Many small and mid-sized businesses turn to Professional Employer Organizations (PEOs) or payroll service providers to simplify HR and payroll responsibilities. These third-party services often manage payroll processing, tax filing, benefits administration, and other back-office tasks. Because these providers handle so many critical functions, employers may assume they are also legally responsible for submitting payroll taxes. However, this assumption is false and can expose businesses to severe penalties.

The Internal Revenue Service (IRS) states employers are ultimately responsible for all federal payroll tax obligations, regardless of outsourcing arrangements. This includes withholding federal income tax, submitting Medicare taxes, and making accurate and timely federal tax deposits. 

Even if you’ve paid a provider to perform these tasks, the IRS can hold your business—and in some cases, you personally—liable for any unpaid or improperly filed employment taxes. These issues often arise when providers make mistakes, commit fraud, or fail to forward withheld funds to the government.

What Are PEOs and Payroll Services?

Professional Employer Organizations (PEOs) and payroll service providers are third-party firms that assist businesses in managing payroll, HR functions, and compliance with labor laws. While both offer support in processing employee wages, filing taxes, and maintaining payroll records, they operate under distinct legal arrangements. A PEO typically enters a co-employment relationship with the client company, becoming the employer of record for tax reporting and benefits administration. In contrast, a payroll service provider performs payroll calculations and tax submissions but does not assume employment status.

These providers commonly handle tasks such as calculating employee wages, tracking hours, managing payroll expenses, and filing federal income tax and Medicare taxes with the Internal Revenue Service (IRS). Many also offer services like direct deposit, wage garnishment compliance, tax form preparation, and new hire reporting. For small businesses with limited administrative capacity, outsourcing payroll reduces workload and avoids compliance errors. Employers often view these providers as cost-effective solutions to stay current with government requirements.

However, the degree of legal responsibility varies. A payroll service is an agent that processes payroll under the employer’s direction. A PEO shares specific responsibilities through its co-employment agreement, but it doesn’t fully absorb legal tax liability. In most cases, the IRS still considers the client company—the common law employer—the party accountable for all federal tax deposits and reporting obligations. This means that even when businesses delegate payroll tasks, the obligation to withhold properly, file correctly, and deposit taxes remains theirs. Employers must comprehend these distinctions to prevent erroneous assumptions about transferring their responsibilities.

Understanding IRS Payroll Tax Liability and Employment Taxes

Under federal tax law, employers must withhold federal income tax, Social Security, and Medicare taxes from each employee’s paycheck. The employer must accurately report and deposit these amounts and their share of payroll taxes with the Internal Revenue Service (IRS). These are trust fund taxes because the employer holds them in trust for the government. Failing to manage them correctly can result in penalties, interest, and sometimes personal liability.

What Employers Must Withhold and Pay

Employers have two key responsibilities: withholding taxes from employees and paying employer-specific payroll taxes. This includes:

  • Employee Withholdings: Employers must withhold federal income tax, Social Security, and Medicare taxes each pay period.

  • Employer’s Share of Taxes: Employers must also pay Social Security and Medicare taxes from their funds, separate from employee withholdings.

  • Federal Tax Deposits: All withheld amounts and employer contributions must be submitted through the Electronic Federal Tax Payment System (EFTPS), which adheres to mandatory deposit deadlines.

Governing IRS Code Sections

The employer's legal obligations are defined in the Internal Revenue Code (IRC):

  • IRC 3101 & 3102: These set rules for Social Security and Medicare taxes.

  • IRC 3402: This covers federal income tax withholding.

  • IRC 3403: This states that employers are responsible for tax payment.

  • IRC 7501: This identifies withheld amounts as trust fund taxes.

Responsibility Cannot Be Outsourced

Even if a company uses a payroll service provider or Professional Employer Organization (PEO), the IRS still considers the business the common law employer in most cases. This means the employer remains responsible for all tax deposits and filings. If payments are late, incomplete, or never made, the IRS will pursue the employer, not the third-party provider. Contracts or agreements do not shift legal responsibility away from the business.

Employers are responsible for properly accounting for all paid compensation, payroll liabilities, and deposit requirements. Delegating the task of processing payroll does not remove the obligation to comply with federal tax law. Understanding and fulfilling these responsibilities is essential to avoiding costly enforcement actions by the IRS.

Form 941 and Medicare Taxes: Your Role in Tax Compliance

What Is Form 941?

Form 941, officially titled the Employer’s Quarterly Federal Tax Return, is filed with the Internal Revenue Service (IRS) every quarter by businesses that pay wages to employees. The form reports total wages paid, federal income tax withheld, and both the employer’s and employee’s share of Social Security and Medicare taxes. While a business may outsource payroll to a Professional Employer Organization (PEO) or a payroll service provider, the employer is legally responsible for submitting an accurate tax return. Late filings or incorrect information can trigger penalties, interest, and IRS enforcement actions.

