Companies House identity verification and economic crime compliance obligations

The UK’s corporate transparency regime has entered a more interventionist phase, with Companies House now expected to play a materially more active role in monitoring and enforcement. Identity verification at Companies House is no longer an abstract reform on the horizon; it is now moving into force as a live legal requirement, with phased implementation, forming part of a wider restructuring of the UK’s approach to economic crime, corporate governance, and enforcement.

At the centre of this shift is the Economic Crime and Corporate Transparency Act 2023 (ECCTA). The Act received Royal Assent on 26 October 2023 and is being brought into force in stages, with significant implications for companies, directors, investors, and professional advisers. In practice, these changes reshape how corporate information is created, verified, and relied on in the UK, with practical consequences for day‑to‑day governance rather than just headline compliance.

From passive register to active gatekeeper

For decades, the UK company register was designed around accessibility and speed. While this supported ease of incorporation and low barriers to entry, it also left the system open to misuse by fraudsters and those seeking to obscure beneficial ownership. The ECCTA is intended to rebalance that position.

Companies House is evolving into an active gatekeeper with powers to query, reject, and remove information, and to share intelligence with other enforcement bodies in a way that was not previously part of its operational role. Mandatory identity verification is the cornerstone of that transition, anchoring corporate filings to verified individuals rather than untested self-reporting.

Identity verification within the wider economic crime framework

Identity verification sits alongside a broader package of reforms under the ECCTA aimed at improving the quality, reliability, and enforcement of corporate data.

From an economic crime compliance perspective, identity verification supports:

• More accurate beneficial ownership information, strengthening AML and sanctions screening.
• Greater accountability for false or misleading filings, with personal consequences for directors and PSCs.
• Enhanced data-sharing between Companies House and enforcement bodies, increasing the likelihood that inconsistencies or suspicious structures will be identified.

For regulated businesses, particularly those in financial services, real estate, and cross‑border trade, regulators and counterparties are increasingly expecting Companies House data to align closely with internal KYC records.

Mandatory identity verification

The ECCTA introduced mandatory identity verification for directors, individual LLP members, and persons of significant control (PSCs) in November 2025. From that point, identity verification ceased to be optional or best practice and became a legal obligation, subject to a transitional period for existing directors, LLP members, and PSCs.

Verification applies to individuals who set up, run, own, or control UK companies and LLPs, with the scope of in‑scope roles expanding in phases. New appointees must complete identity verification before acting, while existing officeholders are subject to a transition period.

Verification can be completed directly through Companies House using GOV.UK One Login or through an Authorised Corporate Service Provider (ACSP), such as a solicitor or accountant supervised for anti-money laundering purposes.

In practice, a common misunderstanding is the assumption that identity verification is a one‑off administrative task, rather than an ongoing obligation that must be completed by reference to individual roles, deadlines, and filing events.

Failure to comply is not a technical breach; it is a criminal offence and can, in practice, prevent companies from making routine filings, registering changes, or progressing transactions at critical points.

Implementation timeline

Companies House has published an indicative timetable for the next stages of reform, which organisations should already be factoring into governance and transaction planning.

From 2026 (timing to be confirmed):

• Identify verification will be extended to individuals filing at Companies House.
• Third-party agents filing on behalf of a company will increasingly be required to be registered as an ACSP.

By the end of 2026, Companies House has indicated:

• Additional filing requirements will be introduced for limited partnerships.
• The transition period for requiring identity verification of directors of companies, members of LLPs, PSCs, and other in-scope individuals will end, and active compliance and enforcement activity will commence against those who have failed to complete identity verification where required.

There remains uncertainty around the timing of identity verification requirements for certain categories, which has already made forward planning more difficult for businesses operating complex group or partnership structures. Businesses using complex group or partnership structures should monitor developments closely and assume that further expansion of the regime is likely.

Consequences of non-compliance

The risks of failing to comply are both legal and commercial. Companies House can restrict a company’s ability to file documents, reject filings outright, and share information with other regulators and law enforcement agencies. Individuals who fail to verify may commit an offence and find themselves unable to act in their appointed roles.

Reputational and transactional risks also arise. Delays to deals, challenges to corporate authority, and adverse due diligence findings can all flow from poor identity verification compliance, particularly as enforcement activity ramps up from the end of 2026.

What boards and businesses should be focusing on now

With identity verification already in force and further changes imminent, boards and management teams need to move beyond awareness and adopt a structured, operational approach, with clear ownership rather than relying on ad hoc filings or adviser prompts. The focus should be on embedding compliance into governance, transactions, and day-to-day corporate administration, rather than treating identity verification as a standalone or one-off exercise.

In practical terms, organisations should focus on:

• Mapping in-scope individuals across the group, including directors, individual LLP members, PSCs, and equivalent roles, to identify who must complete identity verification and by when, particularly where individuals hold multiple appointments across entities.
• Embedding identity verification into governance processes, ensuring identity verification is built into appointment, resignation, and restructuring workflows, rather than being addressed retrospectively when filings are due.
• Reviewing filing arrangements and agent relationships, including whether third-party advisers who file on the company’s behalf are registered as ACSPs, and whether internal controls are sufficient once 2026 filing requirements begin to be phased in.
• Aligning Companies House data with internal compliance records, so that information on directors and beneficial owners is consistent with AML, KYC, and sanctions screening processes, reducing the risk of discrepancies being flagged by regulators or counterparties.
• Preparing for transactions and due diligence, recognising that incomplete or missing identity verification can delay filings, invalidate appointments, and raise red flags in M&A, financing, and investment scenarios.
• Training directors and senior managers, with clear guidance on their personal obligations, the staged implementation timetable, and the legal and commercial consequences of non-compliance.
• Monitoring forthcoming developments, particularly around limited partnerships and the potential future extension of identity verification to corporate directors, relevant legal entities, and other corporate roles, so that changes can be anticipated rather than reacted to.

The key challenge is ensuring that responsibility is clearly allocated and that identity verification is treated as not purely a one-off process, as it must be completed and maintained across roles and filings. As Companies House continues to build its enforcement capability, businesses should expect closer scrutiny of corporate data, filings, and behaviour, particularly where information appears inconsistent or incomplete.

For companies and advisers alike, early and proactive engagement remains the most effective way to manage risk and avoid potential disruption. As enforcement increases through 2026, closing gaps in identity verification early will be critical to avoid issues arising at commercially sensitive moments.

If you would like to discuss how the Companies House identity verification regime affects your organisation, or would benefit from tailored advice on preparing for upcoming implementation stages, please contact a member of our Corporate team.