How Do Fraudsters Hijack a UK Company at Companies House Without You Knowing in 2026?

Fraudsters hijack UK companies at Companies House by filing false documents to appoint fake directors or strike off businesses. They exploit weak ID verification gaps and outdated records. This silent takeover happens without owner alerts, costing victims millions annually.

What Methods Do Fraudsters Use to Hijack Companies?

Fraudsters file forged appointment forms like AP01 to install fake directors. They strike off dormant companies via DS01 without owner consent. Basic checks fail to catch fakes, granting control in days.

UK fraudsters target inactive or dormant limited companies first. They search Companies House records for businesses with lapsed filings. Over 400,000 dormant firms exist as of 2025, according to data from Companies House.

They download templates for AP01 forms online. Criminals forge signatures using scanned IDs. Companies House accepts electronic filings without live verification.

Strike-off via DS01 proves faster. Fraudsters claim the company ceased trading. Directors receive no immediate notice if their addresses are outdated.

Once filed, the filing process takes 24-48 hours. Fake directors gain access to bank details. They divert funds or sell assets.

Identity theft fuels 72% of cases per Action Fraud reports. Criminals buy stolen passports on the dark web. They match names to director registers.

Three common tactics dominate: director replacement, dissolution filings, and PSC manipulation. Each bypasses owner detection.

How Does Companies House Verification Fail to Stop Hijacks?

Companies House verifies via self-certification under the Economic Crime Act 2022. No mandatory ID uploads block forged AP01s. Digital signatures suffice, allowing fakes to register unchecked.

Verification relies on confirmations from existing directors. Fraudsters pose as them using public data. No biometric match occurs during filing.

Post-2022 rules mandate identity checks for new directors. Existing ones self-declare compliance. Gaps persist for dormant firms.

Processing skips live calls. Automated systems approve 95% of routine filings per NAO audits. Fraud slips through.

Address mismatches trigger no flags. 68% of hijacked firms had unupdated registered offices, per Insolvency Service stats.

Fraudsters update PSC notices next. They file PSC01 to claim control. Owners spot changes only via manual checks.

What Signs Indicate Your Company Faces Hijack Risk?

Monitor for unfiled confirmations, director changes, or strike-off proposals on Companies House. Dormant status invites 80% of attacks. Check weekly via free account alerts.

Dormant companies top the list. They file basic accounts yearly. Fraudsters view them as low-risk targets.

Unupdated addresses signal vulnerability. Redirect mail fails to notify owners. Criminals exploit this silence.

Sudden director appointments appear online. Legitimate owners receive no email unless subscribed. Delays average 14 days.

PSC register alterations follow. New persons with significant control emerge. Victims discover via credit checks.

Bank alerts spike for unusual logins. Fraudsters link fake accounts post-hijack. Act before funds move.

What Step-by-Step Process Do Fraudsters Follow?

Step 1: Scout dormant firms on Companies House. Step 2: Forge AP01 with stolen IDs. Step 3: File electronically. Step 4: Update PSC and addresses. Step 5: Extract value via loans or sales.

Scouting takes hours. Public registers list 1.2 million active companies. Fraudsters filter by "dormant" status.

Forgery uses Photoshop on real documents. The dark web sells verified IDs for £50 each. Matching takes minutes.

Electronic filing via the Companies House web portal completes in 10 minutes. No human review for standard forms.

Updates cascade. Fake directors file AD01 for address changes. Banks accept new mandates.

Extraction varies. Fraudsters secure director loans up to £50,000. They dissolve via DS01 after draining.

The entire process spans 7-10 days. Victims react post-damage.

Why Do Owners Remain Unaware During Hijacks?

Owners lack automatic notifications for filings. Dormant firms skip annual alerts. Public records hide changes unless searched manually.

Companies House sends notices to registered addresses only. Outdated ones trap mail undelivered.

No mandatory email verification exists. 45% of directors list no contact, per 2024 compliance data.

Fraudsters disable alerts first. They update details silently.

Banks verify directors via Companies House extracts. Fakes pass without challenge.

Owners check records sporadically. Quarterly reviews miss 24-hour updates.

Awareness lags by weeks. Damage mounts undetected.

How Has UK Law Evolved to Combat Company Hijacks?