What Form 941 Tracks

Form 941 summarizes a business’s payroll activity and quarterly tax obligations. It accounts for current payroll figures and corrects any discrepancies from prior filings. In addition to wage data, the form also reports withheld taxes and employer-paid portions of Medicare taxes, including any Additional Medicare Tax from high earners. The form helps the IRS confirm that required federal tax deposits have been made on time and in full through the EFTPS system.

Why Employers Remain Liable

Even when outsourcing payroll processing, the common law employer is still responsible for compliance. If Form 941 contains errors—such as misreported compensation, missing deposits, or incorrect calculations—the IRS will pursue the employer, not the third-party provider. Employers should always review the return before submission and compare it to their internal payroll records. Oversight is essential to ensure payroll liabilities are reported and correctly accounted for, protecting the business from costly mistakes.

Trust Fund Recovery Penalty (TFRP): Personal Risk for Unpaid Social Security and Federal Income Tax

The Trust Fund Recovery Penalty (TFRP) allows the Internal Revenue Service (IRS) to hold individuals personally liable for unpaid trust fund taxes. These taxes include federal income tax withholding, the employee's share of Social Security and Medicare taxes, and any Additional Medicare Tax collected from wages. When these amounts are not deposited as required, the IRS can pursue individuals—not just the business—under IRC Section 6672. The IRS can hold the employer and key decision-makers responsible even if a payroll service provider or Professional Employer Organization (PEO) fails to make payments.

Who Can Be Held Personally Liable

To assess the TFRP, the IRS first determines whether the individual was responsible for ensuring payroll tax compliance. Responsibility is based on actual authority and control, not formal job titles.

Individuals who may be found responsible include:

  • Corporate officers or business owners possess the authority to manage financial decisions, which includes the capacity to guide or approve tax payments.

  • Bookkeepers and financial managers, among others, are responsible for managing payroll records, preparing tax filings, and handling federal tax deposits.

  • Individuals who participate in financial oversight or approve outgoing payments are considered partners in a partnership or members of an LLC.

  • Representatives of PEOs or payroll providers can collect and remit employment taxes.

What the IRS Considers Willful Behavior

The IRS must also prove the individual failed to meet payroll tax obligations. Willfulness does not require fraudulent intent; it is only awareness of the debt and failure to act.

Willful behavior may include:

  • One example of willful behavior could be paying vendors, rent, or other business expenses instead of the required federal tax deposits.

  • Another example of willful behavior is ignoring IRS notices indicating missed or late payroll tax payments.

  • Another example of willful behavior is not following up with a third-party provider after discovering that deposits were missed or taxes were unpaid.

  • Employers persist in paying their employees and deducting federal income tax without submitting these taxes to the IRS.

Once responsibility and willfulness are proven, the IRS can assess the full unpaid tax amount as a personal liability, pursue collection actions, and seize personal assets. Employers must understand that depending on third-party providers does not entirely remove personal risk.

Certified vs. Non-Certified PEOs: Who’s Liable for Payroll Liabilities and Compensation Paid?

Many businesses rely on Professional Employer Organizations (PEOs) to manage payroll, tax filings, and HR support. However, employers often overlook the legal differences between Certified Professional Employer Organizations (CPEOs) and non-certified PEOs. These differences matter, especially when it comes to IRS payroll tax liability. Certification determines whether the PEO or the employer is ultimately liable for federal tax deposits and employment taxes.

Under IRC Section 3511, a CPEO assumes responsibility for reporting and depositing federal employment taxes on behalf of its clients. To achieve certification, the PEO must meet strict IRS criteria, including maintaining a surety bond, undergoing financial audits, and filing detailed reports. In return, CPEOs are recognized as the statutory employer, giving client businesses added legal protection.

Non-certified PEOs, however, do not have this authority. Even if a non-certified provider handles tax deposits and payroll processing, the common law employer—the client—is still legally liable for errors, late payments, or underreporting. This increases the risk of IRS penalties and Trust Fund Recovery Penalty (TFRP) assessments if taxes are not paid correctly.

