It happened on the 6th of April. Most recruiters didn't notice until the first invoice cycle.
Joint and Several Liability is now law. If an umbrella company in your supply chain fails to pay PAYE or NIC, HMRC can come after you for the full amount. Not the umbrella. You. The agency.
That's not a softening. That's not a "shared responsibility" framework. It's a direct route from HMRC to your bank account, and there is no statutory defence.

Here's what most agencies still haven't worked out: the umbrella you've used for five years could be perfectly compliant today and gone in eight weeks. A PCA accreditation, a SafeRec badge, a ten-year trading history — none of that stops an umbrella collapsing under bad debt or a HMRC investigation. Honest Payroll proved that in September. Accredited at the time. Into administration with £1.5m of unpaid agency credit and a £2.5m HMRC claim. Had that happened a few weeks later, every agency in their supply chain would have been paying that PAYE bill twice. Once through the umbrella invoice. Once again to HMRC.
That's the part that should worry you.
The old defence — "we picked an accredited provider" — does not exist under JSL. HMRC has been explicit about this. There is no reasonable care exemption. There is no good-faith provision. If the tax wasn't paid, someone in the chain pays it. And HMRC has confirmed they'll come to the agency first, not the umbrella.
So the question isn't whether your provider is compliant. It's whether you'd survive a £200k PAYE bill landing on your desk because someone else didn't pay theirs.

A few things worth saying plainly.

Most agencies are still running the same supplier checks they ran in 2024. A name on a Preferred Supplier List. A copy of an accreditation certificate. Maybe an annual review. That isn't due diligence under the new rules. That's a paper trail.
Real due diligence in 2026 looks different. It means knowing your umbrella's PAYE is actually being remitted, not just invoiced. It means real-time visibility on what's been paid to HMRC, not retrospective payslip checks. It means understanding the financial position of your supplier — because an umbrella that's solvent on Monday can be in administration by Friday, and the credit you've extended them just became your tax bill.
The agencies handling this well have done two things. First, they've consolidated. Fewer umbrella relationships, all of them with providers who can prove PAYE payment at source rather than just promise it. Second, they've stopped extending unsecured credit to umbrellas. Every pound of margin held in the supply chain is a pound of tax exposure if that supplier goes under.
There's also a quieter shift happening. Some end clients are starting to ask agencies for evidence of PAYE compliance before they'll renew contracts. Not because they're being officious — because their procurement teams have read the legislation and worked out that JSL can travel up to them too in certain supply chain configurations. If you're an agency without a clean compliance answer ready, that conversation gets harder every quarter.
This is fixable. But it requires looking at the supply chain you already have, not the one on paper.
We've spent the last six months working with recruitment agencies to map their actual umbrella exposure — not the version their compliance teams describe, the version HMRC would see if they audited tomorrow. The gap between those two is usually larger than people expect.

Three questions worth answering before your next pay run.
 

1. How many umbrella providers are currently in your supply chain, and when did you last verify each one was actually remitting PAYE on schedule? 
2. If your largest umbrella provider went into administration tomorrow, what's the maximum PAYE liability you'd be exposed to under JSL?
3. What evidence would you produce if HMRC asked you to demonstrate due diligence today?

If you don't have clean answers to all three, you've got work to do before the next quarterly cycle.
We work with agencies on this directly. PCA-approved, fully compliant, with proper documentation behind every worker we payroll. If you want to know what your exposure actually looks like, get in touch. We'll tell you straight.