HMRC's Direct Debit Mandate for VAT and PAYE: What It Means for Your Practice

General information for practice owners, current as at 17 August 2026. Figures are taken from the HMRC consultation document and published GOV.UK rates on that date. Rules and deadlines change — take your own advice before acting.

HMRC's consultation Requiring payment of VAT and PAYE return liabilities by Direct Debit closed at 11.59pm on 16 August 2026. It opened on 23 June and ran for eight weeks. The GOV.UK page now carries the line "we are analysing your feedback", which is the point in the cycle where most practice owners stop paying attention and get on with the July VAT quarter.

That would be a mistake, for one reason. Almost every compliance change of the last three years — MTD, identity verification, adviser registration — has landed on your firm as workload rather than on your clients as inconvenience. This one is the same shape, but with a twist most of the coverage has skated over: you are not permitted to do the thing HMRC would require. Only the client can.

What HMRC has actually proposed

The proposal is to make Direct Debit the required method of paying VAT and PAYE return liabilities, rather than the Faster Payments, CHAPS and manual bank transfers that currently carry most of the money. HMRC's stated objectives are to cut late payment, reduce misallocated payments and stop avoidable tax debt building up.

The scale is the whole business population. HMRC puts the number of businesses registered for VAT and PAYE as at March 2025 at 2.73 million, with around 2.4 million falling inside the scope being consulted on. For VAT, collection would be taken three days after the due date. For PAYE, collection would be shortly after the 22nd of the month, or four working days after the return is filed where that filing happens after the 19th. In both cases HMRC would notify the payer no later than three working days before taking the money.

The penalty that bites even when the client pays on time

Here is the part worth reading twice. The consultation asks about introducing a penalty where a payment is not made by Direct Debit and the payer is not excepted — and it is explicit that such a penalty could apply even where the tax has been paid in full and on time by another electronic method.

Every VAT and PAYE payment penalty that exists today is triggered by paying late or paying short. This one would be triggered by the method alone. A client who has paid every VAT bill on the nose for fifteen years by bank transfer would be in penalty territory for carrying on exactly as they are. HMRC did not put a figure on it; the consultation asked respondents what an appropriate penalty would look like, which is a reasonable signal that the design is genuinely open.

The quieter lever: seven days of working capital

The penalty has taken the headlines, but the second option in the consultation is the one more likely to change behaviour, because it costs nothing to administer. A seven-day extension currently applies where a VAT return is both filed and paid electronically — the reason so many VAT payments land on the seventh of the month rather than the last working day. PAYE has the same structure: the 19th for cheques, the 22nd for electronic payment.

The consultation floats restricting both of those extensions to Direct Debit payers only. No penalty, no new machinery. The deadline simply moves back for anyone who does not sign a mandate.

Who would be excepted

The consultation is clear that a mandate cannot be universal, and sets out where the edges fall.

For a typical general practice, the honest read is that almost nobody on your client list gets out of this. The exceptions cover a genuinely small tail.

Why this lands on your firm, not your clients

This is the detail that converts a payments policy into a workload problem. You cannot set up a client's Direct Debit for them. Direct Debit mandates are governed by banking rules requiring the authority of the account holder, so the business has to do it through its own VAT online account — or, where the bank account needs more than one signature, on the paper VATC9. Your agent services account gives you no route in.

So for every VAT-registered client and every payroll client, the job you can do is: explain it, prompt them, send the instructions, and chase. The job you cannot do is finish it. That is the worst possible shape of task for a practice — unbillable, un-delegable to software, and entirely dependent on a client logging in.

Put numbers on it. A firm with 250 VAT-registered clients and 180 payroll clients is looking at around 430 mandates. At fifteen minutes each of explaining, prompting and chasing — optimistic for the third of clients who will need two or three reminders — that is roughly 107 hours, or about fourteen working days of someone's time, on top of a normal compliance cycle. It is the same arithmetic that made identity verification hurt, and it is why we wrote about the 2026 capacity crunch in the first place.

