The Economic Crime and Corporate Transparency Act 2023 (ECCTA) represents a significant overhaul of the UK’s company law framework. Its primary objective is to strengthen the integrity of the company register by enhancing the role of Companies House in tackling modern economic crime, including money laundering and terrorist financing. The Act introduces a range of new powers for Companies House, which are being implemented in phases from 4 March 2024 through to Autumn 2026.
Identity verification is a major part of the reforms. Anyone setting up, running, owning or controlling a company in the UK will need to verify their identity to prove they are who they claim to be. We have included the key dates for identity verification implementation further down in this email. Timelines are dependent on suitable Parliamentary time in both houses and will be kept under review.
Stay alert to fraud – identity verification changes are being exploited
Fraudsters are already seeking to exploit the new identity verification process as an opportunity to gain access to personal information. Be especially cautious of phishing emails claiming to be from Companies House, such as the example shown below. Look out for tell-tale signs like inconsistent language or unusual details—note, for instance, the incorrect reference to ‘Company Houses’ in the footer of the example email.
As the new requirements are rolled out, we expect these types of phishing campaigns to continue. Remain vigilant and treat any unsolicited emails that request personal information or prompt you to click a link with caution. Avoid clicking on any links or replying unless you are completely confident in the sender’s legitimacy.
Watch for red flags such as:
- Suspicious or unfamiliar email addresses
- Unexpected requests for sensitive information
- Inconsistent terminology or branding
- Grammatical or spelling errors
When in doubt, verify the message independently through official channels.
Implementation timetable
Autumn 2025
- Identity verification will be made a compulsory part of incorporation and new appointments for new directors and people with significant control (PSCs); and
- The 12-month transition period begins for all existing directors and PSCs to verify their identity – the identity verification will happen as part of the annual confirmation statement filing.
Autumn 2026
- All limited partnerships required to submit more information, providing greater transparency for users of the register;
- End of the identity verification transition period. Anyone owning, running or filing on behalf of a company must be verified; and
- Compliance activity begins against those who have not verified their identity.
Verifying your identity
Verification is voluntary now (since 8 April 2025) but becomes mandatory from Autumn 2025 (no actual date has been released) for new appointments and filings. Existing directors/PSCs must complete it by their next Confirmation Statement, otherwise filings or incorporations will be refused and penalties applied. You can verify your identity online via GOV.UK One Login. The process involves:
- Signing in or creating a GOV.UK One Login account.
- Providing your photo ID and possibly address history (home address + year moved in).
- You’ll be guided through the identity check either via the GOV.UK mobile app or your browser.
- The process takes about 10 minutes at the end of which you will be issues a unique Companies House personal code which you will need for all future filings.
How M+A Partners can help
For any queries on filing information with Companies House or the new identity verification requirements, please get in touch with your usual M+A Partners’ contact or email enquiries@mapartners.co.uk