Certified PEO (CPEO)

  • IRS Certification:
    • Yes — Must meet strict IRS requirements under IRC § 3511, including background checks, bonding, and financial reviews.
  • Statutory Employer Status:
    • Yes — The CPEO is treated as the statutory employer for federal employment tax purposes.
  • Tax Filing Responsibility:
    • Yes — The CPEO assumes responsibility for filing and paying employment taxes directly with the IRS.
  • Surety Bond Requirement:
    • Yes — Required to maintain a surety bond to ensure compliance and financial responsibility.
  • IRS Monitoring:
    • Yes — Subject to ongoing IRS oversight, including financial audits and reporting.
  • Client Liability Protection:
    • Partial — Clients receive limited liability protection, reducing their risk for federal employment tax errors.

Non-Certified PEO

  • IRS Certification:
    • No — There is no statutory certification requirement for non-certified PEOs.
  • Statutory Employer Status:
    • No — The employer (client) remains the statutory employer in the eyes of the IRS.
  • Tax Filing Responsibility:
    • No — The employer is ultimately liable for payroll and employment tax obligations, even if the PEO handles filings.
  • Surety Bond Requirement:
    • No — Not required to post a bond for IRS compliance.
  • IRS Monitoring:
    • No — Not subject to IRS review or auditing standards applicable to certified PEOs.
  • Client Liability Protection:
    • None — The employer bears full responsibility for any tax errors or penalties.

While using a CPEO offers added protection, it does not eliminate all liability. Employers must verify tax deposits, maintain oversight, and adequately account for payroll liabilities. Certification reduces risk, but responsibility cannot be ignored.

IRS Enforcement and Collection Procedures for Unpaid Federal Tax Obligations

How the IRS Initiates Enforcement

When employment taxes are unpaid or improperly reported, the Internal Revenue Service (IRS) begins enforcement to recover the liability. This process applies whether payroll is handled in-house or outsourced to a payroll service provider or Professional Employer Organization (PEO). The IRS does not distinguish based on who made the error—it focuses on collecting the tax owed. Liability may fall on the business, a third-party payer, or a responsible individual.

What Triggers an Investigation

The IRS typically detects compliance issues through missed federal tax deposits, inconsistencies in Form 941, or late filings. A revenue officer may be assigned to investigate and determine why the taxes were not paid. They will review payroll records, bank activity, tax returns, and communications related to payroll decisions. Interviews with owners, employees, and third-party providers help identify who controlled the payroll process.

Third-Party Liability Under IRC Section 3505

In situations involving third-party payers, the IRS can invoke IRC Section 3505 to assess taxes against any party that paid wages but failed to withhold federal income tax or make proper federal tax deposits. This rule allows the IRS to pursue the employer and the service provider. Although it will only collect the tax once, it has complete discretion over whom to pursue.

Collection Actions and Consequences

If the IRS confirms liability, it will issue Letter 1153 to notify the taxpayer of a proposed assessment under the Trust Fund Recovery Penalty (TFRP). If no appeal is filed, a Notice and Demand for Payment follows. The IRS can then initiate collection actions such as federal tax liens, wage garnishments, or bank levies—all of which may target the business or responsible individuals.

Why Ongoing Oversight Is Critical

The IRS will continuously pursue the most recoverable source. That could be the employer, the PEO, or an officer with financial authority. Employers must actively monitor payroll liabilities, verify tax deposits, and stay engaged—even when payroll is outsourced.

Payroll Tax Fraud Red Flags: Avoiding Issues with Additional Medicare Tax and Paid Time Reporting

Outsourcing Does Not Eliminate Liability

Using a Professional Employer Organization (PEO) or payroll service provider does not protect a business from the consequences of payroll tax fraud. If the provider collects federal income tax or Medicare taxes from the employer but fails to remit them to the Internal Revenue Service (IRS), the employer remains fully liable. The Treasury Inspector General for Tax Administration (TIGTA) has reported multiple instances of payroll firms misusing funds. This leaves employers responsible for all federal tax deposits, even if they paid the provider in full.

Common Warning Signs

Employers should be alert to signs that a payroll provider may not be acting in compliance. Refusing EFTPS confirmation of tax deposits is a major red flag. Additional concerns include poor communication, repeated filing delays, and the unexpected arrival of IRS notices. If payroll records show employee wages paid but EFTPS has no matching deposits, the employer should act immediately.

Consequences of Fraud and Inaction

When payroll fraud occurs, the IRS holds the employer accountable for the full amount of employment taxes due, along with penalties and interest. In more serious cases, the agency may assess the Trust Fund Recovery Penalty (TFRP) against individuals who had oversight but failed to intervene. Some cases may even lead to criminal investigations.

Proactive Risk Prevention

To protect against fraud, employers should thoroughly vet providers and stay engaged throughout the relationship. Verifying deposits, reviewing returns, and tracking payroll liabilities are essential to avoid costly outcomes.

