Employee Business Credit Cards: Liability, Controls and Expense Rules

What Is an Employee Business Credit Card and How Does It Work

An employee business credit card is a card issued under a company's credit account, giving named staff members the ability to make purchases on behalf of the business. The card sits under the company's overall credit limit, and the business, not the employee, is the primary account holder.

The mechanics are straightforward. A business applies for a card programme through a provider. Once approved, it can issue additional cards to employees, each with its own set of rules. Spend flows back to a single account, and the company settles the balance. Employees don't need to use their own money and then claim it back. For additional context, see a deeper look at using business credit cards for cash flow.

Modern programmes from leading card providers go further: virtual cards for online spend, real-time transaction feeds, receipt capture via mobile, and integration with accounting software. The admin burden that used to eat up finance teams at month-end is largely automated.

Who Is Liable If an Employee Misuses a Company Credit Card

Liability depends on the card structure, and getting this wrong is one of the most common mistakes UK businesses make. There are three main models:

Corporate liability: The company is fully responsible for all charges. Employees are not personally liable for authorised business spend. This is the standard structure for larger corporate card programmes.

Individual liability: One person, often an owner or senior employee, is personally responsible if the company cannot pay. The card may appear on their personal credit profile. This is common on small-business cards.

Joint liability: The company pays approved business expenses, but the employee is financially responsible for any personal or policy-violating transactions.

The practical implication: under corporate liability, an employee who makes an unauthorised purchase hasn't personally borrowed money, but they may still face disciplinary action or be required to repay the company under their employment contract. The card issuer looks to the business for payment regardless.

For UK limited companies, it's worth checking whether any personal guarantee is attached to the card agreement. Some providers require a director guarantee, which changes the liability picture entirely. See our guide on personal guarantees on business loans for context on how these work. For more detail, see our guide to business credit card cashback and rewards.

Corporate Cards vs Employee Business Cards: What's the Difference

Corporate cards and employee business cards are often used interchangeably, but they're not identical products.

Large issuers treat liability as the primary differentiator between these two card types. Corporate cards are designed for businesses with multiple employees making regular purchases. Small-business cards are often set up for a single owner or a very small team, with the owner personally backing the account.

For UK SMEs growing past the sole-trader stage, the shift from a personally-backed card to a corporate liability programme is significant, both for credit exposure and for how card activity is reported.

What Controls Should Companies Have on Employee Business Cards

The controls available on modern employee card programmes are far more granular than most businesses realise. A well-structured programme should include:

Per-employee spend limits

, daily, monthly, or per-transaction caps set by the finance team, not the employee

Merchant Category Code (MCC) blocks

, restrict entire categories (e.g., gambling, entertainment, cash advances) or specific vendors

Transaction size limits

, flag or block any single purchase above a set threshold

Real-time alerts

, instant notifications to finance when a card is used, with the option to freeze a card immediately

Virtual cards

, single-use or limited-use card numbers for online purchases, reducing fraud exposure

Receipt capture requirements

, built into the card app, so employees submit photos at point of purchase rather than in a pile at month-end

The businesses that accept no controls, handing out cards with the company's full credit limit and no rules, are the ones that end up with a £4,000 hotel bill they didn't authorise and no paper trail to challenge it.

How to Set Expense Limits on Employee Credit Cards

Spend limits on employee cards should reflect the employee's role, not a blanket company-wide figure. A sales manager travelling to client meetings needs a different limit from an office administrator ordering stationery.

A practical approach:

1. Map roles to spend categories, identify what each role legitimately needs to buy and how often
2. Set per-transaction limits, a cap on any single charge (e.g., £500 for most staff, £2,000 for senior managers)
3. Set monthly limits, a ceiling on total monthly spend per card
4. Block irrelevant categories, if an employee has no reason to book hotels, block that MCC entirely
5. Build in an approval workflow, purchases above a threshold require pre-approval before the card will authorise
6. Review limits quarterly, roles change, and limits should change with them

The goal isn't to make employees feel mistrusted. It's to remove the opportunity for error, accidental or deliberate, and to make month-end reconciliation faster.

Can Employees Use Business Cards for Personal Expenses

No, and this should be written explicitly into every card policy. Personal use of a company credit card creates a taxable benefit in kind for the employee under HMRC rules, and the employer may face Class 1A National Insurance contributions on the value.

There's a narrow exception: where an employee makes a personal purchase by mistake and repays the company in full before the end of the tax year, HMRC may treat this as no benefit arising. But this relies on prompt repayment and clear records.

In practice, the cleanest approach is a zero-tolerance policy: no personal spend, ever, on a company card. If an employee needs to make a mixed purchase (e.g., a meal where one item is personal), the personal portion should be paid separately or repaid immediately.

Some businesses allow minor personal use, a coffee during a business trip, for example, but this creates a grey area that's hard to police and harder to justify to HMRC. The admin cost of tracking small personal amounts usually outweighs any goodwill benefit.

What Happens If an Employee Doesn't Submit Receipts

Without receipts, the company cannot reclaim VAT on the purchase, cannot verify the spend was legitimate, and cannot satisfy HMRC record-keeping requirements.

The consequences stack up:

VAT loss

, HMRC requires a valid VAT receipt to reclaim input tax. A card statement alone is not sufficient for VAT purposes

Disputed claims

, finance has no way to confirm the purchase was business-related

Audit risk

, HMRC can disallow expenses without supporting documentation during an enquiry

Policy breach

, non-submission should trigger the same disciplinary process as any other policy violation

A written policy should set a clear deadline for receipt submission, many businesses use 5 working days from the transaction date, and specify what happens if the deadline is missed. Some card platforms now capture receipt images automatically at the point of sale, which removes the excuse entirely.

