The Appropriate Address Rule at Two Years: How ECCTA Quietly Disarmed the PO Box Registered Office

On 4 March 2024 the Economic Crime and Corporate Transparency Act 2023 ended a quiet flexibility that had sat inside UK company law for the best part of a century: the freedom to use a PO Box, an unattended accommodation address, or any other postal device of convenience as the registered office of a limited company. Two years on, the so-called appropriate address rule is the most operationally visible reform in the ECCTA package — more so than identity verification, which is still phasing in, and more so than the lawful-purpose statement, which most filers tick without reading.

The reform was procedural rather than punitive. There were no new fines, no new criminal offences attached to non-compliance and, despite the rhetoric, very little fresh law. What Parliament did was substitute a single test — would a document delivered here actually reach someone connected to the company? — for the pre-existing rule that the address simply had to be in the country of incorporation. That sounds modest. In practice, it has been the most consequential single change to the Companies House register in the post-2006 era.

The pre-2024 position

Section 86 of the Companies Act 2006, as originally enacted, required a company's registered office to be at an address in the part of the United Kingdom in which the company is registered. It did not require that address to be capable of receiving anything. A locked door above a closed solicitor's office in Cardiff was as valid a registered office as a fifty-seater open-plan unit on the Holborn Viaduct, provided both sat in England and Wales. The registrar had no statutory power to query the address itself; she could only act if the company failed to deliver the documents that the address was supposed to receive.

The consequences had been visible for years. Pre-pack accommodation addresses in central London advertised themselves to non-resident incorporators at £29 per year. PO Boxes were freely used. A long-running campaign by trade body the Association of Mail and Parcel Centres against companies that used un-staffed mailbox shops as full registered offices ran for most of the 2010s, with limited statutory traction. The 2019 BEIS consultation on corporate transparency identified roughly 400,000 companies registered at fewer than fifty London addresses, the bulk of them mail-handling sites.

What ECCTA actually inserted

Section 28 of the 2023 Act amended Section 86 of the 2006 Act and inserted Section 86A. The text matters, because it sets a two-limb test that has driven most of the enforcement activity since.

A registered office address is appropriate only if both:

1. The delivery limb — any documents addressed to the company, and delivered there, would be expected to come to the attention of a person acting on behalf of the company; and
2. The acknowledgement limb — any documents delivered there can be recorded by an acknowledgement of delivery.

Both limbs must be satisfied. A serviced office that operates a signed-in reception meets both. A virtual office that scans incoming post on receipt and forwards it to a director's email also meets both, provided someone is signing for what arrives. A PO Box at a Royal Mail sorting office, where collection is by the box-holder and there is no third-party acknowledgement, meets neither.

The sponsor's notes were explicit on the policy aim. Department for Business and Trade officials told the Public Bill Committee in May 2023 that the intention is to remove from the register any address at which documents would not be expected to come to the attention of the company — language now lifted almost verbatim into the test.

The before-and-after

Two years of default-address volumes

The registrar's principal new power is the ability to substitute a non-compliant registered office with a default address — in practice, the Companies House office in Cardiff, Edinburgh or Belfast as relevant — pending the company supplying an appropriate one.

Companies House reported 9,124 default-address changes between 4 March 2024 and 31 March 2025, of which 6,890 had been resolved (i.e. the company had supplied a compliant address) by year-end. In the following reporting year, ending March 2026, the total rose to 11,438. The cumulative figure now sits a little above 20,500 — a tiny fraction of the 5.4 million companies on the register, but a striking number when set against the volume of administrative action the registrar took in any single year before 2024.

Three patterns emerge from the published data:

• Concentration risk has narrowed. Of the 2024-25 cohort of default-address changes, 71 per cent were companies registered at one of forty-three central-London or Manchester mail-handling addresses subsequently identified by the registrar as unable to meet the acknowledgement limb. The forty-three sites between them held roughly 280,000 registered offices in March 2024; by March 2026, that aggregate had fallen by an estimated 38 per cent as the operators either upgraded their service or shed the affected companies.
• Resolution rates are good but not uniform. Across both years, 78 per cent of default-address impositions were resolved within the statutory 28-day window. The remaining 22 per cent either moved to strike-off action (under Section 1000 of the 2006 Act, where the registrar has reasonable cause to believe the company is not carrying on business) or escalated to enforcement under the Money Laundering Regulations where an authorised corporate service provider had supplied the address.
• The reform is concentrated in older companies. Companies incorporated before 2020 account for 64 per cent of default-address actions, despite making up only 41 per cent of the live register. The implication: most of the non-compliance was legacy stock — addresses chosen in an era when there was no test to fail — rather than recent incorporations.

