Don’t get caught out with fraudsters using the new ID checks as an opportunity to scam you

What is happening with the checks?

Individuals in the UK can now voluntarily verify their identity with Companies House. This is part of the phased implementation of the Economic Crime and Corporate Transparency Act 2023, which has been introduced with the intention of enhancing the accuracy and security of information held at Companies House.

Who has to verify?

Mandatory verification for directors, persons with significant control (PSCs), and those filing documents with Companies House is being introduced in stages:

1. Autumn 2025: Mandatory verification for new directors and PSCs at the time of incorporation or appointment.

2. Autumn 2026: Existing directors and PSCs must have completed verification

How do you verify?

Individuals can verify their identity through several methods:

• Online via GOV.UK One Login

• Verify in person at a participating Post Office using GOV.UK One Login

• Through an Authorised Corporate Service Provider (ACSP), such as a registered accountant or solicitor

How Fraudsters Might Exploit the New Rules

1. Phishing Emails & Texts

   
   

   • Criminals could send fake messages pretending to be from Companies House or GOV.UK.

   • These messages could ask you to “verify your identity” and take you to a fake website that steals your personal details and documents.

     
     

2. Fake Authorised Corporate Service Providers (ACSPs)

   
   

   • Scammers might pose as registered ACSPs as accountants, solicitors, or other agents claiming to be able to help with verification.

   • They could ask for identity documents, bank details, or other sensitive information.

     
     

3. Spoofed Websites

   
   

   • Fraudsters could create very convincing fake websites resembling GOV.UK or Companies House, to trick people into uploading passports or other sensitive information.

     
     

4. Social Engineering

   
   

   • They might contact you by telephone or LinkedIn, pretending to be from a company you are connected to, using the new law as a reason to urgently request identity details.

Red Flag Signs of a Scam

• You're asked to act urgently or face penalties.

• The email has spelling errors or odd formatting.

• The message fails to include your full name or specific company details.

• You are asked to send documents to a non-GOV.UK email or upload it to an unfamiliar site.

How to Protect Yourself

1. Do your ID checks through Shepherd Partnership as an ACSP, as we are here to help, and keep your data secure

2. If you prefer to do the checks yourself:

   
   

   • Always use the official GOV.UK website: Never click on links from emails. Instead, go directly to www.gov.uk.

   • Look for “.gov.uk” domain names: Real government websites will not use “.com” or “.co.uk”.

   • Never send ID documents via email

   • Enable two-factor authentication on your Companies House and email accounts.

   • Report suspicious emails to: report@phishing.gov.uk.

If you are unsure about any communication you receive, please get in touch.  We do not want anyone’s information to find its way into the wrong hands.