CIS Tax Investigation: Triggers, Penalties and Appeal Rights

A CIS tax investigation begins when HMRC sends a letter saying it wants to check your Construction Industry Scheme returns. What follows can be a short records review or an examination stretching over a year, and the financial exposure is real: penalties for inaccuracies can reach 100% of the underpaid tax, and if HMRC decides your subcontractors were really employees, you can be billed for backdated PAYE and National Insurance across several tax years.

What Prompts HMRC to Open a Check

The single biggest trigger is a mismatch between what a contractor reports on monthly CIS returns and what the corresponding subcontractors declare on their self-assessment filings. HMRC’s data-matching system, Connect, cross-references tax records at scale, drawing on every HMRC tax regime and third-party information from banks and insurers. With over 22 billion lines of data, it can map relationships between businesses and individuals down to street level.¹ When the numbers don’t line up, the account gets flagged.

Other patterns raise suspicion:

Frequent payments to unverified subcontractors at the 30% rate.
A history of late or missing monthly returns.
Sudden swings in labour costs without an obvious business reason.
Large material deductions relative to labour, which can look like labour costs being shifted into materials to reduce deductions.

Consistency is what keeps you off the flag list. The figures on your CIS returns should reconcile cleanly with your bank records, your subcontractors’ filings, and your own self-assessment or corporation tax return.

How the Compliance Check Unfolds

The Opening Letter

Everything starts with a written notification. The letter identifies the tax years under review and the records HMRC wants to see, and it defines the scope of the check. Some investigations are narrow, covering only CIS returns for a single year. Others look at the entire business tax position. Read it carefully.

The Meeting and Document Review

An HMRC officer will usually schedule a meeting, often at your premises, to understand how you engage subcontractors, who handles verification and returns, how you separate labour from materials on invoices, and how payments flow. The officer will review original documents and may interview staff involved in payroll or CIS administration. From there, communication runs through formal letters or scheduled calls.

Findings and Closure

After the review, the officer issues a preliminary findings letter setting out any errors or underpayments. You can respond, provide additional evidence, or challenge the conclusions. If the officer’s position doesn’t shift, HMRC issues a formal closure notice specifying the final tax, interest, and penalties. Interest on unpaid tax currently runs at 7.75%.²

Records You Need to Produce

Contractors must keep CIS records for at least three years after the end of the tax year they relate to.³ Six years is safer, because HMRC can go back six years for careless errors and up to twenty where it suspects deliberate underpayment.

At a minimum, have ready:

Copies of every monthly CIS return, showing gross payments, deductions, and the rate applied to each subcontractor.
Payment and deduction statements issued to each subcontractor, showing name, Unique Taxpayer Reference, verification number, and the deduction made.
Evidence that you verified each subcontractor with HMRC before making payments.⁴
Invoices that clearly separate labour from materials, since deductions apply only to the labour element.
Bank statements and payment records that match the amounts on your CIS returns. Unexplained gaps between bank outflows and reported payments are what investigators look for.

Subcontractors under check need their own documentation: records of income received, deduction statements from contractors, business expenses, and evidence of any CIS tax already withheld. When the paperwork is clean, investigations tend to close quickly.

The Employment Status Risk

This is where most contractors underestimate the danger. A CIS compliance check doesn’t just look at whether you filed returns and applied the correct rates. HMRC also examines whether the people you treated as subcontractors were genuinely self-employed. If an investigator decides a worker looked more like an employee, the consequences go well beyond CIS penalties.

When HMRC reclassifies a subcontractor as an employee, the contractor becomes liable for the income tax and National Insurance that should have been deducted through PAYE, including the 13.8% employer’s National Insurance. HMRC can apply this retrospectively across multiple tax years. Add interest and penalties, and a single reclassification decision can produce a substantial bill.

The factors HMRC weighs include whether the worker controls how and when the work is done, whether they provide their own tools, whether they can send a substitute, whether they bear financial risk, and whether they work exclusively for one contractor. No single factor decides it. Investigators look at the reality of the working arrangement, not just the contract. A subcontractor who works set hours at your site, uses your tools, and has no realistic ability to send a replacement will not be saved by paperwork calling them self-employed.

Written contracts that accurately reflect the working relationship, along with evidence of each subcontractor’s independence, are essential. Notes explaining why specific workers were not put on payroll can also help if the question arises.

Penalties for Late CIS Returns

Late filing penalties under Schedule 55 of the Finance Act 2009 escalate on a fixed timeline:⁵

One day late: £100 fixed penalty.
Two months late: an additional £200.
Six months late: £300 or 5% of the CIS deductions on the return, whichever is higher.
Twelve months late: another £300 or 5% of deductions, whichever is higher.

For returns still outstanding beyond twelve months, HMRC can impose a further penalty of up to £3,000 or 100% of the deductions on the return, whichever is higher.⁵ The penalties stack. A contractor who files six months late on a return showing £10,000 in deductions faces the £100 initial penalty, the £200 two-month penalty, and a £500 six-month penalty, totalling £800 on that single return. Across several missed months, the total climbs quickly.

