The Confirmation Statement Trap: Why Millions of UK Directors Face a Hidden Identity Verification Deadline

The Deadline Most Directors Are Getting Wrong

When Companies House made identity verification mandatory on 18 November 2025, the announcement included a 12-month transition period for existing directors and PSCs. The message was: verify by 18 November 2026.

Many directors read that and decided they had time.

They are misreading the policy — and the consequences of that misreading are already arriving.

The 18 November 2026 date is not your personal deadline. It is the outer boundary of the transition window. Your real deadline is your company's next Confirmation Statement filing date. For millions of UK companies, that date falls in the first half of 2026 — and for some, it has already passed.

This post explains exactly how the deadline works, what happens when a director misses it, and the compounding penalties that make delayed verification increasingly costly.

Background: The Economic Crime and Corporate Transparency Act 2023

The identity verification requirement did not emerge suddenly. It is the central enforcement mechanism of the Economic Crime and Corporate Transparency Act 2023 (ECCTA), which fundamentally transformed Companies House from a passive registry into what the Registrar now calls an "active guardian of corporate transparency."

Before ECCTA, Companies House accepted filings on trust. A company could be incorporated with any name listed as director. A PSC could be listed without any confirmation of their existence. The system was intentionally lightweight — and it was being systematically abused.

The scale of the problem was documented in Companies House's own enforcement reports. In the twelve months following ECCTA's earlier provisions coming into force, Companies House:

• Queried and removed false or misleading information affecting 100,400 companies
• Rejected over 10,200 suspicious incorporation applications
• Removed false entries from 82,600 registered office addresses
• Struck off over 11,500 companies in a single month as part of its bogus-director crackdown

Identity verification is the piece that closes the remaining gap. If every director and PSC must confirm their identity before appearing on the register, the register becomes a reliable record of real people. That is the policy goal.

The Three-Phase Rollout

The identity verification regime rolled out in three phases:

Phase 1 — Voluntary (8 April 2025) GOV.UK One Login verification opened for voluntary use. ACSP registration opened on 18 March 2025. By the time mandatory verification launched, over 1.5 million individuals had already verified voluntarily — a signal that many people understood what was coming.

Phase 2 — Mandatory for New Appointments (18 November 2025) From this date, identity verification became a legal precondition for:

• All new company incorporations (founding directors must verify at point of incorporation)
• All new director and PSC appointments
• Anyone using Companies House online services

A new appointment submitted without a verified identity is now rejected.

Phase 3 — Existing Directors and PSCs (18 November 2025 – 18 November 2026) Approximately 6 to 7 million existing directors and PSCs who were already on the register before mandatory verification launched must verify during this transition window.

This is the phase most people are focused on. And this is where the misunderstanding about deadlines originates.

The Confirmation Statement Mechanism: Your Real Deadline

The 12-month transition window does not mean you have until November 2026 to verify. It means that Companies House will not pursue enforcement against unverified existing directors until that window closes.

But there is an earlier enforcement point baked directly into the filing system, and it applies the moment you file your next Confirmation Statement.

How It Works

The Confirmation Statement (form CS01) is the annual return that every UK company must file. It confirms that the information on the Companies House register — directors, PSCs, registered office, share structure — is accurate and up to date.

From 18 November 2025 onwards, the Confirmation Statement includes a mandatory field: confirmation that all directors and PSCs listed in the statement have verified their identity and hold a Personal Code.

If any director or PSC listed in the CS01 has not verified, the statement cannot be submitted.

This is not a soft rule or a grace provision. It is a hard system block. Companies House's filing portal will reject a CS01 that lists an unverified officer.

The Confirmation Statement Deadline Calculation

UK companies file their Confirmation Statements annually, with the deadline set 14 days after the anniversary of:

• The company's incorporation date, or
• The date of the previous Confirmation Statement

This means every company has its own deadline, spread across the calendar year. For a company incorporated in April, the CS01 is due in late April or early May each year. For a company incorporated in August, it is due in August. Companies do not share a common filing date.

If your company's CS01 is due before November 2026 — and most companies' annual statement is — then your effective identity verification deadline is your CS01 due date, not November 2026.

For directors of companies incorporated between November 2024 and November 2025, the first post-mandate CS01 may be due as early as December 2025. Many of these deadlines have already passed.

What Happens When a CS01 Cannot Be Filed

Failing to file a Confirmation Statement triggers a cascade of consequences, each compounding the previous one.

Step 1: The CS01 Filing Block

An unverified director means the CS01 cannot be submitted. The company misses its filing deadline.

Step 2: The Separate Confirmation Statement Offence

Failure to file a Confirmation Statement within the required period is itself a criminal offence under the Companies Act 2006. This offence is separate from the identity verification requirement — it carries its own penalties. The company and every officer in default can be fined.

Step 3: Civil Penalties Under ECCTA

Companies House's Financial Penalty Regulations (enacted May 2024) give the Registrar powers to issue civil financial penalties as an alternative to criminal prosecution for a range of ECCTA-related offences. As of the reporting period, Companies House had issued 419 penalty warning notices and 192 penalty notices, with enforcement scaling as the mandatory regime beds in.

