GuidesUpdated

Right to Work Checks for a Small Venue: The Penalty, the Process, and What Changed on 1 October

A right-to-work check has to happen before anyone works a single shift, trial shifts included, and skipping it costs a UK hospitality employer £45,000 for a first breach and £60,000 for a repeat one. Here is the process, what the statutory excuse covers, and what changed for agency, subcontracted and gig staff on 1 October 2026.

Alex Riesenkampff

22 September 2026 · Updated 15 October 2026 · 12 min read · Markdown

A right-to-work check has to happen before someone works a single minute for you, trial shifts included. Getting it wrong is expensive: the civil penalty is £45,000 per illegal worker for a first breach and £60,000 for a repeat one within three years, and restaurants, takeaways and cafes drew more enforcement visits than any other UK sector in the first half of 2026. This is general information, current as at 22 September 2026, not legal advice; if you already have a specific case or a penalty notice, get advice on the facts.

For an independent venue, the practical question is rarely the law itself. It is the process: which of three routes to use for a given hire, what protects you if a document turns out to be false, and how to run all of this at the speed hospitality hires at, without treating some applicants more suspiciously than others.

The three ways to check someone's right to work

Every prospective hire needs one of three checks before their first shift. There are three lawful routes: a Home Office online check using a share code, a digital identity check through a certified provider for British and Irish passport holders, or a manual check of the original document.

• Online share-code check. For most non-British, non-Irish workers with a digital immigration status. The applicant gives you a share code starting with "W" and their date of birth; you enter both at the Home Office's checking service, confirm the photo matches the person in front of you, and keep a copy of the result page. Share codes are valid for 90 days.
• Digital identity check (IDVT). British and Irish passport holders can be checked through a certified Identity Service Provider, which verifies the passport and confirms the biographic and photo data match the person. British and Irish citizens cannot get a share code, so this route or the manual one is how you check them.
• Manual document check. For anyone who cannot use the other two routes. You obtain the original document from the Home Office's List A or List B, check it is genuine and belongs to the person presenting it, and make a clear copy in a format that cannot be manually altered.

Whichever route applies, do it before day one starts, not once someone has proven they can do the job.

What the statutory excuse protects you from

The statutory excuse only holds if the check was done correctly before employment started, and it breaks the moment a reasonable, untrained person looking carefully at the document would have spotted a problem. It is the defence that protects an employer from a civil penalty when a worker turns out not to have the right to work, provided the check itself was done properly.

It stops protecting you the moment any of three things is true: it is reasonably apparent that the person presenting a document is not the person it describes, you know the individual is not allowed to do the work, or you know the documents are false. The "reasonably apparent" test is not a forensic one. It asks whether someone with no training, examining the document carefully, could reasonably have been expected to notice it was not genuine. A hurried glance at a photo that is clearly a different person fails that test; a well-made forgery that would fool most people generally does not.

What a mistake costs

A civil penalty for employing someone without the right to work is £45,000 per illegal worker for a first breach and £60,000 for a repeat breach within three years, and knowingly employing someone illegally is a separate criminal offence carrying up to five years in prison and an unlimited fine. Those figures have applied since 13 February 2024, when the maximum penalty was raised from £20,000 under the Immigration (Employment of Adults Subject to Immigration Control) (Maximum Penalty) (Amendment) Order 2024, and they are still current today.

These are not abstract figures. In a batch of penalties covering July to September 2025, 146 UK businesses were fined £8.9 million combined for illegal working, and the single largest penalty in that batch, £280,000, went to Bilash restaurant in Oxfordshire, according to trade press reporting on the Home Office's published penalty data. In Tiverton, Mumbai Kitchen lost its alcohol licence entirely after Home Office officers found evidence of illegal working, and now faces bi-monthly compliance visits on top of whatever civil penalty followed, the Home Office said in a January 2026 release announcing the highest level of illegal working raids in UK history. A civil penalty and a licence review are two separate risks, and a licensed venue can lose both from the same visit.

Why enforcement lands on hospitality specifically

This is not a risk spread evenly across the economy. Restaurants, takeaways and cafes took more illegal-working enforcement visits than any other sector in the UK in the six months to June 2026: 2,195 visits and 1,589 arrests, both up 31% on the same period the year before, according to Home Office enforcement data. Over the whole of 2025 the same category recorded 3,559 visits and 2,523 arrests, again the highest of any sector measured. A government response to its own consultation on extending the right-to-work regime names hospitality explicitly, alongside construction, logistics and the gig economy, as a sector receiving targeted operational activity. Across all sectors, the Home Office issued more than 2,400 civil penalties in 2025 worth over £130 million.

