Before 18 November 2025, you could be appointed as a director of a UK company and recorded on the public register without ever having proved your identity to Companies House. After that date, the rule changed: appointment is contingent on identity verification, and existing directors must verify by their next confirmation statement filed within a twelve-month transition window ending around November 2026. The press has framed the change as a tightening of identity rules. The framing is approximately right but obscures the substantive nature of the change. There were no identity rules to tighten; the regime introduced a new gate where none existed before.

This page reads the Economic Crime and Corporate Transparency Act 2023 (ECCTA 2023) reforms through a before-and-after lens. It sets out what used to happen at Companies House, what changed substantively, where the change is genuinely a tightening, where it is structurally new, and what the change means in practice for landlord LtdCo portfolios and the advisers who service them.

What Used to Happen at Companies House

The pre-ECCTA Companies House was a passive register. Documents delivered to the Registrar were recorded; the Registrar had no statutory objective to verify accuracy or identity. The register existed to make incorporation, directorship, ownership, and corporate change a matter of public record, with low friction and light-touch oversight.

Directors could be appointed without proving identity. The appointment paperwork required a name, a UK service address, and a date of birth (the last two digits of which were redacted on the public version). There was no biometric check, no document scan, no liveness check. Companies House recorded the appointment when the paperwork landed. PSC information was added to the regime by the Small Business, Enterprise and Employment Act 2015, which required companies to disclose persons with significant control to the central register and to maintain a local PSC register at the registered office. PSC identity, however, was not verified; the framework was disclosure-without-verification.

Registered office could be any UK address valid for service of documents. PO-box services and pure mail-forwarding addresses were widely used. The confirmation statement (the annual filing under Companies Act 2006 ss.853A to 853L) was a data-refresh: the company confirmed that the data on the register was still accurate, paid a small fee, and filed. No lawful-purposes attestation was required. No registered email address was required.

That position was the operative baseline for every UK company from the modern Companies Act in 2006 through to 4 March 2024.

What Changed Substantively Under ECCTA 2023

Six substantive changes, layered on top of one another between March 2024 and November 2025, moved Companies House from passive recorder to active gatekeeper.

Registrar's statutory objectives (ECCTA s.1, Companies Act 2006 inserted-s.1081A). The Registrar now has four statutory objectives: properly delivered documents, accurate information, a complete register, and prevention of unlawful-activity facilitation. The pre-ECCTA Registrar had no such objectives. This is the policy backbone for everything that follows.

Mandatory identity verification for directors and PSCs (ECCTA ss.40-45 plus s.64 and s.65). A biometric or document-based identity check is now a precondition of being lawfully recorded as a director or PSC. The verification is per natural person and produces a single Companies House personal code under ECCTA s.68 covering every directorship and PSC role across every UK company.

Authorised Corporate Service Provider framework (ECCTA s.66). AML-supervised firms can register with Companies House to perform identity verification on behalf of clients, sitting alongside the free GOV.UK One Login route as the two channels into the verification regime.

Registered email address (ECCTA ss.28-30, effective 4 March 2024). Every UK company must have a registered email address (not published publicly; used by Companies House for statutory correspondence). The pre-ECCTA position was that no registered email was required.

Appropriate-address rule for registered office (ECCTA ss.28-30, effective 4 March 2024). The registered office must be capable of acknowledging service of documents. PO boxes and pure mail-forwarding addresses generally do not qualify. The pre-ECCTA position was that any UK address valid for service was acceptable, with a much wider effective definition.

Lawful purposes statement on confirmation statement (ECCTA ss.59-63, effective 5 March 2024). Every confirmation statement must include a positive declaration that the company's intended future activities are lawful. The pre-ECCTA confirmation statement carried no such attestation.

Layered on top: the abolition of local PSC registers under ECCTA ss.51-52 consolidates all PSC information at the Companies House central register, removing the parallel local-register source. The verified-identity material itself is largely withheld from public inspection under ECCTA s.69, so the public register shows the fact of verification without the underlying documents.

Is This a Tightening or a Structural Shift?

The honest interpretation matters because the press framing as a tightening obscures what is actually happening. A tightening implies a pre-existing rule made stricter. Most of the ECCTA reforms do not fit that description.

