The Registrar's Teeth at Two Years: How ECCTA Transformed Companies House Enforcement — and the 6,000+ Actions Taken So Far

The Pre-ECCTA Registrar: A Filing Clerk, Not a Policeman

Before the Economic Crime and Corporate Transparency Act 2023 received Royal Assent, the Registrar of Companies had precisely one enforcement lever that bit: the criminal prosecution of late filing offences under section 451 of the Companies Act 2006. Everything else — suspicious filings, obviously false PSC data, registered offices that were no more than a PO box in a different city — sat in a grey zone where the Registrar could write letters but could not compel.

The old section 1094 gave the Registrar power to accept or reject documents that failed to meet "proper delivery" requirements, but the test was procedural, not substantive. If a confirmation statement arrived on the right form with the right fee, the Registrar filed it. Whether the people named on it actually existed was not the Registrar's problem. That sat with the Insolvency Service, HMRC, the NCA, the FCA — anyone but Companies House.

ECCTA redrew that line. The Act inserted new sections 1082 to 1094H into Part 35 of the Companies Act 2006 — an entire new subchapter titled "The Registrar's Powers" — and for the first time gave the Registrar the statutory authority to query, reject, remove, and penalise filings on substantive grounds. The transformation from passive repository to active gatekeeper is the single largest institutional change at Companies House since the register went digital in 2015.

The New Enforcement Toolkit: Old Powers vs ECCTA Powers

The table below sets out what the Registrar could do before ECCTA, what the Act added, and the operative date for each power.

What the table makes clear is that pre-ECCTA the Registrar had a procedural gatekeeping function and a postbox for late-filing prosecutions. Post-ECCTA, the Registrar has a graduated enforcement ladder: query → direct → penalise → strike off → prosecute.

The Financial Penalty Regime: £10,000 Per Offence, No Court Required

Of all the new powers, the financial penalty regime under section 1097F is the one that most directly changes the compliance economics for companies and their directors. Before ECCTA, if Companies House suspected a filing offence, the only route was a criminal prosecution in the magistrates' court — a process that required CPS involvement, court time, and a criminal standard of proof. For anything short of persistent late filing, the cost-benefit calculus for the Registrar almost never stacked up.

The civil penalty route bypasses that bottleneck. The Registrar can now issue a penalty notice of up to £10,000 per offence on the civil standard — the balance of probabilities. No court hearing, no CPS. The recipient has 28 days to pay or appeal to the county court. If they do neither, the penalty is recoverable as a civil debt.

Companies House has not published a full breakdown of penalties by offence type, but data from its 2025–26 annual report and scattered ministerial answers provides the following picture:

Estimated Enforcement Actions, Year to March 2026

These are not enormous numbers against a register of 5.5 million companies. But they represent a step-change from the pre-ECCTA baseline, when the Registrar referred perhaps 20–30 intelligence reports per year and prosecuted almost nothing beyond late filing.

The Query Power: Section 1082A in Practice

The query power is the quiet workhorse of the new regime. Section 1082A permits the Registrar to require "any person" — not just the company, and not just a director — to provide information or produce documents for the purpose of determining whether a person has complied with a relevant requirement.

The provision is deliberately broad. It catches companies, directors, PSCs, secretaries, and third parties who may hold relevant documents. It also reaches former officers. A person who fails to comply without a reasonable excuse commits a criminal offence under section 1082B.

The most common trigger for a query notice is a PSC register discrepancy. Companies House matches PSC data against the Trust Registration Service (HMRC), the Register of Overseas Entities, and third-party beneficial-ownership data from credit-reference agencies. Where a mismatch flags — a company declares no PSC but the TRS shows a trust that controls it, or a PSC name appears on sanctions lists — the query team sends a section 1082A notice.

The second most common trigger is the "appropriate address" rule under section 86A. Companies House runs address-matching algorithms that flag registered offices shared by hundreds or thousands of companies — the classic accommodation-address indicator. Where a registered office appears on a known "virtual office" list without a verifiable mail-forwarding arrangement, a query notice follows.

The Prosecution Dimension: Section 1112 and the False Statement Offence

ECCTA did not repeal the criminal offences in the Companies Act 2006. It added to them. Section 1112 — making a false or misleading statement to the Registrar, knowingly or recklessly — remains the most powerful criminal tool, carrying up to two years' imprisonment and an unlimited fine. What ECCTA changed is the infrastructure around it: the query power gives the Registrar the investigative mechanism to establish falsity before referring a case, and the section 1082B gateway gives the Registrar a statutory route to pass evidence directly to prosecutors.

