In a Nutshell…
New UK anti-fraud laws (ECCTA) mean that from Spring 2026, anyone filing documents with Companies House must verify their identity. Furthermore, third-party agents can only file on your behalf if they are a registered Authorised Corporate Service Provider (ACSP). If your virtual office provider isn’t an ACSP, your official business filings could be blocked, risking major penalties. Use our 5-question checklist to ensure your provider keeps your SME fully compliant and legally protected when it comes to ACSP identity verification.
For small and medium-sized enterprises (SMEs), using a virtual office isn’t just about securing a prestigious business address. It is a strategic move to manage mail, access professional meeting rooms, protect personal privacy, and keep overheads low.
However, the UK regulatory landscape for businesses has fundamentally changed. Under the Economic Crime and Corporate Transparency Act (ECCTA), Companies House has introduced strict new rules to combat corporate fraud. The biggest shift for business owners is the introduction of the Authorised Corporate Service Provider (ACSP) framework and ACSP identity verification.
From Spring 2026, anyone filing documents at Companies House – including directors, people with significant control (PSCs), and third-party agents – must have their identity verified. Furthermore, third-party agents can only file on your behalf if they are a registered ACSP.
This means your choice of virtual office provider is no longer just about location and pricing; it’s about legal compliance. If your provider isn’t up to speed, your company filings could be blocked, leading to severe penalties or even striking off.
Before you sign or renew a contract, run through this ACSP checklist and ask your virtual office provider these five critical questions.
1. Are you a registered Authorised Corporate Service Provider (ACSP)?
This is the most critical question. Under the new laws, a virtual office or mail forwarding provider cannot simply opt out of these regulations if they handle corporate filings, company formations, or act as your registered office address.
To become an ACSP, a provider must be:
- Registered directly with Companies House as an authorised agent.
- Supervised by a UK Anti-Money Laundering (AML) supervisory body, such as HMRC.
Why this matters to SMEs: If your provider isn’t an ACSP, they cannot legally submit official documents (like your annual Confirmation Statement) to Companies House for you. Working with an unverified provider leaves your compliance in limbo.
2. How do you handle ACSP identity verification for your clients?
The core of the new legislation is ensuring that every business entity is tied to real, verified individuals. Your provider should have a seamless, secure system in place for ACSP identity verification.
Ask them exactly what their onboarding and ongoing verification process looks like. A compliant provider must follow a strict government-mandated standard, which involves:
- Collecting full names, dates of birth, and residential histories.
- Checking valid, unexpired photographic identification (like a biometric passport or UK driving licence).
- Verifying that the person presenting the ID matches the photo (either in person or via secure remote technology).
| Compliance Standard | What a Good Provider Does | Red Flags to Avoid |
|---|---|---|
| ID Collection | Requests high-quality scans of biometric documents. | Accepts blurry, unverified photos via standard email. |
| Liveness Checks | Uses secure digital platforms or face-to-face checks. | Never checks if the person matches the passport photo. |
| Data Retention | Securely stores records for 7 years as required by law. | Has no clear policy on data security or retention periods. |
3. Will you be filing my documents, or do I retain full control?
Different virtual office providers have different service structures. Some want to take over your company secretarial filings completely, while others leave the control in your hands.
With the new ECCTA rules, individuals can easily file documents themselves as long as they complete their own identity verification via the GOV.UK One Login system. However, even if you do your own filings, your registered office address provider must still be a registered ACSP to legally provide you with an address.
At Grosvenor House, we believe you should always remain in full control of your company filings and sensitive corporate data. We do not file documents with Companies House or HMRC on your behalf. Instead, as a registered ACSP, we focus entirely on providing you with a fully compliant physical address and supporting you through the necessary ACSP identity verification steps so your self-filed documents are accepted instantly.
4. How do you protect and handle our verified data and identity codes?
To prevent corporate identity theft, Companies House issues personal verification codes once an identity check is complete. These codes are incredibly sensitive – they are essentially the master password to your company’s legal existence.
Because an ACSP will be processing your sensitive data, you need to know that your information is safe. Ask them:
- Where is our data stored? (Look for secure, encrypted, UK-based servers).
- Who has access to our verification records?
- Do you have a robust data protection policy that aligns with UK GDPR?