Five scenarios that have actually been tested

From the registrar's published enforcement decisions and the small body of First-tier Tribunal appeals heard between September 2024 and March 2026:

1. The unstaffed mailbox. Registered office given as a numbered mail-box in a high-street parcel shop with no signing-in. Not appropriate. Registrar imposed default address; company moved to a serviced office within 14 days.
2. The agent's address with no client-specific mail handling. A formation agent supplied the same suite address to roughly 14,000 client companies, sorted post by company name only, and did not record receipt. Not appropriate. The agent now operates a per-client mailbox system with acknowledgement scans.
3. The director's residential address. Director moved house and forgot to update the AD01. Mail returned undelivered. Appropriate in principle, but failed in practice — the address itself was capable of receiving, but the documents did not, in fact, reach the company. Default address imposed; company restored on appeal after AD01 filing.
4. The mothballed industrial unit. Trading from elsewhere; the registered office had been the original works since 1987 but had been unstaffed for three years. Not appropriate. Default address imposed.
5. The accountant's bookkeeping suite. Five-partner accountancy firm receiving and acknowledging all client company mail. Appropriate. No registrar action.

The enforcement cascade

The default-address change is rarely the end of the story. The registrar's published procedure sets out a four-stage cascade:

• Stage 1. Registrar identifies a non-compliant address — typically following a return of post, a Royal Mail gone away report, or a referral from another regulator.
• Stage 2. Registered office is changed to the relevant Companies House default address; the company is notified at every other address on the register (director service address, PSC correspondence address, ACSP address if any).
• Stage 3. Twenty-eight days to provide a compliant new address, supported in some cases by evidence that the limbs of the test are met (a copy of a signed-receipt protocol, for example).
• Stage 4. Failure to comply triggers either a strike-off proposal under Section 1000 or, where the registered office was supplied by an authorised corporate service provider, an MLR-supervisor referral. ACSP supervision intersects directly with the appropriate-address regime; the registrar can and now does pass details of repeat ACSP failures to the supervising body for review under regulation 60 of the Money Laundering Regulations 2017.

This is the operational reform that most people who follow Companies House data have noticed. Strike-off volumes for the registrar's own action (as opposed to voluntary DS01 strike-offs) rose 18 per cent in 2024-25 against the prior twelve-month average, with default-address non-compliance the single largest contributor.

What the rule did not do

The appropriate-address regime addresses the question of whether a document can reach someone connected to the company. It does not address whether the company has any presence at the address beyond mail handling. A virtual office that ticks both limbs of the statutory test is fully compliant — even if the company in question has no operational footprint, no staff, and no business activity at that address whatsoever. The registrar has been clear, including in her March 2026 statement to the Business and Trade Select Committee, that the rule is a service-of-process reform, not a real-economic-presence test. Substance testing — if it comes — would require fresh primary legislation.

Nor does it touch one of the more visible pre-2024 abuses: the mass use of a single residential address by a director with several hundred dormant companies. Those addresses, where they meet the delivery and acknowledgement limbs, remain entirely lawful.

What changes from autumn 2026

The Department for Business and Trade's secondary-legislation roadmap published in February 2026 confirmed that the appropriate-email-address requirement, which has run alongside the appropriate-address rule since the 2024 commencement, will be extended in October 2026 to require evidence of email deliverability on confirmation statement filings. That is a meaningful tightening: it converts the email requirement from a register an address obligation into a demonstrate it works obligation. There is no parallel reform planned for the physical address, but the registrar's annual report flags both limbs as candidates for codified procedural guidance once 2025-26 enforcement data is finalised.

The headline, two years in, is that ECCTA's quietest provision has done the noisiest work. The appropriate-address rule has done more to clean up the practical usability of the registered-office field than any single reform since the introduction of electronic filing.