How to Start a Virtual Assistant, BPO or Customer Support Company for US Clients from Abroad (2026), Without Visiting: US LLC or C-Corp, EIN Without an SSN, Bank Account, Call Recording Laws, PCI DSS for Card Payments, Debt Collection Rules and Client Data

Small and mid-sized US businesses run on outside help. A real estate team in Phoenix has a virtual assistant in Davao handling calendars, listings and follow-ups. An e-commerce brand in New Jersey has a customer support team in Bogotá answering chat and email in English and Spanish. A dental group has a back office in Noida verifying insurance and booking appointments. A software company runs its overnight support desk from Kraków.

Virtual assistant agencies and business process outsourcing (BPO) companies are among the easiest businesses to run from abroad for US clients, and among the easiest to start: no stock, no equipment beyond laptops and headsets, and clients who pay monthly. A US company helps you sign those clients, look established, and get paid in dollars without international wire fees.

This guide covers the set-up and the US rules that apply when your team speaks to, or handles data about, your clients' American customers.

In short: A non-resident can form a US LLC or C-Corporation without visiting, get an EIN without an SSN or ITIN, and open a US business bank account remotely. With your team working abroad, a foreign-owned single-member LLC usually owes no US federal income tax, but files Form 5472 every year. If your agents record calls, follow the all-party consent states. If they make outbound sales calls or texts, the TCPA and Do-Not-Call rules apply. If they take card payments by phone, you are in scope for PCI DSS. Debt collection is heavily regulated and licensed by state, so treat it as a separate business. Health and financial clients bring HIPAA and GLBA duties.

What VA and BPO companies sell

Most US clients buy a dedicated person or team at a fixed monthly price, with the agency handling hiring, training, equipment, supervision and cover for leave.

Can you start a BPO or VA company in the USA without visiting?

Yes:

• Form the LLC or corporation online through a registered agent
• EIN without an SSN or ITIN: Form SS-4 to the IRS, processed manually for foreign owners
• US business bank account without visiting, at a bank or fintech that accepts foreign-owned companies
• US phone numbers, helpdesk and CRM tools, all cloud-based
• Client contracts, signed electronically

Expect four to eight weeks for the company, EIN and bank account. See opening a US company without visiting and EIN for non-residents. A website with your services, team photos and client testimonials helps the bank application; see the US business bank account guide.

US LLC or C-Corp?

US LLC formation for a VA or BPO agency

A single-member LLC is the usual choice. It is disregarded for US tax, and where your assistants and agents work outside the USA, with no US office or staff, the fees are generally foreign-source, so the LLC usually owes no US federal income tax. It files Form 5472 with a pro forma 1120 every year ($25,000 penalty if missed). See Form 5472 explained.

A Wyoming LLC with EIN is $249, or $348 with a bank account, then $121 a year.

US C-Corp formation for a BPO company

A C-Corporation (21% federal tax) fits a BPO that will hire US-based account managers or agents, bid for larger enterprise contracts, raise capital or be sold. BPO companies are frequently acquired, usually as corporations. A Delaware corporation with EIN is $358, then $578 a year. See LLC vs Inc.

Contracts and service levels

A US client agreement for VA or BPO work should cover:

• scope and working hours, including US time zones and holidays
• service levels: response times, answer rates, quality scores, and any credits if they are missed
• staff replacement: how quickly you replace someone who leaves, and whether the client can request a change
• non-solicitation: the client may not hire your staff directly for a set period, or pays a fee if it does
• confidentiality and data protection, and which client systems your staff can access
• liability limits and insurance
• payment terms: monthly in advance is common for dedicated staff

See contracts with US clients. Clients will ask for a tax form: a W-8BEN or W-8BEN-E for a foreign-owned single-member LLC, or a W-9 from a corporation. See W-8BEN-E vs W-8BEN.

Call recording: consent laws

Most BPOs record calls for quality and training. US recording laws vary by state:

• Federal law and most states require only one party's consent, which can be your agent.
• About a dozen states require all parties' consent, including California, Florida, Illinois, Maryland, Massachusetts, Montana, New Hampshire, Pennsylvania and Washington.

Because you rarely know where the caller is, the safe practice is to announce recording at the start of every call ("This call may be recorded for quality and training"). California's privacy wiretap law has also been used in lawsuits over chat transcripts and AI tools that "listen" to conversations, so disclose those too.

Outbound calls and texts

If your agents make sales calls or send marketing texts for clients, the Telephone Consumer Protection Act, the National Do-Not-Call Registry and state telemarketing laws apply, with damages of $500 to $1,500 per call or text. Make sure the client has the consent needed, scrub lists, and follow calling hours. Our lead generation guide explains these rules in detail.

Customer service calls to people who contacted the client (order updates, appointment reminders, callbacks they requested) are lower risk, but autodialled or prerecorded calls to mobiles still need consent.

Taking card payments: PCI DSS

If your agents take card numbers by phone, chat or email for clients, you handle cardholder data and fall within the Payment Card Industry Data Security Standard (PCI DSS), currently version 4.0.1. Clients will ask you to prove compliance.

