Companies House ID Deadline: What KYB Teams Must Know

All existing UK directors and PSCs must verify their identity at Companies House by 18 November 2026. This is what every KYB compliance team must prepare.

Emily Carter
By Emily CarterAI Strategy Consultant at Joinble
·10 min read
Share
Companies House ID Deadline: What KYB Teams Must Know
imageUse this imagedownloadDownload

The clock on the UK's most significant corporate transparency reform is running out. From 18 November 2026 — less than eight weeks from today — Companies House will be a meaningfully different register. Every director, Person with Significant Control, and LLP member who has not yet verified their identity will be in default of a legal obligation, exposed to criminal liability, and ultimately at risk of removal from the register.

The compliance message has mostly reached accountants and solicitors who guide clients through annual filings. It has not adequately reached the KYB compliance teams at fintechs, lenders, payment processors, crypto firms, and due diligence providers who screen UK corporate entities every day. For those teams, the ECCTA verification mandate creates new data, new process requirements, and a rapidly closing window to get systems updated.

Background: How ECCTA Reshaped the UK Companies Register

The Economic Crime and Corporate Transparency Act 2023 (ECCTA) introduced statutory identity verification for individuals who file at, and are registered by, Companies House. The purpose is explicit: to prevent fraudulent incorporation and the use of the UK corporate register for money laundering, sanctions evasion, and other financial crime.

Before ECCTA, Companies House operated primarily as a record-keeper. Documents were accepted and published with limited verification. Fictitious names and recycled identities were exploited systematically by fraud rings. The register served as a laundering point for beneficial ownership arrangements that no regulator could effectively challenge. ECCTA gave Companies House new powers: to reject suspicious documents, query filed information, and cross-reference identity data with government databases. Identity verification is the mechanism that makes those powers operative.

The phased rollout began on 18 November 2025. New directors and new PSCs have been required to verify before assuming their roles since that date. The transition window for existing registrants is now closing fast.

Who Must Comply and By When

Category Verification Deadline
New directors (appointed from 18 Nov 2025) Immediately before appointment
New PSCs (registered from 18 Nov 2025) At point of registration
New LLP members (from 18 Nov 2025) At point of registration
Existing directors First confirmation statement in 2026, or 18 November 2026 at the latest
Existing PSCs 18 November 2026
Existing LLP members 18 November 2026
Limited Partners of Limited Partnerships End of 2026 rollout

The confirmation statement deadline is the one most existing directors will encounter before the absolute backstop date. A company with an annual confirmation statement due in October 2026 may already be past its effective deadline. A company with a statement due in January 2027 still has until 18 November 2026 regardless of that later filing date.

Third-party agents filing on behalf of companies — accountants, solicitors, formation agents — will need to be registered as Authorised Corporate Service Providers (ACSPs) to continue filing from early 2027 onwards. ACSP registration itself carries identity verification obligations and cannot be deferred indefinitely.

How Verification Works: Two Routes

Companies House provides two routes to compliance.

Direct route via GOV.UK One Login. Individuals verify their identity through the government identity platform, which cross-checks documents, biometrics, and government database records. The outcome is an identity code linked to the individual's Companies House record. This is the route most directors will use.

Supervised route via a registered ACSP. An ACSP verifies the individual's identity on behalf of Companies House using its own compliant verification processes and provides a verification code confirming successful completion. This is the route professionals managing identity verification for multiple clients at scale will use.

In both cases, the result is a verified identity code attached to the individual's register record. That code and its status — active, suspended, or revoked — becomes part of the publicly accessible register.

Criminal Consequences of Non-Compliance

Non-compliance is a criminal offence under Section 17 of ECCTA. The consequences are not administrative penalties — they are:

  • Personal fines of up to £5,000 per director or PSC who has failed to verify
  • Director disqualification proceedings for persistent non-compliance
  • Companies House strike-off of companies whose officers remain unverified after enforcement begins
  • Rejection of all future filings submitted by agents who are not registered ACSPs

The enforcement phase is expected to begin actively in late 2026 and accelerate into 2027. Companies House has consistently communicated that the transition period is a grace period, not a suggestion.

What This Means for KYB Compliance Workflows

The ECCTA mandate does not exist in isolation. For KYB teams at financial institutions and regulated firms, it creates a new data point that must be integrated into existing compliance infrastructure.

Verified identity records become a baseline expectation. From November 2026, any director or PSC of a UK company who has not verified will be in an anomalous state relative to the register. A KYB profile that does not reflect verification status will be incomplete against the regulatory standard — this is a CDD gap, not a reputational concern.

Verification status can change after initial compliance. A verified director whose identity code is later suspended — because of a fraud investigation, a name discrepancy, or a document irregularity — will carry a different status on the register than at onboarding. Static KYB checks at incorporation do not capture this. Ongoing monitoring systems do. This maps directly onto the perpetual KYC model: continuously refreshed identity data rather than point-in-time snapshots. The operational case for perpetual KYC as a compliance architecture is laid out in our analysis of perpetual KYC and continuous monitoring frameworks.

Beneficial ownership consistency requires parallel updates. If a PSC's identity is suspended at Companies House, the PSC record itself becomes unreliable. This interacts with beneficial ownership verification obligations under the forthcoming AMLR in ways that KYB teams operating in both UK and EU jurisdictions must track. The AMLR's enhanced UBO verification requirements — which go materially further than current directive obligations — are covered in KYB and UBO verification under AMLR 2027.

AML workflows must reference verified identity data. A CDD or EDD process that references Companies House should now be designed to pull verification status, not just directorship data. Systems querying the register via API — or via a KYB data provider — should include verification status flags in their output schemas.

