Companies House security issue: What it means for UK businesses

A recent Companies House security issue has raised important questions about the reliability of UK corporate data and the growing risk of fraud linked to public registries.

While not a traditional cyber attack, the vulnerability exposed weaknesses in how company information is accessed and managed, highlighting that even official sources can be open to manipulation.

For businesses, legal professionals and insolvency practitioners, the implications extend beyond data exposure. This incident underscores a broader concern: how much trust can be placed in Companies House data without independent verification?

What happened

The issue stemmed from a flaw within the Companies House WebFiling system, introduced during a system update in late 2025. The vulnerability allowed users to access company records that were not their own, in some cases through simple navigation actions.

As a result, sensitive director information, including dates of birth, residential addresses and contact details, may have been exposed.

More significantly, there were concerns that unauthorised filings could have been made, including:

  • Changes to director details
  • Amendments to registered office addresses
  • Submission of company filings

While there is no confirmed evidence of widespread abuse, the fact that the vulnerability existed for months has led to concerns around Companies House data reliability and potential misuse.

Why this matters for businesses

Increased corporate fraud risk

Companies House is widely used as a trusted data source by banks, lenders, counterparties and legal professionals. A weakness in this system creates opportunities for corporate fraud in the UK, particularly where bad actors exploit inaccurate or manipulated records.

This could include:

  • Impersonating legitimate companies
  • Opening bank accounts fraudulently
  • Diverting payments or correspondence

This form of corporate identity fraud is becoming increasingly sophisticated, particularly where verification processes rely heavily on registry data alone.

Director data exposure and targeted attacks

The exposure of personal data significantly increases the risk of:

  • Identity theft
  • Phishing and spear-phishing attacks
  • Social engineering targeting directors and senior individuals

Directors are often key decision makers with access to financial controls, making them high-value targets. The availability of this data through a Companies House vulnerability lowers the barrier for targeted fraud.

Reliability of Companies House data

For legal professionals and insolvency practitioners, this incident raises a critical issue: can Companies House be treated as a single source of truth?

In practice, reliance on unverified registry data can introduce risk into:

Where company records may be inaccurate or temporarily manipulated, decisions based solely on this data may be flawed.

How could this have been prevented?

The vulnerability appears to have been the result of system design and control failures, rather than a sophisticated external breach. Several preventative measures could have reduced the risk:

Stronger access controls

Proper segregation of user permissions should prevent any possibility of accessing another company’s records without authorisation.

Robust testing and QA processes

The flaw was introduced during a system update and remained undetected, suggesting insufficient penetration testing and user validation.

Layered security approach

Over-reliance on single authentication methods (such as filing codes) creates risk. An in-depth defence approach, combining multiple verification layers, would significantly reduce exposure.

Continuous monitoring and alerts

Effective systems should detect:

  • Unusual access patterns
  • Irregular filing activity
  • Cross-account access attempts

The absence of such controls allowed the issue to persist longer than it should have.

What should companies do now?

In light of this Companies House security issue, businesses should take proactive steps to mitigate risk:

  • Review company records for any unauthorised changes
  • Monitor filing history and updates regularly
  • Restrict internal access to filing credentials
  • Educate directors on fraud and phishing risks
  • Conduct enhanced due diligence on counterparties

Taking these steps can reduce exposure to company filing fraud and improve overall resilience.

The role of corporate investigations and due diligence

This incident highlights a key point: public registry data should not be relied upon in isolation.

At ESA Risk, we support clients with:

  • Independent verification of company information
  • Identification of discrepancies in filings
  • Corporate investigations into ownership and control
  • Due diligence on business partners and counterparties
  • Fraud risk assessment and ongoing monitoring

Where there is uncertainty around data integrity, independent intelligence provides clarity and reduces risk.

A wider issue for UK corporate transparency

The UK has taken steps to strengthen corporate transparency through legislative reform. However, this incident demonstrates that data availability must be matched by data security.

As Companies House becomes more central to fraud prevention efforts, its reliability and resilience are increasingly critical. For businesses and advisors, this means adopting a more cautious and investigative approach to corporate data.

