HMRC security deposits for PAYE and VAT: a Notice of Requirement is not an ordinary tax bill

HMRC can require security where it believes PAYE, National Insurance, VAT or certain other taxes are at serious risk of going unpaid. The security is separate from the normal tax liability and can require the business, a director or another specified person to provide money or another acceptable form of security before continuing normally.

HMRC uses security where tax is seriously at risk

HMRC's September 2026 debt manual says security action is used for PAYE, NIC, VAT and indirect taxes only where serious revenue risk exists and the action is reasonable and proportionate. It is not a routine deposit imposed on every business with one late payment.

Repeated non-payment, phoenix behaviour or other serious risk indicators can bring the business into the security process. Treat early warning letters as a tax-governance escalation rather than waiting for a formal notice.

HMRC serves a formal Notice of Requirement

HMRC's security guidance says a Notice of Requirement explains the legal power, amount, deadline, acceptable security methods, consequences and review or appeal rights. PAYE/NIC and VAT notices have different statutory mechanics.

Read the exact notice rather than assuming it is another overdue-tax demand. The amount held as security can be separate from existing debt and can remain in place for a defined period.

Security can be cash, a performance bond or certain joint accounts

HMRC guidance says security can be provided by a deposit and can also be provided through a performance bond or, in relevant cases, a joint interest-bearing bank or building-society account. HMRC generally prefers electronic payment for cash deposits.

Ask professional advisers which form is commercially sensible. A large cash security deposit can remove working capital from the company even though the money is not ordinary tax paid and gone.

PAYE security can also be required from specified individuals connected with the employer

HMRC says PAYE/NIC security can be required from the employer and, in defined circumstances, directors, company secretaries, similar officers or LLP members. Notices can make more than one person jointly and severally responsible for providing the same security.

Directors should not treat the notice as a finance-department issue only. Personal exposure can arise, and independent tax or legal advice can be important before the response deadline.

A PAYE Time to Pay request can affect the security requirement

HMRC's January 2026 guidance says a person receiving a PAYE/NIC security notice can give security, request Time to Pay or appeal. If HMRC grants the Time to Pay request under the applicable process, the security requirement can be withdrawn.

Do not assume a Time to Pay request automatically suspends everything forever. Follow the notice timetable and get written confirmation of the outcome. If the request is refused, HMRC provides a further period to provide security or appeal.

Keep security deposits separate from ordinary tax payments

HMRC explicitly says a security deposit is not the same as a pre-payment of VAT. Record the asset or restricted balance according to the accounting advice rather than coding it as tax expense simply because HMRC holds the money.

Keep the notice, bank payment, security balance and release or application records together. If HMRC later uses some security against a relevant unpaid debt, the accounting entry should reflect that specific movement.

Worked example: HMRC could require £80,000 of PAYE security from a company that has repeatedly failed to pay deductions. If the company deposits that cash with HMRC, the £80,000 is no longer available for normal working capital even though it is not the same as paying £80,000 of current PAYE. Treasury should model the liquidity effect separately.

Read the appeal deadline immediately. Security notices have formal statutory time limits, and missing them can materially narrow the company's options. The finance director should circulate the notice to tax advisers, directors and any insurer or lender whose covenants could be affected by the cash restriction.

If HMRC later releases the security, reconcile the returned amount and any application against relevant debt carefully. A released deposit should not be mistaken for new trading income; it is the return of a restricted asset or settlement of a tax balance.

Inform lenders where the security requirement materially affects liquidity or covenants. A large cash deposit with HMRC can reduce unrestricted cash and change leverage or working-capital measures even though the underlying business has not bought an asset or repaid ordinary debt.

Once the risk period ends, follow up on release rather than assuming HMRC will return security on the date management expects. Keep a maturity or review date in treasury records and reconcile the returned funds to the original security asset.