How Employers Can Protect Themselves

Conduct Thorough Due Diligence

Before hiring a payroll service provider or Professional Employer Organization (PEO), employers should carefully evaluate the company’s background, financial stability, and compliance history. This includes reviewing references, checking for IRS certification (if applicable), and understanding who is responsible for submitting federal tax deposits. Contracts should clearly outline responsibilities for employment taxes, reporting, and recordkeeping. A provider’s failure to meet these standards may expose the business to IRS penalties and personal liability.

Register for and Monitor EFTPS

The official IRS platform for verifying federal tax deposits is the Electronic Federal Tax Payment System (EFTPS). Employers should register for their own EFTPS account, even if a third-party provider submits payments on their behalf. This lets business owners track deposit activity in real time and confirm that payments align with payroll records. If deposits are missed or delayed, the employer can act quickly to avoid enforcement action.

Avoid Changing the Business Address to That of the Provider

The IRS sends critical notices—such as alerts about missed deposits or tax discrepancies—directly to the employer’s address of record. If a business changes its official mailing address to that of the provider, it may not receive critical IRS communications in time to respond. Maintaining your address ensures timely awareness of compliance issues.

Regularly Review Tax Filings and Payment History

Simply hiring a provider does not mean employers are meeting all obligations. The essential practices are reviewing Form 941, confirming payroll liabilities, and reconciling tax filings with internal wage data. If anything appears inconsistent or incomplete, the employer must follow up immediately.

Consider Using a Certified PEO (CPEO)

If you are working with a PEO, consider choosing one that is IRS-certified. While certification does not eliminate all liability, it provides added protection under IRC Section 3511, including transferring certain filing responsibilities to the CPEO. Employers must still monitor compliance, but they benefit from a stronger legal framework.

Frequently Asked Questions

Do I still owe the IRS if my payroll provider fails to pay taxes?

Yes, even if you pay a fee to a payroll provider, the IRS holds you—the employer—legally responsible for all employment taxes employers must submit. This includes federal income tax, Medicare, and federal unemployment tax. The IRS will collect from your business if your provider fails to remit those funds. You must verify deposits and filings directly, as government agencies will not accept blame-shifting between employers and other entities.

What is the Trust Fund Recovery Penalty (TFRP)?

The Trust Fund Recovery Penalty (TFRP) applies when responsible persons willfully fail to remit trust fund taxes like federal income and Medicare taxes. It can impact officers, owners, or others with payroll authority. The IRS may seize accounts, assets, or premiums to recover unpaid amounts. Employers must follow IRS regulations and remain engaged in payroll oversight, even if delegated. Penalties are assessed through detailed IRS procedures based on specific dates and actions.

How can a PEO be certified by the IRS?

To verify IRS certification, check the public CPEO directory. Certified PEOs must meet financial and legal standards, including surety bonding and reporting. While CPEOs assume liability for some tax filings, employment taxes employers owe still require employer oversight. Be sure to refer to IRS documentation to confirm status. Working with a certified provider may reduce payroll costs, but it doesn't remove your responsibility to monitor compliance and tax deposits.

What is Form 941, and why is it important?

Form 941 reports quarterly payroll costs, including wages, federal income tax, Social Security, Medicare, and paid time adjustments. It applies to businesses that hire employees and is required by the IRS each quarter. Even if other entities prepare it, employers must confirm accuracy. Errors can result in penalties, audits, or IRS enforcement. Always verify that filings align with your internal payroll records and match deposits through the Electronic Federal Tax Payment System (EFTPS).

Can the IRS collect from both me and my payroll service provider?

Yes, the IRS can collect from the business or other entities involved in payroll processing. Under IRC Section 3505, even third parties like payroll firms may be liable. However, the IRS will only recover the owed tax once. If employment taxes employers owe go unpaid, the agency will pursue the party most likely to satisfy the debt. This indicates that there must be direct oversight and timely compliance with IRS regulations.

Would utilizing a CPEO fully absolve me of liability?

A Certified Professional Employer Organization (CPEO) assumes many tax responsibilities, but employers must still follow IRS rules and stay involved. Employers must confirm that payroll costs, filings, and deposits remain required even with a CPEO. The IRS can impose the Trust Fund Recovery Penalty (TFRP) for willful noncompliance. While certification provides advantages, it does not eliminate the duty to understand regulations or oversee worker compensation obligations.

How do I know my payroll provider is making deposits on time?

Register with the Electronic Federal Tax Payment System (EFTPS) to confirm all federal tax deposits in real time. Employers who hire employees must monitor payments for all required taxes, including the federal unemployment tax. Do not rely solely on reports from other entities. Cross-check every date and deposit against your internal payroll records. Oversight ensures compliance and protects your business from penalties and enforcement actions by government agencies.