Verified or Vulnerable: The Director Identity Check UK Boards Can No Longer Delegate

Identity verification at Companies House has moved from pilot to plumbing. Since the phased rollout under the Economic Crime and Corporate Transparency Act 2023, directors and people with significant control (PSCs) are expected to prove who they are. For many SMEs, the first real encounter comes not at incorporation but at the next confirmation statement. That is when a routine filing can stall, a director can be locked out of the register, and a board can discover that its governance paperwork is thinner than it assumed.

The compliance chore that became a governance issue

The original pitch was simple: reduce shell companies and improve the accuracy of the register. In practice, verification creates a new dependency. A company's ability to file cleanly depends on individuals completing a personal check, often through GOV.UK One Login or an authorised agent. If one director is overseas, unresponsive, or unsure which identity document to use, the company's filing position is exposed. The risk is not usually a fine on day one. It is delay, escalation, and a lender, buyer or bank asking why the register does not match the board's own records.

That is why verification belongs on the board agenda rather than in a folder marked admin. The question is not simply whether each director has a code or a verified status. It is whether the company can evidence who its officers and PSCs are, whether their details are consistent across statutory registers, and whether someone owns the task of keeping them that way.

Who needs to verify

At a high level, the requirement covers directors and PSCs. New appointments are expected to verify before or around the point they are added to the register. Existing directors meet the requirement in connection with the confirmation statement cycle. The exact mechanics depend on the individual's circumstances and the filing route, so the practical step is to check each person's status before the filing window opens rather than after a rejection.

A common mistake is to assume that a long-serving director is automatically covered because the company has filed confirmation statements for years. Filing the statement and verifying the individual are separate acts. Another is to treat a PSC as an afterthought. If the PSC register is out of date, the verification picture will be out of date too.

Where authorised agents fit

Authorised agents can verify identity on behalf of individuals. They must be registered with Companies House and follow the registrar's requirements. For SMEs, an agent can be useful where directors lack compatible identity documents, are based abroad, or simply need a guided process. But outsourcing the check does not outsource accountability. The company still needs a record of who verified whom, when, and with what authority.

Before appointing an agent, confirm the scope of the engagement. Is the agent verifying only the directors, or also PSCs? Will it handle overseas directors? What happens if a verification fails? Who retains the evidence? A cheap verification service that leaves the company to chase exceptions is not cheap by the time the confirmation statement is due.

The awkward cases

Overseas directors are the most obvious friction point. A passport may be in a different name format from the register, a director may have no UK address history, and time-zone differences can stretch a simple check into a fortnight. Start with these individuals first.

Nominee shareholders require care rather than panic. A nominee who is not a PSC may not need to verify in that capacity, but the arrangement can obscure who the real PSC is. Check the PSC register and the underlying instructions before deciding who needs to act. If the nominee holds shares for an individual who exercises control, the PSC position should be documented clearly.

Dormant subsidiaries are easy to overlook because nothing seems to happen. Their officers are still officers. If a group has several dormant companies, build a single schedule covering every entity, every director and every PSC. Group-wide consistency is easier to evidence than a folder of one-off confirmations.

A short pre-filing checklist

• List every director and PSC across the group, including dormant subsidiaries.
• Check each person's verification status and note the route used.
• Compare names, dates of birth and service addresses with the statutory registers.
• Identify overseas directors and anyone without compatible identity documents.
• Confirm whether an authorised agent is acting and what it has been asked to do.
• Diary the confirmation statement date and work backwards at least four weeks.
• Keep evidence of checks, authority and correspondence in one place.
• Brief the board on what happens if a director cannot or will not verify.

Questions to ask before the next confirmation statement

• Who owns verification at board level, and who chases exceptions?
• Are any directors or PSCs based overseas or using professional nominee arrangements?
• Does the PSC register reflect the current control position?
• Are dormant subsidiaries included in the plan?
• What is the fallback if an individual cannot verify before the filing date?
• Is the authorised agent registered, insured and clear about its remit?
• Can we evidence the process if a bank, buyer or regulator asks?

The quiet governance test

Identity verification is not the most exciting item on a board agenda. That is precisely why it matters. It tests whether the company knows its own officers, whether records are current, and whether responsibilities are assigned. SMEs that treat it as a one-off admin chore tend to discover the gaps at the worst moment: during a financing, a sale, or a filing deadline. Those that fold it into routine governance find it becomes unremarkable, which is exactly what a compliance process should be.

This article offers practical guidance, not legal advice. Companies should take advice on their specific circumstances.