Can a BVI company hire overseas employees? Contract, payroll and employee-location risks

Being able to sign a BVI contract does not mean only BVI rules apply

When an employee lives overseas, naming a BVI company in the contract does not automatically make the arrangement an "overseas employment" governed only by BVI rules. The first map to draw is not the company-incorporation map. It is the employee's actual work locations, days spent in each location, who directs the work, who bears the cost, who can assess or discipline the person, and where pay and data move. The actual work location usually drives the first assessment of employment protection, wage payment and withholding, social security or medical insurance, work authorisation and some employer-registration obligations. It is not the only factor. Nationality, immigration status, whether the employer has a local presence, management control and bilateral arrangements also need review.

Two conclusions are easy to confuse. First, a person who works remotely outside the BVI throughout does not automatically need a BVI work permit merely because the employer is a BVI company. The country where that person works may, however, require local work authorisation, employer registration or tax withholding. Second, where the person actually works in the BVI, BVI work authorisation should be the first gate, followed by employment, Payroll Tax, Social Security and NHI checks. The BVI Labour Code Act, 2010 provides that, where it applies, employment-contract terms below its statutory minimum standards are void. Whether the actual work location gives the employee other mandatory, non-excludable rights must be determined under the current law of that location.

For an initial workable assessment, record where the person works day by day instead of writing only "remote." Then ask: is this person an employee or contractor? Do they sign contracts or develop customers locally for the company? Who calculates pay and deductions, and from where are funds sent? Who receives HR data? Where would a future termination dispute be heard? These answers explain the real risk better than the contract title.

Define the "employee" correctly first: four arrangements are not four labels

Direct employee: control and a continuing role usually make local obligations hard to avoid

A direct employee commonly has fixed or continuing work, regular remuneration, working time and tools arranged by the company, ongoing management and output for the company's core business. If these facts are concentrated where the person works, the destination may regard the relationship as local employment even where a BVI company signs the contract and pays from overseas. That can trigger minimum wage, leave, working-time, dismissal, social-security or payroll-tax withholding obligations. A contract can state the role, reporting line, location and payday, but a sentence calling the work "independent services" cannot erase facts showing continuing control.

Peninsular Malaysia is used here as an example destination. The Malaysian labour department's Employment Act 1955 page and its official 2022 amendment FAQ should both be used as current checking points. The FAQ lists factors such as control, working time, tools, business benefit and regular remuneration. They show that classification depends on the overall facts, not on whether the company calls the person a consultant or employee. This is a Malaysia example and does not replace rules in another destination.

Independent contractor: examine the facts, not a salary converted into invoices

A genuine contractor is commonly paid by deliverable or project, has greater autonomy over work methods, can serve multiple clients, supplies their own tools and bears business risk. If the company assigns daily hours, restricts outside engagements, supplies all equipment, pays a fixed monthly amount and continuously reviews individual performance, issuing monthly invoices may still lead to reclassification. Reclassification can affect back pay, social-security contributions, tax, interest or penalties, and may change the termination process. Before contracting, retain evidence of project scope, deliverable acceptance, invoices, independent business registration, insurance and actual autonomy, rather than relying on a template alone.

EOR or local subsidiary: moving employer responsibility does not eliminate business risk

An EOR or local subsidiary can take on the local employer role, payroll, social-security contributions and parts of HR administration in the destination. This can suit a company that has not formed a local entity and needs a quick, auditable route to operate. A service agreement does not make risk disappear. Check who is the legal employer, who actually manages the person, who bears workplace-injury and benefit obligations, who bears termination compensation, who keeps records and whether the EOR is lawfully able to run payroll. A local subsidiary may also create corporate-tax, related-party, management-control and economic-substance issues. Put EOR fees, exchange rates and a failed-payment mechanism into the internal budget and contingency plan first.

Secondment: state the original employer, receiving party and actual management clearly

Secondments are common where a BVI company sends a person to a destination subsidiary, partner or project site. State separately whether the original employer still pays wages, whether the receiving party directs day-to-day work, who can approve leave and discipline, who provides insurance and safety training, the term of secondment, return or transfer conditions, and to whom personal data may be disclosed. If the receiving party already manages the person like an employer, the fact that the original contract has not changed cannot by itself exclude local obligations. If the person works at a customer site, local work-authorisation and safety rules also need review.