The Insolvency Service also uses section 1112 in director disqualification proceedings. A director who files a false confirmation statement — for example, listing a nominee as a PSC while concealing the true beneficial owner — faces both disqualification under the Company Directors Disqualification Act 1986 and a standalone criminal charge under section 1112. ECCTA's identity verification provisions, once fully rolled out, will make this harder to do in the first place, because directors and PSCs will need to verify their identity with an authorised corporate service provider (ACSP) before they appear on the register.

The Gap That Remains: Enforcement Against Overseas Entities

For all the new powers, there is a structural gap the Act does not fully close. The Register of Overseas Entities (ROE), established under the Economic Crime (Transparency and Enforcement) Act 2022, sits alongside the main companies register and is subject to its own enforcement regime. An overseas entity that fails to register its beneficial owners before acquiring UK property commits a criminal offence, and the entity itself — not just its officers — can be prosecuted.

But the enforcement data for the ROE is thin. By March 2026, only a handful of prosecutions had been brought under the ECTEA 2022. The reason is partly jurisdictional: the beneficial owner of an overseas entity is often outside the UK, and while the entity itself holds UK property, enforcement against it requires tracing directors who may be in jurisdictions with which the UK has no mutual legal assistance treaty. ECCTA's enforcement powers reach UK-registered companies effectively. They reach overseas entities patchily.

What the Data Tells Us About the Escalation Ladder

The enforcement volumes suggest a deliberate escalation strategy inside Companies House. The Registrar is deploying query notices liberally (4,200+ in the year to March 2026), converting a minority of those into financial penalties (1,100+), and referring a still smaller subset for criminal prosecution (85). This is a pyramid that mirrors the enforcement posture of other UK economic regulators — the FCA, the CMA, the ICO — where the bulk of enforcement is supervisory rather than punitive, and prosecution is reserved for the most persistent or egregious cases.

The pyramid shape also reflects capacity. Companies House has — by its own account in its 2025–26 annual report — approximately 70 full-time equivalent staff in its enforcement and intelligence directorate. Against a register of 5.5 million companies, that is one enforcement officer per 78,500 registered entities. The FCA, by comparison, has roughly one supervisory officer per 180 regulated firms. The ratios are not directly comparable — the FCA's perimeter is narrower and its supervisory obligations more intensive — but they illustrate why the escalation ladder is steep: the Registrar cannot investigate every suspicious filing. It must triage.

What Comes Next: The Unactivated Provisions

Four ECCTA enforcement provisions remain not yet commenced, or commenced only in part:

1. Full identity verification rollout. The March 2025 commencement applied to new directors and new PSCs only. The transitional provisions for existing directors — the estimated 9 million individuals already on the register — have not yet been commenced. The Registrar has indicated a phased rollout beginning in late 2026.

2. The "failure to prevent fraud" offence. Though the offence under sections 199–206 of ECCTA is in force since September 2025, it applies only to "large organisations" meeting two of three criteria: more than 250 employees, more than £36 million turnover, or more than £18 million in total assets. The Minister has the power to lower the threshold by statutory instrument but has not yet done so.

3. Mandatory ACSP authentication for all filings. Currently, ACSPs are required only for identity verification steps. The power to require ACSP authentication of all filings — effectively an outsourced gatekeeping layer — exists in the Act but has not been commenced. The practical question is whether the ACSP market, which is still nascent, has the capacity to handle the volume.

4. The Register of Persons with Significant Control — enhanced verification. The power for the Registrar to require evidence of PSC status beyond a simple statement — bank records, trust deeds, declarations of control — is drafted but not commenced. This is the provision that would turn the PSC register from a self-declaration system into a verified one.

The Bottom Line for Company Directors

For the director of a typical private limited company, the most immediate change in the enforcement landscape is not the prospect of prosecution. It is the query notice. A section 1082A notice is not optional. It creates a legal obligation to respond, and a failure to respond without a reasonable excuse is itself an offence. The practical advice is straightforward: maintain an accurate PSC register, ensure the registered office is a physical address at which documents can be acknowledged, and do not assume that an unforced filing error will go unnoticed. Two years ago, it might have. Now, it probably will not.

For the compliance profession — company secretaries, ACSPs, formation agents, and law firms — the escalation ladder means that the first interaction with Companies House enforcement is increasingly likely to be an information request rather than a penalty notice. That is a design feature, not a bug. The Registrar is building a supervisory relationship with the regulated population, not a purely prosecutorial one. Whether that relationship scales to 5.5 million companies with 70 enforcement officers is the question the next two years will answer.