The UK’s corporate landscape faces its biggest transformation in decades. From autumn 2025, over 7 million company directors and beneficial owners must prove their identity to Companies House or face criminal prosecution. The Economic Crime and Corporate Transparency Act 2023 eliminates anonymous company control forever. This seismic shift affects every UK business leader, with unlimited fines awaiting those who ignore the new Companies House identity verification rules.
Identity verification provides more assurance about who is setting up, running, owning and controlling companies in the UK. These changes strengthen the UK’s defence against economic crime. Companies House transforms from a passive registry into an active gatekeeper with enhanced powers.
Table of Contents
What is Companies House Identity Verification?
Companies House identity verification requires individuals to prove their identity before filing information. By law, you will need to verify your identity to confirm you are who you claim to be. The process creates a verified digital identity linked to your company roles.
When you have successfully verified, you’ll get a unique identifier known as a Companies House personal code. This personal code connects all your company roles together. You only need to verify once, even with multiple directorships.
The verification process helps combat corporate identity fraud. It prevents criminals from using false identities to establish companies. This strengthens the entire UK business ecosystem.
Who Must Complete Companies House Identity Verification?
Directors and Company Officers
All directors of UK companies must complete identity verification under the new Companies House new rules. This includes executive directors, non-executive directors and alternate directors. The requirement applies regardless of nationality or residence location.
Existing directors have a 12-month transition period from autumn 2025. New directors must verify before appointment. Company secretaries and other officers filing documents also require verification.
People with Significant Control (PSCs)
PSC identity verification applies to individuals with significant company control. All new and existing persons with significant control of a company must verify their identity. This includes anyone holding 25% or more shares or voting rights.
PSCs with appointment or removal rights for directors need verification. Those with significant influence over company decisions also qualify. The rules extend to beneficial owners behind complex structures.
Limited Liability Partnership Members
LLP members face the same verification requirements as company directors. The requirement for those filing documents is expected to take effect from spring 2026. Designated members and ordinary members both require verification.
General partners of limited partnerships also need verification. Managing officers of certain entities fall under these rules. The scope covers various business structures.
Authorised Corporate Service Providers
All third-party providers will need to register as an Authorised Corporate Service Provider before they can submit information. ACSPs include accountants, solicitors and company formation agents. Registration became available from 18 March 2025.
Service providers must verify their identity before helping clients. This creates accountability throughout the filing process. It enables Companies House to identify who submits information.
Key Deadlines and Timeline
Voluntary Phase: 8 April 2025
The voluntary period for identity verification is open for business. Individuals can verify their identity before mandatory requirements begin. This helps spread the workload across the transition period.
ACSPs can begin verifying client identities from this date. The voluntary approach reduces pressure on the system. Early verification prevents last-minute complications.
Mandatory Phase: Autumn 2025
Mandatory identity verification for all company directors and People with Significant Control on incorporation and appointment begins in autumn 2025. New companies cannot incorporate without verified directors. New appointments require completed verification.
All new directors will need to verify their identity within 14 days of being appointed. PSCs have 14 days after becoming registrable. Failure to meet deadlines constitutes an offence.
Transition Period: 12 Months from Autumn 2025
Existing directors and PSCs will have a year to comply with the new requirements. Verification integrates with annual confirmation statement processes. This reduces administrative burden on companies.
By spring 2026, individuals submitting filings will need to have completed identity verification. The transition period ends with full enforcement. Non-compliance becomes a serious legal matter.
How to Complete Companies House Identity Verification
Direct Verification via GOV.UK One Login
The primary verification method uses GOV.UK One Login services. You can verify online if you have the identity documents or information required. The service is free of charge for all users.
Acceptable photo identification includes:
- UK passport (current)
- UK driving licence (current)
- EEA or overseas passport with biometric chip
GOV.UK One Login will ask you some simple questions to find the best way for you to verify your identity online. The system guides users through appropriate verification paths. Alternative verification uses bank account details for UK residents.
