How HMRC Selects Cases in 2026
HMRC has significantly modernised its approach to IR35 compliance checks. Historically, many investigations were triggered by obvious red flags or anonymous tip-offs. From 2025/26, HMRC is using AI and machine learning to identify cases at scale — analysing patterns across millions of tax records to flag anomalies that human investigators would miss.
HMRC's data-matching capabilities mean it can now cross-reference your company tax returns, personal self-assessment, Companies House filings, and data provided by clients and agencies — all without you ever knowing you're being assessed. By the time you receive a compliance check letter, HMRC has often already built a picture of your engagement history.
- Long-term single-client engagements that pattern-match to employment
- Contractors whose day rate and client profile suggests inside IR35 but who are filing outside IR35
- High earners in high-risk sectors (IT, financial services, professional services)
- Mismatches between what contractors report and what clients/agencies report
- Companies with minimal overheads, no other clients, and year-on-year continuous engagement with the same client
Common investigation triggers
- Single client for 3+ years continuously
- Inside IR35 on some contracts, outside on others with the same client
- Client or agency reports your income differently to HMRC than you do
- Anonymous tip-off from a disgruntled party
- Company investigation leads HMRC to review all contractors that client used
- High-value single-client contract in IT, banking, or professional services
- No evidence of other business activity (marketing, multiple clients)
- Limited company with very low expenses relative to turnover
- Sector-wide HMRC sweep (HMRC periodically targets specific industries)
- Using HMRC's CEST tool and getting "outside IR35" in a borderline case
What Happens: The Investigation Process Step by Step
How Far Back Can HMRC Go?
This is one of the most important and least understood aspects of IR35 investigations. The time limits depend on the circumstances:
| Scenario | How far back HMRC can go | Example (check opened 2026) |
|---|---|---|
| Standard case — reasonable care taken | 4 years from end of relevant tax year | Back to 2021/22 |
| Careless behaviour — insufficient care taken | 6 years | Back to 2019/20 |
| Deliberate understatement or fraud | 20 years | Back to 2005/06 |
"Reasonable care" in HMRC's view means having considered your IR35 status seriously — getting professional contract reviews, keeping evidence of working practices, and not simply assuming you are outside IR35 because it's financially convenient. Contractors who have never had a contract reviewed and kept no working practices evidence are at risk of being assessed as having taken insufficient care.
Investigations rarely stay contained to the original contract or year flagged. HMRC routinely expands the scope once they open an inquiry — examining all years within the applicable time limit and all contracts in scope. A compliance check that starts with one contract from 2024 can quickly become an investigation into every contract you've held since 2020.
What You Could Owe
If HMRC determines your contracts were inside IR35, the exposure can be substantial:
- Unpaid income tax and employee's NI — typically the largest element. At a £500/day rate, being inside IR35 for a full year costs roughly £15,000–£20,000 in extra tax. Multiply by the number of years in scope.
- Interest — charged from the date the tax was originally due. Currently around 7.5–8% annually, which adds up quickly on multi-year assessments.
- Penalties — 0% if you cooperate fully and HMRC accepts you took reasonable care; up to 30% for careless behaviour; up to 100% for deliberate understatement.
- Professional costs — even if you win, defending an investigation typically costs £5,000–£20,000+ in adviser fees, depending on complexity and how far it progresses.
For engagements with medium and large private sector clients (or any public sector client) on or after 6 April 2021, the primary liability for unpaid PAYE and NI sits with the fee payer in the supply chain — typically the agency or the end client. Contractors are not usually the primary target in post-2021 cases. However, HMRC can still pursue the contractor if the fee payer cannot pay, or if the contractor provided fraudulent information about their IR35 status.
How to Protect Yourself Before an Investigation Starts
The best time to prepare for an IR35 investigation is before it happens. The steps below reduce both the likelihood of being selected and the exposure if you are.
1. Get your contracts professionally reviewed
Every new engagement and every renewal. See our IR35 contract review checklist for what to look for. A professional review from a specialist like Qdos, Bauer & Cottrell, or IR35 Shield provides a written opinion you can rely on if HMRC investigates — and costs £100–£250 per contract.
2. Keep an evidence file for each engagement
Create a simple folder for each contract containing: the signed contract, invoices, evidence of project deliverables (not just timesheets), evidence of working autonomously (emails showing you make methodology decisions independently), any substitution evidence, and records of other clients if applicable. This can be a simple folder of PDFs — the important thing is that you can show HMRC the reality of how you worked, not just what the contract says.
3. Ensure your working practices match your contract
This is where most contractors have a problem. The contract says you have a substitution right, but the client would never allow it. The contract says flexible hours, but you work 9-5 every day. HMRC will look at both, and inconsistencies are damaging. If the working practices can't support an outside IR35 position, the contract can't save you.
4. Get IR35 investigation insurance
IR35 insurance covers professional fees if HMRC investigates — typically £5,000–£50,000 in cover per policy. Some policies also cover the tax liability. Insurance typically costs £300–£1,000 per year. This is one of the most cost-effective risk management steps a contractor can take — even one investigation can cost more in adviser fees than a decade of premiums.
5. Don't rely on CEST
HMRC's own CEST tool is not reliable and HMRC has declined to be bound by favourable CEST results in tribunal. Using CEST as your only basis for an outside IR35 determination is a weak position. See our guide to why CEST gets IR35 wrong.