Overview
The Act introduces compulsory identity verification procedures for all new and existing company directors, persons with significant control (PSCs) and agents who file information at Companies House.
Individuals will be able to verify directly with Companies House or through a registered third party provider – an Authorised Corporate Service Provider (ACSP).
Once the relevant provisions are in force, only ACSPs and verified individuals will be able to file information at Companies House on behalf of a company or other registered entity.
Registration as an ACSP for individuals and organisations opened on 18 March 2025. Individuals will be able to voluntarily verify their identity directly with Companies House from 8 April 2025, with mandatory identity verification due to be introduced by autumn 2025.
Perhaps the most significant of the Act’s reforms is the introduction of compulsory identity verification procedures for all new and existing company directors, persons with significant control (PSCs) and agents who file information at Companies House. The main aim behind the new verification process is to prevent fraudulent or fictitious appointments of directors or beneficial owners from being recorded at Companies House.
Identity verification for directors
All directors, both new and existing, will have to undergo identity verification, and the Act specifically prohibits directors (including shadow directors) from acting unless their identity has been verified. The Act also places an obligation on companies to ensure that individuals do not act as directors unless their identity is verified.
In practice, this means that until an individual’s identity is verified, a director should not take any actions on behalf of the company in their capacity as a director. If a person fails to verify their identity and continues to act as a director, they are committing an offence which is punishable by a fine. However, the director’s appointment and the actions they may have undertaken as a director will still be valid.
A company will also commit a criminal offence if it allows a director to act while unverified.
Timing
According to the Government’s outline transition plan (the Transition Plan), individuals will be allowed to voluntarily verify their identity from 8 April 2025. Mandatory verification for new directors is scheduled to be introduced by autumn 2025.
Once mandatory verification is in force, it will not be possible to incorporate a new company without the proposed officers of the new company having been verified, and their verified status will have to be confirmed in the Companies House application form.
Post-incorporation, new directors will have to verify before their appointment is notified to Companies House (which must happen within 14 days of appointment).
For existing directors, there will be a 12-month transition period (starting in autumn 2025) in which they will be given time to comply with the new verification requirements. This identity verification will happen as part of a company’s annual confirmation statement filing, meaning that all existing directors will be required to file evidence of their identity being verified at the same time as filing the company’s first confirmation statement during that period.
Identity verification for PSCs
All new and existing PSCs will also need to verify their identity and maintain that verified status as long as they are registered at Companies House. Where the registrable PSC is a legal entity – a relevant legal entity (RLE) – the entity will have to nominate a managing officer who is an individual and whose identity has been verified.
New PSCs and RLEs will be able to be registered without having had their identities verified in advance. However, any new PSC must become verified and confirm that status to the registrar within 14 days of receipt of a notice from the registrar. RLEs will have 28 days from receipt of the notice to comply.
There will be a transition period during which existing PSCs and RLEs will have time to verify their identity. Companies that do not comply by the end of that period may face criminal sanctions or civil penalties.
As referred to above, Companies House has confirmed that individuals will be able to voluntarily verify their identity from 8 April 2025. Mandatory verification for new PSCs and RLEs will be introduced by autumn 2025, and the 12-month transition phase for existing PSCs and RLEs will begin at the same time.
How will identity verification work?
Companies House has published new guidance on the verification process.
There will be two routes for verifying an individual’s identity:
- direct verification with Companies House; or
- verification by a third party provider – an authorised corporate service provider (ACSP) (see below).
From 8 April 2025, individuals will be able to verify directly with Companies House, either online or in person (at a post office). Both options require a Gov.UK One Login and are free of charge.
Individuals should be able to verify online with Companies House if they have one of the following types of photo ID:
- biometric passport from any country;
- UK photo driving licence (full or provisional);
- UK biometric residence permit;
- UK biometric residence card; or
- UK Frontier Worker permit.
Once signed in, GOV.UK One Login will guide the user to verify their identity using either the GOV.UK ID Check app (which will require access to a phone with a working camera to complete a facial scan), or by answering security questions via a web browser. As well as providing identity documentation, individuals will need to provide a valid email address and a current residential address.
If an individual is not able to verify online and lives in the UK, it may be possible to verify in person at a post office that offers “in branch verification”. Specified photo ID will still be required and this will be scanned by the post office and a photo of the individual taken.
Although it is envisaged that most individuals will be able to verify directly with Companies House via the Gov.UK One Login service, there will be some restrictions, particularly in the case of non-UK or non-EU nationals who do not have biometric identification. If individuals are unable to satisfy the documentation requirements for direct verification, they will need to engage an ACSP to verify their identity.
