COMPLIANCE 11 min read

Germany Contractor Reclassification Risk: A US Buyer's Guide

Reviewed by Omnivoo Compliance Team on May 15, 2026

May 15, 2026

A US founder reviewing contractor risk documentation for Germany

Key takeaways

  • Scheinselbstständigkeit is reclassification of a contractor as an employee for social security purposes
  • Deutsche Rentenversicherung Bund (DRV Bund) is the primary audit authority and uses an AI-assisted tool called KIRA
  • Section 266a of the German Criminal Code (StGB) makes withholding social security contributions a criminal offense with up to 5 years imprisonment, 10 years in serious cases
  • Retroactive contributions cover 4 years in standard cases and up to 30 years in cases of intentional violation
  • The 5/6 rule: if more than 5/6 of revenue comes from one client, DRV presumes Scheinselbstständigkeit

TL;DR

Scheinselbstständigkeit is the single biggest legal risk for US companies engaging German contractors. Deutsche Rentenversicherung Bund (DRV Bund) audits every four years on average, using an AI-assisted tool called KIRA. If a worker is reclassified, the company owes up to 4 years of back social security contributions (about 40% of revenue paid) and managing directors face personal criminal liability under Section 266a of the German Criminal Code with up to 5 years imprisonment, or 10 years in serious cases. In cases of intentional violation, the back-payment statute of limitations extends to 30 years. The three substantive tests are personal subordination, integration into the work organisation, and absence of entrepreneurial risk. The 5/6 rule presumes Scheinselbstständigkeit when one client provides more than 5/6 of revenue. US buyers should engage German talent through an employer of record or run the Statusfeststellungsverfahren before contracting.

What Scheinselbstständigkeit actually means

The German word translates as “false self-employment” or “pseudo self-employment.” It describes a person who is formally engaged as a contractor but whose working relationship has the substantive characteristics of dependent employment. Under German law, the contract label does not control. The actual working relationship controls.

Two consequences flow from a Scheinselbstständigkeit finding:

  1. Social security treatment. The worker is treated as an employee for social security purposes. The company is liable for back contributions to pension insurance, health insurance, unemployment insurance, and long-term care insurance. The total is approximately 40% of gross revenue paid.

  2. Tax treatment. The worker is treated as an employee for income tax purposes. The company is liable for back wage tax (Lohnsteuer) on the same payments.

  3. Labour law treatment. The worker may also claim labour law protections, including notice periods, dismissal protection, paid holidays, and continued pay during illness. This is determined separately by labour courts.

The risk is structural. A US founder hiring a German developer as a contractor often does not realise they are creating exposure until 18 to 24 months later, when the DRV audit lands.

Who audits and how

The Deutsche Rentenversicherung Bund (DRV Bund) is the federal pension insurance authority and the primary auditor of social security compliance. Under Section 28p of the Social Code Book IV (SGB IV), DRV Bund must audit every employer at least every four years.

Three audit pathways exist:

Routine audit (Betriebsprüfung). Every four years on a rotating basis. The DRV reviews payroll, contractor invoices, and the working relationships. Since 2022, the DRV has used KIRA, an AI-assisted audit tool that cross-checks contractor agreements, invoice patterns, and prior employment relationships. KIRA flags relationships that look like dependent employment for human review.

Triggered audit. Initiated by a tip-off, a competitor complaint, a press report, or another agency referral. Triggered audits often focus narrowly on a specific suspected case.

Status Determination Procedure (Statusfeststellungsverfahren). Voluntary procedure under Section 7a SGB IV. The worker or the principal can ask the DRV to determine the status of a specific relationship. The decision is binding. This is the preferred protection mechanism when a relationship cannot be cleanly characterised.

The three substantive tests

The Bundessozialgericht and labour courts have developed a multi-factor test that the DRV applies in audits. The three primary factors are:

1. Personal subordination

Is the worker subject to instructions about content, time, and place of work? Indicators of subordination:

  • Fixed daily working hours
  • Required attendance at team meetings
  • Specific tools or systems the worker must use
  • Detailed instructions about how to complete tasks
  • Reporting obligations to a manager

Indicators of independence:

  • Worker chooses when and where to work
  • Worker delivers a defined output rather than time
  • No required attendance at internal meetings
  • Worker uses own tools and methods

2. Integration into the work organisation

Is the worker integrated into the client’s operations as if they were part of the team? Indicators of integration:

  • Internal company email address
  • Listed in the company directory
  • Attends regular team meetings
  • Has a desk in the company office
  • Uses company equipment
  • Reports to a company manager
  • Cannot be substituted by a third party

Indicators of independence:

  • External email address
  • Not listed in the directory
  • No regular meeting attendance
  • Works from own premises
  • Uses own equipment
  • Can substitute or subcontract work

3. Entrepreneurial risk and the 5/6 rule

Does the worker bear actual entrepreneurial risk? Indicators of entrepreneurial risk:

  • Multiple clients
  • Investment in own equipment, software, marketing
  • Capacity to make a profit or loss
  • Indemnification responsibility for own work
  • Own business premises
  • Employees of the worker’s own

The 5/6 rule is a presumption. If more than 5/6 (approximately 83%) of revenue in the prior 12 months comes from one client, the DRV presumes that the worker is not in an independent trade. The presumption is rebuttable, but the burden falls on the worker and company to disprove it.

