Last reviewed 30 October 2026 against the sources linked in this post.
It is the last day before the pay run. An email from a senior manager asks payroll to switch her salary to a new bank account today, and someone else has to sign off a batch of overtime nobody has checked. In fiscal year 2025 the US Department of Labor's Wage and Hour Division recovered more than $259 million in back wages for 176,957 employees.
Payroll compliance training is how you stop small pay decisions going wrong. This post gives 9 ready-made courses, in 3 groups, with what each fixes and how to roll them out. Each group ends with an Our pick. The legal points describe US federal rules, so use this as a syllabus, not a ruling.
All 9 courses at a glance
| Course | What it covers | Length | Federal rule behind it? |
|---|---|---|---|
| Wage & hour (FLSA) for managers | Exempt and non-exempt status, compensable time, overtime | 40 min | Yes (US federal rule) |
| Legal hiring, interviewing & pay transparency | Lawful questions, salary history and pay transparency where it applies | 45 min | Yes (US federal rules on discrimination; pay transparency varies by state) |
| Discrimination & equal employment opportunity | Protected characteristics and spotting discrimination | 45 min | Yes (US federal rule) |
| Handling personal data day to day | Collecting, keeping and sharing personal data safely | 40 min | No (data protection law varies by country) |
| Data classification & handling | Labelling, storing, sharing and disposing of data by level | 25 min | No |
| Social engineering, fraud and deepfakes | Phone, payment and impersonation scams | 35 min | No |
| Phishing & social engineering | Red flags across email, text, voice and QR codes | 30 min | No |
| Code of conduct | The Code's key policies, a four-question decision test, speaking up | 35 min | No |
| Preventing retaliation | Never punishing anyone who raises a concern | 40 min | Yes (US federal rule) |
The laws set rules for how you pay people. They do not require a course.
Wage law and pay equity
Wage & hour (FLSA) for managers
The Department of Labor says that, unless exempt, employees covered by the Fair Labor Standards Act (FLSA) must receive overtime pay for hours worked over 40 in a workweek at not less than time and one-half their regular rate. Payroll applies that rule every pay period. This course covers exempt and non-exempt status, which time counts as work and how overtime is worked out, in six short lessons. Add a quiz: is a 15-minute pre-shift briefing paid time? Learners answer, then see why.
Legal hiring, interviewing & pay transparency
The Equal Employment Opportunity Commission (EEOC) says the Equal Pay Act requires that men and women in the same workplace be given equal pay for equal work, and that all forms of pay are covered, including salary, overtime pay and bonuses. Payroll sets and reports those figures, so it needs to understand how starting pay is decided. The course covers lawful questions, why salary history is risky and pay transparency rules where they apply. Run a scenario: a manager asks payroll to match a new hire's old salary. What should payroll check first?
Discrimination & equal employment opportunity
The EEOC says Title VII, the ADEA and the ADA prohibit compensation discrimination on the basis of race, colour, religion, sex, national origin, age or disability. This course names the federal equal employment laws, the characteristics they protect, and how to recognise unequal treatment in everyday decisions. Payroll staff often spot pay gaps early, so they need to know what one might mean and who to tell. Add a Pick Answer round that asks which of four pay adjustments needs a second look.
Our pick: Wage & hour (FLSA) for managers. Overtime and classification come up in every pay run, and one wrong rule repeats across every payslip until someone spots it.
Data protection and payment fraud
Handling personal data day to day
Payroll holds bank details, tax numbers, ID documents and home addresses for everyone. This course teaches staff to collect only what they need, keep it only as long as needed and share it through approved routes. It opens with a "helpful spreadsheet" scenario, the kind of shortcut through which payroll data leaks. Data protection law differs by country, so add your local rules. Add a retention check: learners say how long they would keep a leaver's bank details, then compare answers.
Data classification & handling
Not every file is equally sensitive, and payroll needs to know which ones are. This 25-minute course covers your company's classification levels and how to label, store, share and dispose of data at each level. It is short enough for onboarding and works well as a yearly refresher. Add a quiz with five payroll documents, from a pay calendar to a salary export, and ask learners to label each one.
