Company Registry Identity Verification: What Every Director Must Know in 2026

If you are a company director, a Person with Significant Control (PSC), or anyone who owns or controls a registered company, the rules have fundamentally changed in many jurisdictions.

From late 2025 onwards, identity verification for company registries has become a legal requirement in an increasing number of countries as part of global efforts to combat economic crime and improve corporate transparency. This is one of the most significant reforms to corporate registration in decades, designed to clean up official registers and make it far harder for criminals, fraudsters, and shell company operators to hide behind fake or stolen identities.

Scope and Application of Requirements

The change affects directors of existing companies, newly appointed directors, People with Significant Control, equivalent roles in partnerships, and company formation agents alike. It applies equally to residents and non-resident directors based anywhere in the world. There are generally no exceptions based on nationality, company size, or sector.

Important: Non-compliance is not a minor administrative issue. Failing to verify can result in rejected filings, financial penalties, criminal prosecution, and being blocked from acting as a director. The consequences are serious and the transition window is moving fast.

Key Takeaways

Why Identity Verification Has Been Introduced

For many years, company registries in various countries operated primarily as passive record keepers. Anyone could file information, including director appointments and company formations with minimal checks on whether the person submitting the information was genuinely who they claimed to be. This created serious vulnerabilities.

The Problem: Fraudsters Exploited Open Registers

The absence of robust identity checks allowed criminals to exploit company registers by using stolen identities to appoint fictitious directors, creating networks of shell companies to launder money, and registering companies for unlawful purposes with intentionally misleading or false information.

Recent enforcement actions by registries have shown the scale of the problem, with tens of thousands of false or misleading filings being queried or removed in a single year. These numbers illustrate why identity verification is being introduced worldwide.

The Solution: A Verified Register

New legislation in multiple jurisdictions has given company registries significantly expanded powers, moving them from passive record keepers to active guardians of corporate transparency. Identity verification is one of the cornerstones of this transformation.

The reform serves four specific goals

• Reducing fraud: Verified identities make it much harder to impersonate real individuals or create fictitious directors. Every person linked to a registered company must be a verifiable, real individual.
• Improving transparency and accuracy: The public register becomes more reliable. Investors, banks, and business partners can have greater confidence that the people listed on a company’s record are genuine.
• Strengthening Anti-Money Laundering controls: Identity verification aligns corporate law more closely with AML standards already applied in the financial sector, reducing the risk that companies are used as vehicles for money laundering or tax evasion.
• Expanding enforcement powers: Verified data can be cross-checked against records held by tax authorities and other public bodies, making it easier to identify and investigate discrepancies and fraudulent patterns.

Who Must Complete Company Registry Identity Verification?

The requirement applies to specific roles associated with registered companies. If you hold any of the following positions regardless of your nationality or country of residence, you must verify your identity.

Affected Roles

• Company directors: Every individual director of a registered company must verify. This includes directors of private limited companies, public limited companies, and equivalent roles such as managing officers.
• People with Significant Control (PSCs): A PSC is anyone who owns or controls more than 25% of shares or voting rights, has the power to appoint or remove the majority of directors, or otherwise exercises significant influence or control.
• Equivalent roles in Limited Liability Partnerships (LLPs) or similar structures.
• Authorised Corporate Service Providers (or equivalent filing agents): Formation agents, accountants, solicitors, and others who file on behalf of clients must often register as authorised providers and verify their own identity.
• Directors of overseas companies with local establishments or branches that are registered locally.
• Future phases: Additional filing agents and others in subsequent phases, anyone filing documents on behalf of companies may also require verification. Corporate directors and officers of corporate PSCs are often introduced on separate timelines.

When Must Identity Verification Be Completed?

The timing depends on your specific role and when you took it on. Late 2025 marked the start of a mandatory rolling regime with staggered deadlines rather than a single cutoff date.

New Directors (Appointed After the Start Date)

You must verify your identity before your appointment can be registered with the company registry. New directors must verify before their appointment is filed it is not possible to be formally appointed without a verified identity and a valid personal code.

