Every UK employer has a legal duty to prevent illegal working. In 2026, that duty has never carried higher financial stakes. The Home Office has significantly increased the civil penalties it can impose on businesses found employing workers without the right to work in the UK, and enforcement activity continues to rise. This guide explains exactly what the penalties are, how they are calculated, what triggers an investigation, and what your business must do to stay fully compliant and protected.
What is a civil penalty for illegal working?
A civil penalty for illegal working is a fine issued by the Home Office to an employer who is found to have employed a person who did not have the legal right to work in the UK. It is a civil rather than criminal sanction, which means it does not result in a prosecution in the first instance. However, it is a serious financial and reputational consequence that can have a lasting impact on your business.
The penalty is issued under the Immigration, Asylum and Nationality Act 2006 and applies to any employer, regardless of size, sector, or whether the illegal working was intentional. Even if you genuinely did not know that an employee lacked the right to work, you can still receive a penalty if you failed to carry out the correct checks before they started work.
How much is the civil penalty in 2026?
The Home Office increased civil penalty amounts significantly in February 2024, and these higher rates remain in force throughout 2026. Employers need to be aware of the current figures, as many businesses are still operating under the mistaken assumption that the old, lower amounts apply.
For a first breach, the maximum penalty is now Β£45,000 per illegal worker. For a repeat breach, meaning a second or subsequent illegal working penalty within three years of a previous one, the maximum penalty rises to Β£60,000 per illegal worker.
These figures represent the maximum amounts. The actual penalty issued to your business can be reduced depending on the circumstances, but the starting point in 2026 is considerably higher than most employers realise.
How does the Home Office calculate the penalty amount?
The Home Office does not automatically issue the maximum penalty in every case. It uses a penalty calculation framework that takes a number of factors into account.
The starting point is the maximum rate applicable to your situation, either Β£45,000 for a first breach or Β£60,000 for a repeat breach, multiplied by the number of illegal workers found. From that figure, reductions may be applied based on mitigating factors.
A reduction is available if you report the worker to the Home Office yourself before an investigation begins. A further reduction applies if you cooperate fully with the Home Office during the investigation. A third reduction is available if you have effective HR systems and right to work processes in place, even if a breach still occurred.
One critical incentive that many employers are unaware of is the fast payment option. If your business receives a Civil Penalty Notice for a first breach and you pay the full penalty within 21 days, you are eligible for a 30% reduction on the amount owed. For a business facing a Β£45,000 penalty per worker, this reduction is financially significant and should be considered carefully as part of your response strategy. If you are in this position, taking immediate legal advice to weigh up the fast payment option against the merits of an objection or appeal is strongly recommended.
In practice, an employer who self-reports, cooperates, and can demonstrate robust compliance systems may receive a penalty significantly below the maximum. Conversely, an employer who is uncooperative, has no compliance systems, and is found during a targeted enforcement visit is likely to receive the full amount or close to it.
What triggers a Home Office illegal working investigation?
Understanding what draws the attention of Home Office enforcement teams is important for any employer. Investigations are not always random. They are often triggered by specific intelligence or complaints.
The most common triggers include anonymous tip-offs from members of the public or disgruntled former employees, referrals from other government agencies such as HMRC or the Gangmasters and Labour Abuse Authority, patterns identified through data matching across government systems, and targeted sector operations in industries the Home Office considers higher risk.
The sectors that face the most enforcement activity in 2026 include hospitality, construction, agriculture, car washes, nail bars, food processing, and social care. If your business operates in any of these sectors, the likelihood of an unannounced visit is higher than in other industries.
A specific enforcement focus in 2026 that employers must be aware of is the issue of supplementary work by Skilled Worker visa holders. A sponsored worker is permitted to carry out supplementary work of up to 20 hours per week, but only in the same profession or a role on the shortage occupation list. If a worker exceeds the 20-hour limit, or their secondary role does not meet the qualifying conditions, the secondary employer is exposed to a civil penalty even if they carried out a right to work check showing the worker had a valid visa. If you employ part-time workers who are on a Skilled Worker visa sponsored by another employer, you must verify not only that they have the right to work but also that their supplementary work with you falls within the permitted limits.
