Simple director ID verification for ECCTA in five secure steps
Mark Roberts
Identity & Fraud Expert
With the Economic Crime and Corporate Transparency Act (ECCTA) set to come into force in 2025, the UK is entering a new era of corporate transparency. This landmark regulation is designed to tackle financial crime by introducing mandatory identity verification for company directors and persons with significant control (PSCs).
If you’re in the accountancy, legal or investment business and submit filings to Companies House on behalf of your clients, this will mean new identity verification responsibilities for you and new risks if you fail to comply.
What’s changing with ECCTA?
Once ECCTA comes into force in autumn 2025, accountants, legal advisers, company formation agents or any professional intermediary who makes filings to Companies House on behalf of a business client will be required to verify the identity of directors and PSCs connected to that business before submitting filings.
This is a significant shift, adding a new layer of complexity to client onboarding and compliance for all those professional services collectively referred to in ECCTA as Authorised Corporate Service Providers (ACSPs). Many services still rely on legacy Anti-Money Laundering (AML) process and systems that were not designed to meet the stringent identity verification standards that will now be required by law.
ECCTA ID verification in five secure steps
If your business provides accountancy, legal or investment services, and submits filings on behalf of clients to Companies House, we’re here to help you comply with these new requirements. Our UK government-certified mobile app delivers simple director and PSC ID verification in five secure steps, completing ECCTA-compliant checks in minutes.
UK Government-certified IDV technology
Our identity verification technology is certified against the UK Government’s Digital Attributes and Trust Framework (UK DIATF). The Trust Framework sets out the UK government’s rules governing the use of digital identities and ensures that certified identity verification (IDV) technology providers meet accreditation standards.
1. Personal details
In the first step, we capture your client’s personal details, dynamically requesting additional name and address information when needed:
- full name and any former names
- date of birth
- home address
- address history for the last 12 months
- email address
This identity data is matched against a combination of trusted government sources, such as the electoral roll and HALO deceased persons data, as well as government, credit and commercial identity data sources in up to 50 countries around the world. By cross-checking against these trusted data sources, we confirm that the identity is real and detect and reject synthetic identities.
2. Scan ID
Next, with simple, step-by-step instructions and real-time feedback, our UK government-certified mobile app scans your client’s ID. Just one of the passports or identity documents listed below will ensure ECCTA-compliant identity verification:
- biometric or machine-readable passport or an Irish passport card
- UK, Channel Islands, Isle of Man and EU photocard driving licence
- biometric ID card from the EU, Norway, Iceland or Liechtenstein
- UK biometric residence permit
- UK biometric residence card
- UK Frontier Worker permit
This scan can be completed, either by using your client’s smartphone to read the cryptographically protected data in an RFID document chip, or by using their smartphone camera to take a high-quality digital scan of their identity document.
Our UK government-certified mobile app delivers simple director and PSC ID verification in five secure steps, completing ECCTA-compliant checks in minutes.
3. ID authentication
Following a successful scan, we complete up to 50+ forensic authentication tests on your client’s ID, comparing it to a continuously updated library of 8,500+ government-issued IDs spanning 195 countries and validating security features in seconds.
Enhanced tamper detection checks deliver 98% effective protection from fraudulent document modifications after issuance, including photo substitution and font manipulation as well as checking for physical document presence to guard against a screen presentation attack. For RFID chipped identity documents, our IDV technology digitally authenticates ID data with the passport or ID issuer, to deliver the highest level of identity assurance.
4. Biometric verification
Once your client’s passport or ID card has been authenticated, biometric verification securely matches your client to their ID. Simple, on-screen instructions guide your client to capture a selfie, our face-matching algorithms then zoom in on 68 biometric facial landmarks to securely verify their unique claim to that identity.
The process is secured by passive liveness testing to confirm the genuine presence of your client at the time their identity document is presented. With no blinking or smiling required, this essential security measure checks for signs of spoofing or impersonation that indicate a presentation attack and identity fraud.
5. Submit and store
Once your client completes ECCTA-compliant identity verification on our UK government-certified mobile app, their verified identity information is submitted to Companies House. Your client’s verified identity data is then securely stored for seven years to ensure your business meets ECCTA recordkeeping requirements.
If you’re in the accountancy, legal or investment business and submit filings to Companies House on behalf of your clients, there's no reason to be concerned about new responsibilities coming your way with the Economic Crime and Corporate Transparency Act. We’re ready to help your business comply with the new law on identity verification, speak to an expert today.
Questions about ECCTA
What is ECCTA?
The Economic Crime and Corporate Transparency Act (ECCTA) is a major piece of UK legislation aimed at improving corporate transparency and combating economic crime. Enacted in October 2023, the Act introduces new rules for companies, particularly around verifying the identity of directors and persons with significant control (PSCs). Read more about ECCTA.
What is the Economic Crime and Corporate Transparency Act?
The Economic Crime and Corporate Transparency Act (ECCTA) is a major piece of UK legislation that will take effect in 2025. Directors and persons with significant control (PSCs) of company operations will be required to verify their identity, either personally or with the support of an Authorised Corporate Service Provider (ACSP), before submitting filings to Companies House. Read more about ECCTA.
Which sectors are affected by the Economic Crime and Corporate Transparency Bill?
From the autumn of 2025, The Economic Crime and Corporate Transparency Act (ECCTA) has a broad impact across multiple industries in the UK. The primary sectors affected include accountancy, legal, and investment practices, especially those that provide corporate services or submit filings on behalf of clients to Companies House – referred to in the legislation as Authorised Corporate Service Providers (ACSPs).
Who are People with Significant Control (PSCs)?
People with significant control (PSCs) are individuals who own or control a company, typically through holding a significant percentage of shares or voting rights, or by having the power to appoint or remove directors. They are also sometimes referred to as ‘beneficial owners.’ ECCTA requires directors and persons with significant control (PSCs) verify their identity. Read more about PSCs.
What is an Authorised Corporate Service Provider (ACSP)?
An Authorised Corporate Service Provider (ACSP) is an intermediary or agent who makes filings to Companies House on behalf of a client. These are often accountants, legal advisers or company formation agents. ECCTA allows for authorised ACSPs to undertake identity verification checks of their clients, ensuring that these checks meet the standard required by the Act.