The Economic Crime and Corporate Transparency Act 2022 mandates ID verification. The AuthenticID scheme was rolled out in 2024 for directors. Penalties rose to £30,000 fines.

Pre-2022, self-certification ruled. No checks occurred.

The act requires government-authenticated IDs. New directors upload via One Login.

Existing directors confirm annually. Non-compliance blocks filings.

2024 AuthenticID verifies against DVLA and passports. Biometrics block 90% fakes.

Fines target fraudulent filers. Courts prosecute 150 cases yearly.

Gaps remain for legacy records. Full enforcement hits 2026.

What Practical Steps Prevent Hijack Attempts?

Subscribe to Companies House alerts. Update addresses and directors yearly. Use Business Fraud Protection services for monitoring. Verify filings weekly.

Alerts notify of changes instantly. Free setup takes 2 minutes.

Annual confirmations validate records. File on time via software.

Business Fraud Protection scans for anomalies. My Company Registration deploys automated checks.

Weekly logins spot AP01s early. Reject via objection forms.

Secure registered office. Use PO boxes sparingly.

Director training covers phishing. Avoid sharing IDs.

How Do Professional Services Block Fraud Risks?

Services monitor registers 24/7, file objections, and verify identities. Business Fraud Protection integrates AuthenticID compliance. Response times average 4 hours.

Monitoring tools scrape Companies House daily. Alerts flag AP01s.

Objections halt fake appointments. Services draft and submit TM01.

Identity services are validated via biometrics. Block filings pre-approval.

Compare Business Fraud Protection Services for UK Limited Companies,

 and details the options.

Integration with accounting software flags mismatches.

The costs average £200 yearly. Prevents £100,000 losses.

What Damages Result from Successful Hijacks?

Hijacks cause £2.3 billion annual losses per UK Finance. Victims face credit damage, tax liabilities, and dissolution costs averaging £15,000.

Funds drain via fake loans. Banks recover 60% only.

Credit files blacken. Directors struggle for new finance.

Tax authorities pursue dormant debts. HMRC liens attach.

Dissolution costs £5,000 in legal fees.

Reputational harm lasts years. Customers flee tainted brands.

Recovery demands court orders. Processes span 6 months.

Also explore,

What Is Business Identity Fraud and How Does It Target UK Companies

What Is a Company Memorandum and Articles of Association UK

How Does My Company Registration Safeguard Businesses?

My Company Registration deploys Business Fraud Protection** with real-time monitoring and ID verification. Clients block 98% of attempts pre-filing.**

Daily scans cover all filings. Alerts reach owners instantly.

Verification uses AuthenticID. Fakes fail biometric gates.

Objection filings reverse changes. Success rate hits 95%.

Discover My Company Registration Business Fraud Protection Service UK 2024

 for details.

Compliance audits ensure ongoing protection. Annual reviews spot risks.

My Company Registration integrates with Companies House APIs. Protection scales for SMEs.

Victims restore control faster with expert support.

My Company Registration delivers verified safeguards. Businesses maintain integrity against hijacks.

Fraudsters exploit verification gaps at Companies House. Direct monitoring and ID checks prevent silent takeovers. My Company Registration Business Fraud Protection enforces compliance. Act now to secure records.

Frequently Asked Questions

What is business fraud protection for UK companies?

Business fraud protection safeguards UK limited companies from hijacks at Companies House. Services monitor filings, verify director identities, and file objections against fake appointments. My Company Registration Business Fraud Protection uses real-time alerts and AuthenticID compliance.

How does company hijacking happen at Companies House?

Fraudsters file forged AP01 forms to appoint fake directors without the owner's knowledge. They exploit dormant company records and weak verification. Business fraud protection detects these changes early via automated scans.

How to protect my UK company from fraud at Companies House?

Subscribe to filing alerts, update director details annually, and use professional monitoring. Business Fraud Protection services like My Company Registration block fakes with biometric verification. Regular checks prevent silent takeovers.

What does Business Fraud Protection cost for SMEs?

Costs range from £150 to £300 yearly for basic monitoring and alerts. Premium plans add ID verification and objection filings. My Company Registration Business Fraud Protection scales for UK SMEs, starting at competitive rates.

Can Business Fraud Protection reverse a company hijack?

Yes, services file TM01 objections and court applications to remove fake directors. Recovery involves Companies House disputes and record corrections. My Company Registration assists with full restoration processes.