Individual officers face penalties of up to £5,000 under section 1132A of the Companies Act 2006 as amended by ECCTA.

Step 4: Public Register Annotation

Companies House will add an annotation to the company's public record indicating that an officer is unverified or that a required filing has been missed. This annotation is visible to any person or organisation searching the company — including banks, investors, potential business partners, and commercial credit agencies.

A public annotation of this kind can affect:

• Banking relationships (many banks conduct routine checks on their business customers)
• Trade credit and supplier terms
• Due diligence by counterparties to contracts or investment

Step 5: Compounding Non-Compliance

Each week that passes without verification while a CS01 remains unfiled adds to the pattern of non-compliance. Companies House has stated that its enforcement approach escalates based on the number and duration of offences. Persistent, wilful non-compliance — defined as three or more offences over five years — raises the threshold for criminal prosecution and referral to the Insolvency Service.

Step 6: Director Disqualification

The Insolvency Service can disqualify individuals from acting as directors for up to 15 years where there is a pattern of non-compliance with company law requirements. Identity verification non-compliance, combined with the secondary offence of failing to file a CS01, creates exactly the kind of multi-offence record that attracts disqualification proceedings.

The PSC Deadline Is Different — And Even More Counterintuitive

For Persons with Significant Control who are not also directors, the deadline mechanism works differently.

PSC-only individuals (those who hold more than 25% of shares or controlling influence but do not hold a formal director role) must verify within the first 14 days of their birth month as recorded on Companies House.

For example:

• A PSC whose date of birth is listed as March will have a verification window of 1–14 March 2026
• A PSC born in September will have a window of 1–14 September 2026

This means PSC deadlines are spread across every month of the calendar year, and some will arrive significantly before November 2026.

For PSCs who are also directors, the Confirmation Statement mechanism described above applies — whichever deadline comes first governs.

How to Find Your Company's CS01 Deadline

Your company's Confirmation Statement deadline is publicly available on the Companies House register.

1. Search for your company at find-and-update.company-information.service.gov.uk
2. Select your company
3. Under the "Filing history" section, find the most recent Confirmation Statement entry
4. Add 12 months and 14 days to that date — this is your next CS01 deadline

If no Confirmation Statement has ever been filed (for companies incorporated after the previous CS01 cycle), your deadline is 14 days after the first anniversary of incorporation.

What You Need to Verify: The Document Checklist

Verification requires three items regardless of which route you use:

1. Valid passport Your passport must have at least 6 months of remaining validity. You will need a clear scan of the photo page and the data page. Ensure the machine-readable zone (the two lines of text at the bottom of the photo page) is fully visible and unobscured.

2. Proof of address A bank statement or utility bill issued within the last 3 months, showing your full legal name and current residential address. The name on the proof of address must match your name exactly as it appears in your passport.

3. Photograph holding your passport A clear photograph of you holding your open passport at the photo page. This confirms the document is in your physical possession and matches the person submitting the application.

The Two Verification Routes

Route 1: GOV.UK One Login

For UK nationals or overseas nationals who hold a biometric passport (one with an embedded NFC chip), the GOV.UK One Login app offers a self-service route. The app reads the NFC chip from the passport, matches it to a selfie, and completes verification in an average of 2.4 minutes. This route is free.

Limitations: The app requires a biometric passport. It does not accept non-biometric passports, non-UK driving licences, or EU national identity cards. It also does not support individuals without a reliable UK address for the address verification step. Individuals in these categories frequently encounter dead ends in the automated flow.

There is a Post Office alternative within the One Login route for those without biometric documents — but it requires physical presence at a Post Office in the United Kingdom, which is inaccessible to directors resident outside the UK.

Route 2: ACSP (Recommended for Non-UK Residents and Foreign Nationals)

An Authorised Corporate Service Provider (ACSP) is a business registered with Companies House and supervised under UK anti-money laundering regulations. ACSPs are authorised to carry out identity verification to the same legal standard as GOV.UK One Login, but using human review rather than automated document scanning.

The ACSP route:

• Accepts passports of any nationality (biometric or non-biometric)
• Does not require a UK address
• Is conducted entirely remotely — no travel required
• Is the only compliant route for non-UK resident directors who do not hold a biometric passport

Once an ACSP completes verification, it notifies Companies House directly. Companies House then issues the individual's Personal Code.

Acting Before Your Deadline

The most important action any director or PSC can take right now is to identify their actual deadline — not the general November 2026 date, but the specific CS01 due date for their company or the birth-month window for PSC-only individuals.

Directors with upcoming CS01 deadlines within the next 60 days should treat identity verification as urgent. Processing through an ACSP typically takes 1 to 3 working days — well within the available window for anyone who acts now.

Directors who are already past their CS01 deadline and have an outstanding filing should verify as quickly as possible. Each additional week of unfiled CS01 adds to the non-compliance record and increases the likelihood of escalating enforcement action.

Check your deadline and start verification with VerifyDirector →