Where HMRC finds the withholding of information was deliberate but not concealed, the twelve-month penalty floor rises to the greater of 70% of deductions or £1,500. Deliberate and concealed pushes it to the greater of 100% or £3,000.⁶

Penalties for Inaccurate Returns

Separate from late filing, Schedule 24 of the Finance Act 2007 covers penalties for inaccuracies that lead to tax being underpaid. The penalty depends on the nature of the error:⁷

Careless: up to 30% of the potential lost revenue.
Deliberate but not concealed: up to 70%.
Deliberate and concealed: up to 100%.

The distinction matters. A careless error means you failed to take reasonable care but weren’t trying to mislead HMRC, as with sloppy labour and material allocations. Deliberate means you knew the return was wrong when you filed it. Deliberate and concealed means you took active steps to hide the inaccuracy, such as maintaining a second set of books or fabricating invoices.

How Disclosure Reduces the Penalty

HMRC rewards cooperation. Telling HMRC about an error before it comes looking is an unprompted disclosure and cuts the penalty significantly. Coming forward after HMRC has already opened a check is a prompted disclosure, and the reductions are smaller.

The minimum penalties after disclosure for domestic (Category 1) inaccuracies are:⁷

Careless (standard 30%): minimum 15% if prompted, potentially 0% if unprompted.
Deliberate (standard 70%): minimum 45% if prompted, minimum 30% if unprompted.
Deliberate and concealed (standard 100%): minimum 60% if prompted, minimum 40% if unprompted.

The quality of your disclosure also affects the reduction. HMRC weighs three things: how fully you tell them about the error, how much help you give in working out the correct figure, and how willingly you allow access to your records.⁸ A contractor who spots a misallocation, tells HMRC immediately, provides corrected figures, and hands over supporting records has a strong case for the minimum. Someone who grudgingly concedes each point after being confronted with evidence will land near the maximum.

Gross Payment Status at Risk

If you hold gross payment status, an investigation threatens more than penalties. Gross payment status lets you receive full payment from contractors without any CIS deduction, a significant cash-flow advantage. HMRC runs an annual compliance test on your tax obligations, and failing it means losing that status.

The test checks whether you’ve filed CIS, PAYE, income tax self-assessment, and corporation tax returns on time, and paid the tax due. From April 2024, VAT filing and payment were added to the test.⁹ HMRC can cancel gross payment status with immediate effect if the conditions are no longer met.

Losing it forces you back to the standard 20% deduction on all payments. For a subcontractor turning over hundreds of thousands of pounds, that’s a significant cash-flow hit. You’ll get the deducted tax back when you file your self-assessment, but until then you’re funding HMRC’s collection out of your working capital. It also signals compliance problems to potential clients. There is a right to appeal a removal decision, and you won’t lose the status if you can show a reasonable excuse for the compliance failure.⁹

Your Rights and How to Appeal

The HMRC Charter sets standards officers must follow during compliance checks. They must assume you’re telling the truth unless they have good reason to think otherwise, give accurate and consistent information, and be mindful of your personal situation.¹⁰

Key rights during a check:

You can have an accountant or tax adviser deal with HMRC on your behalf, provided you authorise them.
HMRC can only examine what falls within the scope set out in the opening letter. Widening the investigation requires notice.
HMRC should resolve checks as quickly as possible and tell you what to expect at each stage.

If the check ends with a decision you disagree with, you have 30 days to respond. HMRC’s letter sets out three routes:¹¹

Send additional evidence to the officer handling your case and ask them to reconsider.
Request a statutory review, in which a different HMRC officer with no prior involvement looks at your case with fresh eyes. This is faster and cheaper than tribunal.
Appeal to the First-tier Tribunal, which is independent of HMRC.

A statutory review doesn’t close off a tribunal appeal afterwards if you’re not satisfied with the outcome.¹⁰ The 30-day window is tight. Missing it doesn’t always end your right to appeal, but you’ll need to show a reasonable excuse, and the process gets harder. If you receive a decision you want to challenge, get professional advice quickly.

1
European Labour Authority. Data Mining Tools and Methods to Tackle the Hidden Economy in the UK
2
GOV.UK. HMRC Interest Rates for Late and Early Payments
3
GOV.UK. What You Must Do as a Construction Industry Scheme (CIS) Contractor – Record Keeping
4
GOV.UK. What You Must Do as a Construction Industry Scheme (CIS) Contractor – Verify Subcontractors
5
GOV.UK. What You Must Do as a Construction Industry Scheme (CIS) Contractor – File Your Monthly Returns
6
GOV.UK. Debt Management and Banking Manual – Schedule 55 CIS Penalties
7
Legislation.gov.uk. Finance Act 2007 Schedule 24
8
GOV.UK. Compliance Handbook – Penalty Reductions for Disclosure
9
GOV.UK. Strengthening the Tests for Gross Payment Status for the Construction Industry Scheme
10
GOV.UK. The HMRC Charter
11
GOV.UK. HMRC Compliance Checks – Help and Support