To become a payroll service provider, you need a formal business entity, IRS authorization as a reporting agent, an Electronic Filing Identification Number, enrollment in the Electronic Federal Tax Payment System, state-level agent registrations wherever your clients have employees, professional liability coverage, and a working understanding of the trust fund recovery penalty that can attach to you personally when a client’s employment taxes go unpaid. Few service businesses carry this much regulatory exposure on day one, so the setup sequence matters.
Form the Business Entity First
Before you handle anyone’s payroll, file a legal business structure through your state’s Secretary of State office. Most payroll providers choose a limited liability company or corporation because both create separation between personal assets and the business. State filing fees typically run between $50 and a few hundred dollars depending on entity type and filing method.
Once the entity exists, apply for a federal Employer Identification Number on the IRS website. The application is free, the number arrives immediately when you file online, and you’ll need it to open a commercial bank account and to appear on every federal document you file for clients.
Add a general business license from the city or county where you operate, and register with your state’s Department of Revenue even though you’re selling services rather than goods. Keep the entity in good standing by filing annual reports and paying any franchise taxes or administrative fees. Falling out of good standing can block you from operating or renewing other licenses at the worst moment.
Become an IRS Reporting Agent
The core federal credential for a payroll service provider is reporting agent status, obtained by filing IRS Form 8655 for each client. The authorization lets you sign and electronically file employment tax returns, make federal tax deposits, and receive copies of IRS notices on the client’s behalf.1Internal Revenue Service. About Form 8655, Reporting Agent Authorization You need a separate Form 8655 for every company whose payroll you manage.2Internal Revenue Service. Reporting Agent Technical Fact Sheet
The form asks for your business name, EIN, and the specific returns you’re authorized to handle. The most common are Form 941 for quarterly employment taxes and Form 940 for annual federal unemployment taxes, but the form also covers Forms 943, 944, 945, 1042, and CT-1.3Internal Revenue Service. Form 8655 (Rev. January 2024) – Reporting Agent Authorization An authorized officer at the client company signs the form before you submit it.
You can fax completed forms to the IRS Reporting Agent File unit at 855-214-7523, with no more than 25 forms per transmission, or mail them to the IRS Accounts Management Service Center in Ogden, Utah. Mailing takes longer. The authorization becomes effective when the IRS receives the form, and the agency sends confirmation letters to both you and the client once the account is updated.3Internal Revenue Service. Form 8655 (Rev. January 2024) – Reporting Agent Authorization
Get an EFIN to File Electronically
Beyond reporting agent status, you need an Electronic Filing Identification Number to transmit returns to the IRS. Apply through the IRS e-services portal by creating an account and completing the e-file application. If approved, the IRS issues an acceptance letter containing your EFIN.4Internal Revenue Service. Become an Authorized e-file Provider
Approval includes a suitability check that may involve a credit review, a tax compliance check, a criminal background check, and fingerprinting through the IRS authorized vendor using livescan technology.4Internal Revenue Service. Become an Authorized e-file Provider Unresolved tax debt or a history of e-file rule violations will delay or defeat the application. Once approved, you sign all electronic returns with a 5-digit PIN.2Internal Revenue Service. Reporting Agent Technical Fact Sheet
Electronic filing is effectively mandatory. As of tax year 2023, any filer submitting 10 or more information returns in a calendar year must file them all electronically, and that threshold aggregates W-2s, 1099s, and other information returns together. Even a small payroll shop clears it almost immediately.5Internal Revenue Service. E-file Information Returns
Enroll in EFTPS as a Batch Provider
Making federal tax deposits on behalf of clients requires enrollment in the Electronic Federal Tax Payment System as a batch provider. Registration starts on the EFTPS platform, where you select which disclosure authorization forms you have on file with the IRS, sign electronically, and submit.6Internal Revenue Service. Electronic Federal Tax Payment System Batch Provider Software User Manual
Each client then gets enrolled individually. You enter the client’s taxpayer identification number, complete a third-party authorization step that generates Form 9783T, provide the client’s banking information, and submit.6Internal Revenue Service. Electronic Federal Tax Payment System Batch Provider Software User Manual A signed authorization from the taxpayer must exist before you make any payments on their behalf. Skip the setup or fumble it, and your deposits won’t process, leaving clients exposed to late-deposit penalties.
Register at the State Level
Federal authorization is half the picture. Each state where your clients have employees will require you to register as an authorized agent with the state’s department of revenue and department of labor. These registrations use state-specific power of attorney or agent authorization forms, and you’ll need the client’s state tax identification and unemployment account numbers to complete them.
Most states run digital portals for uploading signed authorizations and entering client information. Confirmation usually arrives electronically, though some states take up to 30 days to verify your status and grant filing access. Monitor each portal for acceptance notices before upcoming deposit or filing deadlines.
Federal law also requires employers to report new hires within 20 days, and as the payroll provider you’ll typically handle that obligation.7Administration for Children and Families. New Hire Reporting Each state has its own new hire reporting portal, so you’ll need credentials for every state where a client operates.
Insurance, Bonding, and SOC 1
Handling other people’s tax money creates liability that standard business insurance doesn’t cover. Professional liability insurance, commonly called Errors and Omissions coverage, protects against claims from mistakes in tax calculations, missed deadlines, or filing errors. Annual premiums for a small operation typically start between $500 and $1,500 and rise with revenue and client count.
