Verified but Not Vetted: What Companies House's First Year of ID Checks Really Changed

As of 7 November 2026, Companies House can point to a full year in which identity verification has been a mandatory condition for new incorporations and appointments. The reform was sold as a decisive break with the era of the anonymous shell company. The evidence so far is more modest: verification has raised the cost of the crudest form of register abuse, but it has not turned Companies House into a due-diligence substitute.

Trace reviewed monthly incorporation data, registrar removal notices and published enforcement actions covering the period from late 2025 to October 2026. The pattern is consistent across those sources. The register is getting better at rejecting incomplete or obviously non-compliant filings. It is not yet good at distinguishing a verified person from a controlled one.

The headline numbers are better than the rhetoric

The first months of mandatory checks produced a visible compliance effect. Filings that arrived without a verified director or equivalent were rejected or paused, and filing agents quickly adapted their workflows. The share of new incorporations with at least one unverified principal fell sharply in the first quarter after checks became mandatory, then flattened. That is what one would expect from a process control: early friction, rapid learning, then a steady state.

The enforcement picture is smaller. Published penalty and register-annotation notices remain in the low hundreds rather than the tens of thousands, and compulsory strike-off activity rose by roughly a fifth in the six months to September 2026 compared with the same period a year earlier. That rise is not proof of a cleaner register. It is proof that the registrar is using powers it previously left idle.

What the removals data actually show

Removal statistics are often read as a proxy for fraud detection. They are better understood as a proxy for administrative failure. A company removed for failing to file accounts may be abandoned, dormant or fraudulent; the register does not tell you which. What has changed is the speed with which the registrar can act on obviously false information and the willingness to annotate the public record.

That matters for compliance teams because annotations and dispute histories are now more useful than the verification badge alone. A verified director who appears on a company with a disputed registered office, a recent strike-off notice and a rapid succession of appointments is not a low-risk counterparty. The verification status says the person exists. It does not say the person is in control, has authority to act, or has any economic interest in the business.

The offshore pivot

The more revealing signal is compositional. Failed incorporations do not disappear; they migrate. Trace's review of filing patterns points to more pre-incorporation enquiries routed through overseas formations, more use of corporate partners in limited liability partnerships, and more reliance on address-services providers whose registered office is a mail drop with a compliance logo.

Some formation agents now market verification-ready packages that supply a verified nominee alongside incorporation, registered office and mail-forwarding services. That is not necessarily unlawful. It is, however, exactly the kind of product that defeats the purpose of identity verification if the buyer treats the badge as evidence of ownership. The registrar verifies identity. It does not verify source of funds, source of wealth, beneficial ownership or the commercial rationale for the structure.

Where compliance teams still get caught

The gap between rhetoric and practice is widest at onboarding. Several firms have quietly replaced elements of their corporate CDD with a Companies House check because the register is free, fast and authoritative-looking. That is a mistake. The register is authoritative about what has been filed. It is not authoritative about what is true.

Three failures recur. First, teams treat a verified director as a verified controller. Second, they stop at the first corporate layer and ignore the chain of ownership above it. Third, they fail to re-screen after corporate events such as a change of registered office, a mass appointment of directors or a flurry of filings from the same agent. None of those events is unlawful. Together they are a useful risk signal.

Practical takeaways for onboarding

Treat identity verification as one data point, not the conclusion of CDD. Map the ownership and control chain beyond the verified director, and ask who can instruct the bank, dispose of assets or appoint directors. Check the company's filing history for anomalies: rapid incorporation and dissolution cycles, repeated changes of registered office, dormant accounts alongside high-value activity, and the same agent appearing across unrelated entities.

Use registrar annotations, dispute notices and strike-off warnings as live intelligence rather than historical footnotes. Re-screen counterparties after corporate events, not only at onboarding. Most importantly, do not outsource your suspicion to a registrar. Companies House is a registry, not a supervisor. Its first year of ID checks has made the register harder to game at the front door. The back door remains open.