Recruit
If you have more than five 1099 contractors on the books, you should audit them at least once a year. The 2024 DOL final rule on classification, the IRS’s ongoing focus on misclassification revenue, and the wave of state-level enforcement (California AB5, New Jersey, Massachusetts) have made the cost of getting it wrong more expensive than it’s ever been. The single largest misclassification settlement in history was Microsoft’s $97 million Vizcaino case, but smaller companies face six- and seven-figure exposure routinely.
This is the working contractor classification audit playbook we use with clients running 5 to 500 contractor relationships. It walks through the audit workflow, the checklist of red flags by IRS and DOL factor, what to do with the findings (convert, restructure, or end), the actual penalty math by state, and when an Employer of Record is the right cure for the misclassified workers you want to keep.
|
Quick answer |
Detail |
|---|---|
|
How often to audit |
Annually for stable contractor populations; quarterly during rapid growth or before any due diligence event |
|
Tests applied |
IRS 20-factor common-law test (taxes), DOL six-factor economic-realities test (FLSA wage/hour), state-specific tests (CA ABC under AB5, NJ ABC, others) |
|
Time per contractor |
20-40 minutes for a complete audit using a standardized checklist; 5-10 minutes for re-audits of previously cleared contractors |
|
Highest-risk profile |
Long-term (12+ months), full-time hours, single-client, on company-supplied tools, integrated into team workflow |
|
Typical penalty range |
Per misclassified worker: 1.5%-3% of wages for unpaid FICA, 100% of unpaid FUTA, 0.5% interest per month, 20% accuracy-related penalty on understatement, plus state-specific penalties (CA up to $25,000 per worker for willful misclassification) |
Why Audit Your Contractor Population
Three triggers force an audit even if you weren’t planning one. First, the DOL’s 2024 final rule changed the test in ways that converted previously-defensible contractors into employees on paper. Second, investors and acquirers pull contractor lists in due diligence and expect documentation that you’ve done the analysis. Third, the IRS and state agencies have audit programs explicitly targeting long-term 1099 relationships. The cost of a self-audit is small; the cost of a forced audit is large.
Trigger 1: The DOL 2024 final rule reset the baseline
The DOL’s 2024 final rule on classification, effective March 11, 2024, replaced the simplified two-factor Trump-era test with a six-factor economic-realities analysis. The full text is in the Federal Register at 89 FR 1638. Contractors who passed the previous test may fail the new one because no single factor is determinative; you weigh all six together.
Trigger 2: Due diligence
If you’re raising a Series B or later, planning an acquisition, or in talks for a strategic partnership, the buyer or lead investor will pull your contractor list and run their own classification analysis. Unresolved misclassification risk shows up as a price reduction, an escrow holdback, or a deal-breaker indemnity demand. Better to find and fix it before they do.
Trigger 3: Active IRS and state enforcement
The IRS Employment Tax National Research Program audits ~6,000 employers per year specifically for classification, with a focus on companies that issued 50+ Form 1099-NEC filings in the prior year. State enforcement is heavier in California (the EDD audits roughly 1,200 employers per year for AB5 compliance), Washington, and New York. The likelihood of an audit isn’t low; it’s steady.
The 6-Step Audit Workflow
A clean audit has six steps run in order: pull the contractor list, classify each by risk profile, run the DOL six-factor test on each high-risk contractor, document the analysis (this is what you show in any future audit), decide on action (keep as contractor, restructure relationship, or convert to employee), and execute the action with proper paperwork.
1
Pull the complete contractor list
From your accounts payable system, generate a list of every 1099-NEC recipient for the past three years (the IRS statute of limitations is generally three years, longer for substantial understatement). For each: name, entity type, total payments by year, engagement start date, engagement type (project, ongoing, retainer), and the project owner / hiring manager.
2
Classify by risk profile
Sort the contractor list into three buckets:
Low risk: Engaged for less than 6 months, project-based, has multiple clients, uses own equipment, sets own schedule. These typically pass the DOL six-factor test cleanly. Document and move on.
Medium risk: Engaged 6-12 months, recurring engagements, mostly your client but has others, hybrid equipment situation. Run the full six-factor test; document the analysis.
High risk: Engaged 12+ months, working full-time hours, on your tools, attending team meetings, no other clients you’re aware of, paid on a regular cadence regardless of deliverables. These will probably fail the test. Plan the audit time accordingly.