Key takeaways for businesses and advisors

The Companies House vulnerability is a timely reminder that even official systems are not immune to risk.

For businesses, the threat lies in fraud, impersonation and data misuse. For legal and financial professionals, it highlights the importance of verifying information beyond surface-level records.

In an environment where corporate fraud risk in the UK continues to evolve, relying solely on publicly available data is no longer sufficient.

Independent verification, proactive monitoring and informed investigation are now essential components of effective risk management.

Speak to ESA Risk today

If you have concerns around the accuracy of Companies House data or potential exposure to corporate fraud, ESA Risk can assist. We support businesses, legal professionals and insolvency practitioners with discreet, intelligence-led enquiries to verify company information and identify risk.

Whether you require straightforward verification of company records or more in-depth investigations into ownership, control or suspected manipulation, we will work with you to understand your objectives and tailor our approach accordingly.

Where there is uncertainty around filings or director information, we can also undertake tracing, due diligence and background enquiries to ensure you are relying on accurate, up-to-date intelligence.

Contact our Client Services team at advice@esarisk.com, on +44 (0)343 515 8686 or via our contact form.

 

Zena Scott Archer: The story behind our brand

People often ask where the name ESA Risk comes from. The simplest answer is this: respect.

But behind that single word lies a story of influence, mentorship and professional heritage, one rooted in the legacy of an extraordinary investigator.

A formidable woman in investigations

Zena Scott Archer was not just respected; she was widely regarded as one of the most capable investigators of her time. She began her career at just 17, learning the trade from her father, who founded Scott’s Detective Bureau. From her very first assignments, she displayed intelligence, resourcefulness and determination, qualities that would define her entire career.

She worked on a wide variety of cases, from serving legal documents and tracing to complex corporate enquiries and international investigations. Her skill for observation and her ability to read people, situations and patterns, set her apart. She became known for her ingenuity and creativity, often using disguises to gather information that others could not.

In a profession historically dominated by men, Zena commanded significant respect and authority. At a time when communication and information access were far more limited than they are today, professional networks were essential. She developed strong international connections and earned the admiration of investigative professionals across Europe and beyond.

Her career spanned nearly five decades and encompassed specialties including corporate fraud, tracing missing assets and international investigative coordination. She also became a mentor to younger investigators, encouraging them to uphold ethical standards while embracing innovation.

Later, she broke new ground as the first woman to serve as President of the World Association of Detectives, a role that affirmed the respect she held among peers worldwide.

Zena combined professional excellence with personal warmth. She had time for people, and she always had time for the work. Those are not small qualities in a good investigator, and they mattered deeply to me.

She embodied what good investigation should look like: Thorough, professional and grounded in respect for others. That mindset has stayed with me throughout my career.

Zena’s contribution is recognised through the Zena Scott Archer Investigator of the Year Award, established by the Association of British Investigators. I was honoured to receive that award in 1995, a recognition that made her influence on my career very real and personal.

Why the name matters

My own career in private investigations began in 1990, when I joined Ellison and Gough’s litigation support and investigations team as a partner under Bert Ellison, a highly respected former police officer and mentor to me.

In 1998, I acquired Zena’s company, Scott’s Detective Bureau and the name was merged with our business before we eventually sold it.

When I later established a new firm, I initially named it Ellison Scott Archer – a deliberate recognition of the two people who helped me get started as an investigator.

That heritage informs who we are today.

Why Zena’s story matters

International Women’s Day is often about looking forward, but it is equally important to look back.

Long before conversations about representation became mainstream, women like Zena Scott Archer were building international networks, leading global organisations and setting professional standards in industries that were not necessarily designed with them in mind.

Her story reminds us that women have shaped investigative practice, leadership and international cooperation for decades.

Her name lives on in an award.
It lives on in the standards she helped embed in the profession.
And it lives on in our business.

 

Professional process serving in litigation and insolvency

In legal proceedings, service of documents can often be viewed as a procedural necessity. In practice, however, it is a critical risk point that can determine whether a matter progresses smoothly or becomes delayed, challenged or derailed entirely.