Post Office Verification Service
Face-to-face verification becomes available at designated Post Office locations. This option supports individuals without suitable digital identification. The service requires appointment booking in advance.
Post Office verification follows the same security standards. Staff verify documents and photograph identification. The process connects directly to Companies House systems.
Verification Through ACSPs
Authorised Corporate Service Provider verification offers professional assistance. Individuals may apply to an ACSP to have their identity verified with Companies House. This route may involve service charges.
ACSPs must meet strict verification standards. They operate under anti-money laundering supervision. Professional verification suits complex international situations.
Understanding Companies House Personal Codes
What is a Companies House Personal Code?
The code is personal to you, not your company or a company you work for. Each verified individual receives a unique identifier. This code connects all company roles together.
The personal code proves your verified status to Companies House. It links your identity across multiple appointments. Companies use this code for official filings.
Using Your Personal Code
From autumn 2025, you’ll need it for various reasons including filing confirmation statements and director appointments. New incorporations require director personal codes. PSC registrations need verified codes.
Share your code only with trusted individuals or companies. Keep this information secure, as you would with other unique codes such as your Unique Taxpayer Reference for HMRC. Treat it as confidential business information.
Code Security and Management
Personal codes remain valid indefinitely unless revoked. Store codes securely with other important business documents. Consider using password managers for digital storage.
Companies should maintain records of director personal codes. This enables smooth filing processes throughout the year. Update records when directors change or join.
Penalties for Non-Compliance
Criminal Offences and Fines
If you do not comply with identity verification requirements on time, you will be committing an offence. Non-compliance results in criminal liability for individuals. Companies House penalties for non-compliance include unlimited fines.
Directors and PSCs who fail to verify their identity within the time required will commit a criminal offence. Companies also face liability for allowing unverified directors. The penalties reflect the seriousness of these obligations.
Prohibition from Acting as Director
If you continue to act as a director without verifying after it becomes a legal requirement, you could be disqualified. Unverified individuals cannot legally hold director positions. This prohibition protects the integrity of company registers.
An individual whose identity has not been verified will be unable to be appointed as a director. Companies cannot appoint unverified individuals to director roles. This ensures all appointments meet verification standards.
Company-Level Consequences
Companies face additional compliance obligations under the new rules. They must ensure all directors complete verification on time. Failure creates liability for the company itself.
Companies will also have a duty to ensure that individuals do not act as directors unless their identity has been verified. This creates positive obligations for corporate compliance. Board governance must include verification monitoring.
Impact on Cybersecurity and Business Operations
Enhanced Corporate Transparency
The new verification requirements strengthen corporate transparency across the UK. Verified identities reduce opportunities for cybercriminals to establish shell companies. This protects legitimate businesses from unfair competition.
UK company transparency improvements benefit top pen testing companies and other technology firms. Verified corporate identities enable more confident business relationships. Clients can trust they’re dealing with legitimate organisations.
Cybersecurity Implications for IT Professionals
IT security professionals should understand these changes’ implications for their organisations. Verified corporate identities reduce identity-related cyber risks. Combatting economic crime requires both regulatory and technical approaches.
Companies may need updated security policies reflecting verification requirements. Access control systems should integrate with verified identity principles. Network penetration testing services can help identify vulnerabilities in identity management systems.
Operational Changes for Technology Companies
Technology companies must adapt their compliance processes to accommodate verification requirements. This includes updating onboarding procedures for new directors. Client identity verification processes may need enhancement.
Companies House filing changes affect how technology firms manage corporate administration. Automated filing systems require integration with verification databases. Penetration testing companies should evaluate these system changes for security vulnerabilities.
Preparing for Implementation
Early Verification Strategy
Companies should encourage directors to verify identities during the voluntary phase. This prevents system overload during mandatory implementation. Early verification demonstrates compliance commitment.
Develop a verification tracking system for all company officers. Monitor completion status across different group entities. Plan for verification renewal requirements if they emerge.
