Why GOV.UK One Login Fails Non-UK Directors — And Why the ACSP Route Exists to Fix It

The System That Works for Most People — and Fails Everyone Else

When Companies House launched mandatory identity verification on 18 November 2025, it offered two routes: the self-service GOV.UK One Login system, and the ACSP (Authorised Corporate Service Provider) route.

For the majority of UK-based directors with UK documents, the GOV.UK One Login route works well. The app reads the NFC chip in a biometric UK passport, takes a selfie for biometric matching, and issues a Personal Code in minutes. Average completion time: 2.4 minutes.

But the UK company register does not consist only of UK nationals. According to Companies House data, a significant proportion of directors and Persons with Significant Control named on the register are non-UK nationals, many of them resident outside the United Kingdom entirely. These individuals are directors of UK limited companies, LLPs, and holding structures used for international business, investment, and asset management.

For this population — running into the hundreds of thousands — the GOV.UK One Login system fails. Not occasionally, not as an edge case. It fails systematically, because it was built around a set of documents and infrastructure that most non-UK nationals do not have.

This post explains exactly why it fails, which documents and circumstances trigger each failure mode, and why the ACSP route is not a workaround: it is the mechanism Parliament specifically designed to solve this problem.

The Technical Architecture of GOV.UK One Login

To understand why the system fails for non-UK nationals, you need to understand how it works.

GOV.UK One Login's identity verification service uses two components:

1. The GOV.UK ID Check App A mobile application that performs NFC (Near Field Communication) chip reading and biometric matching. The user downloads the app, holds their smartphone near their identity document, and the app reads the data embedded in the document's chip via radio frequency. The chip contains the document holder's biographic data and a high-resolution facial image stored in a standard international format (ICAO 9303).

After reading the chip, the app takes a selfie and runs a biometric comparison between the chip photo and the selfie. The comparison uses machine learning models trained to detect whether the same person appears in both images.

2. The Address Verification Step After document verification, the system requires the user to confirm their residential address. For UK-resident applicants, this typically involves a credit bureau or electoral roll check — automated lookups that confirm an address is associated with the individual in UK records.

Both steps have specific hardware, document, and residency requirements. When those requirements are not met, the system cannot proceed.

Failure Mode 1: No NFC Chip in the Passport

The GOV.UK ID Check App cannot function without an NFC chip to read. Biometric passports — those with the small rectangular chip symbol on the cover — contain this chip. Non-biometric passports do not.

The availability of biometric passports varies significantly by nationality and age of the document:

• Passports issued in many developing countries before 2010–2015 may be non-biometric
• Some countries issued biometric passports at different times for different applicant categories
• Passports that have been renewed after a loss or damage may have a different generation of chip than the applicant's most recent document
• Passports approaching expiry that are several years old may predate their issuing country's biometric rollout

A director from Nigeria, Bangladesh, Indonesia, or a number of other countries holding a passport issued before their government's biometric transition cannot use the app at all. The app does not offer a fallback for non-biometric documents. The user reaches a screen saying the document cannot be processed, and the online verification journey ends.

Failure Mode 2: Chip Reading Failures on Valid Biometric Documents

Even for directors who hold valid, chip-enabled biometric passports, NFC chip reading fails more often than the official guidance acknowledges.

Chip reading failure rates vary by:

Document age: Chips in older biometric passports can degrade, particularly if the passport has been stored folded, bent, or in high-humidity conditions. A chip that passes through airport e-gates may still fail when read by a consumer smartphone — e-gate readers use professional-grade RFID equipment that operates at different power levels.

Smartphone compatibility: Not all smartphones read NFC at the same field strength. Budget devices, older flagship phones with reduced NFC sensitivity, and phones with certain case materials (particularly metallic cases) frequently fail chip reads that higher-end devices complete successfully.

Nationality-specific chip implementations: Although all biometric passports follow the ICAO 9303 standard, national implementations vary. The encryption keys used to protect chip data differ by country, and the GOV.UK system must have the relevant key material to decrypt the chip contents. For some nationalities — particularly newer entrants to biometric passport programs — key propagation to UK systems can lag behind document issuance.

When chip reading fails, the app's only instruction is to try again. There is no "unable to read chip" fallback path within the app to a different document type or a manual review.

Failure Mode 3: The Post Office Route Is Only Available In The UK

Companies House's guidance acknowledges that not everyone can use the app. For individuals who cannot verify via the app, it directs them to the Post Office identity verification service — an in-person alternative where Post Office staff verify documents face-to-face.

The Post Office route accepts a broader range of documents, including:

• Any nationality passport (biometric or non-biometric)
• UK photo driving licence
• EU photo driving licence

The problem is definitional: the Post Office route requires you to be physically present at a Post Office in the United Kingdom.

For a director in Beijing, Singapore, Lagos, Toronto, or Buenos Aires, the Post Office route is inaccessible. They cannot travel to the UK simply to complete a document check — particularly when the verification requirement affects them as one of potentially hundreds of thousands of international directors of UK-registered companies.

This is not a minor gap. It is a complete absence of a self-service path for any non-UK-resident director who:

• Does not hold a biometric passport, or
• Holds a biometric passport whose chip cannot be read by the app, or
• Has a biometric passport but encounters any other technical failure in the app

Failure Mode 4: The Address Verification Problem

Assuming a non-UK director successfully passes the document verification steps — which, as described above, is already far from guaranteed — they then encounter the address verification stage.