The identity-verification regime is not a tightened pre-existing rule; it is a new gate where none existed before. There was no document-based identity check for UK company directors before 18 November 2025 in any form. The pre-ECCTA position was no-identity-check, not lax-identity-check. The ACSP framework is similarly new architecture rather than a tightened version of pre-existing professional verification standards.

The lawful purposes statement is genuinely incremental. The confirmation statement existed before, as the annual data-refresh under Companies Act 2006 ss.853A to 853L; ECCTA added the lawful-purposes attestation to the existing filing. That is an increment, not a structural shift.

The appropriate-address rule is the clearest example of a genuine tightening. Registered offices were previously required to be addresses valid for service of documents; that requirement existed pre-ECCTA. The new rule sharpens the test to capable of acknowledging service of documents, which is materially narrower. PO-box-only services that previously satisfied the pre-ECCTA standard generally do not satisfy the post-ECCTA standard.

Communicating this nuance honestly matters because it shapes how a director or adviser thinks about the regime. Tightening framing invites a defensive read (do less of what we were doing before). Structural-shift framing invites the right read (a new gate exists, plan for it, build the operational pattern around it). For the identity-verification regime specifically, structural-shift framing is the more accurate frame.

ElementPre-ECCTA positionPost-ECCTA position
Registrar's rolePassive recorder (records what is delivered; no integrity duty)Active gatekeeper (Companies Act 2006 inserted-s.1081A: ensure register accurate, complete, not facilitating unlawful activity)
Director identityName, service address, date of birth supplied at appointment; no identity verificationIdentity verified under ECCTA ss.40-45 plus s.65 and s.68; appointment contingent on personal code
PSC identityDisclosure required after SBEEA 2015 but not verifiedVerified under ECCTA s.64; same personal-code mechanic; abolition of local PSC registers under ss.51-52
Registered officeAny UK address valid for serviceAppropriate address capable of acknowledging service; PO-box-only generally fails
Registered emailNot requiredRequired (Companies Act 2006 inserted-s.88A); Companies-House-to-company correspondence channel
Confirmation statement contentData refresh onlyData refresh plus lawful purposes statement plus verified personal codes (ECCTA ss.59-63)
Local PSC registerMaintained at the registered officeAbolished (ECCTA ss.51-52); information centralised at Companies House
Statutory objective for RegistrarNoneFour objectives (Companies Act 2006 inserted-s.1081A): properly delivered, accurate, complete, prevent unlawful-activity facilitation

The Identity-Verification Gate in Qualitative Terms

Three qualitative shifts result from the new verification gate.

First, appointment is contingent on verification. A new director cannot be recorded on the public register until they have a verified Companies House personal code under ECCTA s.68. The pre-ECCTA position was that the recording was the recording: the company filed the appointment, the Registrar recorded it. The post-ECCTA position is that the recording is conditional, and the verification produces the condition.

Second, PSC status is contingent on verification on the same architecture. A PSC who has not verified within the applicable timeframe (immediately for new PSC roles from 18 November 2025; by the next confirmation statement within the twelve-month transition window for existing PSC roles) cannot lawfully continue in that status.

Third, verification is per natural person, not per company. One verification under ECCTA s.65 produces one personal code under ECCTA s.68, and the same code covers every directorship and PSC role the natural person holds across every UK company. For a landlord director of five SPVs, the verification is once; the code is then quoted at five separate confirmation statements as the dates fall.

The cumulative qualitative point: the register now has an integrity floor it did not previously have, and continued status (director or PSC) is conditional on having cleared that floor. For depth on the operational mechanic see our commencement-day deep-dive on the 18 November 2025 commencement, our complete guide to identity verification in the UK, and our ECCTA operational walkthrough for landlord LtdCos.

The Appropriate-Address Tightening for Landlord LtdCos

Of the parallel reforms, the appropriate-address rule has the most direct operational consequence for many landlord LtdCo portfolios. SPVs registered at low-cost virtual-office or PO-box services were common pre-March-2024 (the service was cheap, the address was acceptable for the pre-ECCTA standard, and the registered office was not commercially material). Under the post-March-2024 rule, registered office must be capable of acknowledging service of documents.

