First Companies House Identity Verification Prosecutions: What UK Businesses Should Know

The UK has secured its first convictions for failures to comply with new Companies House identity-verification requirements.

On 17 September 2026, the Insolvency Service and Companies House announced that three company directors had been fined following the first court action for identity-verification offences introduced under the Economic Crime and Corporate Transparency Act 2023.

The cases mark an important stage in wider reforms designed to improve the reliability of the UK company register and make it more difficult for corporate structures to be misused for economic crime.

For businesses, investors and legal advisers, the development also reinforces a broader point: information held on a corporate register is becoming more robust, but it should still form only one part of effective due diligence.

What Has Changed at Companies House?

Identity verification is now a legal requirement for company directors and certain other individuals involved in UK companies.

Newly appointed directors have been required to verify their identity with Companies House before acting as a director since 18 November 2025.

Existing directors are being brought into the system during a 12-month transition period, generally when their company files its next confirmation statement.

The aim is to help ensure that people setting up, running and controlling UK companies are who they claim to be.

Companies House has said the reforms are intended to make the register more accurate, transparent and resistant to misuse.

The First Prosecutions

The first convictions involved three directors connected with two companies.

According to the Insolvency Service, one director continued acting in that role without completing identity verification, while another director was prosecuted after failing to take reasonable steps to prevent an unverified individual from continuing to act on behalf of the company.

A third director was also convicted after continuing to act while unverified.

The directors received fines, costs and victim surcharges.

The significance of these cases is less about the size of the penalties and more about the precedent.

Companies House and the Insolvency Service have made clear that identity verification is not optional and that continued non-compliance may lead to investigation and prosecution.

Why Identity Verification Matters

The UK corporate register has historically been a valuable source of information for businesses, investigators and legal teams.

However, company records have traditionally relied heavily on information submitted by individuals themselves.

The new verification regime is intended to reduce the risk of false identities being used when creating or controlling companies.

That can help address risks such as:

• False directorships.
• Identity misuse.
• Fraudulent company formation.
• Concealed ownership.
• Misleading corporate records.
• Abuse of UK companies for financial crime.

Improving the quality of the register should make it easier to establish who is genuinely connected to a business.

But identity verification does not remove every risk.

A Verified Director Is Not the Same as a Verified Business

One important distinction is that confirming a director’s identity does not automatically confirm the legitimacy, financial position or commercial behaviour of the company they control.

Identity verification helps answer one question:

Is this person who they claim to be?

Due diligence usually needs to answer many more.

Depending on the transaction, those questions may include:

• Who ultimately owns or controls the business?
• Does the company have a credible trading history?
• Are there undisclosed related entities?
• Have directors been connected to previous failed businesses?
• Are there relevant litigation or regulatory issues?
• Does the company’s activity match its stated business?
• Are there adverse media or reputational concerns?
• Are there connections to higher-risk jurisdictions?
• Is the counterparty financially and commercially credible?

That is why Companies House verification should strengthen due diligence rather than replace it.

Conflict International’s Due Diligence services support organisations and legal advisers requiring independent research into companies, directors, ownership structures and commercial relationships.

Why Corporate Records Still Need Context

A company register provides factual information, but those facts need interpretation.

For example, two companies may share the same director.

That relationship could be entirely ordinary.

Alternatively, it may be relevant to understanding a wider corporate structure.

Similarly, a director may have held multiple previous appointments.

That does not necessarily indicate risk, but where several companies have failed, been dissolved or become involved in disputes, the pattern may justify further examination.

Effective due diligence therefore involves looking at the wider context rather than relying on a single data source.

Beneficial Ownership Remains Important

The identity-verification reforms sit alongside broader attempts to improve transparency around ownership and control.

For higher-risk transactions, understanding who ultimately benefits from or controls a company can be critical.

Ownership may be structured through:

• Holding companies.
• Overseas entities.
• Nominees.
• Trust arrangements.
• Family relationships.
• Connected businesses.

These structures can all have legitimate purposes.

The key question is whether the ownership and control structure is understood.

Where it is not, further enquiries may be appropriate before entering into a significant transaction or commercial relationship.

Why This Matters for Counterparty Due Diligence

The new Companies House regime may improve confidence in some corporate information, but businesses should avoid treating verification as a substitute for risk assessment.

A company can have properly verified directors and still present commercial, financial or reputational risk.

Before entering into a significant relationship, organisations may need to consider:

• The identity of key decision-makers.
• Ownership and control.
• Corporate history.
• Financial position.
• Litigation.
• Regulatory history.
• Adverse media.
• Business relationships.
• International exposure.

The level of checking should reflect the value and risk of the transaction.

Identity Verification Can Help Reduce Fraud

Stronger identity controls can make it more difficult for criminals to use false personal information to establish or operate companies.

That matters because corporate structures can be used to give a fraudulent operation the appearance of legitimacy.

A registered company may have:

• A company number.
• Directors.
• A registered office.
• Accounts.
• A website.
• Professional branding.

None of these things, on their own, prove that the underlying business is genuine.

Independent verification remains important where the commercial consequences of getting the decision wrong are significant.

What Businesses Should Do

The first prosecutions provide a useful reminder for both directors and organisations carrying out due diligence.

Company directors should ensure they understand and comply with their own identity-verification obligations.

Businesses assessing counterparties should also consider how the new regime changes the weight they place on Companies House data.

The register should become more reliable as verification expands.

However, due diligence should still test the wider commercial picture.

That can include comparing Companies House information with:

• Independent corporate databases.
• Litigation records.
• Regulatory sources.
• Media reporting.
• Financial information.
• International company records.
• Other open-source intelligence.

Discrepancies between sources can be particularly important.

Stronger Registers Support Better Due Diligence

The first Companies House identity-verification prosecutions show that the UK is moving towards greater accountability around who establishes and controls companies.

That is a positive development for corporate transparency.

But it does not remove the need for independent due diligence.

Identity verification can help establish who a director is.

It cannot, by itself, establish whether a business is financially sound, commercially credible or suitable as a counterparty.

For organisations entering high-value or higher-risk relationships, the strongest approach remains one that combines verified corporate information with independent research and contextual analysis.

If your organisation requires independent due diligence on a UK company, director or potential commercial partner, Conflict International can help establish ownership, corporate history and relevant risk indicators before a decision is made. Contact our team to discuss your requirements in confidence.