total exposure can reach six figures.
Why 2026-27 is a higher-risk year for contractors
The combination of the small company threshold changes and the escalating enforcement programme creates a specific risk profile for 2026-27:
- Approximately 14,000 contractors whose end-clients were previously medium-sized are now self-determining IR35 status for the first time — some without fully understanding what that requires
- HMRC is specifically monitoring this new self-determining population for early signs of non-compliance
- Contractors who have been outside IR35 under a client SDS for several years may be under-prepared for the documentation requirements that self-determination demands
- The umbrella JSL changes running concurrently are generating supply chain scrutiny that may surface IR35 anomalies in adjacent contractor populations
The conclusion is not that contractors should panic — the vast majority of well-structured, genuinely outside IR35 engagements will continue without incident. The conclusion is that good documentation and consistent accounting practices are more important in 2026-27 than they have been in any previous year.
Read our companion piece on the IR35 small company threshold changes for the full context on self-determination responsibilities.
How Autobooks supports your IR35 compliance
Autobooks provides ongoing IR35 compliance monitoring as part of the accountancy service for all limited company contractors. In practice, this means:
- Reviewing your salary and dividend structure to ensure it is consistent with your claimed IR35 status
- Flagging company account entries — director loan activity, expenses patterns, income concentration — that could attract HMRC scrutiny
- Advising on record-keeping practices that support a defensible outside IR35 position
- Referring to qualified IR35 specialist reviewers where a formal employment status opinion is needed
An accountant is not an IR35 status reviewer — that is a specialist legal and employment status function. But an accountant can make sure the numbers tell a consistent story, catch anomalies before HMRC does, and ensure the business infrastructure of your limited company supports the IR35 position you are taking.
That ongoing compliance support is included in Autobooks' standard service from £89+VAT/month. If you are currently self-determining IR35 status and have not reviewed your documentation this year, the risk of waiting is higher in 2026-27 than in previous years.
Don't let HMRC catch you out — AutoBooks keeps your IR35 compliance watertight.
Full accountancy and IR35 compliance support for £89+VAT/month. Get a free review today.