⚠️ HMRC Compliance · Updated March 2026

HMRC IR35 Investigation: What Happens and How to Prepare

Receiving an HMRC compliance check letter is alarming — but understanding the process and being prepared makes all the difference. This guide explains what triggers an IR35 investigation, what happens at each stage, and how to protect yourself before one starts.

⏱ 10 min read 📅 March 2026 🔍 Includes HMRC's new AI approach

How HMRC Selects Cases in 2026

HMRC has significantly modernised its approach to IR35 compliance checks. Historically, many investigations were triggered by obvious red flags or anonymous tip-offs. From 2025/26, HMRC is using AI and machine learning to identify cases at scale — analysing patterns across millions of tax records to flag anomalies that human investigators would miss.

HMRC's data-matching capabilities mean it can now cross-reference your company tax returns, personal self-assessment, Companies House filings, and data provided by clients and agencies — all without you ever knowing you're being assessed. By the time you receive a compliance check letter, HMRC has often already built a picture of your engagement history.

🔍 What HMRC is looking for
  • Long-term single-client engagements that pattern-match to employment
  • Contractors whose day rate and client profile suggests inside IR35 but who are filing outside IR35
  • High earners in high-risk sectors (IT, financial services, professional services)
  • Mismatches between what contractors report and what clients/agencies report
  • Companies with minimal overheads, no other clients, and year-on-year continuous engagement with the same client

Common investigation triggers

🔴 High-risk triggers
  • Single client for 3+ years continuously
  • Inside IR35 on some contracts, outside on others with the same client
  • Client or agency reports your income differently to HMRC than you do
  • Anonymous tip-off from a disgruntled party
  • Company investigation leads HMRC to review all contractors that client used
🟡 Moderate-risk factors
  • High-value single-client contract in IT, banking, or professional services
  • No evidence of other business activity (marketing, multiple clients)
  • Limited company with very low expenses relative to turnover
  • Sector-wide HMRC sweep (HMRC periodically targets specific industries)
  • Using HMRC's CEST tool and getting "outside IR35" in a borderline case

What Happens: The Investigation Process Step by Step

1
Stage 1
The compliance check letter
Everything starts with a letter from HMRC's off-payroll working team. This is a formal compliance check notice — not an accusation, and not a determination that you are non-compliant. The letter will outline HMRC's intent to review your IR35 position and invite you to make contact. HMRC stresses this is a review, not a presumption of wrongdoing. However, you should treat it extremely seriously from the moment it arrives.
2
Stage 2
Engage a specialist immediately
Before responding to HMRC in any way, engage a qualified IR35 specialist or tax adviser. What you say in your initial response — and how you say it — can significantly affect the outcome. A specialist will manage communications with HMRC on your behalf and help you frame your position correctly from the start.
3
Stage 3
Information requests
HMRC will request documents and information. Typical requests include: copies of all relevant contracts, evidence of how you actually worked (working practices), details of substitution rights and whether they were exercised, invoices, bank statements, and details of any other clients you worked for. HMRC will also often want to speak with the client (engager) directly — what the client says about the working practices is critically important and can contradict what your contract says.
4
Stage 4
Review and assessment
HMRC reviews all the information and assesses whether your contracts should have been inside or outside IR35. This stage can take weeks to months. HMRC may request further information if something doesn't add up. They may broaden the scope beyond the original contract — investigations that start with one year frequently expand to cover multiple years and multiple contracts.
5a
Outcome — Favourable
Check closed, no further action
If HMRC is satisfied with your position and evidence, the compliance check is closed with no liability. A good specialist can often achieve this outcome even in cases where the initial situation looks difficult, by presenting working practices evidence effectively and correcting mischaracterisations of the engagement.
5b
Outcome — Unfavourable
Liability assessed, potential appeal
If HMRC determines you were inside IR35, they will issue a tax assessment for the unpaid tax plus interest. You can accept this, negotiate a settlement, or appeal. Appeals go to the First-tier Tribunal and, if necessary, the Upper Tribunal. Many cases are settled before tribunal — a specialist can often negotiate down the initial assessment, including which years are in scope.

How Far Back Can HMRC Go?

This is one of the most important and least understood aspects of IR35 investigations. The time limits depend on the circumstances:

Scenario How far back HMRC can go Example (check opened 2026)
Standard case — reasonable care taken 4 years from end of relevant tax year Back to 2021/22
Careless behaviour — insufficient care taken 6 years Back to 2019/20
Deliberate understatement or fraud 20 years Back to 2005/06

"Reasonable care" in HMRC's view means having considered your IR35 status seriously — getting professional contract reviews, keeping evidence of working practices, and not simply assuming you are outside IR35 because it's financially convenient. Contractors who have never had a contract reviewed and kept no working practices evidence are at risk of being assessed as having taken insufficient care.

⚠️ The scope expansion risk

Investigations rarely stay contained to the original contract or year flagged. HMRC routinely expands the scope once they open an inquiry — examining all years within the applicable time limit and all contracts in scope. A compliance check that starts with one contract from 2024 can quickly become an investigation into every contract you've held since 2020.

