You open an envelope from the IRS. It’s a notice for $47,000 in unpaid payroll taxes—taxes you thought your PEO was handling. You’ve been paying them every payroll cycle. The money left your account. But somewhere between your bank and the government, something broke down. And now the IRS is looking at you.
This scenario plays out more often than most business owners realize. PEOs market “payroll tax liability transfer” as a core benefit, and in many cases, that protection is real. But the legal reality is more conditional than the sales pitch suggests.
The co-employment relationship creates a split in responsibilities. Some payroll tax obligations genuinely transfer to the PEO. Others remain squarely with you, regardless of what your contract says. Understanding exactly which liabilities shift—and which stay on your books—is essential before you sign any agreement or assume you’re fully protected.
The Co-Employment Split: Who Owns What in Payroll Tax Obligations
Co-employment means two entities share employer status for your workers. You remain the common-law employer—you control what work gets done, how, and when. The PEO becomes the statutory employer for specific administrative and tax purposes.
This split creates a dual-employer relationship. For federal employment tax purposes, the PEO files payroll tax returns under its own EIN. For business operations, hiring decisions, and day-to-day management, you’re still the employer. That division matters because liability doesn’t always follow the same lines as administrative responsibility.
Here’s where it gets legally significant: not all PEOs offer the same level of liability protection. Only IRS-certified PEOs—called CPEOs—can actually assume federal payroll tax liability under Internal Revenue Code Section 3511. Non-certified PEOs can process payroll, file taxes under their EIN, and handle compliance tasks, but they cannot legally become the sole responsible party for federal employment taxes.
If you’re working with a non-certified PEO, the IRS still views you as jointly liable for federal payroll taxes, even if the PEO’s name is on the returns. The contract might say the PEO is responsible. The indemnification clause might promise they’ll cover any issues. But statutory liability doesn’t care what your contract says—the IRS can pursue you directly.
This distinction between certified and non-certified providers is the foundation of everything else. CPEO certification isn’t a nice-to-have credential. It’s the only mechanism that provides true federal liability transfer. Without it, you’re operating under shared responsibility regardless of how the relationship is marketed.
The practical implication: if your PEO isn’t CPEO-certified, you haven’t transferred federal payroll tax liability. You’ve outsourced the administrative work, but the legal exposure remains with you. That’s a fundamentally different risk profile than what most business owners assume they’re getting.
Federal Payroll Tax Liability: What IRC Section 3511 Actually Protects
IRC Section 3511 was enacted in 2014 and became effective in 2016. It created the CPEO program and established the specific conditions under which a certified PEO becomes solely liable for federal employment taxes on wages it pays.
When a CPEO is in good standing, it assumes full responsibility for federal payroll tax obligations—FICA, federal income tax withholding, and federal unemployment tax. The IRS treats the CPEO as the employer for these purposes. If the CPEO fails to remit taxes, the IRS pursues the CPEO, not the client company.
That protection is real and meaningful. But it comes with critical limitations.
First, the protection only applies while the CPEO relationship is active and the provider maintains its certification. If a CPEO loses certification mid-year—whether due to financial instability, compliance failures, or voluntary surrender—liability reverts to the client company. And it can revert retroactively.
Let’s say you’ve been with a CPEO for eight months. In September, the IRS revokes their certification due to unpaid tax obligations. You’re now potentially liable for payroll taxes going back to January, even though you paid the CPEO in full every pay period. The federal protection vanishes the moment certification lapses.
Second, Section 3511 protection doesn’t extend to periods before the CPEO relationship began or after it ends. If you transition to a CPEO mid-year, they’re only liable for taxes on wages paid after the effective date. Any prior-period issues remain your responsibility.
Third, the protection is specific to federal employment taxes. It doesn’t automatically extend to other federal obligations, state taxes, or workers’ compensation premiums. Those follow different rules, which we’ll cover next.
The IRS maintains a public, searchable list of certified CPEOs. Verification takes two minutes. But most business owners never check it—before signing or during the relationship. That’s a gap that creates real exposure, because certification status can change without direct notice to client companies.
State-Level Liability Rules: Where Transfer Gets Complicated
Federal liability transfer is relatively clean if you’re working with a CPEO. State-level liability transfer is a patchwork of inconsistent rules that vary significantly by jurisdiction.
State unemployment tax (SUTA) is the most common friction point. Some states recognize the PEO as the employer of record for unemployment purposes and allow full liability transfer. Others treat the client company as the employer regardless of the PEO relationship, meaning you remain liable for SUTA even if the PEO is handling administration and payments.
California, for example, allows PEOs to become the employer of record for unemployment insurance if they meet specific registration and bonding requirements. But the client company’s experience rating can still be affected by claims filed by workers under the PEO arrangement. In Texas, PEOs can assume unemployment tax liability, but the client company must formally consent and the PEO must be properly licensed.