Existing Directors (Appointed Before the Start Date)

You must provide your personal code when the company files its next confirmation statement or annual return. You have until a set absolute deadline in 2026, but your practical deadline is usually your company’s next annual filing, which could be many months earlier.

If you are a director of more than one company, you must provide your personal code for each company’s filing separately.

New Incorporations

When registering a new company, the personal code for each director must be provided as part of the incorporation filing.

People with Significant Control (PSCs)

PSCs often have a specific short window (commonly 14 days) during which they must provide their personal code. The window depends on their situation and may be linked to the company’s filing date or their birth month.

Overseas Companies with Local Establishments

Identity verification of individual directors is typically required when registering a new local establishment and when a new director is appointed. Existing directors usually have a transitional period linked to the anniversary of the establishment’s registration.

How Does Company Registry Identity Verification Work?

There are generally two routes available. The right route for you depends on your location, the type of identity documents you hold, and the complexity of your situation.

Route 1: Direct Verification via Government Online Platform

This is the self-service route provided directly by the registry or government. It uses a central digital identity platform where available.

How it works

• Create an account using your email address
• The system asks questions to determine the best verification method for you
• You may be directed to verify via app-based biometric checks (e.g., passport NFC + selfie), online browser verification with security questions, or in-person verification at designated locations (where available)
• Acceptable documents vary by country but often include biometric passports, national photo ID cards, or driving licences. The direct route may not be suitable for all non-resident directors.

Route 2: Verification via an Authorised Corporate Service Provider (ACSP) or Equivalent

An ACSP (or locally authorised agent) is a third-party organisation, such as an accountant, solicitor, or company formation agent, that is registered and supervised under relevant anti-money laundering rules. They can verify your identity on your behalf.

Key advantages of the authorised provider route

• Available from any country in most cases
• Wider range of acceptable identity documents
• Professional guidance reduces the risk of errors or mismatches
• Especially useful for non-resident directors who may struggle with the direct digital route

When using an authorised provider, you will typically need to provide a government-issued photo ID and proof of current residential address. The provider must follow mandatory verification steps and retain records of the checks.

What Happens After Verification: Your Registry Personal Code

When you successfully verify your identity through either route, you receive a unique personal code. This code is personal to you as an individual, not to your company.

Using Your Personal Code

• As a director, provide the code when the company files its next confirmation statement or annual return
• As a new director, provide it as part of your appointment filing or at incorporation
• As a PSC, provide it using the dedicated service within your required window
• If you hold multiple roles, the same personal code is used across all of them, but you must link it to each role separately

What Documents Are Required?

The documents required vary depending on which verification route you use.

For the Direct Online Route

Primary accepted documents usually include biometric passports and country-specific photo IDs. All documents must generally be current.

For the Authorised Provider Route

Providers typically require two documents:

• Document 1 (Primary identity): Current biometric or non-biometric passport, national identity card, or other government-issued photo ID
• Document 2 (Address verification): Recent bank statement, utility bill, or government correspondence (usually within the last 3 months)

For overseas individuals: At least one government-issued document is required. Additional evidence may be needed if there are name changes or address gaps.

What Happens If a Director Fails to Verify Their Identity?

The consequences of non-compliance are serious and escalate in severity. Registries have stated they will use the full range of their powers to enforce compliance.

Immediate Operational Consequences

• You cannot be appointed as a new director without a verified identity
• You cannot register a new company or entity
• The company’s annual return or confirmation statement will be rejected if any director’s personal code is missing or unverified

Enforcement Consequences

• Failure to comply by your deadline is often a criminal offence for both the individual director and the company
• Financial penalties and fines can be issued
• A note of non-compliance may be published against your name on the public register
• Repeated failures can lead to director disqualification or strike-off proceedings

Special Considerations for Non-Resident Directors

If you are based outside the country where the company is registered and serve as a director, the identity verification requirements still apply fully. However, there are additional practical challenges.

The Core Challenge

The direct online route often has limitations for non-residents (such as requirements for local addresses or specific biometric documents). Many non-resident directors, therefore, need to use an authorised corporate service provider.

