UK Right-to-Work Checks Extended to Gig, Agency, and Subcontract Workers

The Ownership Blind Spot Between HRIS and Accounts Payable

Ask HR whether your company runs compliant Right to Work checks and they will point proudly to 100% of PAYE employees in Workday. Walk down the corridor to Accounts Payable and you will find 40 unchecked sole traders paid on purchase orders.

Before 1 October 2026, that split survived on a narrow statutory technicality. Under the original wording of Section 15 of the Immigration, Asylum and Nationality Act 2006 (IANA 2006), civil penalties applied strictly to contracts of employment or apprenticeships. Unless a Skilled Worker sponsor licence forced broader checks, operations managers onboarded freelancers, sole-trader tradespeople, couriers, and cleaning subcontractors straight through vendor procurement. Nobody checked a passport or Home Office share code.

On 1 October 2026, Section 48 of the Border Security, Asylum and Immigration Act 2025 closed that loophole across the entire United Kingdom. Backed by the updated Home Office Right to work checks: an employer's guide, statutory civil penalties and pre-engagement check duties now cover four non-employee categories:

1. Limb (b) "Workers": Individuals contracted to perform work or services personally for another party who is not a client of their independent profession or business.
2. Individual Service Contractors: Individual sole traders and freelancers engaged directly by your business to provide personal work or services.
3. Individual Subcontractors in Service Chains: Individuals engaged via a subcontracting chain to perform work or services your business contracted to deliver or procure.
4. Online Matching & Gig Platforms: Digital platforms or apps that connect individual service providers with end clients or customers for pay.

Counting the True Penalty: £45,000, £60,000, and Sponsor Licence Revocation

Three unchecked subcontractors discovered during a single Home Office Immigration Enforcement visit no longer trigger a warning letter. They generate a £135,000 first-breach invoice—and risk revoking every Skilled Worker visa in your company.

Verify the exact multi-statute penalty stack in force since the February 2024 civil-penalty trebling and the 1 October 2026 scope expansion:

• First Breach Civil Penalty (£45,000 per worker): Under the Code of practice on preventing illegal working, the starting penalty without a pre-start statutory excuse is £45,000 per illegal worker. Reductions apply only for active self-reporting and full cooperation—never for assuming Procurement ran the check.
• Repeat Breach Civil Penalty (£60,000 per worker): If your organisation received a civil penalty or warning in the past three years, every illegal worker triggers up to £60,000. Five unchecked warehouse or facilities subcontractors on a repeat breach equals £300,000.
• Criminal Liability & Unlimited Fines (IANA 2006 s. 21): Engaging someone while knowing—or having reasonable cause to believe—they lack permission to do that work is a crime. Penalties reach five years' imprisonment and an unlimited fine. Breaching student term-time 20-hour caps counts too.
• Existential UKVI Sponsor Licence Fallout: Hold a UKVI Skilled Worker Sponsor Licence? Receiving even one Section 15 civil penalty over an unchecked facilities contractor gives UKVI mandatory grounds to revoke your Sponsor Licence. Every sponsored PAYE engineer then faces 60-day visa curtailment.

Mapping Every Engagement Type: Who Checks Whom Before Day 1

You cannot establish a statutory excuse by running a check on Day 2 of a contractor's engagement, nor can you rely blindly on an agency's verbal promise where you are the statutory engager. Audit every non-PAYE route against this matrix.

Sit people operations, Legal, IT Security, and Procurement in one room for 60 minutes. Classify every non-PAYE payee paid in the last 90 days. Watch two specific traps closely.

First, examine substitution clauses and Personal Service Companies (PSCs). When a genuine 50-person IT consultancy deploys its own PAYE employees onto your project, that corporate employer holds primary statutory-excuse responsibility. Even then, Sponsor Licence holders should demand contractual audit warranties. By contrast, when an individual works personally as a sole trader, Limb (b) worker, or individual subcontractor under Section 48, you carry direct exposure. A sham one-person company or paper substitution clause will not save you from a £45,000 fine when a three-minute Home Office check would have settled status. Second, timing is absolute. Every manual check, certified IDVT/IDSP check, or Home Office online share-code check must finish before the individual starts work.