For US companies engaging German contractors full-time, the 5/6 rule is the highest single risk. A German developer who works 40 hours a week on one US client’s product almost always exceeds the 5/6 threshold.

Retroactive back-payment exposure

In a Scheinselbstständigkeit finding, the company owes back social security contributions for the prior period. The statute of limitations depends on whether the failure was intentional.

ConductStatute of limitations
Standard negligent failure4 years from end of calendar year
Intentional violation30 years

The back-payment amount is approximately 40% of gross revenue paid to the worker, covering:

  • Pension insurance (~18.6%)
  • Statutory health insurance (~14.6% with employer share)
  • Long-term care insurance (~3.4%)
  • Unemployment insurance (~2.6%)
  • Plus accident insurance (Berufsgenossenschaft contribution)

Plus late fees of 1% per month of the unpaid amount, capped at 12 months, then interest at the statutory rate.

Section 28g of SGB IV typically prevents the employer from recovering the employee share from the worker. The employer pays both shares.

Criminal liability under StGB 266a

Section 266a of the German Criminal Code criminalises withholding employee social security contributions. The exact text:

“Wer als Arbeitgeber der Einzugsstelle Beiträge des Arbeitnehmers zur Sozialversicherung einschließlich der Arbeitsförderung, unabhängig davon, ob Arbeitsentgelt gezahlt wird, vorenthält, wird mit Freiheitsstrafe bis zu fünf Jahren oder mit Geldstrafe bestraft.”

Translation: An employer who withholds employee social security contributions, including unemployment insurance contributions, from the collection agency, regardless of whether wages are paid, is punished with imprisonment for up to five years or a fine.

Particularly serious cases carry 6 months to 10 years imprisonment. Particularly serious cases include sustained or systematic withholding, withholding of large amounts, or use of false documentation.

Liability attaches to the managing directors personally under German company law. This is one of the few areas of German law where personal criminal liability of foreign managing directors of a foreign company is routinely enforced if the company has German operations or pays German workers.

A US founder personally directing payments to a German contractor reclassified as an employee can be personally liable under StGB 266a. German prosecutors have enforced this against foreign directors in cross-border cases. Extradition is possible under the European Arrest Warrant framework if the founder enters the EU.

How the audit unfolds

A typical Scheinselbstständigkeit audit follows a predictable shape:

Month 1: DRV Bund sends an audit notice. Document request includes contractor agreements, invoices, tax filings, organisational charts, communication samples, and a list of all contractors used in the audit period.

Month 2 to 4: DRV reviews documents. KIRA flags relationships for in-person review. The auditor may interview the company and the contractors directly.

Month 5 to 6: DRV issues a preliminary finding. The company has an opportunity to respond.

Month 7: DRV issues the binding decision. If Scheinselbstständigkeit is found, the back-payment notice arrives.

Month 7 to 12: Company can challenge the decision in the social courts. Payment is due unless suspended.

The total process typically takes 9 to 18 months from notice to final assessment.

What US companies should actually do

The three options ranked by risk reduction.

Option 1: Employer of record (highest protection)

Engage German workers through an employer of record. The worker becomes an employee of the EOR’s German entity. The US company contracts with the EOR. There is no contractor relationship to reclassify.

This is the cleanest option. It eliminates Scheinselbstständigkeit risk entirely. The trade-off is higher cost (the EOR markup) and a more rigid relationship than an independent contractor.

Option 2: Statusfeststellungsverfahren (medium protection)

For each German contractor relationship that you want to keep as contracting, file the Statusfeststellungsverfahren under Section 7a SGB IV. The DRV issues a binding decision on whether the relationship is dependent or independent. Pair this with a structurally compliant contract from Omnivoo Contract Management that documents the substantive independence features.

If the DRV finds the relationship independent, you have a defensible position for the duration of the relationship as described. If the DRV finds it dependent, you can restructure or move to EOR before exposure accrues.

The procedure takes 3 to 6 months and is free. Both worker and company can apply.

Option 3: Structural compliance (lowest protection, hardest to maintain)

Structure each relationship to satisfy all three substantive tests. Diverse client base, no integration, no exclusive engagement, clear entrepreneurial risk. This is possible for some relationships but not most.