The employee's location determines the applicable employment and payroll rules

Contract governing law cannot override mandatory local rights

A contract should at least address the workplace and how it may change, governing law and dispute mechanism, role and reporting line, working time and leave, pay components, expense reimbursement, confidentiality and intellectual property, data processing, termination notice, return of assets and service methods. A governing-law clause helps determine contract interpretation and certain procedures, but it usually cannot waive in advance mandatory minimum rights at the employee's actual work location. The BVI Labour Code makes terms below minimum standards void. The destination may also intervene through public policy, employment protection or the actual employment relationship. If the employee may move across borders for a long period, include business travel, relocation, remote locations and reassessment triggers in the contract.

Do not treat "disputes are resolved in the BVI" as a universal answer. Labour authorities, courts or mandatory arbitration systems where the employee actually works may have non-excludable jurisdiction. Cross-border service, evidence, exchange rates and judgment enforcement also affect real cost. Ask BVI and destination lawyers separately which rights cannot be excluded by agreement, where each party may be sued, and whether local registration or insurance is required. Then turn the answers into workable contract wording.

Pay currency, payroll chain and withholding

The payslip should allow every amount to be traced from gross to net: currency, exchange-rate date and who bears exchange losses; base pay, bonus, allowances, equity or benefits; payday and bank account; statutory withholding, employer matching contributions, expense reimbursement and the route for making good a failed payment. BVI Payroll Tax guidance lists wages, holiday pay, bonuses, allowances and benefits among items it examines, and includes registration, monthly filing and payment deadlines. It does not replace a payroll-tax assessment where the employee works. The BVI Social Security Board contributions page and NHI employer FAQs should also be checking points for BVI applicability. Do not rely on old rates or online templates instead of current information.

For an employee in Malaysia, ask at least whether KWSP employee registration, PERKESO employer registration and HASiL monthly PCB withholding are triggered. Payment sent from a BVI bank does not mean the destination has no payroll obligations. Conversely, an employee being in a place for a single day does not by itself establish that all thresholds have been reached. List the registration numbers, tax forms, employee information and withholding authority needed before the first payment, then reconcile monthly.

Wages that have been earned and are due should be calculated, paid and documented promptly under the applicable law. If expenses or damage are disputed, pay undisputed wages on time, account for the disputed part separately and seek professional advice. Do not recommend withholding all earned wages to force an employee to sign a waiver or handover document.

Work in the BVI and work outside it need separate immigration and employer checks

The central wording of section 30(1) of the BVI Immigration and Passport Act is that a person may not engage in a gainful occupation in the Territory without a valid permit. That is the permit gate for work in the BVI. It does not mean that every employee worldwide needs a BVI permit because the employer is incorporated there. A person in Malaysia who never works in the BVI does not automatically need a BVI work permit simply because a BVI company employs them. If the person is foreign in Malaysia, their Malaysian permission must still be checked. The Malaysian Employment Pass guidance expressly links the pass to an approved local company and role, showing why destination rules cannot be replaced by a BVI contract.

Do not look only at a passport or the words "short visit." Record whether the person provides paid services for the company in the BVI, the work content, days on site, whether customers are involved, who invited and manages the person, and whether an exception applies. The formal commencement notice specifies that the 2024 amendment came into force on 26 June 2025. Under its own section 1, the 2025 Immigration and Passport (Amendment) Act No. 12 took effect on 27 June 2025. It retains the core restriction in section 30, updates the references to exceptions in section 30(2), and adds employer responsibility for causing a breach. It cannot be read as a general exemption for remote work overseas. The official short-term service-provider exemption notice also shows that exemptions have conditions concerning service types, notice, invitation letters and time limits. Do not treat an exception as a routine employment route.