Employers who hold a sponsor licence should also be aware that a compliance visit related to their sponsorship obligations can uncover illegal working issues at the same time, leading to both a civil penalty and action against their licence.
Criminal liability: when does illegal working become a criminal offence?
While a civil penalty is the standard consequence for employing an illegal worker, there are circumstances in which an employer can face criminal prosecution instead of, or in addition to, a civil penalty.
Criminal liability arises where an employer knowingly employs a person who does not have the right to work in the UK. If convicted, an individual employer or director can face an unlimited fine and up to five years in prison. The business itself can also face an unlimited fine.
The distinction between civil and criminal liability turns on knowledge. If you did not know and could not reasonably have known, the civil penalty route applies. If evidence suggests you were aware of the worker’s illegal status and employed them regardless, the criminal route becomes available to the Home Office.
In 2026, the Home Office has made clear that it will not hesitate to pursue criminal prosecutions in cases involving deliberate exploitation of illegal workers, particularly where there is evidence of a pattern of behaviour or organised criminal networks.
The statutory excuse: your most important protection
The single most important concept for any employer to understand in the context of illegal working is the statutory excuse. If you have a valid statutory excuse in place for every employee, you cannot be held liable for a civil penalty, even if it later emerges that the worker did not have the right to work.
A statutory excuse is established by carrying out the correct right to work check before an employee starts work and retaining a record of that check. The check must be done in the correct way, using the correct method, and the documents or digital confirmation must be retained for the duration of employment and for two years after it ends.
There are three ways to establish a statutory excuse in 2026.
Online right-to-work checks using the Home Office checking service
For the vast majority of non-British and non-Irish workers in 2026, the correct and only valid method is to use the Home Office online right to work checking service using the worker’s Share Code. The eVisa transition is now complete. Physical Biometric Residence Permits expired on 31 December 2024 and are no longer valid evidence of the right to work. This is a critical point that many employers have not yet fully absorbed.
If a worker presents you with a physical BRP card that appears valid on its face, accepting it as right to work evidence does not give you a statutory excuse. The card has expired as a form of evidence regardless of what it shows. The Share Code check through the Home Office online service is now the gold standard for all workers holding digital immigration status, and using any other method for these workers leaves your business fully exposed to a penalty.
The online check must be completed, the result must be saved and retained, and the check must be carried out before the worker begins employment. There is no substitute for this process in 2026.
Manual document checks for British and Irish citizens
For employees who are British or Irish citizens and hold a valid passport or other acceptable document from List A, a manual check remains valid. This involves inspecting the original document in person, confirming it appears genuine and relates to the person presenting it, and making and retaining a clear copy.
However, the term “manual” in 2026 does not mean paper-only. For British and Irish citizens holding a valid passport, employers can also use a certified Identity Service Provider (IDSP) to carry out a digital identity document validation check under the Identity Document Validation Technology (IDVT) framework. Using a Home Office certified IDSP provides the same statutory excuse as a manual check and offers a faster, more reliable process for employers hiring at volume. The IDSP must be certified by the UK Digital Identity and Attributes Trust Framework to count as a valid check. This digital route is available only for British and Irish citizens and cannot be used for workers whose right to work is based on immigration status.
Employer checking service for uncertain cases
Where a worker’s right to work cannot be verified using the online service or a manual check, for example where their visa application or appeal is pending with the Home Office, employers can use the Employer Checking Service. A Positive Verification Notice from this service establishes a statutory excuse for six months.
Follow-up checks: time-limited right to work
Not every right-to-work check is a one-time event. Where an employee has a time-limited right to work, for example a person on a Skilled Worker visa or a Graduate visa, you must carry out a follow-up check before their current permission expires.
Failing to carry out a follow-up check and continuing to employ the worker after their visa has expired means you will no longer have a statutory excuse for that employee. If the Home Office then identifies that worker during an enforcement visit, you will be exposed to the full civil penalty as though no check had ever been done.
The timing of follow-up checks is more critical than many employers appreciate. Technically, your statutory excuse remains intact until the day the visa expires. However, with the Home Office online checking service now operating in real time, there is no margin for error. A check carried out even one day after a visa expires means there is a period, however brief, during which the worker had no valid right to work and your business had no statutory excuse. That gap is enough to create liability.