3
Run the DOL six-factor test on each medium and high-risk contractor
The six factors with what points toward employee status (the failure side):
Factor | Employee-status indicators (the red flags) |
|---|---|
1. Opportunity for profit/loss | Worker can’t increase profit through skill or management; paid same regardless of efficiency |
2. Investment | Company supplies all tools, software licenses, equipment; worker has no business investment |
3. Permanence of relationship | Indefinite or continuous; no end date; auto-renewing |
4. Degree of control | Company sets schedule, methods, supervises; worker reports to a manager |
5. Integral to business | Work is core to what company does (e.g., customer support for a SaaS company) |
6. Skill and initiative | Skills are general or company-directed; worker doesn’t exercise independent business judgment |
Score each factor as employee-leaning (E) or contractor-leaning (C). Four or more E’s = high misclassification risk; the contractor agreement’s “Contractor is not an employee” clause won’t save you.
4
Document the analysis
For every contractor you’ve audited, create a one-page analysis sheet: name, engagement start, six-factor score with brief justification per factor, classification decision (continue as contractor / restructure / convert), date and signature. Keep these in a “classification audit” folder. In any future IRS or DOL audit, this documentation is what shows you took classification seriously and made informed decisions.
5
Decide on action
For each high-risk contractor, three options:
- Continue as contractor with restructured relationship. Change the actual working pattern: end set hours, stop providing equipment (or charge for it), remove from team meetings, switch to per-project payment, give them latitude to take other clients. If you can credibly do this without losing the worker, the relationship can stay 1099 and survive a future audit. If the contractor work globally, be sure to manage any potential permanent etablishment risk.
- Convert to W-2 employee. If the working relationship is genuinely employment, the cleanest path is conversion. See our contractor-to-employee conversion guide for the full conversion workflow including comp gross-up math, paperwork, and timing.
- End the engagement. If neither restructuring nor conversion is right, terminate cleanly per the contract. See our contractor termination playbook for the four-step workflow.
6
Execute and track
For each decision: execute the paperwork (restructured contractor agreement, W-2 offer letter, or termination notice), update the contractor list with the action taken and the date, and schedule the next audit cycle (typically 12 months). For converted W-2s, also update payroll, register state UI/withholding if first employee in state, and add to benefits enrollment.
Audit Checklist (Per Contractor)
Use the checklist below for every medium and high-risk contractor. Each yes/no answer corresponds to one piece of evidence in the IRS or DOL classification analysis. If you can’t answer all 18 questions confidently, the contractor needs a deeper review or a restructure.
# | Question | Pro-contractor answer |
|---|---|---|
1 | Has the engagement been less than 12 months? | Yes |
2 | Is there a defined end date or completion-of-deliverables condition? | Yes |
3 | Does the contractor work for other clients (or have you confirmed they’re free to)? | Yes |
4 | Does the contractor set their own work schedule? | Yes |
5 | Does the contractor supply their own primary equipment (laptop, software, etc.)? | Yes |
6 | Is the contractor paid per project, milestone, or deliverable (not regular fixed amounts)? | Yes |
7 | Does the contractor invoice you (rather than being on a payroll cadence)? | Yes |
8 | Does the contractor operate as an LLC, S-corp, or registered business (not as an individual)? | Yes |
9 | Is the work specialized or skilled (not generic labor)? | Yes |
10 | Does the contractor exercise business judgment (not just follow direction)? | Yes |
11 | Is the contractor’s work peripheral (not core) to your business? | Yes (or N/A) |
12 | Does the contractor exclude themselves from your benefits (no health, no PTO, no 401k)? | Yes |
13 | Does the contractor handle their own taxes (you only file 1099-NEC, no withholding)? | Yes |
14 | Has the working relationship NOT included team meetings, performance reviews, or org chart placement? | Yes |
15 | Is the contractor’s engagement governed by a written agreement that includes the 12 standard clauses? | Yes |
16 | Does the contractor agreement include present-tense IP assignment? | Yes |
17 | Have you NOT used employment-style language (employee, fired, performance issues) in any communication? | Yes |
18 | Is the contractor outside California, NJ, MA, IL, and other ABC-test states (or genuinely passes the stricter ABC test)? | Yes |
Score: 15+ yeses = low risk; 11-14 = medium risk, run full six-factor analysis; 10 or fewer = high risk, plan to restructure, convert, or end.