Other states don’t recognize PEO liability transfer at all for unemployment purposes. In those jurisdictions, the client company remains the statutory employer for SUTA, even if the PEO is filing and remitting payments. If the PEO fails to pay, the state will pursue the client company directly.
State income tax withholding follows similar inconsistencies. Most states allow PEOs to withhold and remit state income taxes under the PEO’s registration. But some states require the client company to maintain its own withholding account and remain jointly liable for any shortfalls.
Workers’ compensation is another area where liability transfer isn’t automatic. PEOs typically provide workers’ comp coverage as part of their service, and in many states, that coverage transfers the premium obligation and claims liability to the PEO. But your experience modification rate (EMR)—the factor that determines your premium cost—may or may not transfer depending on state rules and how long you’ve been with the PEO.
If you leave a PEO after several years, you may find that your new standalone workers’ comp policy is priced based on an outdated EMR that doesn’t reflect recent claims history. Or worse, you inherit a poor EMR from the PEO’s pooled experience rating, increasing your costs when you move to a different provider.
Multi-state employers face the most complexity. You might have full liability transfer in one state, partial transfer in another, and no transfer in a third. That creates a multi-state payroll compliance burden that many businesses don’t anticipate—and a risk exposure that isn’t always clear from the PEO’s marketing materials.
Contract Language That Determines Your Actual Exposure
Your PEO contract will include language about liability allocation. Indemnification clauses, hold harmless agreements, and representations about who’s responsible for what. These provisions matter, but they don’t override statutory liability.
An indemnification clause typically says the PEO will reimburse you for any losses you incur due to their failure to meet payroll tax obligations. That gives you a recovery mechanism—you can sue the PEO if something goes wrong. But it doesn’t eliminate your liability to the IRS or state tax authorities.
Here’s the distinction: statutory liability determines who the government can pursue. Contractual liability determines who ultimately bears the financial burden. The IRS doesn’t care what your contract says. If you’re jointly liable under tax law, they can come after you first and leave you to recover from the PEO later.
That’s a meaningful difference. If your PEO fails to remit $100,000 in payroll taxes, the IRS can assess that amount against your company immediately. You’ll pay it, plus penalties and interest. Then you’ll sue the PEO under the indemnification clause. If the PEO is insolvent or has disappeared, you’re out $100,000 regardless of what the contract promised.
Some contracts include provisions that attempt to shift all liability to the PEO, even in non-CPEO relationships. These clauses are often unenforceable. You can’t contract away statutory tax liability. The IRS and state agencies aren’t parties to your PEO agreement, and they’re not bound by its terms.
Red flags in PEO agreements include vague language about “assuming responsibility” without specifying CPEO certification, clauses that limit the PEO’s liability to the amount of fees paid (which is often a fraction of potential tax exposure), and indemnification provisions that require you to exhaust other remedies before the PEO will cover losses.
Another warning sign: contracts that don’t clearly define what happens if the PEO loses certification, goes bankrupt, or terminates the relationship mid-year. If those scenarios aren’t addressed, you’re left guessing about your exposure during the most critical moments. Understanding PEO contract liability risks before signing is essential.
Strong contracts specify CPEO certification as a condition of the agreement, include termination rights if certification lapses, require the PEO to maintain errors and omissions insurance, and provide clear audit rights so you can verify tax deposits independently.
When Liability Transfer Fails: Real Scenarios That Expose Client Companies
The most common failure scenario: the PEO collects payroll taxes from you but doesn’t remit them to the government. You’ve funded the taxes. The money left your account. But somewhere in the PEO’s cash flow, those funds got diverted—used to cover operating expenses, other clients’ shortfalls, or simply mismanaged.
Under federal tax law, payroll taxes are trust fund taxes. The employer holds them in trust for the government. If they’re not remitted, the IRS can pursue collection under the Trust Fund Recovery Penalty (IRC Section 6672), which makes responsible persons personally liable for the unpaid amount.
Even with a CPEO, responsible person liability can apply in specific situations. If you were involved in the decision to pay other creditors instead of payroll taxes, or if you had knowledge that taxes weren’t being remitted and didn’t take action, you could be personally liable under Section 6672. The CPEO relationship doesn’t create an absolute shield against personal liability in cases of willful failure to remit.
In non-CPEO relationships, the exposure is broader. The IRS can assess the Trust Fund Recovery Penalty against you as a responsible person even if the PEO was contractually obligated to handle the taxes. Your role as the business owner and common-law employer makes you a responsible person by definition. This is one reason payroll tax penalty protection through a certified PEO matters so much.