What You Could Owe

If HMRC determines your contracts were inside IR35, the exposure can be substantial:

  • Unpaid income tax and employee's NI — typically the largest element. At a £500/day rate, being inside IR35 for a full year costs roughly £15,000–£20,000 in extra tax. Multiply by the number of years in scope.
  • Interest — charged from the date the tax was originally due. Currently around 7.5–8% annually, which adds up quickly on multi-year assessments.
  • Penalties — 0% if you cooperate fully and HMRC accepts you took reasonable care; up to 30% for careless behaviour; up to 100% for deliberate understatement.
  • Professional costs — even if you win, defending an investigation typically costs £5,000–£20,000+ in adviser fees, depending on complexity and how far it progresses.
Who pays after April 2021?

For engagements with medium and large private sector clients (or any public sector client) on or after 6 April 2021, the primary liability for unpaid PAYE and NI sits with the fee payer in the supply chain — typically the agency or the end client. Contractors are not usually the primary target in post-2021 cases. However, HMRC can still pursue the contractor if the fee payer cannot pay, or if the contractor provided fraudulent information about their IR35 status.

How to Protect Yourself Before an Investigation Starts

The best time to prepare for an IR35 investigation is before it happens. The steps below reduce both the likelihood of being selected and the exposure if you are.

1. Get your contracts professionally reviewed

Every new engagement and every renewal. See our IR35 contract review checklist for what to look for. A professional review from a specialist like Qdos, Bauer & Cottrell, or IR35 Shield provides a written opinion you can rely on if HMRC investigates — and costs £100–£250 per contract.

2. Keep an evidence file for each engagement

Create a simple folder for each contract containing: the signed contract, invoices, evidence of project deliverables (not just timesheets), evidence of working autonomously (emails showing you make methodology decisions independently), any substitution evidence, and records of other clients if applicable. This can be a simple folder of PDFs — the important thing is that you can show HMRC the reality of how you worked, not just what the contract says.

3. Ensure your working practices match your contract

This is where most contractors have a problem. The contract says you have a substitution right, but the client would never allow it. The contract says flexible hours, but you work 9-5 every day. HMRC will look at both, and inconsistencies are damaging. If the working practices can't support an outside IR35 position, the contract can't save you.

4. Get IR35 investigation insurance

IR35 insurance covers professional fees if HMRC investigates — typically £5,000–£50,000 in cover per policy. Some policies also cover the tax liability. Insurance typically costs £300–£1,000 per year. This is one of the most cost-effective risk management steps a contractor can take — even one investigation can cost more in adviser fees than a decade of premiums.

5. Don't rely on CEST

HMRC's own CEST tool is not reliable and HMRC has declined to be bound by favourable CEST results in tribunal. Using CEST as your only basis for an outside IR35 determination is a weak position. See our guide to why CEST gets IR35 wrong.

Know the financial stakes

Use our calculator to see exactly how much extra tax an inside IR35 determination would mean at your day rate.

Calculate your exposure →

Frequently Asked Questions

What triggers an HMRC IR35 investigation?
Common triggers include: long-term single-client engagements, discrepancies between what you report and what your client/agency reports, sector-wide HMRC sweeps, anonymous tip-offs, and HMRC's AI-driven risk-profiling that flags contractors whose profile looks like employment. From 2025/26, HMRC is using machine learning at scale to identify cases — you may not know you're being assessed until you receive a letter.
How far back can HMRC investigate IR35?
4 years in standard cases. 6 years if HMRC considers you were careless (e.g. never had contracts reviewed, kept no evidence). 20 years in cases of deliberate fraud. A compliance check opened in 2026 could therefore reach back to 2020 in careless cases.
What happens if HMRC finds I was inside IR35 and I didn't pay the right tax?
You owe unpaid income tax and NI for the relevant years, plus interest (currently ~7.5–8% annually). Penalties can apply: 0% if you cooperate and took reasonable care, up to 30% for carelessness, up to 100% for deliberate understatement. For contracts with medium/large clients after April 2021, the fee payer (agency/client) is the primary target — but HMRC can still pursue you if they cannot pay or if you provided misleading information.
What is IR35 insurance and do I need it?
IR35 insurance covers professional fees for defending an HMRC enquiry. Some policies also cover any resulting tax liability. It typically costs £300–£1,000/year. Given that defending an investigation can cost £5,000–£20,000+ in adviser fees alone, insurance is worth serious consideration for any contractor operating outside IR35.
I just received a compliance check letter. What should I do first?
Do not respond to HMRC before getting professional advice. The letter is not a determination — it's the start of a process. Engage an IR35 specialist or tax adviser immediately; many offer a free initial consultation. Gather all relevant documents (contracts, invoices, working practices evidence) and do not destroy anything. Prompt, professional engagement with HMRC tends to produce better outcomes than ignoring or delaying.
Can I represent myself in an HMRC IR35 investigation?
Technically yes, but strongly not recommended. HMRC's investigators are specialists. A professional adviser who understands IR35 case law can present your position more effectively, challenge HMRC's interpretation where it's wrong, and negotiate a settlement if needed. This is the primary value of IR35 insurance — it funds the specialist representation that significantly improves your odds of a favourable outcome.