Many states require a surety bond before you can operate as a payroll provider. The bond is a financial guarantee that you’ll perform your duties honestly and follow applicable laws, and bonding companies evaluate your credit and financial statements before issuing it. Required amounts vary by state. If you later pursue Certified Professional Employer Organization status through the IRS, the bond minimum is $50,000 or 5% of your prior-year employment tax liability, whichever is greater, capped at $1,000,000.8Office of the Law Revision Counsel. 26 U.S. Code 7705 – Certified Professional Employer Organizations
Larger clients will ask whether you’ve completed a SOC 1 Type 2 audit. This independent examination verifies that your internal controls over payroll processing and financial reporting work as described, tested over a sustained period. A current SOC 1 report removes a major barrier when pitching mid-size and enterprise clients, because their own auditors need assurance that your controls don’t create gaps in their financial statements.
Understand the Trust Fund Recovery Penalty
This is where payroll gets genuinely dangerous, and it’s the reason many careful providers structure their operations differently than other service firms. Employment taxes withheld from employee paychecks, including federal income tax and the employee share of Social Security and Medicare, are trust fund taxes. The employer holds them in trust for the government. When they don’t get paid, the IRS can impose the trust fund recovery penalty under IRC 6672 against any “responsible person” who willfully failed to collect or pay over the taxes.9Office of the Law Revision Counsel. 26 U.S. Code 6672 – Failure to Collect and Pay Over Tax, or Attempt to Evade or Defeat Tax
The penalty equals 100% of the unpaid trust fund taxes. If $50,000 in withheld taxes goes unpaid, the responsible person owes $50,000 personally.9Office of the Law Revision Counsel. 26 U.S. Code 6672 – Failure to Collect and Pay Over Tax, or Attempt to Evade or Defeat Tax The IRS treats the payroll service provider and the client’s own officers as separate responsible persons, and both can be assessed the penalty.10Internal Revenue Service. Liability of Third Parties for Unpaid Employment Taxes The LLC or corporation you formed at the start doesn’t shield you from this. The penalty pierces entity protections and attaches to you individually.
Even when a client sends you the funds for tax deposits and you hold them in your operating account, the legal responsibility doesn’t disappear. If the funds get commingled and something goes wrong, you’re exposed. Many experienced providers maintain separate trust or escrow accounts for client tax funds specifically to avoid this. If you take one structural precaution in your business, make it that one.
Meet the Data Security and Record Retention Rules
As an authorized e-file provider, you must follow the data security standards in IRS Publication 3112. The requirements include designating employees to coordinate your information security program, identifying and evaluating risks to client data, designing safeguards, and regularly testing the program’s effectiveness.11Internal Revenue Service. Here’s What Tax Preparers Need to Know About a Data Security Plan If you use subcontractors or third-party software, your contracts must require equivalent safeguards.
For records, Publication 3112 requires e-file providers to retain them through the end of the calendar year following the date returns were sent, and to produce them to the IRS on request.12Internal Revenue Service. IRS e-file Application and Participation In practice, most payroll providers retain records for at least four years because the IRS generally has three years to audit a return and the statute of limitations extends to six years in cases of substantial understatement.
The stakes are high because you hold Social Security numbers, bank account details, and wage data for every employee across every client. Encryption for data at rest and in transit, multi-factor authentication, and a documented incident response plan are the minimum a competent operation runs.
What You’ll Collect from Each Client
Before you can run a client’s first payroll, you’ll need a substantial packet. At the employee level, that means a completed W-4 and Form I-9 for every worker, plus Social Security numbers, addresses, pay rates, benefit deduction details, direct deposit information, and start dates.
From the business itself, collect the federal EIN, state tax identification numbers, state unemployment account numbers and rates, and prior-year W-2s and W-3 summaries if you’re taking over mid-year. Year-to-date payroll detail is essential for accurate withholding and to avoid double-reporting income on annual returns.
Then the authorizations: a signed Form 8655 for federal purposes, EFTPS authorization, and equivalent state agent authorization forms for every jurisdiction where the client has workers. A missing authorization can block a deposit or filing at the worst possible time, and once you’re processing payroll on a weekly or biweekly cycle, there’s no worst possible time that isn’t right now.
Know the Deadlines Before You Take Clients
Payroll providers live by deadlines. Form 941 reports income taxes, Social Security tax, and Medicare tax withheld from employee wages and is due quarterly, by the last day of the month following the end of each quarter.13Internal Revenue Service. Employment Tax Due Dates Form 940, for federal unemployment taxes, is filed annually.14Internal Revenue Service. About Form 941, Employer’s Quarterly Federal Tax Return W-2s must be filed with the Social Security Administration and furnished to employees by January 31.15Internal Revenue Service. 2026 General Instructions for Forms W-2 and W-3 Form 1099-NEC for independent contractor payments of $600 or more is due to the IRS and recipients by January 31.16Internal Revenue Service. Instructions for Forms 1099-MISC and 1099-NEC
Late deposit penalties escalate fast: 2% if no more than 5 days late, 5% if 6 to 15 days late, and 10% if more than 15 days late. If the deposit still hasn’t been made within 10 days of the IRS’s first delinquency notice, the penalty jumps to 15% of the unpaid amount.17Office of the Law Revision Counsel. 26 U.S. Code 6656 – Failure to Make Deposit of Taxes Those costs come out of either your pocket or your client’s depending on your service agreement, and either way they end the relationship.