Payroll feels straightforward until it isn't. A missed submission deadline, an incorrectly coded employee, or a miscalculated statutory payment can quietly snowball into a formal HMRC penalty notice — and, in serious cases, a compliance investigation. For UK small business owners already stretched thin, these penalties aren't just an inconvenience; they can materially damage cash flow. Understanding exactly how HMRC penalises payroll mistakes is the first step to making sure you never have to pay one.
How the RTI System Works — and Where It Goes Wrong
Real Time Information (RTI) has been the cornerstone of PAYE reporting since April 2013. Under RTI, employers must submit a Full Payment Submission (FPS) to HMRC on or before the date employees are paid — not monthly, not annually, but every single payday. An Employer Payment Summary (EPS) is also required whenever you've made no payments in a tax month, or when you want to recover statutory payments such as Statutory Maternity Pay (SMP).
The most common RTI errors aren't dramatic. They include submitting an FPS a day late because payday fell on a bank holiday, using the wrong National Insurance number for a new starter, or forgetting to submit an EPS when an employee goes on long-term sick leave. Each of these triggers a flag at HMRC. Collect enough flags, and you'll receive a penalty notice.
It's worth noting that HMRC does allow a limited three-day relaxation for employers who pay employees early around bank holidays — but this is a narrow concession, not a general grace period.
The Penalty Figures You Need to Know
HMRC's penalty structure for late or missing FPS submissions is tiered by employer size:
- 1–9 employees: £100 per month for each month the failure continues
- 10–49 employees: £200 per month
- 50–249 employees: £300 per month
- 250 or more employees: £400 per month
These figures apply per PAYE scheme, not per employee. If you run multiple schemes — common among growing businesses or accountants managing several clients — each one is assessed independently.
On top of late filing penalties, HMRC levies a separate penalty for late payment of PAYE and National Insurance. This starts at 1% of the unpaid amount for the first default in a tax year, rising progressively to 4% for four or more defaults. A deliberate underpayment — where HMRC judges you knew you owed more — can attract a penalty of up to 100% of the unpaid tax. These are not theoretical numbers; HMRC issued over 130,000 PAYE penalty notices in a single recent tax year.
There is also an in-year interest charge on late PAYE payments, currently set at the HMRC late payment interest rate (Bank of England base rate plus 2.5%). For a small business carrying even a £5,000 PAYE underpayment across several months, this adds up faster than most people expect.
Auto-Enrolment: A Separate (and Often Overlooked) Compliance Risk
Workplace pension auto-enrolment is enforced not by HMRC but by The Pensions Regulator (TPR) — a distinction many small business owners miss entirely. This means you can be fully up to date with HMRC and still receive a compliance notice from TPR if you've failed to enrol eligible workers promptly, contributed below the minimum thresholds, or neglected to re-enrol every three years.
TPR's penalty regime escalates quickly. A fixed penalty notice starts at £400. If non-compliance continues, escalating penalty notices of between £50 and £10,000 per day are applied, depending on the size of the employer. For a small firm with 10 employees, even a few weeks of non-compliance could result in fines exceeding £10,000.
The practical takeaway here is straightforward: payroll compliance in the UK means satisfying two separate regulatory bodies. A good payroll process must address both RTI submissions to HMRC and pension contribution calculations and declarations to TPR.
The Hidden Costs Beyond the Fine Itself
Penalties are the visible cost of getting payroll wrong. The hidden costs are often larger. Consider the time spent responding to HMRC correspondence, gathering historic payroll records, and potentially engaging a specialist accountant or tax adviser to negotiate a settlement. Professional fees for dealing with a formal PAYE compliance check can easily run into several thousand pounds.
There's also the reputational dimension. Employees who receive incorrect payslips, late payments, or wrong P60s lose confidence in the business. Statutory rights depend on accurate payroll — an employee incorrectly recorded as earning below the Lower Earnings Limit may lose entitlement to Statutory Sick Pay. That's not just an HR problem; it's a legal one.
For accountants managing payroll on behalf of clients, the stakes are even higher. A single systemic error — such as a payroll software misconfiguration that applies the wrong tax code across an entire client base — can trigger multiple penalty notices simultaneously and expose the practice to professional indemnity claims.
Using a platform that submits directly to HMRC via the RTI API, rather than relying on manual exports and bridging files, dramatically reduces this category of risk. BizHub365, for example, handles RTI payroll with direct FPS and EPS submissions built into the workflow, meaning there's no separate step where a file can be forgotten or mis-filed.
What to Do If You've Already Made a Mistake
First: don't panic, and don't ignore it. HMRC distinguishes clearly between taxpayers who come forward voluntarily and those who are discovered. Voluntary disclosure almost always results in a lower penalty — sometimes a complete waiver of the surcharge element — while waiting to be found typically results in the maximum applicable penalty plus interest.
If you've missed an FPS, submit it as soon as possible and include a correction if figures were wrong. HMRC's Basic PAYE Tools or a compliant payroll package will allow you to submit an amended FPS for a previous period. If you've underpaid PAYE, contact HMRC's Employer Helpline (0300 200 3200) before the next payment due date. For more complex situations — historic underpayments, employment status disputes, or IR35 queries — engaging a chartered accountant or tax adviser before contacting HMRC is generally wise.
The right paperwork matters too. HMRC expects employers to retain payroll records for at least three years after the end of the relevant tax year. If you can't produce a complete record during a compliance check, the burden of proof shifts towards you — and penalties can be inferred rather than calculated precisely, which rarely works in the employer's favour.
Prevention Is Cheaper Than the Cure
The most cost-effective payroll strategy is simply one that works consistently. That means running payroll on a fixed schedule, reconciling PAYE payments before each payment deadline (the 19th of each month for cheque payments or the 22nd for electronic), and reviewing payroll records each time an employee joins, leaves, or changes hours.
Automation helps here — not as a luxury, but as a genuine risk-reduction measure. When your payroll software automatically calculates NI, tax, and pension contributions and submits the FPS directly to HMRC, there are fewer manual touchpoints where errors creep in. For small businesses managing payroll alongside everything else, that reliability is worth a great deal. BizHub365 was built with exactly this in mind, combining full PAYE payroll — including P60/P45 generation, auto-enrolment support, and statutory payments — within the same platform used for invoicing, VAT, and accounting.
Getting payroll right isn't complicated, but it does require consistency. Set up the right processes once, use software you can trust, and the HMRC penalty notices will stay firmly in someone else's inbox.