Fake “Companies House” Messages Are Everywhere — Don’t Click, Don’t Pay

| 26th September 2025

If it asks for money, passwords or your authentication code, it’s a scam — here’s what to do.

Scam emails, calls and letters pretending to be from Companies House are on the rise. They look convincing — logos, reference numbers, “urgent” language — but there are some easy tells and simple steps to keep your business safe.

Top red flags (real examples doing the rounds):

  • Phone calls asking for: passwords, bank details, your authentication code, directors’ full dates of birth, or £5 to “put a hold on a late filing penalty.”
  • Callers claiming to be from the “registration department” (it doesn’t exist) or from Companies House in Cardiff demanding immediate payment.
  • Emails asking you to click links/attachments to: “verify identity (KYC/KYB)”, “avoid legal action”, “view an online filing rejection”, “download via e-Sign”, or “WebFiling account issues” (often from odd domains).
  • Fake sender domains (not .gov.uk), e.g. @companies-house-gov.uk, @cpgov.uk, @companieshousel.ink, etc.
  • Letters with QR codes or payment instructions for things like “Company Registration”, “Enhanced Web Filing Access”, “COHOREG” or requests from supposed prosecuting solicitors.

How to handle a suspicious contact (the quick script):

  1. Stop. Don’t share info, don’t click links, don’t open attachments, don’t scan QR codes.
  2. Check. Real emails come from .gov.uk. Hover links before clicking; if the URL looks off, bin it.
  3. Verify. Ask for a callback number, then contact Companies House directly on 0303 1234 500.
  4. Report. Forward dodgy emails to phishing@companieshouse.gov.uk and then delete them (including from “Deleted Items”).
  5. Never pay fees from letters/emails unless you’ve independently confirmed on the official site.

Bookmark the official guidance (with live examples):

Reporting scams pretending to be from Companies House

Good hygiene going forward:

  • Companies House will never ask for your authentication code or immediate payment by phone.
  • Treat unexpected “complaints”, “identity checks” or “account problems” as suspicious until proven otherwise.
  • Keep registered email inboxes monitored so genuine reminders don’t get missed among the noise.

Back to You are not Immortal – a practical guide to a delicate topic – IHT