For law firms operating in litigation and insolvency, effective process serving is not just about delivery. It is about control, evidence and protecting the integrity of proceedings from avoidable procedural criticism.

Defective or disputed service can have immediate and costly consequences, including adjournments, adverse costs orders, loss of tactical advantage or the need to re-serve under pressure. In contentious or time-sensitive matters, those risks are magnified.

At ESA Risk, we support legal professionals with intelligence-led process serving designed to reduce procedural risk, meet strict deadlines and withstand scrutiny if service is contested.

The risks of improper or delayed service

Improper or delayed service is one of the most common causes of procedural challenge. Missed deadlines, invalid service or insufficient evidence can undermine otherwise strong cases and expose firms to reputational and financial risk.

Professional process serving provides legal teams with:

  • Compliance with court rules and statutory requirements
  • Accurate identification and verification of recipients
  • Clear, defensible evidence of service
  • Reduced exposure to service-based challenges and delays

For insolvency practitioners and litigators, where respondents may be evasive, uncooperative, or actively attempting to frustrate proceedings, professional process serving becomes a practical safeguard.

Process serving challenges in litigation and insolvency

Modern process serving frequently involves obstacles that go beyond routine document delivery. Common issues include:

  • Individuals deliberately avoiding service or providing misleading information
  • Urgent applications subject to strict court deadlines
  • Multiple respondents requiring coordinated or simultaneous service
  • High-value or contentious disputes where service is likely to be scrutinised
  • Cross-border matters involving overseas jurisdictions and local service rules

These scenarios require planning, discretion and situational awareness. A one-size-fits-all approach increases the likelihood of challenges or failure.

An intelligence-led approach to service

Effective service often depends on preparation before any attempt is made. Our approach may include:

  • Address verification and occupancy checks
  • Timing strategies to maximise successful service
  • Consideration of substituted or alternative service where appropriate
  • Detailed contemporaneous notes to support evidential integrity
  • Coordination with wider investigations where service forms part of enforcement or recovery strategy

This methodology ensures service is not only completed, but completed in a way that is defensible if challenged in court.

Supporting insolvency and litigation matters

In insolvency proceedings, the service of statutory demands, bankruptcy petitions, and winding up petitions must be handled with absolute precision. Errors or delays can undermine enforcement action, invalidate recovery strategies or expose practitioners to disputes.

In litigation, service disputes are increasingly used tactically to delay proceedings or gain leverage. Proper service, supported by robust and concurrent evidence, enables legal teams to defend against these challenges and maintain procedural momentum.

Our experience across insolvency, commercial disputes and high-value litigation means we understand both the legal framework and the practical pressures faced by professionals operating in these environments.

We provide professional process serving support to law firms, insolvency practitioners, lenders, in-house legal teams and private clients. Our services are built around reliability, discretion and compliance, including:

  • Nationwide UK coverage through a trusted network of experienced process servers
  • International process serving via established overseas partners
  • Time-critical and synchronised service, including multi-location matters
  • Detailed statements and affidavits of service suitable for court use
  • Clear communication and real-time updates, keeping legal teams informed at every stage

Every instruction is assessed on its own facts, allowing us to adapt our approach whether the service is straightforward or highly sensitive.

Types of documents we serve

Our process serving team regularly handles a wide range of legal documents, including:

  • Statutory Demands
  • Bankruptcy and Winding Up Petitions
  • Claim Forms and Court Proceedings
  • Injunctions and urgent applications
  • Orders, notices and supporting documentation

Each service is carried out with careful attention to jurisdictional rules, deadlines and evidential requirements.

Compliance, information security and risk management

For legal firms, compliance extends beyond procedural accuracy. The handling of sensitive client and case information demands robust systems, accountability and governance.

We operate in accordance with internationally recognised standards, including:

  • ISO 9001 (Quality Management), supporting consistent service delivery and continuous improvement
  • ISO 27001 (Information Security Management), safeguarding confidential and sensitive information throughout service

These frameworks provide legal teams with assurance that their instructions are handled securely, professionally and in line with best practice.