Penalties for Misclassification (The Actual Numbers)
Federal misclassification penalties combine unpaid employer FICA (7.65% of misclassified wages), unpaid FUTA (0.6% on first $7,000 per worker), unpaid income tax withholding (1.5% of wages if no Form 1099-NEC was filed; 0.5% if 1099 was filed), interest at the federal short-term rate plus 3%, and either a 20% accuracy-related penalty or a 75% civil fraud penalty. Per worker per year, this typically runs $5,000-$15,000 for genuine misclassification before state penalties stack on top.
Federal penalty math (per worker, per year)
Assuming a misclassified worker who was actually an employee at $80,000 in wages:
Unpaid employer FICA: $80,000 × 7.65% = $6,120. Unpaid FUTA: $7,000 × 0.6% = $42. Unpaid income tax withholding (if 1099 was filed): $80,000 × 1.5% = $1,200. Interest at federal short-term rate + 3%: ~$500/year on the above. Accuracy-related penalty (20% of understatement): ~$1,400. Total per-worker per-year: ~$9,300.
Multiply by the number of misclassified workers and the years of exposure (statute of limitations is typically three years for non-fraud cases, longer for substantial understatement or willful misclassification). Ten workers misclassified for three years: ~$280,000 in federal penalties before state penalties.
State-specific add-ons
California (under AB5 and the EDD): up to $5,000-$15,000 per worker for negligent misclassification, $10,000-$25,000 per worker for willful misclassification. Plus California payroll taxes (UI, ETT, SDI, PIT) on the misclassified wages. The California Attorney General can also pursue civil penalties under the Private Attorneys General Act (PAGA).
New Jersey: misclassification can trigger New Jersey UI tax assessments plus penalties of $250 per worker for the first violation, $1,000 per worker for repeats, plus criminal liability for willful violations.
Federal Voluntary Classification Settlement Program (VCSP): the IRS offers a voluntary program where employers who reclassify workers prospectively pay 10% of the federal employment tax liability for the most recent year, with no interest or penalties. See IRS VCSP guidance. This is often the cheapest cure when audit-driven exposure is large.
What To Do With Audit Findings
For high-risk contractors you want to keep, convert to W-2 (or to EOR-employed for international or first-state US workers). For workers you don’t need long-term, restructure the relationship to genuinely meet contractor criteria or end the engagement cleanly. For workers in California, New Jersey, Massachusetts, and other ABC-test states, the conversion bar is higher; assume more workers will need conversion than in other states.
The conversion path
For US workers in states where you already employ: in-house payroll handles conversion. For US workers in new states: either register your company in that state for payroll purposes (significant ongoing compliance work) or use an Employer of Record. For international workers, EOR is essentially the only practical path.
Our EOR cost guide walks through the full pricing math by country and provider tier.
The restructure path
To make a contractor relationship credibly survive a future audit, change the actual working pattern: stop setting hours, stop supplying equipment, switch to per-project payment, remove from team meetings, give the worker latitude to serve other clients. The restructured relationship needs to be new in fact, not just on paper.
The end-engagement path
For high-risk contractors you’re not converting and not restructuring, end the engagement cleanly per the contract. The risk window narrows after the engagement ends but doesn’t close immediately; statute of limitations runs from the last payment, not from the audit date.
When To Use An EOR For The Conversion Path
Use an Employer of Record for international misclassified contractors (almost always the only legal option), for US contractors in states where you don’t already employ (avoids registration burden), and during scaling when you don’t want to manage classification complexity in-house. EOR fees ($199-$700 per worker per month plus salary and burden) are dramatically cheaper than the misclassification exposure they avoid.
Most growth-stage companies we work with use an EOR for the first 3-5 conversions in any new country or state, then evaluate whether to bring it in-house once volume justifies the fixed-cost build-out. For the broader EOR vs in-house decision, see our EOR vs direct hire comparison.
If you want help running a contractor classification audit on your specific population, our team can walk you through it as part of an EOR onboarding conversation. We handle the conversion paperwork, the in-country compliance, and the local employment contracts so you can focus on retaining the workers you’re reclassifying. Start with our Employer of Record service in 150+ countries.