What typically qualifies: an accountant's office (where the accountant provides registered-office services), a staffed virtual office (where premises are physically staffed during business hours), a director's residential address (where the director is present). What typically does not: pure PO-box services, pure mail-forwarding addresses with no physical premises or staff.

The reroute cost is small: £0 where the accountant already provides company-secretarial services, up to £50 to £300 a year per SPV for a staffed virtual office. The signal value at file level is meaningful: a PO-box-only registered office on a 2026 file now reads to BTL underwriters as a register-integrity risk, alongside any other red flags on the file. The pre-March-2024 PO-box decision was a tax-efficiency optimisation; the post-March-2024 PO-box position is a flag.

The Lawful Purposes Statement as Evidentiary Artefact

The lawful purposes statement under ECCTA ss.59-63, effective 5 March 2024, requires the confirmation statement to include a positive declaration that the company's intended future activities are lawful. The mechanic is a tick-box on the online filing; the substantive function is more interesting.

For an honestly run company, the statement is a passive annual touch-point with no practical consequence. The directors confirm what is true; the filing proceeds. For a company being used as a vehicle for fraud or money laundering, the statement is an evidentiary artefact: a documented annual attestation, signed off by directors, that can support false-statement proceedings under the existing Companies Act 2006 framework if a subsequent investigation identifies unlawful activity. The pre-ECCTA confirmation statement created no such record.

The substantive value depends on enforcement. As the Companies House Enforcement Performance Report builds out a track record over the coming years, the empirical question of how the lawful purposes statement is used in practice will become answerable. Until then, the qualitative read is that the statement has shifted the evidentiary baseline for downstream fraud proceedings, even if its day-to-day function for most filers is a tick-box.

Why Companies House Moved to a Gatekeeper Model

The policy driver is the post-Russian-sanctions and post-Pandora-Papers economic-crime environment. The UK's open business register (low-friction, light-touch) had become a liability in counterparty due diligence, sanctions enforcement, and beneficial-ownership transparency. The Economic Crime (Transparency and Enforcement) Act 2022 (ECTEA 2022) addressed the overseas-entity gap with the Register of Overseas Entities. ECCTA 2023 addressed the domestic-company gap.

The Registrar's new objectives at ECCTA s.1 are the policy backbone. The four objectives (properly delivered documents, accurate information, complete register, prevention of unlawful-activity facilitation) cast Companies House as the active gatekeeper of register integrity. The identity-verification gate is the most visible operational manifestation, but it is one of several bricks in the gatekeeper wall. The appropriate-address rule, the registered email requirement, the lawful purposes statement, the abolition of local PSC registers, and the ACSP framework all sit alongside it.

The policy logic is continuous. The Registrar's objectives at s.1 are a standing operational mandate, not a one-off legislative event. The gatekeeper posture will be operationally exercised across years, with the Companies House Enforcement Performance Report providing the empirical record over time.

The PSC Chain Shift

Three changes work together to transform the PSC chain. First, identity verification for PSCs under ECCTA s.64 means every PSC is now identity-verified. Second, abolition of local PSC registers under ECCTA ss.51-52 means all PSC information lives only at the Companies House central register; there is no parallel local source. Third, the verified-identity material itself is largely withheld from public inspection under ECCTA s.69, so the public register shows the fact of verification (and the redacted PSC particulars) but not the underlying documents.

For landlord LtdCo portfolios with multi-layer PSC chains (holding company plus subsidiaries; trust-held PSC interests; growth-share or alphabet-share structures with non-obvious PSC implications), the PSC chain is now harder to obscure (no local-register-only workaround), more discoverable (centralised), and more credible (verified). Counterparty due diligence at lender or JV-partner level reads the chain off the central register directly; any gap or inconsistency is now obvious.

The remedy is a proper PSC review, run alongside the verification batch. Most accountants can handle the PSC analysis as part of the standard company-secretarial workflow. For family-investment companies with complex share structures, the review is more substantive but is worth doing once to get the chain right rather than discovering an error during external counterparty review.

Want this checked against your specific situation?