Social engineering, fraud and deepfakes: phone, payment and impersonation scams
This course opens with the request every payroll team dreads: new bank details from someone who sounds senior. It covers pressure tactics, the rule to verify money changes on a known number, and how voices and video can be faked. In a 2018 alert, the FBI's Internet Crime Complaint Center warned that criminals use stolen log-ins to change employees' bank account information and redirect direct deposits, and advises heightened scrutiny of bank change requests. Swap in a payroll scenario: the "chief financial officer" calls about an urgent change. What do you do?
Phishing & social engineering
Phishing is often how payroll fraud starts. The same IC3 warning says criminals target employees through phishing emails designed to capture their log-in credentials, then use them to reach payroll accounts. This course covers how attackers exploit trust and urgency, traces a business email compromise step by step, and spots red flags across email, text, voice and QR codes. Run a Pick Answer round with three real-looking emails and ask which one is fake. Pair it with a cybersecurity awareness programme for the wider company.
Our pick: Social engineering, fraud and deepfakes. A diverted salary is money gone in one transfer, and a call-back rule on a known number is one of the simplest ways to stop it.
Conduct and retaliation
Code of conduct
Payroll staff can see what everyone earns, and they get asked for favours: an early payment, a quiet look at a colleague's salary, a gift from a supplier. This course gives them one clear standard, a four-question decision test for grey areas, and how to speak up. Add a scenario: a friend in sales asks you to process a commission before it is approved. Learners vote on what to do, then see the policy answer.
Preventing retaliation
The EEOC says it is unlawful to retaliate against applicants or employees for protected activity, which includes asking managers or co-workers about salary information to uncover potentially discriminatory wages. Pay questions land on payroll's desk, so payroll must never treat them as trouble. This course covers protected activity and what counts as retaliation, including subtle actions. Add a scenario: an employee keeps asking why a colleague earns more. How should payroll respond?
Our pick: Code of conduct. Payroll sees more than almost anyone else, and a shared standard on access and favours protects the team when someone asks for an exception.
How to roll the plan out
Start with the four courses marked Yes in the table, because they carry the legal risk. In fiscal year 2025 the Wage and Hour Division recovered more than $259 million in back wages for 176,957 employees, so an hour of training before the next pay run is cheap by comparison.
- During onboarding: Wage & hour, data classification and the social engineering course. Together they take about 100 minutes.
- Within the first quarter: pay transparency, discrimination, personal data and phishing.
- Each year: a refresher quiz on the Yes courses, plus a fraud drill before your busiest pay period.
- Role-specific depth: code of conduct and retaliation for anyone who handles pay queries or approves exceptions.
Add your state or country rules where you pay people. Ask HR or a lawyer what applies. For the managers who approve overtime and set pay, pair this plan with interview training for hiring managers and leadership training for supervisors.
Ways to run these courses on AhaSlides
You can build any of these as a self-paced course with the AhaSlides course creator, run them as a live Q&A deck, or both, with the post-course survey and 30-day check-in each template includes, plus a short pre-course survey if you want a baseline.
- Pick Answer: show three bank change requests and ask which one to verify by phone, or whether a pre-shift briefing is paid time.
- Word Cloud: ask "What makes a payment request feel urgent?" The biggest words show the pressure tactics your team falls for.
- Rating Scale: before and after the wage and hour course, ask "How confident are you deciding whether someone is owed overtime?" from 1 to 5.
- Open Ended: collect anonymous questions about pay queries and data requests, so people ask what they would otherwise keep to themselves.
FAQ
What training do payroll staff need?
Payroll staff need wage and hour law, pay equity rules, data protection and fraud awareness. After that, add conduct and retaliation courses like the ones above.
Is payroll certification required?
Usually not. The federal sources cited in this post set rules for pay but do not require a payroll certificate or a course. A certificate shows competence, and compliance training helps either way. Check your own state's or country's rules.
What are the biggest payroll compliance risks?
Misclassifying employees, miscalculating overtime, unequal pay and data breaches. Payment fraud, such as a fake request to change bank details, sits alongside them.
How can payroll teams prevent fraud?
Verify every change to bank details through a second channel, such as a known phone number, and train staff to spot impersonation. The FBI's IC3 advises heightened scrutiny of requests to change direct deposit details.
This post is general information, not legal advice. For a decision about your own workplace, speak to a qualified employment lawyer or the regulator.