A reputable provider will treat your ACSP identity verification data with the highest level of confidentiality, utilising strict access controls to ensure your details never fall into the wrong hands.
5. What physical infrastructure do you have to support our growing business?
Compliance is mandatory, but your virtual office provider should also add real value to your day-to-day operations. Some providers are merely “digital letterboxes” with no physical footprint. Under the new regulations, a registered office must be a physical address where documents can be delivered and received, like our St Paul’s Square location – a pure P.O. Box is no longer permitted.
Beyond basic mail handling, you should ask what physical services they offer when you need to step out from behind the screen:
- Meeting Rooms: Do they have professional, fully equipped spaces where you can host clients, board meetings, or team catch-ups?
- Co-working Spaces: Can you pop in and work from a hot desk if you need a change of scenery or a professional environment?
- On-Site Staff: Is there a real receptionist handling your mail redirections and greeting your guests, or is it an unstaffed, automated drop-point?
Choosing a provider with a physical premium location gives your business instant credibility and ensures you are fully compliant with the requirement for a legitimate physical corporate presence.
Why Grosvenor House is the Right Choice for SMEs
Navigating the transition into the ACSP regulatory era doesn’t have to be a headache for your business. At Grosvenor House, based in the heart of Birmingham’s Jewellery Quarter, we blend total legal compliance with premium business services.
At Grosvenor House, we do not file documents with Companies House or HMRC on behalf of our clients. You remain in full control of your company filings. However, as a registered ACSP, we can provide your business with a fully compliant registered office address and support you with the required identity verification process so that your filings are accepted by Companies House.
We aren’t just an address; we are your dedicated corporate growth partner.
- Fully Prepared for ACSP: We stay ahead of UK corporate legislation. We ensure that our ACSP identity verification processes are fully compliant, highly secure, and straightforward for our clients.
- Prestigious Birmingham Address: Position your business in a prime city-centre location without the hefty price tag of a traditional commercial lease.
- Comprehensive Services: From robust mail forwarding and mail redirections to flexible co-working spaces and luxury meeting rooms, we provide the infrastructure your SME needs to thrive.
- In-House Expertise: Our professional team manages your front-of-house impression, handling your mail and clients with the utmost care and professionalism.
Don’t let changing regulations disrupt your business momentum. Partner with a virtual office provider that keeps you safe, compliant, and positioned for success.
What exactly is an ACSP, and do I legally need one?
An Authorised Corporate Service Provider (ACSP) is a business – such as a virtual office provider, accountant, or legal firm – that is registered with Companies House and supervised under UK Anti-Money Laundering (AML) regulations.
You do not legally need to hire an ACSP if you file all your company documents yourself using the government’s online system. However, if you want a third-party virtual office provider to handle your company formations, file your annual Confirmation Statements, or manage updates on your behalf, they must be a registered ACSP. Companies House will reject any third-party filings from unverified agents.
What happens during the ACSP identity verification process?
The ACSP identity verification process is a legal check to prove that you are exactly who you say you are, linking a real identity to a business entity. When you sign up with a compliant provider like Grosvenor House, you will be asked to provide:
Proof of identity: A valid, government-issued photo ID (such as a biometric passport or UK driving licence).
Proof of address: A recent utility bill or bank statement (usually dated within the last 3 months).
A liveness check: A quick digital scan or face-to-face check to match your physical face to your photo ID.
Once verified by your ACSP, this status is securely logged with Companies House, allowing hassle-free corporate filings.
Will my personal home address be visible on the public register after verification?
No. One of the main reasons SMEs use a virtual office or registered office address service is to protect their personal privacy. The new identity verification rules do not change this. Your residential address is used by your ACSP solely to confirm your identity and satisfy UK anti-money laundering laws. Your public-facing corporate address will remain our premium Birmingham location, keeping your private home address entirely off the public Companies House register.
What happens if my current virtual office provider is not an ACSP?
If your current provider is not registered as an ACSP and they attempt to file documents on your behalf, Companies House will automatically reject the submissions. This can lead to missed deadlines for your Confirmation Statements or accounts, resulting in hefty financial penalties, a damaged credit rating, or your business being struck off the register. If your provider cannot or will not become an ACSP, it is highly recommended that you migrate your registered address to a fully compliant provider immediately.