Reconcile internal records against the register. Compliance teams must compare the directors and PSCs on file in their customer records against the verified identities on the Companies House register. Where discrepancies appear — a director on record with the firm who is not verified at Companies House, or a new PSC not yet captured — the gap is both a record maintenance issue and a potential AML red flag.

The ACSP Gateway: Third-Party Agents from 2027

The ACSP registration requirement for filing agents creates a second wave of compliance work. Any law firm, accountancy practice, or company secretarial service filing with Companies House on behalf of clients must be a registered ACSP. For their regulated financial institution clients, this creates a new compliance trail: ACSP status for the agent and the identity verifications that ACSP has recorded will sit in the file.

For AML purposes this is a net positive — it builds a documented chain from corporate registry entry to verified natural person. The challenge is integrating that chain into KYB and CDD workflows consistently across large client books.

This sits alongside the UK MLR amendment package from June 2026, which reshaped EDD triggers for high-risk jurisdictions and introduced new crypto correspondent relationship rules. Both bodies of UK compliance reform must be navigated in parallel. The full MLR package is analysed in UK AML 2026: New Rules for Crypto, Effective June 30.

Compliance Checklist: Before 18 November 2026

For companies directly:

  • Identify which directors, PSCs, and LLP members have not yet verified
  • Submit verification via GOV.UK One Login or through a registered ACSP before the confirmation statement deadline or 18 November 2026, whichever comes first
  • Confirm your filing agent is registered or in the process of registering as an ACSP if you use one

For KYB compliance teams at regulated firms:

  • Update data acquisition processes to pull verification status from the Companies House register for UK company directors and PSCs
  • Configure monitoring alerts for verification status changes — suspension and revocation events on key beneficial owners
  • Reconcile internal CDD records against verified register data for existing customers
  • Update EDD procedures to treat unverified director or PSC status as an elevated risk indicator after 18 November 2026
  • Confirm with KYB data providers that verification status is included in API output going forward

How AI-Driven Compliance Reduces the Overhead

Running these checks manually across a client book of any scale is not viable. A compliance officer calling Companies House records one by one, cross-referencing against internal records, and maintaining a live log of verification status changes is a full-time burden that compounds with the size of the customer base.

AI-driven compliance infrastructure built for continuous monitoring changes the equation. Structured identity data is pulled from registers automatically. Status changes are flagged as they occur. Inconsistencies against internal records are surfaced without human intervention in the loop until a case genuinely requires it. This is the model that Joinble's AI Agents are built on — autonomous identity monitoring that converts register data into structured, actionable compliance signals at scale. The transition from reactive point-in-time checks to continuous monitoring is what agentic KYC and AI compliance automation describes in full.

Eight weeks is enough time to prepare if the work starts now. It is not enough time to build a KYB workflow from scratch after the deadline passes.

FAQ

Who is required to verify their identity at Companies House? Directors of UK companies, Persons with Significant Control (PSCs), members of Limited Liability Partnerships, and Limited Partners of UK Limited Partnerships are all in scope. New appointments have required verification since 18 November 2025. Existing registrants must verify by 18 November 2026 or by their first confirmation statement in 2026 if that falls earlier.

What happens if a director or PSC does not verify by the deadline? Failure to verify is a criminal offence under Section 17 of ECCTA. Personal fines of up to £5,000 apply. Persistent non-compliance can lead to director disqualification and Companies House can strike the company off the register for sustained failure by its officers to comply.

Can identity verification be done through a third party? Yes. Individuals can verify through a registered Authorised Corporate Service Provider (ACSP). The ACSP verifies identity using its own compliant processes and issues a verification code to Companies House. Accountants, solicitors, and formation agents who file on behalf of clients will need to be registered ACSPs themselves from early 2027 onwards.

How does this affect KYB workflows at financial institutions? KYB compliance workflows that screen UK corporate directors and beneficial owners must be updated to capture verification status from Companies House. After 18 November 2026, an unverified director or PSC represents a meaningful anomaly relative to the register standard. Systems that do not track verification status will produce incomplete CDD records.

Does verification status change after initial compliance? Yes. An identity code can be suspended or revoked after it is issued — following a fraud investigation or a document discrepancy, for example. A director verified at onboarding may carry a different status months later. Ongoing monitoring of register data, not just point-in-time checks, is required to maintain accurate CDD records.

Is there a connection to the EU's forthcoming AMLR beneficial ownership rules? There is a structural parallel but not a direct legal link. ECCTA creates UK-law identity verification obligations attached to the Companies Register. AMLR creates EU-law beneficial ownership verification requirements for obliged entities from 10 July 2027. Firms operating in both jurisdictions carry both sets of obligations independently. AMLR's UBO verification requirements are analysed in KYB and UBO verification under AMLR 2027.

Emily CarterEmily Carter
Share

Related Articles

US Kills BOI Reporting: What KYC Teams Must Know
Compliance27 Aug, 2026

US Kills BOI Reporting: What KYC Teams Must Know

FinCEN permanently removed US beneficial ownership reporting on August 14, 2026. KYC obligations remain — and the EU is moving in the opposite direction.

AMLD6's UBO Registry Deadline: What July 10 Means for KYC
Compliance28 May, 2026

AMLD6's UBO Registry Deadline: What July 10 Means for KYC

The EU's AMLD6 beneficial ownership registry rules take effect July 10, 2026. Here's what changes for KYC, CDD, and identity verification teams.

EUDI Wallet: What the Dec 2026 Deadline Means for KYC
Compliance16 Apr, 2026

EUDI Wallet: What the Dec 2026 Deadline Means for KYC

Every EU member state must deploy the EUDI Wallet by December 2026. Here's what that means for KYC, MiCA compliance, and crypto businesses.