Guide

Payroll tax deposits: the rules that catch employers off guard

Written by CompDefend. Founded by Umair Nazir, EA — Enrolled Agent, federally licensed to practice before the IRS. Last updated 2026-08-23.

Federal payroll tax deposits run on a schedule the IRS assigns to your business each calendar year — monthly or semiweekly — based on what you reported during a 12-month lookback period, not on how often you run payroll. Miss a deposit date and the penalty starts at 2% of the late amount and climbs to 15%, and the withheld portion can be assessed personally against responsible persons who willfully let it go unpaid. This guide covers the schedule rules, the penalty tiers as the IRS states them, and the records that make a deposit history defensible.

How the IRS decides your deposit schedule

When deposits are due, and how they must be made

All federal tax deposits must be made by electronic funds transfer. The IRS lists EFTPS, IRS Direct Pay and your IRS business tax account as acceptable and free; a payroll service, bank or tax professional may deposit for you. Mailing a check for an amount that should have been deposited is not a deposit, and the penalty table treats it as one. EFTPS has a 3:00 p.m. Eastern same-day cutoff for payments of $1 million or less; third parties may set earlier ones. Each transfer produces an EFT trace number — keep it, because it proves when the money moved. Two exceptions are narrow. A Form 941 filer whose total tax for the current or prior quarter is under $2,500 may pay with a timely filed return, if no $100,000 obligation arose that quarter. And the accuracy-of-deposits rule forgives a shortfall of no more than the greater of $100 or 2% of the required deposit, if made up by the makeup date. Form 941, line 12 is the quarter's liability; the deposits are expected to cover it, and the IRS keeps a separate account module for each 941 quarter and each 940 year — the structure on a business tax transcript, and the reason a clean current quarter can sit beside an older one with a growing balance.

The failure-to-deposit penalty and the Trust Fund Recovery Penalty

Days are calendar days from the deposit due date, and interest runs on the penalty. Unless you direct otherwise, a deposit is applied to the most recent liability in the quarter: skip April, deposit more in May, and May is satisfied first while April keeps aging into a higher tier. Publication 15 says that after a penalty notice you may designate how deposits are applied to minimize the penalty, if you do so within 90 days of the notice date. Separately, the penalty does not apply where the failure was due to reasonable cause and not willful neglect, and the IRS may waive an inadvertent first failure — the first quarter you had to deposit, or the first deposit after your schedule changed — if the return was filed on time and the business is within the stated size limits. A posted penalty usually arrives as a balance-due notice such as a CP161; ignored, it moves toward collection notices like the CP504B. Withheld income tax and employee FICA are trust fund taxes because, in the IRS's words, "you actually hold the employee's money in trust until you make a federal tax deposit." When they are withheld but not paid over, Internal Revenue Code section 6672 lets the IRS assess a penalty equal to the entire unpaid trust fund tax against any person required to collect, account for and pay it who willfully failed to — and collect it from that person's personal assets. "Responsible" is about authority, not title: the IRS names officers, partners, directors, shareholders, anyone who can direct which bills get paid, even payroll provider and PEO personnel. "Willful" does not require bad intent; someone who knew or should have known the taxes were unpaid and was plainly indifferent meets the test.

Where deposit defensibility is built: records, provider oversight, reconciliation

Payroll advice can blur three layers. The legal requirement is to deposit on your assigned schedule by EFT, deposit FUTA when a quarter passes $500, and file Forms 941 and 940 on time; only a posted deposit satisfies it. The substantiation expectation is being able to show, by date, what liability arose and when it was deposited — a Schedule B that matches the payroll register, EFT trace numbers, line 12 agreeing with the quarter's deposits. The defensibility controls in the checklist are prudent practice, not law; they are designed to catch a miss quickly, but they do not guarantee a particular penalty tier. Process failures that can cause a deposit penalty include a schedule change nobody implemented, a provider cutoff earlier than assumed, a bonus run crossing $100,000, or a provider failing to send the money. On that last one the IRS is blunt: "In the event of default by a third party, the employer remains responsible for the deposit of the federal tax liabilities and timely filing of returns." Only certain certified PEO arrangements shift that liability; with an ordinary payroll service or reporting agent it never left. The IRS accepts Form 14157 complaints about a defaulting provider, but the deposits are still yours to make up. Two neighboring domains feed the same exposure: workers paid as contractors whom the IRS later treats as employees create withholding that was never deposited (worker classification guide), and for S corporations the owner's own wages run through these deposits, so compensation and deposit problems surface together.

What account monitoring shows, and when to involve a professional

An assessed deposit penalty is recorded on the business's Form 941 or Form 940 account module, and reading those modules is inside what CompDefend Radar supports. Under a Form 8821 tax information authorization, Radar reads the 941 and 940 modules for a domestic business EIN weekly and can surface a posted deposit penalty (and whether it was later reversed), a new balance due, and civil-penalty activity carrying the reference number the IRS uses for trust-fund matters. For that trust-fund indicator, Radar's only move is to tell you something associated with trust-fund matters appeared and send you to your CPA, EA or attorney; it does not characterize exposure. A transcript records that a penalty posted and the effective date the IRS printed; it does not record which notice was mailed or when a response is due, so CompDefend never computes a deadline from account data — the letter controls. The owner's personal Form 1040 account, where an assessed Trust Fund Recovery Penalty against an individual is carried, is outside Radar's scope. Weekly monitoring creates a recurring opportunity to notice a posted penalty; it does not prove whether an alert or the mail arrived first. See the account monitoring guide. Bring in a CPA or enrolled agent when a penalty notice arrives and you believe administrative or reasonable-cause relief may apply, or want deposits re-designated inside the 90-day window — and before the IRS acts when withheld taxes are unpaid for more than one period. A letter proposing the Trust Fund Recovery Penalty against you personally, or contact from a revenue officer, is a collection matter: representation under Form 2848, which CompDefend does not provide, is the right tool, and the 60-day appeal clock is already running.