The supplemental 22% withholding rule (and the $1M kicker to 37%)
When an RSU tranche vests, the fair-market value of the shares is ordinary W-2 income on the vest date under IRC §83(a). The employer must withhold federal income tax at the source under IRC §3402(a). The operational rate for supplemental wages — bonuses, RSU vests, NSO exercise spreads, severance, the whole “not regular salary” bucket — is set by IRS Publication 15 and Publication 15-T: a flat 22% on the first $1,000,000 of cumulative supplemental wages in the calendar year, and a mandatory 37% on every dollar above that threshold.
The 22% rate is statutory simplicity, not a forecast of the employee’s actual liability. It was anchored to the third federal bracket so that the median W-2 employee receiving a year-end bonus would land roughly correctly withheld. For a senior tech employee in the 32%, 35%, or 37% federal bracket, the rate under-collects by 10–15 percentage points on every dollar of supplemental income. Layered on top is the 0.9% Additional Medicare under IRC §3101(b)(2). The employer-withholding trigger under IRC §3102(f)(1) is wages above $200,000 from a single payor in the calendar year, regardless of filing status; the household’s actual liability threshold ($200K single, $250K MFJ, reconciled on Form 8959) is computed at filing. A two-W-2 household with each employer below $200K but combined wages above $250K MFJ generally has un-withheld Additional Medicare exposure.
The $1M kicker matters when a household’s total supplemental wages in a calendar year cross the threshold. At that point, every supplemental dollar above $1M must be withheld at 37% — the statutory mandatory rate, no employer election available. For senior staff or principal engineers at public tech companies with $400K–$600K RSU vest tranches twice a year, this is reachable in a single calendar year. The 37% rate matches the top federal bracket reasonably well, so the gap shrinks above $1M; the damage is done on the first $1M, which is where the 22% applies.