Is That Companies House Email Genuine? Your Guide to the ACSP Changes
/
Companies House is undergoing a significant transformation to enhance transparency and combat economic crime, and you may have recently received an email from them regarding these crucial changes.
We understand that in an age of increasing online fraud, it's natural to be cautious about unexpected emails. However, we want to assure you that emails from Companies House about the new Authorised Corporate Service Provider (ACSP) framework are genuine and require your attention.
What is the New ACSP Framework?
The new ACSP framework is a key part of the Economic Crime and Corporate Transparency Act 2023. This legislation aims to improve the integrity of the UK's company register by introducing mandatory identity verification for individuals involved in companies. Here's what it means:
Mandatory Identity Verification: From Autumn 2025, all new and existing company directors, People with Significant Control (PSCs), and individuals filing documents with Companies House will need to verify their identity. This is a major step towards making it harder for criminals to hide behind false identities or misuse company structures.
Role of ACSPs: An Authorised Corporate Service Provider (ACSP) is a professional or firm (like accountants, solicitors, or company formation agents) that is registered with Companies House and supervised for Anti-Money Laundering (AML) purposes. These ACSPs can verify identities on behalf of their clients, providing a streamlined way to comply with the new regulations.
Increased Scrutiny: The framework ensures that anyone filing on behalf of a company, or holding a significant role within it, has a verified identity. This added layer of scrutiny aims to detect and act swiftly against suspicious activities, safeguarding legitimate businesses.
Phased Implementation: The changes are being rolled out in phases. While voluntary identity verification for directors and PSCs began on April 8, 2025, and ACSP registration opened on March 18, 2025, mandatory verification will become a legal requirement from Autumn 2025.
If you're a director, PSC, or responsible for company filings, these changes will impact you. Companies House or your professional advisor (if they are an ACSP) will guide you through the process of verifying your identity.
How to Ensure an Email from Companies House is Genuine
Given the prevalence of phishing scams, it's crucial to be able to identify legitimate communications from Companies House. Here are key steps you can take:
Check the Sender's Email Address: Genuine emails from Companies House will typically come from official government domains, often ending in .gov.uk. Be wary of addresses that use slight variations, different domain names, or generic email providers.
Look for Personalisation (with caution): While legitimate emails might address you by name, be cautious if an email seems too personal without you having initiated contact. Scammers can use publicly available information to personalise emails.
Inspect Links Carefully: Hover over any links in the email without clicking them. The URL should clearly point to the official Companies House website (e.g., www.gov.uk/companies-house or company-information.service.gov.uk). If the URL looks suspicious or is a shortened link, do not click on it.
Avoid Urgent or Threatening Language: Scam emails often use high-pressure tactics, threatening immediate penalties or demanding quick action. Companies House communications will be clear and informative, providing ample time for compliance.
Never Share Sensitive Information Directly via Email: Companies House will never ask you to provide personal or financial details (like bank account numbers, passwords, or full identity document details) directly in an email or through an insecure link in an email.
Verify Information Independently: If you're unsure, do not reply to the email or click any links. Instead, navigate directly to the official Companies House website (www.gov.uk/companies-house) by typing the address into your browser. You can then log into your account or use their official contact methods to verify the information in the email.
Check for Spelling and Grammar Errors: While not foolproof, official communications are usually well-written and free of obvious spelling or grammatical mistakes.
Be Suspicious of Unexpected Attachments: Unless you are expecting a specific document, be cautious about opening attachments from unknown or suspicious senders.
The introduction of the ACSP framework is a significant step towards a more secure and transparent business environment in the UK. By understanding these changes and staying vigilant against fraudulent communications, you can ensure your company remains compliant and protected. If in doubt, always err on the side of caution and verify through official channels.