Instruct ESA Risk today

If you’re looking for a  experienced company to reliably serve documents, look no further than ESA Risk. Our extensive network of process servers covers the whole of the UK (as well as overseas locations).

Whether you require us to serve relatively straightforward, standard documents or to organise complex time-synchronised, multi-location services, either in the UK or overseas, we’ll work with you to understand your specific requirements and tailor our services and fees accordingly.

Need to confirm an address before sending documents? We also provide tracing services, ensuring you serve the right people in the right place at the right time.

Contact our dedicated Process Serving team at instructions@esarisk.com or on +44 (0)343 515 8686 option 2.

Asset tracing in cross-border insolvencies

Cross-border insolvencies are becoming increasingly more common, as many UK companies operate through multi-jurisdictional structures, hold assets overseas or use complex ownership arrangements to shield value.

The modern reality of cross-border insolvency

UK insolvency practitioners increasingly encounter companies with operations, bank accounts or real estate overseas. Nominee directors, offshore trusts and layered corporate structures can obscure asset ownership, creating significant hurdles for recovery.

Despite these challenges, many assets are often still traceable. The key lies in intelligence-led investigations, early intervention and collaboration with investigators who are familiar with both domestic and foreign insolvency frameworks.

Why asset tracing across borders is complex

Cross-border insolvencies present challenges distinct from domestic cases:

  • Legal fragmentation: Each jurisdiction has its own insolvency laws, reporting requirements and enforcement procedures. Recognition of UK insolvency proceedings abroad is governed by frameworks outlined in the Cross-Border Insolvency Regulations 2006, but not all countries are participants.
  • Opaque ownership: Offshore companies, trusts and nominee arrangements often hide ultimate beneficial owners.
  • Limited transparency: Bank secrecy, incomplete or no public registries and local privacy laws can slow or block investigations.
  • Cultural and practical barriers: Language, local business customs and informal networks can create additional complexity.

Legal and practical challenges

Enforcement and recognition: Obtaining UK orders is only the first step. Securing recognition abroad, whether to enforce judgments, freeze assets or access company records, can involve multiple legal systems and complicated procedures.

Time-sensitive risks: Assets can move quickly once insolvency proceedings begin. Property may be sold, accounts emptied or shares transferred to related entities. Rapid intelligence and decisive action are crucial to prevent dissipation.

Navigating local laws and customs: Investigators and legal teams must understand local rules and business culture. Some jurisdictions rely heavily on personal relationships to access information, while others require formal legal processes that can take months.

Emerging jurisdictions for asset tracing

Certain regions have become increasingly relevant in cross-border insolvency recovery:

Offshore financial centres: Cayman Islands, British Virgin Islands, Jersey

These jurisdictions are commonly used to hold assets through offshore companies or trusts, providing strong privacy that can obscure ownership.

EU member states: Germany, France, Netherlands

UK companies often hold commercial property, bank accounts or subsidiaries in these countries. Local laws and registries require jurisdiction-specific expertise to trace and enforce asset recovery effectively.

Middle East: Dubai

Dubai is a hub for commercial property, corporate investments and banking linked to UK businesses. Its mixed legal system and unique business practices mean local partners are essential for tracing and securing assets.

Asia-Pacific hubs: Singapore, Hong Kong

These centres have sophisticated corporate and banking structures that can hide assets from foreign investigators. By combining local intelligence, legal knowledge and global investigative experience, these assets can still be located and recovered.

Working with a global investigative partner

Recovering assets internationally is rarely a solo endeavour. Partnering with a firm experienced in cross-border investigations brings strategic advantages:

  • Local expertise through global networks: On-the-ground partners in multiple jurisdictions provide access to corporate records, local intelligence and regulatory insight.
  • Integrated investigative methods: Combining open-source intelligence (OSINT), desktop research and human-source intelligence (HUMINT) enquires creates a comprehensive picture of asset ownership and location.
  • Mitigating jurisdictional challenges: Experienced teams navigate local laws, privacy regulations and cultural nuances to preserve assets and support legal actions.