Specific tactics that reduce risk (and see Omnivoo’s pricing for the cost of supporting these structures at scale):

  • Encourage and document a diverse client base for each contractor
  • Avoid integrating the contractor into internal team meetings
  • Pay for defined deliverables, not time
  • Provide no fixed working hours
  • Allow substitution
  • Avoid providing company equipment or systems where avoidable
  • Maintain clear documentation that the contractor invoices other clients

Comparing risk by engagement model

Engagement modelReclassification riskCompliance costFlexibility
Direct contractor (US company contracts German freelancer)HighLow upfront, high tailHigh
Contractor through US contracting platformHigh (substance test ignores platform)Low upfront, high tailHigh
Statusfeststellungsverfahren + direct contractorLow for cleared relationshipsMediumMedium
Employer of record (EOR)NoneHigh (EOR markup)Lower
German entity with employment contractNoneHigh (entity costs)Lowest

For US founders without a German entity, the practical choice is between Statusfeststellungsverfahren-cleared contractors for short or part-time engagements and an EOR for full-time engagements.

Where Omnivoo Contract Management fits

Omnivoo Contract Management covers contract drafting, signing, and payment for German contractors as well as global contractors. It does not assume the legal classification of the relationship and does not substitute for the structural protections above.

What Contract Management does well:

  • Generates contracts that document the substantive features of independence (no fixed hours, deliverable-based, substitution permitted)
  • Captures the audit trail Statusfeststellungsverfahren applications require
  • Handles payments without integrating contractors into a US payroll system
  • Provides standard German-law-compliant clauses where applicable

What Contract Management does not do:

  • Make the worker legally independent if the substance test says otherwise
  • Replace the Statusfeststellungsverfahren for a binding determination
  • Function as an employer of record for German employees

Pricing is a flat $49 per finalized contract. Transaction fees are passed through at cost. See pricing.

For full-time German engagements, the right structure is usually an EOR. For deliverable-based, multi-client German contractors, Contract Management plus a Statusfeststellungsverfahren is a reasonable path. Talk to our team about the specific facts of your German contractor relationships. Get in touch.

What is Scheinselbstständigkeit?
Scheinselbstständigkeit, or false self-employment, is when a person is engaged as a contractor on paper but the working relationship has the characteristics of dependent employment under German law. The Deutsche Rentenversicherung (DRV) and labour courts apply a substance over form test. If the relationship looks like employment, it is treated as employment for social security and tax purposes, regardless of what the contract says.
What test does Germany use to identify false self-employment?
Three primary criteria, drawn from Bundessozialgericht case law and applied by the DRV Bund. First, personal dependency and subordination to instructions about content, time, and place of work. Second, integration into the client's work organisation including processes, teams, and infrastructure. Third, absence of entrepreneurial risk including reliance on a single client. The 5/6 rule presumes Scheinselbstständigkeit when more than 5/6 of revenue in the prior 12 months comes from one client.
Who audits this and how often?
The Deutsche Rentenversicherung Bund (DRV Bund) is the primary auditor. It conducts social security audits typically every four years for each employer. The DRV uses an AI-assisted tool called KIRA that cross-checks contractor contracts, invoices, prior employment agreements, and tax filings. Audits can also be triggered by tip-offs from workers, competitors, or by the Status Determination Procedure (Statusfeststellungsverfahren) which a worker or company can voluntarily initiate.
What is the back-payment exposure?
Up to 4 years of retroactive social security contributions in standard cases, covering both employer and employee shares, plus late fees and interest. The total exposure is approximately 40% of revenue paid to the contractor. In cases of intentional violation, the statute of limitations extends to 30 years. The employer cannot recover the employee share from the contractor in many cases because of the limitation in Section 28g of the Social Code Book IV (SGB IV).
What criminal exposure exists under StGB 266a?
Section 266a of the German Criminal Code criminalises withholding employee social security contributions. An employer who fails to forward employee contributions to the collection agency faces up to 5 years imprisonment or a fine. Particularly serious cases carry 6 months to 10 years imprisonment. Liability attaches to managing directors personally, not just the company.
How does a US company protect itself?
Three protections in order of strength: (1) engage German workers through an employer of record so the relationship is a German employment contract from the start, (2) use the voluntary Status Determination Procedure to obtain a binding decision from the DRV before engagement, or (3) structure the relationship to satisfy all the substantive tests including diverse client base, no integration, no exclusive engagement, and clear entrepreneurial risk. Most US companies cannot satisfy option 3 at scale and rely on option 1 or option 2.
Is freelance software engineering OK?
Sometimes. A software engineer with multiple clients, their own equipment, control over how and when they work, no integration into the client team, and clear entrepreneurial risk can be a legitimate contractor. A software engineer working full-time on the client's product, attending the client's team meetings, with no other clients, on the client's machine, is Scheinselbstständigkeit even if the contract calls them a freelancer. The substance test does not care what the contract says.

Hire your first employee in India

Start onboarding in as little as 5 days. No local entity required.

Get started →