Document Requirements for Non-Resident Directors

You will typically need a government-issued photo ID and proof of current residential address. Original or certified documents are often required.

Banking and Funding Implications

As banks and investors increasingly cross-reference company registry records for due diligence, having unverified directors or PSCs on record can create friction in banking relationships, account opening, and funding rounds.

How Identity Verification Impacts Company Formation and Funding

For new company registrations, verification requirements are now embedded directly into the incorporation process. No verification usually means no valid appointment and no successful incorporation.

Delays can be commercially damaging in time-sensitive situations such as funding rounds, contracts, or SEIS/EIS-style investment schemes (where applicable).

Ongoing Compliance Responsibilities

Identity verification is generally a one-time process per individual. However, the obligations associated with your personal code are ongoing.

• Keep registry records accurate
• File all changes to directors or PSCs within the required timeframes
• Ensure new directors and PSCs are verified before appointments
• Maintain an accurate register of significant controllers

Common Mistakes Directors Make and How to Avoid Them

• Assuming your accountant handles it automatically
• Missing the practical filing deadline (not just the final transition date)
• Personal details mismatch the registry record
• Using expired documents
• Confusing existing AML/KYC checks with registry verification requirements
• Completing verification but failing to provide the personal code at the filing stage
• Overlooking separate requirements for PSC roles

How Company Registry Reforms Strengthen Enforcement

The identity verification regime forms part of a wider global push for corporate transparency. Registries are gaining powers to:

• Cross-check data with tax authorities
• Proactively remove false information
• Reject filings from non-compliant individuals
• Increase accountability around registered addresses and beneficial ownership

Step-by-Step: What Directors Should Do Right Now

How OAEC Can Help

Navigating identity verification, especially for directors based outside the country of registration, companies with complex ownership structures, or founders managing multiple entities, requires specialist knowledge and precise timing. OAEC operates as an Authorised Corporate Service Provider, enabling the verification of the identities of directors and PSCs from any country in compliance with registry requirements.

Services Offered

• Identity verification for non-resident directors
• Pre-verification register audits
• Coordination across multiple directors and PSCs
• Incorporation support with verified directors
• Confirmation statement/annual return preparation
• Ongoing compliance monitoring

If you are unsure whether verification has been completed correctly for your company, or if you are approaching a filing deadline with unverified directors, contact OAEC as early as possible.

Conclusion

Company registry identity verification represents a permanent and irreversible change to how companies are regulated in many jurisdictions. This is not a temporary administrative exercise it is a structural shift that makes official registers more reliable, more transparent, and more resistant to misuse. For the vast majority of directors operating legitimate businesses, verification is a straightforward one-time process once you have the right documents ready. The complexity arises when directors delay, when registry details are inaccurate, or when non-resident directors are unsure which route applies to them.

The message is simple: act early, prepare carefully, and do not wait until your next filing deadline to begin.

Frequently Asked Questions

Do I need to verify my identity again for each company I direct?
No. You only verify your identity once. The same personal code is used across all companies. However, you must provide that personal code separately for each company at each relevant filing point.

Can I delegate verification to someone else?
You generally cannot complete direct online verification on someone else’s behalf. However, an authorised corporate service provider can verify your identity on your behalf as part of their formal service.

What if my personal details on the registry do not match my passport?
You cannot link your verified identity until the details match. Correct any mismatches on the register first, then proceed with verification.

I am both a director and a PSC. Do I verify twice?
No, you verify your identity once. But you may need to provide your personal code separately for each role within the respective time windows.

Does verification give the registry access to my biometric data?
Government digital identity platforms are governed by strict privacy rules. Identity information is used for verification purposes and handled according to applicable data protection laws.

What if I cannot complete verification by my deadline?
Contact the registry or seek professional advice before the deadline passes. Extensions may be possible in exceptional cases, but proactive action is strongly recommended.

The post Company Registry Identity Verification: What Every Director Must Know in 2026 appeared first on Open a European Company.