Watch Visa Condition Traps: Student Hours and Skilled Worker Side-Gigs

Seeing "Right to Work: Yes" on a Home Office eVisa screen is only half the check. Engaging a Student visa holder or another firm's Skilled Worker on a freelance contract frequently breaches strict visa work conditions.

Three visa restrictions routinely ambush UK companies onboarding contractors after 1 October 2026:

1. Student Visa Self-Employment Ban: International students holding a UK Student visa (typically permitted 20 hours/week during official university term time) are strictly prohibited under the Immigration Rules from engaging in self-employment or business activity! Hiring a Student visa holder on a "self-employed sole-trader contractor agreement" is automatically unlawful working—even for 5 hours a week—and destroys any statutory excuse unless you engage them on a permitted employment/worker basis within verified term-time dates held on file from their university!
2. Skilled Worker Supplementary Employment Rules: An individual sponsored on a Skilled Worker visa by Employer A may undertake up to 20 hours/week of supplementary work outside their core sponsored hours for another organisation only if they continue working for Employer A and the supplementary role is in an eligible Skilled Worker occupation code. Document Employer A's ongoing employment confirmation and cap hours strictly at 20 hours/week or fewer.
3. Time-Limited Permission Follow-Up Diary: For anyone with time-limited immigration permission (eVisa expiry date shown on the Home Office online check), your statutory excuse expires on that permission end date unless you execute a recorded follow-up online check on or before expiry.

Wire a mandatory Procurement-to-HR gate and insert this clause into every UK supplier, agency, and contractor agreement:

UK SUPPLIER, AGENCY & CONTRACTOR RIGHT-TO-WORK COMPLIANCE SCHEDULE (POST-1 OCT 2026)

1. PRE-ENGAGEMENT VERIFICATION GATE (INDIVIDUAL CONTRACTORS & PSCs)
No Purchase Order, Statement of Work, site badge, or IT credential shall become active for any individual contractor, freelancer, or sole-director Personal Service Company until the individual has completed a prescribed pre-engagement Right to Work check directly with [Company Name]'s Onboarding Desk (via Home Office online share code at gov.uk/view-right-to-work for eVisa/non-UK nationals, or certified UK Digital Identity & Attributes Trust Framework IDSP / original document check for British and Irish citizens).

2. SUBCONTRACTING & SUBSTITUTION RESTRICTION
The Supplier/Contractor shall not subcontract any part of the Services or deploy any substitute individual without: (a) prior written consent from [Company Name]; and (b) completion of a prescribed Right to Work check prior to that individual commencing any Services. Student visa holders may not be engaged on a self-employed basis under any circumstances.

3. CORPORATE SUPPLIER & AGENCY WARRANTIES, AUDIT & INDEMNITY
Where the Supplier/Agency deploys its own personnel onto [Company Name] sites or systems, the Supplier warrants that it has established and retains a full statutory excuse for each deployed individual in accordance with Section 15 of the Immigration, Asylum and Nationality Act 2006 (as amended by Section 48 of the Border Security, Asylum and Immigration Act 2025) and the current Home Office Employer's Guide, tracks all time-limited eVisa expiry dates, and grants [Company Name] 48-hour audit inspection rights. The Supplier indemnifies [Company Name] in full against all civil penalties (up to £60,000 per worker), legal costs, and regulatory losses arising from any breach of this clause.

Closing the Gate Between HR, Procurement, and Site Managers

A written policy does nothing if a warehouse manager can still hand a visitor vest to an unverified agency replacement at 06:00. Lock physical and payment gates together.

Brief site supervisors and budget holders through your manager support channel so nobody bypasses onboarding for an "urgent two-day freelancer."