By leveraging these capabilities, insolvency practitioners, lenders and litigators can reduce the risk of asset dissipation and uncover value that might otherwise remain hidden.

Best practices for cross-border asset recovery

  • Integrated investigations: Combine forensic analysis, open-source intelligence and local intelligence to map asset ownership.
  • Legal coordination: Work alongside legal teams to secure freezing orders, recognition of UK insolvency proceedings abroad and evidence gathering.
  • Early engagement: Rapid intelligence-gathering reduces the risk of asset dissipation and improves recovery outcomes.
  • Discretion and professionalism: Confidentiality helps prevent flight of assets and protects client interests.

 

Cross-border insolvency does not mean assets are lost. While challenges such as fragmented laws, opaque structures and jurisdictional hurdles exist, coordinated investigative and legal strategies can successfully locate and preserve value. For insolvency practitioners, lenders and lawyers, understanding international asset tracing is now an indispensable part of modern practice.

Asset tracing services from ESA Risk

When it comes to supporting insolvency practitioners with complex investigations, ESA Risk provides expert asset tracing services designed to deliver clarity, confidence and actionable intelligence. Our experienced investigators produce concise, evidence-led findings that help you assess recovery prospects, inform strategy and determine the most effective next steps.

With access to specialist intelligence sources and a trusted global network, ESA Risk is well placed to support domestic and cross-border insolvency matters, even where assets or individuals are deliberately concealed.

To instruct us on an investigation or to find out more about our services, contact our Client Services team, at advice@esarisk.com on +44 (0)343 515 8686, or via our contact form.

 

New national ‘Report Fraud’ service launches

Report Fraud, the UK’s national reporting service for cyber crime and fraud, has launched as the central platform for submitting fraud-related reports. The service replaces Action Fraud as the primary reporting route for individuals and organisations across England, Wales and Northern Ireland. It became operational in December 2025, with a full public rollout in January 2026.

Operated by the City of London Police, Report Fraud aims to offer a clear, modern and streamlined reporting experience for victims of phishing, ransomware, business email compromise, CEO fraud and other online scams.

What the new service provides

Report Fraud introduces updates to the way fraud and cyber crime reports are submitted and managed:

  • Structured reporting – A guided process supports users in submitting relevant information in a consistent format.
  • Guidance and information – Reporters are provided with information on what types of fraud and cyber crime can be reported, along with details on what happens after submission.
  • Victim support information – Reporters receive guidance and signposting to support services where applicable.
  • National crime analysis – Submitted reports are incorporated into a centralised analysis function used to identify trends, patterns and repeat activity at a national level.

How reports are processed and used

Reports submitted through Report Fraud are reviewed and handled as part of the national fraud reporting framework:

  • Intelligence assessment – Reports are assessed to identify links, patterns or indicators associated with organised or harmful criminal activity.
  • Dissemination – Where reports meet established criteria or are linked to other cases, they may be shared with the relevant police force for further consideration.
  • Reporter updates – In cases where police action follows, reporters may receive updates or a point of contact in accordance with the Victims’ Code of Practice.
  • Ongoing intelligence use – Reports that do not result in immediate investigation are retained for intelligence purposes, supporting monitoring activity, disruption measures, or future investigations.

National reporting for fraud and cyber crime

Cyber crime and fraud are among the most prevalent and economically damaging crimes in the UK, costing individuals and organisations billions each year. Report Fraud intends to provide a single national gateway for reporting and intelligence that strengthens collaboration between the public, businesses, law enforcement and other agencies.

Further information, including how to submit a report, is available at reportfraud.police.uk.

Fraud investigations by ESA Risk

If you suspect that a fraud has occurred within your business and need advice or support on the next steps, we’re here to help.

Additionally, we can help you to prevent fraud from occurring through manager and employee training and resource provision.

For further details, contact our Client Services team, at advice@esarisk.com, on +44 (0)343 515 8686 or via our contact form.