In practice, you should carry out follow-up checks at least six to eight weeks before the expiry date. This allows time for the worker to make a renewal application, for the Home Office to process it, and for you to use the Employer Checking Service if the renewal is still pending at the point the original visa expires. Waiting until the last moment is a compliance risk that is entirely avoidable.
In 2026, maintaining a reliable system for tracking visa expiry dates across your workforce is not optional. It is a core compliance requirement.
What happens during a Home Office enforcement visit?
If the Home Office decides to investigate your business, officers may arrive without any prior notice. They have the power to enter your premises, question staff, and request access to employment records and right to work documentation.
During the visit, officers will typically ask to see your right to work records for all employees, including the original documents or digital check records. They may ask to speak with individual workers and will cross-reference what they find against Home Office databases.
If a worker is found to have no right to work, or if your records show that the correct check was not carried out or was not retained, officers will note this as a potential breach. You will then receive a Referral Notice, which begins the formal penalty process.
Following the Referral Notice, you will receive either a Warning Notice (for a first breach where mitigating factors are strong) or a Civil Penalty Notice setting out the amount you are required to pay. You have 28 days from the date of the Civil Penalty Notice to pay, object, or appeal.
How to object to or appeal a civil penalty
If you receive a Civil Penalty Notice and you believe it is wrong, you have the right to challenge it. There are two routes available.
The first is an objection to the Home Office itself. You must submit this within 28 days of the notice. The Home Office will review the penalty and can reduce it, cancel it, or confirm it. If you are not satisfied with the outcome of the objection, you can then appeal to the County Court.
The second route is to go directly to the County Court without first making an objection to the Home Office. This is less common but available to employers who wish to proceed straight to a judicial forum.
Grounds for challenging a penalty include that the employer is not liable because a correct statutory excuse was in place, that the penalty amount is too high given the circumstances, or that there were procedural errors in how the investigation or penalty was issued.
Legal advice is strongly recommended before submitting an objection or appeal. An experienced immigration solicitor can assess the strength of your position, identify any procedural irregularities, and present your case in the most effective way.
Impact of a civil penalty on your sponsor licence
For businesses that hold a sponsor licence, a civil penalty for illegal working can have consequences that go well beyond the financial fine itself.
The Home Office treats a civil penalty as a serious compliance failure. If you hold a sponsor licence and receive a civil penalty, your licence is likely to be reviewed. Depending on the circumstances, your licence may be downgraded to a B-rating, suspended, or revoked entirely.
A revocation of your sponsor licence means you lose the ability to employ overseas workers on sponsored visas. Any workers you are currently sponsoring may have their leave curtailed, and you will face a cooling-off period before you can reapply for a new licence.
In 2026, with the Home Office taking an increasingly joined-up approach to employer compliance, it is more important than ever to treat right to work compliance and sponsorship compliance as two parts of the same obligation rather than separate systems.
Best practices to protect your business in 2026
Preventing a civil penalty begins long before an enforcement officer arrives at your door. The following steps represent the minimum standard your business should be operating to in 2026.
Carry out right to work checks on every employee without exception
No employee should start work before a right to work check has been completed and documented. This applies equally to full-time, part-time, casual, and zero-hours workers. It applies to British citizens as well as overseas nationals. There are no exceptions based on job level, length of service, or personal knowledge of the individual.
Use the correct checking method for each worker type
In 2026, the method you use must match the type of evidence the worker can provide. Workers with digital immigration status must be checked using the Home Office online service with their Share Code. British and Irish citizens with a valid passport can be checked manually or through a certified IDSP. Do not accept expired BRP cards as evidence of right to work under any circumstances.
Retain your records correctly
Right to work records must be retained for the duration of employment and for two years after the employment ends. Records should be stored securely and be easily retrievable in the event of a compliance visit. Digital storage is acceptable provided the records are complete and accessible.
Implement a visa expiry tracking system
Maintain a clear record of every employee whose right to work is time-limited and set reminders for follow-up checks at least six to eight weeks before the expiry date. Even a single day without a valid check in place creates a period of illegal working that exposes your business to a penalty.
Train your HR team regularly
Right to work legislation and Home Office guidance changes regularly. The staff responsible for carrying out checks should receive up-to-date training at least annually and whenever significant changes to the rules occur.