- Convert contractor to employee: the conversion playbook with cost math
- How to end a contractor engagement: the four-step termination workflow
- Independent contractor agreement template: the 12 must-have clauses
- 1099 vs W-2 calculator: the comp math for any conversion
- 1099 vs W-2 employee: the classification math basics
- EOR vs direct hire: entity setup vs Employer of Record economics
- Employer of Record cost guide: fully-loaded EOR pricing by country
- RemotePeople EOR service: compliant employment in 150+ countries
Article References
- US Department of Labor, Employee or Independent Contractor Classification Under the FLSA, 2024 Final Rule — the six-factor economic-realities test landing page.
- Federal Register, 2024 Final Rule full text (89 FR 1638, January 10, 2024) — the legally operative classification text.
- IRS, Independent Contractor (Self-Employed) or Employee? — the IRS canonical classification page.
- IRS, Voluntary Classification Settlement Program (VCSP) — the IRS voluntary reclassification program with reduced penalties.
- IRS, About Form SS-8 — request for IRS determination of worker status.
- California DLSE, Independent Contractor versus Employee FAQ — AB5 / ABC test guidance for California employers.
- IRS, About Form 1099-NEC — year-end reporting form for contractor payments.
Frequently Asked Questions
Annually for stable contractor populations is the baseline. Quarterly during rapid contractor growth, before any due diligence event (Series B+ fundraise, M&A discussion, strategic partnership), or when applicable law changes (the 2024 DOL final rule was a forced re-audit moment for most companies). Five to ten contractors can be audited in a few hours; 50+ takes a full day per year and is worth the time.
The IRS uses a 20-factor common-law test for tax purposes (FICA, FUTA, withholding). The DOL uses a six-factor economic-realities test under the 2024 final rule for FLSA wage-and-hour purposes (overtime, minimum wage, recordkeeping). They overlap heavily but apply in different contexts. A worker can theoretically pass one test and fail the other, though in practice most cases are decided the same way under both. For a complete audit, run both tests.
Not automatically. The new rule sets the test forward; it doesn't retroactively change classifications. But contractors who passed the previous (Trump-era) two-factor test may fail the new six-factor test, which means the going-forward exposure is now higher. Audit them under the new rule and decide whether to restructure, convert, or end the engagement. Document the analysis either way; it's your defense in any future audit.
VCSP is an IRS program where employers who voluntarily reclassify workers from contractor to employee going forward pay 10% of the federal employment tax liability for the most recent year, with no interest or penalties on prior years. To qualify: you must have consistently treated the workers as contractors, filed all required Forms 1099-NEC, and not currently be under audit for classification. The VCSP is often the cheapest cure when audit-driven exposure on a large contractor population would be in the six or seven figures.
Federal: unpaid employer FICA (7.65% of misclassified wages), unpaid FUTA (0.6% on first $7,000 per worker), unpaid income tax withholding (1.5% if 1099 was filed; 3% if not), interest at federal short-term rate plus 3%, and either a 20% accuracy penalty or 75% civil fraud penalty. Per worker per year, this typically runs $5,000-$15,000. State penalties stack on top: California adds $5,000-$25,000 per worker, plus state payroll taxes; New Jersey adds $250-$1,000 per worker plus criminal liability for willful violations.
Yes, and it's often the cleanest path for international workers and US workers in states where you don't already employ. The EOR becomes the legal employer, runs local-currency payroll, enrolls the worker in statutory benefits, and handles the conversion paperwork. Conversion typically takes three weeks vs the six-month, $30K-150K cost of setting up your own foreign entity. EOR fees ($199-$700 per worker per month plus salary and burden) are dramatically lower than the misclassification exposure they avoid.
Only if the actual working relationship can credibly change. Stop setting hours, stop providing equipment, switch to per-project payment, remove from team meetings, give the worker latitude to take other clients. These changes need to be real, not just contractual. If the worker is your full-time go-to person on a critical workflow, restructuring won't survive an audit because the audit looks at the actual relationship not the paper. In that case, convert.
For each contractor you audited: a one-page analysis sheet with name, engagement details, six-factor and 20-factor scoring, brief justification per factor, classification decision (continue / restructure / convert / end), and date and signature of the person who did the analysis. Keep these in a 'classification audit' folder for at least seven years. In any future IRS or DOL audit, this documentation is what shows you took classification seriously and made informed decisions; it doesn't guarantee you win, but it dramatically reduces the risk of fraud-level penalties.
