The November deadline most UK directors have not noticed

Every existing company director and every person with significant control in the United Kingdom has to verify their identity with Companies House during the transition year that ends on 18 November 2026. Companies House expects somewhere between six and seven million people to be verified by the time it closes. There is no single national date: directors generally verify in connection with their company's confirmation statement, and people with significant control have their own windows. What is common to all of them is the outer limit.

Non-compliance carries criminal liability. A director who keeps acting after their own deadline commits an offence, a company that permits an unverified director to act can commit one, and a person with significant control who misses their requirement can commit a separate one. These are distinct offences rather than one failure that automatically catches everybody, which is a distinction worth knowing before somebody tells you it is only paperwork.

I have asked a lot of founders about this over the past few months. Most of them know something is happening. Very few have a date, and almost none have worked out that it applies to them personally rather than to their accountant.

What actually changed

For most of its history the UK register operated on an honour system. You told Companies House who you were and Companies House wrote it down. There was no meaningful check that the named director existed, and the register was never designed to make one. That is why the same register has carried directors named after cartoon characters, and why a Companies House address has turned up on so many fraudulent invoices.

The Economic Crime and Corporate Transparency Act ended that. Since 18 November 2025 nobody can be appointed a director, and no company can be incorporated, without the identity behind the appointment being verified first. The register stopped being a filing cabinet and started being a check.

The transition is the second half. Everyone already on the register has to catch up, on their own schedule, with 18 November 2026 as the point by which it should all be done.

There is a third phase behind it, covering the people who make filings rather than the people named in them. Presenters, meaning anyone filing accounts or documents who is not a director, were originally due to be caught in November 2026. That has been pushed back by a year, to no earlier than November 2027, with Companies House promising at least six months of notice. Third party agents filing on behalf of companies will need to be registered as authorised corporate service providers by the same point. If you file for clients, that is the phase to watch, and the delay is breathing room rather than a reprieve.

Why this is bigger than a compliance task

It would be easy to file this under paperwork. I think that misreads it.

This is the first time the British state has required a verified identity as a condition of ordinary commercial life at this scale. Not for a passport, not for a driving licence, not for a benefit, but for the basic act of being a company director. Six to seven million people is roughly one in nine adults in this country.

And it happened without the argument. The national digital identity debate has been running loudly for two years, with petitions and select committee reports and a great deal of heat about ID cards. Meanwhile a mandatory identity verification scheme covering millions of people went live through company law, and I have not seen a single protest about it.

That tells you something worth knowing about how identity infrastructure actually gets built. It does not arrive as a scheme with a name and a launch. It arrives as a condition attached to something you already need to do.

The two routes, and the one people get wrong

You can verify directly with Companies House using GOV.UK One Login, or through an authorised agent, an accountant or formation agent registered for the purpose. Both routes end in the same place: a verified identity linked to your personal record on the register.

The mistake I see most often is treating this as something the accountant will handle. Your accountant can be the route through which you verify. They cannot verify instead of you. The obligation attaches to the individual, and so does the offence.

The second mistake is waiting for the confirmation statement to prompt it. If your statement falls in October 2026 you will be joining several million other people in the same queue, at the same time, on a service that has never handled that volume. The people who did this in early 2026 will not notice a thing.

What it proves, and what it does not

This is the part I care about professionally, and it is worth being precise.

Verification at Companies House establishes that a real, documented person stands behind a name on the register, at the moment they verified. That is a genuine improvement on an honour system and it will make a category of shell company fraud considerably harder.

What it does not do is prove that the same person is present at any later moment. A verified identity on the register is a statement about November 2026. It is not a statement about who authorised a payment in March 2027, or who signed a document, or who logged into the filing service last Tuesday. The check happens once and the record persists.

That gap is not a criticism of the scheme, which was designed to fix the register rather than to secure every subsequent action. It is a description of where the remaining risk sits. Identity proofing and ongoing authentication are different problems, and solving the first thoroughly can create a false sense that the second has been solved too.

The pattern is familiar to anyone who has built these systems. A strong check at enrolment, followed by a long tail of actions that inherit trust from it. The fraud moves to the tail. It always does, because that is where the checking stopped.

If you are a director reading this

Do it now rather than in the autumn. It takes minutes today and it will not take minutes in October. Check whether the people around you are also caught: co-founders, non-executives, anyone recorded as holding significant control, including through a holding structure. People with significant control who are not directors are frequently the ones who get missed, because nobody thinks of them as officers of the company.

If you run a business that files on behalf of others, look at the third phase now rather than treating November 2026 as the end of it.

The wider point

Weeks after the Companies House deadline, before the end of the same year, every EU member state must make a digital identity wallet available to its citizens. Those two deadlines were set by different bodies for different reasons and they have nothing formally to do with each other.

They still land within weeks of each other, and they point the same way. Identity is moving from something you assert to something you prove, in ordinary commercial contexts, on a deadline, with penalties attached. In the UK it arrived through company law. In Europe it arrived through a regulation with a wallet attached.

The organisations that will handle the next decade well are the ones treating this as an infrastructure change rather than a compliance exercise. The compliance exercise ends on 18 November 2026. The infrastructure change does not.