Drop your email and a one-line summary. We reply within 24 hours, no phone call needed.

What the Tightening Means for Advisers

The advice agenda has expanded. Pre-ECCTA advice for a landlord LtdCo client focused on annual confirmation statement and accounts, SDLT on incorporation, corporation tax compliance, and the occasional restructuring exercise. Post-ECCTA, the same advice perimeter remains in place, but a new compliance-architecture layer sits on top.

The new advice points: inventory natural persons across the client's portfolio and book identity verification in Q1 of the transition window, not Q4 (verification queues and ACSP capacity compress near the November 2026 deadline). Audit registered offices for appropriate-address compliance and reroute where needed. Treat the lawful purposes statement as an evidentiary artefact, not a passive tick-box, and confirm with the client that the intended future activities are accurately described. Where the firm is AML-supervised, register as an Authorised Corporate Service Provider to offer per-natural-person verification to clients; for multi-SPV portfolios, the ACSP route is often more efficient than client-side One Login because the firm already holds the KYC documents. Pre-arrange verification before any new appointment paperwork. Coordinate portfolio-wide verification as a single programme rather than fragmented per-SPV.

The operational point: the post-ECCTA adviser is doing the same tax and accounts work as before, plus a new compliance-architecture overlay that did not previously exist. The transition window is a one-off catch-up exercise; after November 2026, the ongoing maintenance is modest. The catch-up itself is the bulk of the year-one workload.

Does the Tightening Reach Overseas Directors?

Yes. The regime applies to directors and PSCs regardless of residence. An overseas director of a UK company is subject to the same identity-verification requirement, the same per-natural-person personal code under ECCTA s.68, and the same twelve-month transition window.

The qualitative shift for overseas directors is more acute than for UK residents because the pre-ECCTA position was no document-based identity check at all. Just a name, a service address, and a date of birth on the appointment form. Post-ECCTA, the overseas director completes a biometric verification via the GOV.UK One Login app using a biometric passport, with no UK visit required. For overseas directors whose home-country passport is not supported by One Login, or who prefer an adviser-managed route, an Authorised Corporate Service Provider can verify remotely. Our dedicated US-based directors page covers the angle in operational depth.

Is the Tightening One-Off or Is More Coming?

More is coming. ECCTA Part 2 (Limited Partnership reforms) is in phased rollout, separate from the Part 1 commencement chain but with the same policy logic: registered office, annual confirmation, general-partner identity verification routed through the ACSP regime, striking-off powers, information-disclosure obligations. The phased commencement is tracked on the Companies House campaign page.

A later phase, expected no earlier than November 2026, will extend identity verification to people who file at Companies House (formation agents, accountants acting as filers, intermediaries) and to corporate-officer scenarios (where the director of a UK company is itself a corporate entity rather than a natural person). The full extension of the gatekeeper model into the filing layer and the corporate-officer layer is the medium-term direction.

The Registrar's standing objectives under s.1 are continuous. The Companies House Enforcement Performance Report will reveal the enforcement perimeter as the regime beds in; the gatekeeper posture is expected to be operationally exercised across years, not just at the commencement dates. Readers should plan for ECCTA-style compliance as the new baseline, not as a transitional event.

The Qualitative Point in One Sentence

The Companies House register has moved from a low-friction recording instrument to a register-integrity gatekeeper, and the identity-verification gate is the most visible operational manifestation of that move; for landlord LtdCo portfolios that means every natural person needs a personal code, every SPV needs an appropriate-address registered office and a registered email, every confirmation statement needs the lawful purposes attestation plus verified personal codes, and the file as a whole now reads to counterparties as a curated and verified record rather than a passive deposit.

Where to Track the Operative State

Two canonical sources. Primary: the Companies House campaign page at changestoukcompanylaw.campaign.gov.uk. Secondary: the Companies House blog at companieshouse.blog.gov.uk. For the full reform inventory see our taxonomy umbrella; for the commercial-value lens see our business-value umbrella; for the operations roadmap see our navigation page; for the email-trigger guidance see our Companies House verification emails page; and for the confirmation-statement-specific deep-dive see our 2024-onwards confirmation statement changes page.

Authorities Cited