The Deadline Sitting Just Before Your Busiest Quarter
Ask a UK practice owner what is on their radar this autumn and you will hear about the Budget on the 28th of October, quarterly updates, and the long climb towards the 31st of January. Almost nobody volunteers the 18th of November. Yet that is the date the Companies House identity verification transition period ends, and for many firms it represents a larger volume of individual client actions than anything else in the calendar.
Identity verification became a legal requirement on the 18th of November 2025. That date was not a deadline. It opened a twelve month transition window in which existing directors, members and people with significant control were expected to verify and link their identity to the roles they hold. That window closes in eight weeks. Companies House has estimated that six to seven million individuals are in scope, and independent analysis of the register suggested that as of May 2026 roughly 183,000 controlling shareholders were already in default of the requirement. If even a small share of those people are on your client list, you have a backlog, and it is not one your clients will clear without prompting.
What Actually Changes on the 18th of November
The mechanics are simple to describe and awkward to deliver at scale.
- Directors and equivalents must obtain a Companies House personal code and supply it as part of the company's next confirmation statement. A director who holds five appointments must provide the code for each company.
- Confirmation statements will be rejected where the personal codes for the directors are missing. This is the single most common cause of an unexpected filing failure this year, and it usually surfaces at the worst possible moment.
- New incorporations already require a personal code for every director at the point of registration.
- Overseas companies must confirm that all directors have verified by the anniversary of the UK establishment's registration.
- Acting as a director without a verified identity is an offence. Companies House has a graduated enforcement approach that runs from register annotations through financial penalties to prosecution and, in the most serious cases, disqualification proceedings.
The point firms need to internalise is that verification is a two step process. Verifying an identity is not enough. The individual, or an authorised agent acting for them, has to link that verified identity to each role by supplying the personal code through the correct route.
The PSC Trap Most Firms Have Missed
If there is one area where practices are quietly accumulating risk, it is people with significant control. PSC verification does not travel with the confirmation statement, and the windows are narrow.
- Someone who is both a director and a PSC of the same company must provide their code twice, once through the confirmation statement as a director and separately as a PSC using the dedicated Companies House PSC verification service. The PSC step must be completed within a 14 day period starting the day after the company's confirmation statement date.
- Filing the confirmation statement early does not move the PSC window. The 14 days still run from the statement date shown on the register. Firms that clear filings ahead of schedule are the most likely to trip over this.
- A PSC who is not a director of the same company has a completely different trigger. Their window is the first 14 days of their birth month, so a client born on the 22nd of January has a window running from the 1st to the 14th of January.
- Anyone who became a PSC after the 18th of November 2025 provides their code when they are first added to the register, or within 14 days of being added.
- A PSC who has died does not need to be verified and should remain on the register until probate or letters of administration are received.
Read that list against a typical client base of owner managed companies, family investment companies and property structures and the problem becomes obvious. A single client group can carry several different verification triggers falling in different months, none of which sit naturally in your existing compliance diary.
Where the Backlog Is Hiding in Your Client List
Four groups account for most of the unverified population.
- Dormant and low activity companies where the confirmation statement is the only annual touchpoint and nobody reads the reminders.
- Non resident and overseas directors who cannot use the simplest verification routes and often need an authorised agent or a face to face check with acceptable documentation.
- Silent PSCs, typically spouses, trustees, retired founders and family shareholders who hold no appointment, receive no correspondence from Companies House, and have no idea an obligation applies to them at all.
- Clients with thin digital identity footprints, including older clients and those without a photo ID that matches the register, who will fail an online check and need a longer route.
Your Eight Week Plan
This is a data exercise before it is a client communication exercise. Work it in this order.
- Week one, build the register. Pull every incorporated client, every officer and every PSC into one list with the confirmation statement date, each individual's birth month, their residency, and whether a personal code has already been captured. If your practice management system holds companies, officers and PSC data centrally, this is a report rather than a project.
- Week two, segment by trigger. Split the list into directors verifying at the next confirmation statement, dual role director PSCs with a 14 day post statement window, standalone PSCs with a birth month window, and anyone with no valid identity documents.
- Weeks three and four, contact the hard cases first. Overseas directors and clients likely to fail an online check need the longest lead time. Chase these before you touch the straightforward cases.
- Weeks four to six, run a code collection campaign. Ask clients to send you the personal code, not a screenshot confirming they verified. The code is the deliverable. Store it against the client record so it is available at every future filing.
- Weeks six to eight, sweep and escalate. Produce a weekly exceptions list of unverified individuals and put it in front of the partner who owns the relationship. Record every attempt in writing.
- Before Christmas, protect January. Any confirmation statement falling due in December, January or February should have its codes in hand now. A rejected statement in the middle of Self Assessment season is an avoidable cost.
The Client Conversations to Have This Month
Keep the message short and specific. Clients respond to a named action with a date attached, not to a summary of company law reform. Three points are enough.
- What you need from them: a verified identity and the resulting personal code, per person, sent to the firm.
- When: now, and in every case before the 18th of November, whatever their confirmation statement date says.
- What happens if they do not: rejected filings, a public record that shows non compliance, financial penalties, and the fact that continuing to act as an unverified director is an offence.
It is also worth being explicit about what your engagement does and does not cover. If your firm is registered as a Companies House authorised agent you may be able to verify clients yourself, which is faster and far more reliable than hoping they complete it alone. If you are not, say so plainly, and tell clients they must complete the step themselves. Either way, put it in writing. Unverified officers will become a professional indemnity conversation eventually, and contemporaneous evidence of what you advised and when is the cheapest insurance available.
Why This Matters Beyond the Deadline
Identity verification is not a one off tidy up. It is the foundation of a register that is gradually becoming a verified data set, with more roles in scope over time, including people who file, limited partnerships, corporate directors and officers of corporate PSCs. Firms that build a clean central record of officers, PSCs and personal codes this autumn will carry that asset into every future filing, every AML client due diligence refresh and every incorporation. Firms that handle it as a scramble of emails in early November will do the same work again next year, and the year after.
The practices that come through this comfortably are the ones treating verification status as a standing field on the client record rather than a task in someone's inbox. Central data, one exceptions report, one owner, reviewed weekly.
The Bottom Line
The 18th of November is a hard stop at the end of a transition period that has already run for ten months, and it lands six weeks before your firm's least flexible quarter. The work is not difficult. It is simply high volume, spread across hundreds of individuals, governed by four different trigger rules, and entirely dependent on clients doing something. That combination is exactly what turns a manageable compliance task into a January emergency.
Eight weeks is enough time, if you start with the data this week. Build the list, segment by trigger, chase the hard cases first, and collect the codes. Your December self will be grateful.