The easiest way to reduce your scope is to keep card numbers away from your agents:

• DTMF masking: the customer types the card number on the phone keypad, and the tones are hidden from the agent and the recording
• pause and resume recording, so card details are never recorded
• payment links sent by text or email, so the customer pays directly
• a clean room with no phones, paper or personal devices if agents must see card data

Never let agents write card numbers down or keep them in tickets, chats or spreadsheets.

Debt collection is a different business

Collecting debts for US creditors is heavily regulated:

• The Fair Debt Collection Practices Act and the CFPB's Regulation F cover third-party collectors, with limits such as a presumption of harassment for more than seven calls in seven days about a debt, rules on emails and texts, and required validation notices.
• Most states license collection agencies, often with bonds and local requirements, and some apply their rules to collectors located outside the state or country.
• Clients in collections expect strict call scripts, recording and complaint handling.

If you are asked to do collections, take legal advice and treat it as a separate, licensed line of business. First-party customer service for a client's own accounts, such as payment reminders sent in the client's name, is lighter but still subject to state laws and the CFPB's rules on unfair practices.

Client data and sector rules

• Consumer data: state privacy laws such as the CCPA make your clients responsible for their vendors; expect a data processing agreement that limits your use of the data.
• Healthcare clients: you are a HIPAA business associate, with a BAA and Security Rule safeguards. See our medical billing guide.
• Financial clients (lenders, insurers, fintechs): GLBA safeguards and vendor oversight, and sometimes restrictions on offshore access.
• Your country's law applies to your team's handling of the data, such as the Philippines' Data Privacy Act or India's Digital Personal Data Protection Act.

Common security controls: individual logins with MFA, clients' systems only, no downloads or USB storage, clean desk rules, and background checks on staff.

Insurance

US clients commonly ask for professional liability (E&O), cyber liability, general liability, and, if your staff handle money or have access to client accounts, crime or fidelity cover. A certificate of insurance from a US-standard policy is easier to provide through a US company.

Getting paid

• Bill monthly in advance from the US company, by ACH or card. See receiving payments from US clients and Stripe for non-residents.
• Move money home to pay your team when it suits your cash flow.

Your team abroad

• Agents employed by your home-country company serve the US company under an intercompany agreement; record related-party payments for Form 5472. Many countries offer incentives for export-oriented service companies, such as registered business enterprise regimes in the Philippines, so structure the home-country company to keep them.
• VAs engaged as freelancers and paid directly by the US company give a W-8BEN; work done abroad needs no US withholding and no Form 1099. See paying contractors abroad. Check local employment law: a full-time VA working fixed hours may be an employee.
• Indian residents set up the US company under the ODI rules; see ODI and FEMA.

Sales tax

Customer support, VA and back-office services are not taxable in most states, though a few states tax some services broadly. See state taxes for foreign-owned companies.

Worked examples

These are illustrative examples, not client stories.

A VA agency in Davao. Rhea's agency places 30 full-time VAs with US real estate agents and coaches at a monthly fee per VA. It forms a Wyoming LLC with an EIN and a US bank account, bills clients monthly in advance by ACH, and employs the VAs through a Philippine company that invoices the LLC under an intercompany agreement. The LLC has no US income tax and files Form 5472.

A bilingual support centre in Bogotá. Andrés's company answers chat, email and phone for US e-commerce brands. It forms a Delaware C-Corp, since a large client wants a US corporation and it plans to hire a US account director. Calls start with a recording notice, and agents send payment links instead of taking card numbers, which keeps the company largely out of PCI DSS scope.

A dental back office in Noida. Neha's team verifies insurance and books appointments for US dental groups. It forms a US LLC under the ODI route, signs a HIPAA BAA with each group, and works only in the groups' practice software through secure remote access. When a client asks the team to chase unpaid patient balances, Neha checks the collection rules before agreeing, and limits the work to reminders in the practice's name.

Common mistakes

• Recording calls without announcing it.
• Agents taking card numbers in chat or on paper.
• Outbound sales calls to lists without consent or Do-Not-Call scrubbing.
• Taking on debt collection as if it were customer service.
• No non-solicitation clause, so clients hire your best agents directly.
• Treating full-time VAs as freelancers when local law sees them as employees.
• Forgetting Form 5472 because the LLC had no US income.

Frequently asked questions

Can I start a VA or BPO company for US clients from the Philippines or India without visiting? Yes. The company, EIN and US bank account are all set up remotely.

Do I need an SSN or ITIN for the EIN? No. Foreign owners apply on Form SS-4.

Will my US LLC pay US tax on fees from US clients? Usually not, if all work is done abroad and there is no US office or staff. It still files Form 5472.

Can my agents take credit card payments for US clients? Yes, but that brings PCI DSS into play. Payment links or DTMF masking keep card data away from agents.

Do I need a licence to do customer support for US companies? No general licence is needed. Debt collection and some regulated activities do require state licences.

How UCB can help

We form US LLCs and C-Corporations for VA agencies and BPO companies outside the USA, get the EIN without an SSN, and help open a US business bank account without visiting, through our formation, EIN and bank account package. Each year we prepare Form 5472 with the pro forma 1120, Form 1120 or Form 1065, through our US tax filing service. We do not provide PCI, privacy, collections or legal advice.

Starting a VA or BPO company for US clients? WhatsApp us at +1 315 961 2956 or email enquiries@ucbsolutions.com.