If an employee repeatedly fails to submit receipts, the appropriate response is to reduce their card limit or suspend the card until compliance improves.

How to Dispute Unauthorised Charges on Employee Credit Cards

For UK business credit cards, Section 75 of the Consumer Credit Act 1974 does not apply, this protection is for personal consumers only. Business cardholders rely on chargeback rights through the card scheme (Visa, Mastercard) and any purchase protection the provider offers in its terms.

To dispute an unauthorised or fraudulent charge:

1. Identify the transaction, confirm it wasn't made by an employee under a misunderstanding of policy
2. Contact the card provider immediately, most providers have a 120-day window for chargeback claims, though this varies
3. Gather evidence, transaction records, any communication with the merchant, and confirmation the goods or services were not received or were misrepresented
4. Submit a formal dispute, the provider will investigate and may provisionally credit the account while the dispute is resolved
5. Report fraud to Action Fraud, if the charge resulted from card details being stolen, report it at actionfraud.police.uk

For internal misuse by an employee, the route is different: the company pursues the employee through employment law and potentially civil recovery, not through the card scheme.

Tax Implications of Employee Business Card Spending

The tax treatment of employee business card spend depends on what was purchased, not how it was paid for.

For the company: Card fees and interest are generally allowable business expenses. The underlying purchase follows normal business expense rules, a client lunch is subject to the 50% entertainment restriction, a train ticket is fully deductible.

For the employee: Legitimate business expenses paid on a company card do not create a personal tax liability. The employee is not receiving a benefit, they're spending the company's money on the company's behalf.

Employers must report benefits in kind on form P11D (or via payroll if benefits are payrolled). HMRC's guidance on employee expenses and benefits is the definitive reference for UK businesses.

For broader context on managing business tax obligations, see our guide on business loans for VAT or tax bills.

Documentation Requirements for Employee Card Expenses

HMRC requires businesses to keep records that support every business expense claim. For employee card spend, that means:

VAT receipts

, showing supplier name, VAT number, date, description, and VAT amount

Business purpose

, a note explaining why the purchase was necessary (especially for meals, travel, and entertainment)

Attendee records

, for meals and entertainment, names and business relationships of all attendees

Mileage logs

, if the card is used to pay for fuel, a mileage log supports the business-use claim

Approval records

, evidence that the spend was authorised, especially for larger purchases

Records must be kept for at least 6 years for VAT purposes and 5 years after the 31 January submission deadline for corporation tax.

Digital records are acceptable, HMRC's Making Tax Digital programme actively encourages them. Most modern card platforms store transaction data and receipt images in a format that satisfies these requirements.

Employee Cards vs Reimbursement: Which Works Better for Small Businesses

For most UK SMEs, employee cards win on speed, visibility, and cash flow. Reimbursement requires employees to spend their own money and wait, sometimes weeks, to be paid back. That's a real friction point for staff, and it creates a paper trail that's harder to manage.

The hidden cost of reimbursement is finance team time. Chasing receipts, checking claims, processing payments, it adds up. A well-run card programme with spend controls and receipt capture often pays for itself in admin hours alone.

How to Prevent Employee Credit Card Fraud and Abuse

Most employee card fraud in UK businesses is opportunistic rather than organised. The controls that prevent it are the same ones that make the programme run better anyway:

Set limits that match the role

, a card with a £10,000 monthly limit given to someone who spends £200/month is an unnecessary risk

Block irrelevant merchant categories

, if an employee doesn't travel, block airlines and hotels

Enable real-time alerts

, finance sees every transaction as it happens, not at month-end

Require receipts within 5 working days

, unexplained charges surface quickly

Audit card statements monthly

, compare spend patterns against role expectations

Act on anomalies immediately

, a single unexplained charge is worth investigating; a pattern is a serious problem

Offboard cards immediately

, when an employee leaves, cancel their card the same day, not when someone remembers to do it

The businesses most exposed to fraud are those that treat card administration as a low-priority task. A card that isn't being watched is a card that's being misused.

Are There Legal Requirements for Employee Credit Card Policies

There's no single UK law that mandates a written company credit card policy. But several legal and regulatory frameworks create strong practical requirements:

HMRC compliance

, without a policy defining what's an allowable expense, the company cannot consistently satisfy HMRC record-keeping and reporting requirements

Employment law

, disciplinary action for card misuse is much harder to defend without a written policy that employees have acknowledged

Data protection

, card transaction data is personal data under UK GDPR; a policy should address how it's stored and accessed

Companies Act 2006

, directors have a duty to act in the company's best interests; a card programme without controls is a governance risk

In practice, any business issuing cards to employees should have a written policy that covers: permitted and prohibited uses, spend limits, receipt requirements, personal use rules, and consequences for non-compliance.

Employees should sign to confirm they've read and understood the policy before receiving a card. That signature matters if you ever need to recover funds or take disciplinary action.

Next steps

Employee business credit cards: liability, controls and expense rules are not a set-and-forget admin task. The liability structure you choose determines who is exposed if something goes wrong. The controls you set determine whether that exposure ever becomes a problem. And the expense rules you write, and actually enforce, determine whether HMRC, your finance team, and your employees are all working from the same playbook.

For UK businesses still running on reimbursement, or operating with a single card and no spend controls, the gap between where you are and where you could be is smaller than it looks. Modern card programmes from leading providers offer per-employee limits, MCC blocks, virtual cards, and real-time reporting as standard. Read business credit cards for advertising spend: the key points for the key considerations.

The practical next step: run a 2-minute eligibility check with Funding Fred. No hard credit search to start. No obligation. It matches your business against leading card providers offering limits from £1k to £250k+, with employee cards, spend controls, and up to 56 days interest-free. Business Credit Cards. Without the Fuss.