Where a person works in the BVI, separately check minimum employment-contract standards, payroll tax, SSB, NHI, employee records and applicable insurance. Holding a particular residence status does not necessarily give the person authority to undertake that paid work. Where the person works overseas, focus on local work authorisation, employment protection, tax withholding and local social security. Reassess both BVI and destination rules if there is frequent travel or cross-border management.

PE, tax residence and management control: do not replace facts with the company-incorporation location

Hiring one person does not automatically create a PE in the destination, and does not automatically make the company or individual tax resident there. BVI incorporation is not a safe harbour either. Keep a record of whether the person has a fixed workplace available to them, can negotiate or sign for the company, maintains core customers, who approves contracts, who receives income and bears costs, where management makes key decisions, whether the work is long-term and continuous, and whether the company has other people or entities in the destination. The location of actual management, representative authority and business continuity may explain more than the bank from which payroll is paid.

BVI economic substance is not a universal formula requiring every company to hire a set number of people. The BVI International Tax Authority's Economic Substance Rules v4 require verifiable information about relevant activities, the names and experience of qualified employees, premises and actual activities. The specific obligations depend on the entity and activity. Calling an overseas employee a "BVI employee" does not prove the activity takes place in the BVI or that there is no destination establishment or tax risk.

The OECD 2025 update to the Model Tax Convention can help explain the framework used in bilateral treaty discussions, but the OECD Model is a basis for negotiating and interpreting treaties. It is not the domestic law of the BVI or the destination. PE, tax residence, source of employment income and service-income conclusions must be confirmed case by case under the current law, facts, administrative position and applicable treaty of the relevant jurisdictions. Do not use one OECD concept to prove a specific outcome.

Payroll, KYC, sanctions and cross-border data: execution starts after the contract is signed

Before payroll begins, ask what the bank and payment provider will require. Incorporation documents, director and beneficial-owner details, employee identity, contracts, payroll lists, payment purpose, currency, receiving account and intermediary-bank information may all enter KYC or transaction monitoring. The BVI FSC 2026 circular on ongoing CDD and transaction monitoring explains that regulated institutions update customer information and look for unusual transactions or activity inconsistent with the profile. The revised financial sanctions guidance covers screening, freezing and reporting. Neither source means every payroll payment will be rejected, but both mean the explanation chain should be ready before the first payment, together with a lawful contingency plan if it is returned.

HR, payroll, passport, tax-number, bank-account and performance information commonly pass through the company, EOR, accountant, bank and cloud systems. The BVI Data Protection Act, 2021 treats collection, retention, use and transmission as processing. A data controller established in the BVI may remain subject to the Act even when processing outside its establishment, and transfers outside the BVI require review of appropriate safeguards or consent. At a minimum, implementation needs a list of purposes and scope, least-privilege access, EOR or processor contracts, a basis for cross-border transfers, retention and deletion periods, a breach-notification route and an employee access or correction process. Company consent or the fact that a cloud service is overseas does not prove compliance automatically. Do not send full passport and payroll files to chat groups without access controls.

Termination, disputes and earned wages: put the exit route in the contract first

The contract and internal policies should state notice periods, probation, calculation of unused leave and bonuses, return of equipment, access closure, data handover, intellectual property, departure or permit cancellation, EOR replacement and the final payslip. If a person moves from the BVI to a destination, or a destination employee moves to an EOR, do not treat a single email as replacing the old contract, social-security records and data permissions. Determine when the former relationship ends, who continues benefits and which rights have already arisen.

Dispute clauses should address governing law, forum, enforceability of arbitration and mandatory local employment remedies together. Preserve versioned contracts, location calendars, payroll calculations, payment receipts, withholding filings, leave, reviews, travel and work-permit information so that the company can explain why it chose a structure at the time. Do not retrospectively relabel the employee or backdate a signature to make the record more favourable. Retain the original record and ask professionals how a correction should be made.

At final exit, wages due for services provided, confirmed expenses and applicable statutory amounts should be settled on time. Damage, handover or confidentiality disputes should be handled through separate claims, set-off conditions and legal process. Do not withhold undisputed earned wages. If the payment chain is delayed by KYC, preserve payment attempts, notify the employee promptly and start a lawful alternative payment route. Do not turn a bank delay into an open-ended risk borne by the employee.

