Multi-State Payroll Nexus in 2026: Registration, Withholding, and Penalty Map
The One Rule: Work Location Drives Obligation
Payroll follows where work is performed, not where HQ sits. One remote hire can create three accounts: withholding, unemployment, and new-hire reporting.
Pair this with Payroll Tax Guide, 1099 vs W-2, and Compliance Checklist.
Nexus Triggers Checklist
- Employee home, coworking, or travel days in state
- Officer/director services performed there
- Warehouse, inventory, or sales activity — also see SALT Planning and SaaS Sales Tax
- Contractor conversion creating de facto employment
Registration Sequence (Per New State)
- Confirm work locations by payroll register, not HR memory.
- Apply for withholding + unemployment IDs; allow 2-4 weeks.
- Configure payroll provider for state + locality codes before first run.
- File new-hire reports within deadline.
- Add state returns to close calendar — see Month-End Close.
Reciprocity and Local Traps
Reciprocal agreements (e.g., DC/MD/VA, IL neighboring states) change withholding but not unemployment. Local taxes — Ohio RITA, Pennsylvania PSD codes, New York City — still require separate setup. Do not assume provider defaults are correct.
Controls That Prevent Penalties
| Control | How | Evidence |
|---|---|---|
| Location tracking | Time system or attested work-location by period | Payroll preview vs location report |
| Registration log | State, IDs, effective dates, owner | Screenshot + approval |
| Clearing rec | Payroll clearing zero monthly | Signed rec |
| Return tie-out | Returns = GL = bank | Return + GL + bank packet |
Enforce role separation per QuickBooks vs Xero Controls and review access quarterly.
Expansion Playbook
- Pre-hire check: registration lead time, UI rates, local filings.
- Offer letters state work location and update duty.
- First payroll blocked until IDs or compliant interim procedure with counsel.
- Quarterly nexus sweep: new addresses, travel logs, EOR coverage — see International Payroll EOR.
Worked Example: The $45k Remote-Hire Surprise
Austin HQ hires a senior engineer working from Denver, $185k salary, starting March 1. Nothing registered in Colorado until a November payroll review:
| Exposure | Math | Amount |
|---|---|---|
| Unwithheld Colorado tax (8 months) | Employer liability for failure-to-withhold | ~$6,800 + interest |
| Unemployment (unregistered account) | Back contributions + late penalties | ~$1,200 + penalties |
| Workers comp gap | No Colorado policy for 8 months | Retroactive premium + fine |
| New-hire reporting | 20-day deadline missed by months | Per-employee penalty |
| Total | ~$10k+ before counsel time |
Versus $0 if registered in February for ~$100 filing + 3 hours. The quarterly nexus sweep (addresses, travel logs, EOR coverage) exists precisely to catch March hires before they become November findings — see Internal Audit sampling and Payroll Year-End tie-outs.
Local Tax Traps (The Ones Providers Miss)
| Locality | Trap | Fix |
|---|---|---|
| Ohio cities + RITA | Dozens of municipal rates; work city ≠ home city | RITA registration per work city; verify withholding tables quarterly |
| Pennsylvania | PSD codes for every work/home combo; LST per locality | PSD lookup on every address change, not annually |
| New York City / Yonkers | City surcharges on top of state | NYC/Yonkers codes in payroll before first city paycheck |
| Philadelphia | Wage tax for work performed in city, including nonresidents | Day-count tracking for hybrid workers |
| San Francisco, Denver, others | Gross-receipts / headcount taxes beyond payroll | Confirm business-tax registration, not just withholding |
Payroll-provider “auto-setup” handles the common cases and misses the local ones — validate locality codes against pay-statement geography every quarter, not against the provider’s defaults. Local failures surface in Workers Comp Audits and state reviews, never helpfully in advance.
Voluntary Disclosure vs Audit Discovery
Found an unregistered state with 2 years of payroll? Two paths:
- VDA (you come forward): limited lookback (often 3–4 years vs unlimited), penalty waiver or reduction, no audit of other periods as a matter of course. Requires: stop the bleeding (register now), quantify precisely (payroll by state by period from registers, not estimates), and go through counsel where privilege matters.
- Wait for discovery: full lookback, full penalties plus interest, expanded audit scope (nexus questionnaire leads to income-tax and sales-tax questions — see SALT and SaaS Nexus), and workers-comp and 1099 issues surface in the same review.
VDAs take weeks; discoveries take quarters and cost multiples. Calendar the decision with counsel this month, not next quarter — every additional payroll deepens the liability in both paths.
FAQ
Can an EOR avoid registration?
An EOR can be employer of record, but you still need contract, cost, and control review. Misusing EOR for core-team management creates co-employment risk.
How do we catch drift?
Monthly payroll-location vs HRIS vs expense-report cross-check; quarterly Internal Audit sample.
Next Steps
- Pull last 3 payroll registers and list every work state.
- Reconcile to registration log; close gaps via VDA where needed.
- Lock state calendar into Q1 planning — see Tax Filing Deadlines.