4 Ways to Protect Your Limited Company from Fraud

Company fraud is a genuinely real threat, and it usually works by exploiting exactly the parts of your company record most people never think to check: your registered address, your filing settings, and who's allowed to make changes on your behalf. A handful of straightforward steps closes most of that exposure.

Key Takeaways

• Joining PROOF (PROtected Online Filing) stops paper filings being accepted for your company, closing off one of the easiest routes for fraudulent changes.
• Using a private, non-home address for your registered office and director's service address keeps that information off the public register.
• Your WebFiling authentication code works like a password for your company, guard it the same way, and know how to replace it if it's compromised.
• Tracking services that alert you to any change on your company record let you catch fraudulent activity quickly, rather than discovering it after the fact.
• If you do suspect fraud, contact Companies House immediately, since acting fast genuinely limits the damage.

1. Join PROOF

Signing up for Companies House's PROOF (PROtected Online Filing) scheme tells the registrar you don't want paper forms accepted for your company. Without it, it's relatively straightforward for someone to make unauthorised changes using a paper filing, including updating your registered office, appointing or resigning company officers, or filing a Confirmation Statement on your behalf.

Joining PROOF closes this off, since it means changes can only be made online, through your company's authenticated WebFiling access. You can sign up for PROOF for free directly through GOV.UK.

2. Don't Use Your Home Address as Your Registered Office or Service Address

Both your company's registered office and your director's service address sit on the public Companies House register, visible to anyone who looks. Using your home address for either one exposes you to unwanted visitors and a fair amount of junk mail, some of which can itself be fraudulent, phishing attempts specifically targeting newly registered companies are a known pattern.

A registered office address service lets you use a compliant business address instead, keeping your home off the public register while official government mail is still filtered and forwarded on to you.

3. Look After Your WebFiling Authentication Code, and Know What's Changed

Your WebFiling authentication code is a six-character code that acts as your company's password. Without it, no one can make online changes to your company, so treat it the way you'd treat any other password, shared only with people you genuinely trust, and never in response to an unsolicited request claiming to be from Companies House.

Since 13 October 2025, using or requesting this code also requires signing in through GOV.UK One Login, an added layer that didn't exist previously. Since 18 November 2025, directors and PSCs also need to complete separate identity verification with Companies House, a distinct requirement from the authentication code itself. If you believe your code has been compromised, contact Companies House directly and request a replacement. Our full guide to your WebFiling authentication code covers the current process in detail, including what's changed since these updates.

4. Track Changes to Your Company Record

A tracking or monitoring service alerts you by email whenever a change is made to your company's record, letting you spot and respond to a fraudulent change quickly rather than discovering it weeks later. This is genuinely one of the simplest safeguards available, since it costs you nothing beyond setting it up once. At Companies MadeSimple, we offer a fraud protection service. You can get instant email notifications if there are any unauthorised changes or unusual activity related to your business at Companies House, including directorship or address updates.

What Do I Do if I Think My Company's Already Been a Victim of Fraud?

Contact Companies House immediately. Acting quickly gives you a real chance of limiting the damage, whether that's a fraudulent change to your registered office, an unauthorised officer appointment, or something else entirely.

FAQs

What is the PROOF scheme, and why does it help prevent fraud?

It's a free Companies House scheme that stops paper filings being accepted for your company, so changes can only be made online through your authenticated account, closing off a common route for fraudulent paper-based changes.

Why shouldn't I use my home address as my registered office?

Because it's shown on the public Companies House register, exposing your home address to anyone who looks it up, along with the unwanted mail and occasional fraud attempts that can follow.

What is a WebFiling authentication code, and how do I protect it?

It's a six-character code acting as your company's password for online filings. Treat it like any other password, and never share it in response to an unsolicited request.

Do I need anything else besides my authentication code to make changes now?

Yes. Since October 2025, WebFiling requires GOV.UK One Login, and since November 2025, directors and PSCs also need separate identity verification, both in addition to the authentication code itself.

What should I do if I think my company has already been targeted by fraud?

Contact Companies House immediately. The sooner you act, the more likely you are to limit any damage from an unauthorised change.

This article is for general information only and does not constitute legal advice. Companies House processes and requirements can change, so it's worth checking current guidance on GOV.UK or Companies House before relying on the details above.