GOV.UK One Login: Identity Verification for UK Directors and PSCs

🎯 Understanding the GOV.UK One Login Mandate

For years, the UK company register was based on a system of "good faith," where information was accepted by Companies House without rigorous identity checks. Unfortunately, this left the system vulnerable to exploitation. The introduction of GOV.UK One Login for directors and PSCs is the government's primary weapon against fraud, money laundering, and the use of "strawman" directors.

The Shift from Government Gateway

You may be familiar with the old Government Gateway IDs used for HMRC services. While those still exist for certain tax functions, the GOV.UK One Login is a newer, more secure platform intended to be a single "front door" for all government services. It uses advanced biometric technology to ensure that the person claiming to be a director is exactly who they say they are.

The Role of Companies House

Under the new legislation, Companies House has evolved from a passive registrar to an active regulator. They now have the power to challenge suspicious information and, most importantly, to require Identity Verification for every individual with significant influence over a UK company. If you are starting a new business, you can read more about the initial steps in our guide on how to start a UK limited company.

• Unified Access: One set of credentials to access multiple government departments.
• Enhanced Security: Multi-factor authentication is standard, protecting your corporate data.
• Identity Linking: Your verified identity is linked directly to your unique director ID at Companies House.

📋 Who Must Complete Identity Verification?

The scope of the Economic Crime and Corporate Transparency Act is broad. It doesn't just apply to the people sitting in the boardroom; it applies to anyone who exerts significant control or handles the legal filings of a business entity. Understanding your role is the first step toward compliance.

New and Existing Directors

Every person appointed as a director of a UK company must be verified. For new incorporations, this must happen before the application is submitted. For existing directors, there will be a transition period, but the requirement is mandatory. If you are unsure of your duties, check our article on director legal responsibilities.

Persons with Significant Control (PSCs)

A PSC is usually someone who owns more than 25% of the shares or voting rights in a company. Because these individuals hold the real power, the government requires them to undergo the same GOV.UK One Login process as directors. This ensures that the true owners of UK businesses are transparently recorded.

Relevant Legal Entities (RLEs)

When a company is owned by another company, that corporate entity is known as a Relevant Legal Entity (RLE). The individual who files on behalf of that RLE must be verified to ensure accountability. This prevents complex corporate structures from being used to hide the identity of the ultimate controllers.

• Individual Directors: Must verify via the GOV.UK ID Check app or a post office check.
• PSCs: Must verify within a specific timeframe after the new laws are fully enacted.
• Authorized Filers: Anyone submitting documents to Companies House (like accountants) must also be verified.

⚡ How to Complete Verification: Step-by-Step

The verification process is designed to be digital-first, meaning most people can complete it in under 10 minutes using a smartphone. The GOV.UK One Login system leverages the NFC (Near Field Communication) technology found in most modern mobile devices.

Step 1: Create Your Account

Visit the official GOV.UK website to create your One Login account. You will need a valid email address and a mobile phone number for Two-Factor Authentication (2FA). This account will be your permanent digital identity for all future interactions with Companies House.

Step 2: The GOV.UK ID Check App

Download the GOV.UK ID Check app on your smartphone. The app will guide you through scanning your identity documents. Most users will use a biometric passport or a UK driving license. The app uses the camera to take a high-quality scan of the document and then uses the NFC reader to "chip-check" passports for authenticity.

Step 3: The Liveness Scan

To prevent the use of static photos or "deepfakes," the app will perform a Liveness Scan. This involves looking into your phone's camera while the screen flashes different colors or asks you to move your head. This proves that a real, living person is present during the verification process. Once completed, your identity is matched against government databases.

• Document Prep: Have your biometric passport or UK driving license ready.
• Smartphone Access: Ensure your phone has NFC enabled (usually found in Settings).
• Verification ID: Once successful, you will receive a Verified Status that links to your Companies House filings.

💡 Did You Know?

There are over 5 million companies currently on the UK register. Before the new Identity Verification rules, it was technically possible to register a company using a fake name or even the name of a deceased person without immediate detection. The GOV.UK One Login initiative is expected to reduce corporate identity theft by over 90% by ensuring every name on the register is tied to a verified human being.

🔍 Why This Matters: Transparency and Compliance

You might wonder why the government is adding this extra layer of "red tape." The reality is that a transparent corporate register is essential for a healthy economy. When investors and suppliers know exactly who they are dealing with, business confidence increases.

Combating Fraud and Misuse

By requiring GOV.UK One Login verification, the government makes it much harder for criminals to set up "shell companies" for illegal activities. If every director is verified, there is a clear "paper trail" back to a real individual, which acts as a powerful deterrent against financial crime. For more on how these changes affect your company structure, see our post on understanding PSC registers.

Protecting Directors from Identity Theft

In the past, innocent individuals often found themselves listed as directors of companies they had never heard of. With the new system, it is impossible for someone else to appoint you as a director without your verified One Login credentials being involved. This provides a massive layer of personal protection for professionals across the UK.

• Public Trust: A "Verified" tick on the public register increases your company's credibility.
• Data Accuracy: Ensures the Companies House database is the most accurate in the world.
• Accountability: Directors can no longer claim they were unaware of their appointment or responsibilities.

⚠️ Challenges for Non-UK Residents and Tech Gaps

While the digital-first approach works for most, there are specific scenarios where GOV.UK One Login might present challenges. The government has built in alternative routes for those who cannot use the standard app-based verification.

Non-UK Resident Directors

If you are a director living abroad and do not hold a UK-issued identity document, the process may require you to use an Authorised Corporate Service Provider (ACSP). These are professional firms (like Formation Direct) that are registered with Companies House to perform identity checks manually and "vouch" for the individual's identity.

Alternative Verification Methods

For those without a compatible smartphone or biometric ID, there is a manual route available through Post Office identity checks. This involves taking physical documents to a participating Post Office branch where a staff member verifies your identity in person and updates the digital system on your behalf.

• ACSP Routes: Essential for international directors without UK digital IDs.
• Post Office Checks: A vital fallback for those with accessibility or technology issues.
• Strict Deadlines: Regardless of the method used, failing to verify within the allocated window can lead to your company being struck off the register.

📈 Action Steps: Getting Your Company Ready

Compliance is not something that should be left until the last minute. As a director or PSC, you should take proactive steps today to ensure your business remains in good standing with Companies House.

Your Compliance Checklist

• Audit Your Board: Identify every director and PSC in your company who will need to verify.
• Set Up One Login: Encourage all relevant individuals to create their GOV.UK One Login accounts immediately.
• Check Document Validity: Ensure all directors have up-to-date biometric passports or driving licenses.
• Consult Specialists: If you have complex structures or non-UK directors, contact an ACSP to handle the verification professionally.

Staying ahead of these changes is part of maintaining a healthy business. For further reading on corporate compliance, explore our guide to annual confirmation statements.

Ready to Launch Your Fully Compliant Company?

Formation Direct Ltd offers fast, compliant UK company registration — helping directors and PSCs get their Limited Company set up correctly from day one. View our Formation Packages and get officially registered in as little as 3 working hours.