The address verification step asks the user to confirm their current residential address and then checks it against UK data sources: credit bureau records, the electoral roll, and other databases that cover UK-resident individuals.

A director resident in Hong Kong, Germany, the United States, or Australia has no presence in these databases. They cannot be found by a UK credit bureau lookup because they have never had a UK address, UK credit relationship, or UK electoral registration.

The system has no mechanism to verify a foreign address against international sources. When the address check fails, the verification cannot be completed through the online route — and the fallback is, again, the Post Office, which is physically inaccessible to non-UK residents.

What Happens to Directors Stuck in the System

The practical experience of non-UK directors attempting GOV.UK One Login verification follows a recognisable pattern:

1. Download the app and attempt document verification
2. Chip reading fails — attempt again
3. Repeated failures — no alternative document path offered
4. Directed to the Post Office route in guidance
5. Post Office route confirmed as UK-only
6. No further online options available
7. Director is left without a completed verification and no clear path forward

This is not a fringe scenario. Companies House guidance explicitly acknowledges that "some people will not be able to use GOV.UK One Login" and directs them to the ACSP route. The guidance does not describe the ACSP route as an exceptional fallback. It describes it as the appropriate route for individuals in these circumstances.

The ACSP Route: Parliament's Designed Solution for International Directors

The ACSP framework was created by the Economic Crime and Corporate Transparency Act 2023 alongside the identity verification requirement. The two are structurally paired. Parliament recognised, in drafting the legislation, that a self-service automated system could not serve the full population of UK directors and PSCs — particularly the international segment.

The ACSP route works as follows:

What an ACSP is An Authorised Corporate Service Provider is a business that has been registered with Companies House and is supervised under UK anti-money laundering regulations by one of the 25 recognised AML supervisory bodies. This supervision means the ACSP operates under the same Know Your Customer (KYC) and Customer Due Diligence (CDD) standards required of banks and financial institutions.

ACSPs must follow the UK Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017. When they verify an individual's identity, they do so under the same legal standards that a bank applies when opening a new account for that individual. Companies House accepts ACSP verification as equivalent to GOV.UK One Login verification because the underlying standard is the same — the method of applying it is different.

What the ACSP verification process involves

1. The applicant submits their identity documents — passport (any nationality, biometric or non-biometric), proof of address, and a photograph holding the passport
2. The ACSP's compliance team reviews the documents against the KYC standard, which includes document authenticity checks, database checks against international sanctions lists and PEP (Politically Exposed Person) registers, and address verification using the provided proof of address
3. The ACSP notifies Companies House that the individual has been verified
4. Companies House issues the individual's Personal Code

What the ACSP route accepts that GOV.UK One Login does not

Processing time ACSP verification involves human review rather than automated processing, which means it is not instant — but it is not slow. Standard processing takes 1 to 3 working days from receipt of complete documents. Express processing is available for applications received before 12:00 UTC on working days.

Who Should Use the ACSP Route

The ACSP route is the appropriate route for any director or PSC who:

• Does not hold a biometric (chip-enabled) passport
• Holds a biometric passport that cannot be successfully read by the GOV.UK ID Check App
• Is resident outside the United Kingdom and cannot attend a Post Office
• Has a UK company but has never had a UK address
• Has previously attempted the GOV.UK One Login route without success
• Prefers a supported, human-reviewed process over a self-service automated system

This covers a large proportion of internationally-structured UK companies — including:

• UK holding companies owned by overseas investors
• UK LLPs used as vehicles for international joint ventures
• UK limited companies used for EU or US market access by non-UK founders
• UK companies registered by foreign nationals who incorporated remotely

For this population — numbering in the hundreds of thousands — the ACSP route is not a workaround. It is the route.

The Personal Code: What You Get at the End

Once verification is complete, Companies House issues your Personal Code — an 11-character alphanumeric identifier tied to your confirmed identity on the register.

The Personal Code is:

Permanent — it does not expire, does not need to be renewed, and remains valid regardless of which UK companies you are associated with.

Transferable across roles — if you are a director of three UK companies, one Personal Code covers all three. If you are also a PSC of a holding structure above those companies, the same code covers that role too. Verify once; use everywhere.

Private — the Personal Code is not displayed on the public Companies House register. It is used internally to link your verified identity to your roles, but third parties searching the register do not see the code itself.

Issued once — the code is tied to a single individual. Companies cannot hold Personal Codes for directors; directors hold their own. This is a deliberate design choice: it places legal responsibility for identity on the individual, not on a company formation agent or nominee structure.

Verifying Before Your Deadline

Non-UK directors should be aware that their verification deadline is not November 2026. It is their company's next Confirmation Statement filing date — which may be significantly earlier, depending on when the company was incorporated or when it last filed its annual confirmation.

Companies filing their Confirmation Statement after 18 November 2025 cannot submit that statement if any listed director or PSC is unverified. The system block is immediate — there is no "file now, verify later" provision.

For a director resident outside the UK, the ACSP route is the only compliant path to verification. Selecting a registered, authorised ACSP and initiating the process well in advance of the Confirmation Statement deadline is the recommended approach.

VerifyDirector is a Companies House registered ACSP. We verify directors and PSCs of any nationality, from any country, entirely remotely. Documents can be submitted online, processing takes 1 to 3 working days, and your Personal Code is issued directly by Companies House following our verification.

Start your identity verification with VerifyDirector →