Documentation and Record Keeping
Maintain comprehensive records of all verification activities. Store personal codes securely alongside other confidential information. Develop procedures for sharing codes with trusted filing agents.
Consider the security implications of storing verification codes. Encrypt digital records and limit access to essential personnel. Regular backup procedures protect against data loss.
Integration with Existing Systems
Evaluate how verification requirements integrate with existing compliance systems. Update standard operating procedures to include verification checks. Train staff on new verification requirements and deadlines.
Consider professional support for complex verification scenarios. ACSPs can provide expertise for international directors or complex structures. Budget for verification-related costs during transition periods.
Glossary of Technical Terms
ACSP (Authorised Corporate Service Provider): A registered business authorised to verify identities and file documents with Companies House on behalf of clients.
ECCTA 2023: The Economic Crime and Corporate Transparency Act 2023, introducing comprehensive reforms to UK company law and transparency requirements.
GOV.UK One Login: The government’s digital identity verification service, providing secure online identity checking for public services.
PSC (Person with Significant Control): An individual who holds more than 25% of shares or voting rights, or has significant influence over a company.
Companies House Personal Code: A unique identifier issued to verified individuals, connecting their identity to all their company roles and appointments.
IDV (Identity Verification): The process of confirming an individual’s identity meets required standards before they can hold company positions or file documents.
Strengthen Your Cybersecurity During Corporate Changes
As companies adapt to new verification requirements, cybersecurity considerations become increasingly important. These regulatory changes create opportunities for cyber threats targeting identity management systems and corporate processes.
Aardwolf Security provides comprehensive penetration testing services to help organisations maintain robust security during regulatory transitions. Our experts understand how compliance changes affect cybersecurity postures and can identify vulnerabilities in updated systems.
Our specialised testing services help companies prepare for the evolving regulatory landscape whilst maintaining strong security defences. Contact our cybersecurity experts to discuss how we can support your organisation through these important changes.
What is Companies House identity verification?
Companies House identity verification is a legal requirement under ECCTA 2023. Individuals must prove their identity before filing company information. The process issues a unique personal code for all company roles.
When does identity verification become mandatory?
Identity verification becomes mandatory from autumn 2025 for new appointments and incorporations. Existing directors have a 12-month transition period to complete verification. The deadline integrates with annual confirmation statements.
Who needs to verify their identity with Companies House?
All UK company directors, PSCs, LLP members and filing agents need verification. The requirement applies regardless of nationality or residence. ACSPs must also complete verification before registering.
How much does Companies House identity verification cost?
Direct verification through GOV.UK One Login is free of charge. ACSP verification services may involve fees set by individual providers. Post Office verification services are also free.
What documents are needed for identity verification?
Acceptable documents include UK passports, UK driving licences, or overseas passports with biometric chips. UK residents without photo ID may use bank account details. Post Office verification accepts additional document types.
What happens if I don’t verify my identity on time?
Non-compliance constitutes a criminal offence with unlimited fines. Unverified individuals cannot act as directors or PSCs. Companies also face liability for allowing unverified individuals to serve.
Can I verify my identity before it becomes mandatory?
Yes, voluntary verification is available from 8 April 2025. Early verification prevents system congestion and ensures compliance. It demonstrates proactive corporate governance commitment.
How long does the identity verification process take?
Online verification typically completes within minutes for straightforward cases. Complex situations may require additional verification steps. ACSP verification timelines depend on individual service providers.
Do I need to verify again if I’m already a director?
Existing directors must verify during the 12-month transition period from autumn 2025. Verification connects to your next confirmation statement filing. One verification covers all your company roles.
What is a Companies House personal code?
A Companies House personal code is your unique verification identifier. It proves your verified status to Companies House systems. The code connects all your director and PSC roles together.
Further Reading
- Companies House: Changes to UK company law
- GOV.UK: Verifying your identity for Companies House
- ICAEW: Timeline for Companies House ID changes
- Economic Crime and Corporate Transparency Act 2023
