In short: The Economic Crime and Corporate Transparency Act 2023 (ECCTA) is reforming Companies House in stages to make the register more reliable. Key changes already in force include registered email addresses, stricter registered office rules, stronger Companies House powers, identity verification for directors and PSCs from 18 November 2025, and a new failure to prevent fraud offence for large organisations.
The Economic Crime and Corporate Transparency Act 2023, often shortened to ECCTA, is the biggest change to UK company law in years. Its aim is to stop the misuse of UK companies for fraud and money laundering, and to make the information on the Companies House register more trustworthy. The changes are being introduced in stages.
Registered email and appropriate address
Every company must now have:
- a registered email address, so Companies House can contact the company. It is not shown on the public register;
- a registered office that is an "appropriate address": somewhere documents will come to the attention of someone acting for the company and where delivery can be recorded. A PO box is not allowed. The address must be in the same UK nation the company is registered in.
When forming a company, the subscribers must also confirm that the company is being formed for a lawful purpose.
Stronger Companies House powers
Companies House is no longer just a place where information is filed. It can now:
- query information that looks wrong and ask for evidence;
- reject filings that are inconsistent or suspicious;
- remove inaccurate or misleading information from the register;
- share information with law enforcement and other bodies;
- impose financial penalties for some offences.
This means that careless filings, such as a wrong SIC code or an unsuitable registered office, are more likely to be challenged.
Identity verification
Since 18 November 2025, every new director and person with significant control (PSC) must verify their identity with Companies House. They can do this through GOV.UK One Login or an Authorised Corporate Service Provider (ACSP). Each verified person gets a personal code that links them to their company roles.
Existing directors and PSCs verify during a 12-month transition period, which ends around 18 November 2026. A director usually verifies when the company files its next confirmation statement. Form My Company is a Companies House ACSP, so we can complete the check for you, remotely, and give you your personal code.
Failure to prevent fraud
Since 1 September 2025, large organisations can commit a criminal offence if a person associated with them, such as an employee or agent, commits a fraud intended to benefit the organisation, and the organisation did not have reasonable fraud prevention procedures. "Large" means meeting at least two of: more than 250 employees, turnover over £36 million and balance sheet total over £18 million. Subsidiaries of large organisations can also be in scope. Small companies are not directly covered, but may be asked about their procedures by larger customers.
Further changes planned
The Act allows more changes that are being introduced over time, including:
- changes to the accounts small companies must file, and a move to filing accounts by software only;
- changes to how company registers and shareholder information are kept;
- identity verification for people who file on behalf of companies.
Dates for these can change, so check Companies House guidance or ask your formation agent before relying on a specific date.
What you should do now
- Make sure your company has a registered email address and an appropriate registered office.
- Check your SIC code and other public details are accurate.
- Make sure every director and PSC has verified their identity or knows when they must.
- Use a trusted agent for filings. Agents filing for others are themselves becoming subject to verification and supervision.
- If you are a large organisation, review your fraud prevention procedures with legal advice.
How Form My Company can help
We make the new rules simple. As a Companies House Authorised Corporate Service Provider (ACSP), we can verify directors' and PSCs' identity for you, remotely, and give each person their personal code. Our Compliance and Due Diligence service costs £150, our Confirmation Statement service costs £190, and our Registered Office Address costs £250 a year and is an appropriate address in London or Edinburgh.
Frequently asked questions
What is ECCTA?
The Economic Crime and Corporate Transparency Act 2023 is a UK law that reforms Companies House and tackles economic crime. It is being introduced in stages.
When did identity verification become compulsory?
Since 18 November 2025 new directors and PSCs must verify their identity. Existing directors and PSCs verify during a 12-month transition period.
Can I use a PO box as my registered office?
No. The registered office must be an appropriate address, and a PO box does not qualify.
Does the failure to prevent fraud offence apply to small companies?
Not directly. It applies to large organisations that meet at least two of the size thresholds, and their subsidiaries.