Verified individuals will be allocated a unique identification number (UIN) and each person may have one UIN only. The registrar will be able to use UINs to link the records of verified individuals holding multiple roles in different organisations.
Authorised Corporate Service Providers
As stated above, individuals might choose to (or might be required to) use an ACSP to verify their identity rather than using the facility provided by Companies House. The identity verification checks undertaken by ACSPs will achieve the same level of assurance as those undertaken by Companies House.
To obtain ACSP status, intermediaries and agents will have to be authorised by Companies House and be supervised within the UK by one of the relevant anti-money laundering (AML) supervisory bodies. The application process should be completed by someone senior within the relevant organisation, such as a director, and that senior person will need to have their own identity verified as part of the process.
Once registered, the ACSP will be provided with a digital account and a UIN which will allow them to complete identity verification checks and to file information at Companies House for their clients (see below). If an ACSP conducts identity verification, it will need to keep records for seven years.
The person registering the business as an ACSP will be able to add other people who work for the business to the ACSP account once it has been registered and approved. These employees will not be subject to identity verification but will be allowed to carry out identity checks and file documentation for clients on behalf of the ACSP.
Individuals and organisations were able to register as an ACSP from 18 March 2025.
Filing information at Companies House
Once the relevant provisions are in force, only ACSPs and verified individuals will be able to file information at Companies House on behalf of a company or other registered entity. This is a significant change from the current situation where anyone is able to deliver documents to Companies House. The Transition Plan anticipates that this reform will be effective by spring 2026.
Many companies currently use third parties, such as accountants, to file information on their behalf. These third parties will need to register as an ACSP in order to continue doing this. By requiring all third party agents to register their business and verify their identity, the Government will be able to confidently identify who is filing on the register and acting on behalf of companies. It will also help in the identification of agents who may not be acting with a lawful purpose, enabling the Government to take action more quickly.
Practical steps
Although mandatory identity verification is not due to be rolled out until autumn 2025, existing directors and PSCs may want to take the opportunity to verify their identities voluntarily from 8 April. With that in mind, individuals will need to ensure that they have the appropriate identity documentation to register directly with Companies House. If they are unable to satisfy the Companies House requirements, they will have to engage an ACSP.
Companies should also consider who within their organisation currently files information at Companies House and be alert to the need for them to have their identity verified by spring 2026. Alternatively, companies may want to appoint an ACSP to carry out this function in due course.
Organisations that intend to register as ACSPs should be looking at the registration process now. An appropriately senior person should be given responsibility for managing the process, including collating the information that will be required. This will include the organisation’s AML supervisory body membership number as well as information to verify the identity of the individual overseeing the process.
Resources
Government Factsheet: Identity verification and authorised corporate service providers
The Economic Crime and Corporate Transparency Act 2023
The Registrar (Identity Verification and Authorised Corporate Service Providers) Regulations 2025
The Registrar’s (Identity Verification by the Registrar) Rules 2025
The Registrar’s (Identity Verification by Authorised Corporate Service Providers) Rules 2025
The Registrar’s (Requirements Applicable to Applications to Become an Authorised Corporate Service Provider) Rules 2025
Companies House blog (January 2025)
Economic Crime and Corporate Transparency Act: outline transition plan for Companies House
The Unique Identifiers (Application of Company Law) Regulations 2025
Companies House guidance: Applying to register as a Companies House authorised agent
Companies House guidance: Being an Authorised Corporate Service Provider
Companies House guidance: How to meet Companies House identity verification standard
Companies House guidance: Verifying your identity for Companies House
Also in this section
- Registered office address (in force from 4 March 2024)
- Registered email address (in force from 4 March 2024)
- The role and powers of the registrar (in force from 4 March 2024)
- Statement of lawful purposes and confirmation statements (in force 4 March 2024)
- Company and business names (in force from 4 March 2024)
- Companies House fees (in force from 1 May 2024) and new financial penalties (in force from 2 May 2024)
- Identity verification (to be implemented in phases, commencing 18 March 2025)
- Company registers and filings (not yet in force)
- Directors’ disqualification (in force from 4 March 2024) and corporate directors (not yet in force)
- Protecting personal information on the register (to be implemented in phases, commencing 27 January 2025)
- Accounts and audit exemption (not yet in force)
- Implications for limited liability partnerships (to be implemented in phases, commencing 4 March 2024)
- Corporate criminal liability: new failure to prevent fraud offence (coming into force 1 September 2025)
- Registrar’s extended powers to strike off companies (all in force from 18 March 2025)