None of that is a reason to treat every applicant as a suspect. It is a reason to make sure the process is consistent enough that a routine visit finds nothing to act on.

The trial-shift trap

Hospitality hires fast, and that speed is exactly where the check gets skipped. A trial shift is still work, so the check has to happen before it starts, not after someone has shown they can do the job. Kristian, founder of Spoke & Stringer, which ran two cafes in Bristol until 2024, and now co-founder of the hospitality compliance platform Paddl, writes plainly about the operational risk in his own guide for operators: "The check has to happen before the person starts working. A trial shift counts as work. If they cut their finger on a mandolin during a trial and you have not checked them, you have two problems instead of one."

The Home Office's own guidance acknowledges the pressure runs the other way too: employers are told to "try to keep the job open for as long as possible in order to provide an individual with the opportunity to demonstrate their right to work but are not obliged to do so where the need to recruit someone is urgent." Read together, the two points settle the trade-off rather than leaving it open: you are never required to wait around for someone to prove their status if you need the role filled, but you are never allowed to let them start working while you wait either. If a Saturday kitchen porter needs to be on shift tonight, check them before they touch a pan, or fill the shift a different way; do not check them on Monday because Saturday was busy. Our guide to the first 90 days after a hire covers the rest of getting someone started properly, and the paperwork belongs at the very front of that sequence, not somewhere inside week one.

Check everyone the same way, or risk a different claim entirely

The instinct to check "the people who might need checking" is the single most common way this goes wrong, and it creates a second legal problem on top of the first. Home Office guidance requires employers to check every prospective hire the same way, including British and Irish citizens, because checking only people who look or sound like they might be migrants is itself unlawful race discrimination. The Home Office's own Code of Practice on avoiding discrimination while preventing illegal working states plainly that employers should "be consistent in how they conduct right to work checks on all prospective employees, including British citizens." It also says employers should not "make assumptions about a person's right to work in the UK or their immigration status on the basis of their colour, nationality, ethnic or national origins, accent, surname or the length of time they have been resident in the UK." The same guidance gives a direct example of what this looks like in practice: carrying out a right-to-work check on a Black employee but not on a white colleague doing the same job is treated as direct discrimination.

For a small venue this is a simple operating rule rather than a compliance burden: run the identical process, in the identical order, for every single hire, from the head chef to the till-covering aunt of the owner. Consistency is what makes the process defensible if it is ever questioned from either direction, by an immigration officer or by a rejected applicant.

Follow-up checks and how long to keep the paperwork

Getting the first check right is not the end of the obligation if someone's permission to work has an expiry date attached. A follow-up check on someone with time-limited permission to work has to happen on or before the day that permission ends, and missing it costs you the statutory excuse for as long as you keep employing them afterwards. If the follow-up check shows the person no longer has the right to work and you continue employing them anyway, you are exposed exactly as if you had never checked them at all.

What changed on 1 October 2026

Everything above already applies to anyone you directly employ. Since the start of October it reaches further. Since 1 October 2026, the right-to-work regime has extended beyond direct employees to cover people on a worker's contract, individual subcontractors, and anyone supplied through an online matching service, which brought agency chefs, subcontracted cleaners and gig-platform labour into scope for the first time. Section 48 of the Border Security, Asylum and Immigration Act 2025 creates the extension, and the Border Security, Asylum and Immigration Act 2025 (Commencement No. 4) Regulations 2026 set the date. A civil penalty under the new provisions can only be imposed where the engagement started on or after 1 October 2026, so your exposure runs from the engagements you have begun since then, not from the ones already on the books.

If your venue only ever hires people directly onto your own payroll, this changes nothing for you. If you bring in agency chefs for a busy weekend, subcontract your cleaning, or route any part of the operation through a platform that supplies labour, the same civil penalty exposure that applies to your direct hires now applies to that arrangement too. Asking how the agency or platform you use verifies its own people takes one email, and it is worth having that answer in writing before the next engagement starts rather than after one goes wrong.

What to do this week

The October extension did not change the basics, and they are still where most venues are exposed: check every new starter properly, keep the record, and treat a trial shift exactly like paid work.

Getting this wrong is not only a Home Office problem. A team that loses a colleague to a mistake in the hiring paperwork loses the same shift-cover headache as any other unplanned exit, and our staff turnover cost calculator puts a figure on what replacing that person then costs on top of whatever penalty followed. If your venue runs a mix of contracted and casual staff, our guide to the zero-hours rights arriving under the Employment Rights Act covers the other set of rules landing on the same rota. Building a rota a small team can run is the place to fold a right-to-work check into the routine of getting someone started, rather than treating it as a one-off exception you remember only when it is already too late.