PEO bankruptcy is another high-risk scenario. If your PEO files for bankruptcy protection, several things happen quickly. Payroll processing may stop immediately. Tax deposits that were collected but not yet remitted are now tied up in bankruptcy proceedings. Wage claims from employees may go unpaid. And you’re suddenly responsible for continuing payroll, making tax deposits, and filing returns—all while trying to recover funds from a bankrupt entity.
During a PEO bankruptcy, the IRS and state agencies will look to the client companies for unpaid taxes. The bankruptcy stay protects the PEO from collection, but it doesn’t protect you. You’ll receive notices, assessments, and demands for payment while the PEO’s assets are being liquidated in bankruptcy court.
The timeline matters. If the PEO collected payroll taxes from you in early March, filed for bankruptcy in late March, and never remitted those taxes, you’re facing an immediate tax liability. The IRS will expect payment within days of the assessment. You don’t get to wait for the bankruptcy to resolve.
Sudden PEO closure—whether due to regulatory action, financial collapse, or fraud—creates similar problems but with even less warning. One day you’re processing payroll normally. The next day the PEO’s website is down, phones aren’t answered, and you have no access to payroll records, tax filings, or employee data.
In these situations, businesses often discover they don’t have copies of recent tax returns, don’t know which deposits were made and which weren’t, and can’t easily reconstruct payroll history. That creates compliance gaps that take months to resolve and often result in penalties even when the underlying taxes get paid.
Protecting Yourself: Due Diligence and Ongoing Monitoring
The single most important step: verify CPEO certification before signing and periodically throughout the relationship. The IRS publishes a searchable list of certified CPEOs on its website. It’s updated regularly and shows current certification status.
Check it before you sign. Check it quarterly after that. Certification can be revoked or suspended without direct notice to client companies. If your PEO loses certification, you need to know immediately so you can assess your exposure and consider alternatives.
Second, require proof of tax deposits. Most PEOs will provide quarterly summaries of tax filings and payments, but those summaries aren’t always sufficient. Ask for copies of Form 941 (federal payroll tax return) and proof of payment—either IRS transcripts or bank records showing the actual deposits.
For state unemployment taxes, request copies of state quarterly returns and payment confirmations. This documentation should be provided within 30 days of each quarter’s end. If the PEO resists or delays, that’s a red flag worth investigating. Proper payroll tax accounting requires this level of verification.
Third, don’t fully abandon your own tax infrastructure. Maintain your federal EIN and state unemployment account, even if they’re inactive while you’re with a PEO. If you need to transition quickly due to PEO failure or termination, having those registrations in place makes the process significantly faster.
Some businesses close their state unemployment accounts when they join a PEO, thinking they’ll never need them again. Then when they leave the PEO—whether planned or emergency—they face weeks of delays reactivating those accounts, during which they can’t process payroll or file returns.
Fourth, review your PEO’s financial stability annually. Look for audited financial statements, bonding requirements (many states require PEOs to maintain surety bonds), and any regulatory actions or complaints. State PEO licensing boards often publish disciplinary actions, and those can signal financial or compliance problems before they become critical. Understanding PEO financial disclosure requirements helps you know what to ask for.
Finally, understand your termination rights and process. Know how much notice you’re required to give, what happens to accrued PTO and benefits during transition, and whether you’ll receive complete payroll records and tax documentation. The time to figure this out is before you need it, not during a crisis.
Making Sure You’re Actually Protected
PEO payroll tax liability transfer is real, but it’s conditional. CPEO certification provides the strongest federal protection available—when a certified PEO is in good standing, they assume sole liability for federal employment taxes. That’s a significant risk transfer that non-certified PEOs simply cannot offer.
But even with a CPEO, state-level rules vary. Some states recognize full liability transfer. Others don’t. Multi-state employers face particularly complex compliance because the rules change across state lines. And contract language, while important, doesn’t override statutory liability to taxing authorities.
The co-employment relationship shares responsibility. It doesn’t eliminate it. Smart business owners verify CPEO certification, monitor tax deposits quarterly, maintain backup registrations, and understand that their role as the common-law employer carries ongoing obligations that a PEO relationship doesn’t fully erase.
If your PEO isn’t CPEO-certified, you’re carrying more risk than you probably realize. If you haven’t verified certification status in the past year, you don’t actually know whether your protection is still in place. And if you’re relying entirely on contract indemnification without understanding statutory liability, you’re exposed in ways that won’t become obvious until something goes wrong.
Before you sign that PEO renewal, make sure you’re not leaving money on the table. Many businesses unknowingly overpay because of bundled fees, hidden administrative markups, and contracts designed to limit flexibility. We give you a clear, side-by-side breakdown of pricing, services, and contract terms—so you can see exactly what you’re paying for and choose the option that truly fits your business. Don’t auto-renew. Make an informed, confident decision.