Conduct internal audits
Do not wait for the Home Office to identify gaps in your compliance. Conduct regular internal audits of your right to work records and address any issues you find proactively. If you identify a worker whose check was not done correctly, take legal advice immediately on the best way to remedy the situation.
Changes and updates to illegal working enforcement in 2026
The Home Office has continued to increase both the frequency and the sophistication of its illegal working enforcement activity in 2026. The higher penalty rates introduced in 2024 remain in place, and there is no indication that they will be reduced. Intelligence-led operations are now more common than random visits, meaning businesses in targeted sectors face a higher probability of scrutiny.
There is also increased coordination between the Home Office and other enforcement agencies, including HMRC, the Health and Safety Executive, and local authorities. An employer investigated by one agency for an unrelated matter may find that information is shared with Home Office immigration enforcement teams.
Employers who operate labour supply chains, use umbrella companies, or engage workers through agencies should be aware that while day-to-day responsibility for right to work checks typically sits with the direct employer, the legal framework around liability in supply chains is a developing area that warrants careful attention.
How Lawsentis can help you
At Lawsentis, our specialist immigration solicitors work with UK employers across all sectors to build robust right to work compliance systems, respond to Home Office investigations, and challenge civil penalties where grounds exist to do so.
If your business has received a Civil Penalty Notice, a Referral Notice, or a Warning Notice, we can advise you quickly on your options and represent you through the objection or appeal process. We understand how damaging a civil penalty can be, both financially and reputationally, and we work hard to achieve the best possible outcome for every client.
If you want to be proactive rather than reactive, we can also carry out a compliance audit of your current right to work processes, identify any gaps or risks, and help you put the systems in place that will protect your business if the Home Office ever comes knocking.
We also advise employers who hold sponsor licences on managing the relationship between their sponsorship obligations and their broader right to work duties, helping them to stay compliant on both fronts and avoid the compounding consequences that come when the two overlap.
Contact Lawsentis today. Whether you are facing a penalty or simply want to make sure your business is fully protected, our team is ready to help.
Frequently asked questions
1. What is the maximum civil penalty for illegal working in the UK in 2026?
The maximum civil penalty for a first breach is Β£45,000 per illegal worker. For a repeat breach within three years of a previous penalty, the maximum rises to Β£60,000 per illegal worker. These rates have been in force since February 2024 and remain unchanged in 2026. If you receive a Civil Penalty Notice for a first breach and pay within 21 days, you are eligible for a 30% reduction on the amount owed under the fast payment option.
2. Can I still accept a Biometric Residence Permit as proof of right to work in 2026?
No. Physical Biometric Residence Permits expired as valid evidence of right to work on 31 December 2024. Accepting a BRP card, even one that appears valid on its face, does not give your business a statutory excuse. For all workers holding digital immigration status, you must use the Home Office online checking service with their Share Code. This is now the only valid method for these workers and there are no exceptions.
3. Can I avoid a civil penalty if I did not know the worker was illegal?
Not knowing that a worker lacked the right to work does not automatically protect you from a civil penalty. The key question is whether you carried out the correct right to work check before the worker started and retained a proper record of that check. If you did, you will have a statutory excuse and cannot be held liable. If you did not, you remain exposed to a penalty regardless of whether you were aware of the worker’s immigration status.
4. How long do I have to challenge a civil penalty notice?
You have 28 days from the date of the Civil Penalty Notice to pay the penalty, submit an objection to the Home Office, or appeal to the County Court. Missing this deadline significantly limits your options. If you receive a Civil Penalty Notice, you should seek legal advice as quickly as possible so that your response can be properly prepared and submitted within the time limit.
5. Will a civil penalty for illegal working affect my sponsor licence?
Yes, it can. The Home Office treats a civil penalty as evidence of a compliance failure, and this is taken into account when assessing whether an employer is fit to hold a sponsor licence. Depending on the circumstances, your licence may be reviewed, downgraded, suspended, or revoked following a civil penalty. If you hold a sponsor licence and have received or are at risk of receiving a civil penalty, you should take specialist immigration advice immediately to understand how to protect your licence at the same time as addressing the penalty itself.