The practical move for the next quarter

You do not need a project. You need a list. Run your client base and tag three groups: clients who already pay by Direct Debit and need nothing; clients who could switch in ten minutes and simply have not; and clients where there is a real obstacle — multiple signatories, an overseas parent, no UK account, or a working capital position that depends on those seven days. The third group is small and it is the only one that needs a conversation this year.

The second group is where the practice value sits. Every client you move onto a mandate before any mandate is required is a client who never generates a penalty, never generates a chase, and never generates a phone call blaming you. It is also, incidentally, a client who pays HMRC on time — which does no harm at all to the quality of your fee book.

What it means for the firm you are building

Step back from the detail and this is one more instance of the pattern that has defined the last three years: HMRC modernises, the compliance burden moves to the agent, and the work it creates is admin rather than advisory. Nobody pays a premium for chasing Direct Debit mandates. It absorbs capacity that could have gone into the advisory work that actually lifts a firm's value — see the shift from compliance to advisory and the KPIs that show whether it is working.

Firms handle that squeeze in one of three ways. They absorb it and quietly lose margin. They systemise and outsource the administrative layer so the partners' time stays on advisory. Or they conclude that the next decade of this is somebody else's job. All three are legitimate. As a direct, operator-led buyer, we mostly meet owners at the point where they have decided the third — and the firms that have already done the second are, unsurprisingly, the ones that command the strongest terms.

Frequently asked questions

Is mandatory Direct Debit for VAT and PAYE now law?

No. It is a consultation, not legislation. HMRC published “Requiring payment of VAT and PAYE return liabilities by Direct Debit” on 23 June 2026 and closed it on 16 August 2026. The GOV.UK page now says HMRC is analysing the responses, and no implementation date has been set. Nothing changes for your clients on the strength of the consultation alone. What it does tell you is the direction of travel and the shape of the eventual rules, which is enough to start mapping which clients would be caught and which would qualify for an exception — work that is far cheaper done now than in a rush.

Could HMRC really penalise a business that pays on time?

Under one of the options consulted on, yes. The consultation asks about a penalty where a payment is not made by Direct Debit and the payer is not excepted — and it is explicit that this could apply even where the tax is paid in full and on time by another electronic method. That is a genuine departure. Every existing VAT and PAYE payment penalty is triggered by paying late or paying short. This one would be triggered by the method alone. HMRC did not propose an amount; the consultation asked respondents what an appropriate penalty would look like.

Can I set up a client's VAT Direct Debit for them?

No, and this is the detail that turns a payments policy into practice workload. Direct Debit mandates are governed by banking rules that require authority from the account holder, so the business has to set the mandate up itself through its own VAT online account. Where a bank account needs more than one signature, the paper VATC9 route applies instead. Your agent services account does not give you a way round it. So for every client in scope you can prompt, explain and chase, but you cannot complete the task — which makes this a chasing exercise across your whole VAT and payroll base.

What happens to the seven extra days for VAT?

A seven-day extension currently applies where a VAT return is filed electronically and paid electronically, which is why so many VAT payments land on the seventh of the month rather than the last day. The consultation floats restricting that extension to Direct Debit payers only, and doing the same with the PAYE deadline of the 22nd, which is the electronic equivalent of the 19th. That is the lever most likely to change behaviour, because it costs nothing to legislate and hits working capital directly. For a client used to paying on the seventh, the due date would move back by a week.

Which businesses would be excepted from the mandate?

The consultation sets out several categories: businesses without a UK bank account, businesses and individuals already excepted from online filing on grounds of religious belief, disability, age or remote location, businesses in insolvency, and overseas businesses. There is also a hard technical ceiling — the BACS scheme underpinning Direct Debit caps a single collection at £20 million, so payments above that cannot be taken this way. Very large VAT payers already inside the payments-on-account regime, which applies where VAT liability exceeds £2.3 million in any twelve months, sit outside the ordinary return-payment cycle the consultation is aimed at.