Umbrella company cloning is an increasing fraud risk facing contractors in the UK today. Unlike broader scams that rely on vague promises or hidden fees, cloning is a precise operation: criminals create a near-identical copy of a legitimate umbrella company, replicating its name, branding, website, and mimicking registration details, to intercept contractor payments before they reach the real provider.

The FCSA has been warning of a rising number of these cases since 2022, and the consequences for contractors caught up in them can be severe. This article explains how umbrella company cloning works, what it means for your pay and tax obligations, and what steps you can take to protect yourself.

How Umbrella Company Cloning Works

A cloned umbrella company is designed to be almost indistinguishable from the real thing. Fraudsters study a legitimate provider, including its website, logo, colour scheme, and even the names of directors, and build a convincing replica. They register a company with a similar name at Companies House, set up a professional-looking website, and open bank accounts in the cloned company’s name.

The clone is then inserted into the supply chain. Recruitment agencies or contractors are contacted by someone posing as the legitimate provider, often with matching email addresses and branding. Payments are diverted to the fraudulent entity’s bank account, and the criminals may retain tax and other deductions that should have been passed on to HMRC (PAYE, National Insurance contributions, and VAT).

The fraud works because it exploits trust. Contractors and agencies already familiar with a reputable umbrella company have no reason to question what appears to be routine correspondence from a provider they recognise.

The Clarity Umbrella Case

Clarity Umbrella Ltd offers a stark example. In July 2026, Clarity was cloned for the second time, when criminals set up a duplicate entity with copied branding and a fraudulent website designed to capture contractor payments. A second attack on the same provider underlines how persistent and organised these operations have become.

The Clarity case is far from isolated. The FCSA has warned that cases of cloned umbrella companies in the UK are increasing, with fraudsters targeting well-known, accredited providers precisely because their reputations make the clones more believable.

Financial and Tax Consequences for Contractors

When your payments are diverted to a cloned umbrella company, the financial impact goes beyond a missing payslip. Here is what contractors need to understand:

• Lost earnings. Payments sent to a fraudulent entity are unlikely to be recovered. The money is typically moved quickly through multiple accounts and withdrawn.
• Unpaid tax and National Insurance. The clone collects PAYE and NIC from your gross pay but never passes it to HMRC, and you may be held responsible for the shortfall.
• VAT fraud exposure. If the fraudulent entity collects VAT but never remits it, HMRC investigations can extend to the supply chain.
• Record damage. Gaps in your National Insurance record can affect state pension entitlement, and unresolved tax issues can create problems with future employment or mortgage applications.

Umbrella company fraud in 2026 is not an abstract risk. It hits contractors directly in their pay packets, tax records, and long-term financial security.

How to Spot a Fake Umbrella Company: Your Verification Checklist

Knowing how to spot a fake umbrella company is your strongest defence. Before signing up with any provider, or if you receive unexpected communication from one you already use, work through this checklist:

• Check FCSA membership directly. Do not rely on a logo on a website. Visit the FCSA website and search for the company by name. An FCSA accredited umbrella company will appear in the member directory. If it is not listed, treat it with caution.
• Verify Companies House registration. Search for the company on Companies House and check the registered address, director names, incorporation date, and filing history. Clones often have very recent incorporation dates or addresses that do not match the legitimate provider.
• Confirm SafeRec certification. SafeRec provides independent verification of compliant umbrella companies. Check that your provider holds current SafeRec certification — it is another layer of assurance that the company operates legitimately.
• Use the Diligence Hub. The Diligence Hub allows you to verify an umbrella company’s compliance credentials in one place. If a provider cannot be found on the Diligence Hub, that is a significant warning sign.
• Contact the company directly. Use contact details from the provider’s verified website or your original contract, never from an unsolicited email or message. Call them and confirm any changes to bank accounts, payment processes, or points of contact.

Red Flags to Watch For

Beyond the verification checklist, certain warning signs should raise immediate concern:

• Unexpected requests to change bank account details. This is the single most common tactic in umbrella company cloning. If you or your agency are asked to update payment details, verify the request independently before acting.
• Unusually high take-home pay promises. If a provider is promising significantly more take-home pay than competitors, it may be operating outside PAYE rules, or it may not be paying your tax at all.
• No verifiable accreditation. A legitimate umbrella company will hold recognised accreditations and be happy to have them verified. If a provider cannot be found on the FCSA, SafeRec, or Diligence Hub, it’s best to walk away.
• Poor-quality communication. Cloned websites and emails may contain subtle errors, slightly different domain names, inconsistent formatting, or generic email addresses.
• Pressure to act quickly. Fraudsters rely on urgency. Any pressure to sign documents or enter into a contract immediately, without time to verify credentials, is a red flag.

How SmartWork’s Credentials Protect You

At SmartWork, we hold our credentials to the highest standard, and every one of them is independently verifiable.

• FCSA accredited, searchable on the FCSA member directory.
• SafeRec-certified, so we are on SafeRec’s certified umbrella directory.
• Listed on the Diligence Hub; members can check our status and compliance on the Diligence Hub.
• ISO 27001 certified; our information security management meets international standards.
• APSCo Affiliate, recognised by the Association of Professional Staffing Companies.

These are not logos on a page. They are live, checkable credentials you can verify at any time. A cloned company cannot replicate verified membership of these bodies, because the bodies themselves maintain their own records.

We encourage every contractor, whether you work with SmartWork or another provider, to verify before you trust.

Verify Your Umbrella Company’s Credentials Today

Umbrella company cloning is a real, growing threat, and contractors are its primary target. The good news is that protecting yourself does not require specialist knowledge. It requires a few minutes of independent verification.

Check your umbrella company’s FCSA membership. Search for it on Companies House. Confirm its SafeRec certification and Diligence Hub listing. If anything does not add up, pause and investigate before any payments are made.

If you are looking for an umbrella company whose credentials stand up to scrutiny, talk to SmartWork today. Every accreditation we hold is independently verifiable, because that is exactly how it should be.

Please remember to follow us on LinkedIn, Facebook, and Twitter if you’d like to keep up with new articles and industry updates.