Three fictional scenarios: one BVI company, different risk answers

Fictional scenario one: Ms Lin works remotely from home in Malaysia throughout the year

Ms Lin is a Malaysian resident. She works from home in Kuala Lumpur throughout the year on customer support and sales operations for a BVI company, never entering the BVI. The company assigns shifts daily, pays a fixed monthly amount and requires use of its systems. Although the BVI company signed the contract, the facts are closer to controlled, continuing employment than to an independent project. The company should first ask Malaysian advisers to assess local employment and payroll under the Employment Act 1955, KWSP registration requirements, PERKESO employer registration and HASiL PCB rules. If she is foreign, Employment Pass or other work authorisation also requires review. She does not automatically need a BVI work permit because her employer is a BVI company, but that does not mean the arrangement has no work-authorisation or tax issues.

Fictional scenario two: Mr Chen lives in the BVI and works four days a week in a local office

Mr Chen's nationality does not change the facts. He works continuously on site in the BVI for the company, while BVI management directs his time and customer tasks. The company should first check section 30 of the Immigration and Passport Act and the 2025 Amendment Act No. 12, then review employer registration, withholding and contributions against the current Payroll Tax, SSB and NHI information. Even if he is called an "overseas employee," his actual location makes BVI work authorisation and employer responsibilities the first priorities. Do not wait until after payroll to review them.

Fictional scenario three: Mr Huang is seconded by the BVI company to a Malaysian subsidiary

Mr Huang was originally paid by the BVI company, then begins working long-term at the Malaysian subsidiary's office. A local manager schedules and evaluates him day to day, while the BVI company retains only annual performance approval. This arrangement cannot be handled simply by adding "temporary secondment" to the original contract. The BVI company, local subsidiary and employee should state the secondment term, actual management, cost allocation, payroll withholding, benefits, work authorisation, workplace injury, safety, data sharing and recall conditions. Local advisers should determine whether the subsidiary has become the actual or joint employer. If an EOR is used, check its employer qualifications, payroll responsibilities and exit mechanism. The Malaysian employment-law FAQ, PERKESO guidance on principal and immediate employers and data-protection requirements are all checking points that should be documented.

A workable six-step checking order

1. Draw a location calendar. Record the employee's main residence, daily work locations, dates entering the BVI or other countries, customer sites and workplaces available for long-term use. Do not write only "global remote."
2. Classify by facts. Answer item by item who controls time and method, who provides tools, whether the person can serve other customers, who bears business risk, who benefits, who can discipline, and whether remuneration is fixed and continuous.
3. Choose the structure. Compare direct employee, genuine contractor, EOR or local subsidiary, and secondment. If the facts resemble employment, do not hide them with invoices or labels.
4. Create a local payroll map. For every actual work location, list minimum wage and leave, pay currency, bank route, social or medical insurance, tax withholding, payslips and filing responsibility. List BVI rules separately instead of mixing them with destination rules.
5. Pass four gates. Check in order BVI and destination work authorisation, entity or management control and PE, cross-border data, and bank KYC or sanctions. Record sources, owner, review date and unresolved questions.
6. Write exit and review procedures. Plan for failed payments, relocation, long business travel, EOR replacement, termination, disputes and data breaches. Whenever work location or management line changes, reassess instead of waiting for a tax or employment authority to ask.

Service boundary and professional review

BVI incorporation, local employment, immigration permission, payroll tax, social security, data and PE are connected professional issues, but they are not the same issue. This article helps readers organise questions and documents. It does not guarantee company formation, work permits, tax treatment, bank accounts, media acceptance or any processing time. Within a confirmed scope, MANPRPOWER LIMITED can assist with registration coordination, document preparation and communication with partner institutions. Before signing, making the first payroll payment, sending an employee into the BVI, making a cross-border secondment or facing a termination dispute, qualified professionals in the BVI, the employee's actual work location and the jurisdictions involved in payment and data flows should each review the arrangement.