 

AI and fraud: What recent headlines mean for businesses

Artificial intelligence (AI) promises efficiency, automation and transformative insights across industries. But alongside these benefits, fraudsters are increasingly leveraging AI’s power to craft highly convincing scams that can deceive individuals and businesses alike.

From deepfake impersonations of executives to AI generated phishing campaigns, recent headlines show that AI enabled fraud is no longer a distant threat, it’s an immediate and evolving challenge that organisations must understand and address.

AI as a catalyst for sophisticated fraud

Generative AI technologies, including large language models (LLMs), voice cloning and video synthesis, have dramatically lowered the barriers to creating realistic fraudulent content. While these tools are designed to enhance productivity, they also enable attackers to generate convincing illusions of legitimacy at scale. For example:

  • Deepfakes, AI generated video and voice impersonations, are now being used to pose as real people in business contexts, tricking victims into authorising sensitive actions or financial transfers.
  • AI assisted phishing and social engineering campaigns craft personalised messages that improve scam success rates.
  • Synthetic identities and fabricated documents are increasingly used in loan and account takeover fraud.

Several UK specific developments highlight how AI is shaping modern fraud threats:

Sharp increase in AI related fraud targeting UK businesses: A 2025 report from Experian found that over a third (35%) of UK businesses reported being targeted by AI related fraud, up significantly from the previous year. Techniques such as deepfakes, voice cloning, and synthetic identities are becoming more common in fraud attempts reported across sectors from retail banks to digital first retailers.

Identity fraud driven by AI tools: Data from Cifas shows that identity fraud cases have reached record levels, with criminals using AI enhanced methods to create fake identities and bypass verification systems. The National Fraud Database recorded more than 118,000 identity fraud cases in early 2025, with synthetic profiles and fabricated credentials playing a major role.

UK firms hit by large‑scale deepfake scams: British engineering giant Arup revealed that a deepfake video call led to a £20 million fraudulent transfer, where an employee was tricked into believing they were speaking to senior colleagues. This incident illustrates how convincingly AI can mimic voices and faces to bypass human checks.

Deepfakes used to exploit public trust: Trusted UK figures and brands are also being misused in scams. Deepfake videos featuring familiar TV doctors and public figures have been circulated on social media to promote bogus health products and investment schemes, eroding trust and confusing consumers.

Widespread consumer targeting: Research from TransUnion shows that a large majority of UK consumers (around 70%) have received scam messages appearing to come from trusted sources – with many believing these attempts involved AI generated voices or images – and impersonated brands like Royal Mail and Evri topping the list.

What these trends mean for UK businesses

Taken together, these developments send a clear message: AI enabled fraud is rapidly evolving, and UK businesses are increasingly in the crosshairs. This has several implications:

The scale and sophistication are growing

AI doesn’t just automate fraud, it enhances believability. Fraud attempts now leverage hyper realistic visuals, voices and messages that can pass manual scrutiny and bypass traditional rule-based fraud detection systems.

Human trust is a vulnerability

Deepfakes exploit human instincts: employees and customers often assume that talking to what appears to be a senior executive on video, or receiving a trusted brand’s message on social media, means the communication is legitimate. These trust shortcuts can now be weaponised at scale.

Traditional controls are less effective alone

Legacy approaches that rely on static rules, such as simple two factor authentication or manual identity checks, are less effective against synthetic identities and AI generated spoofing techniques. Modern fraud requires modern defences.

Practical steps UK businesses can take

To respond to the rise of AI enabled fraud, organisations should consider a multi-layered approach:

Detection

  • Adopt AI powered monitoring tools that analyse behavioural and contextual anomalies rather than purely signature-based detection.
  • Use Realtime analytics to flag unusual access patterns, transaction anomalies or communications inconsistencies.

Prevention

  • Educate staff on the nature of AI enabled scams, including examples of deepfake calls and advanced phishing.
  • Implement multifactor authentication, transaction thresholds and redundant verification for high-risk actions.

Response planning

  • Build incident response playbooks that anticipate AI enabled deception scenarios.
  • Establish clear escalation paths for suspected fraud, including legal and compliance involvement.

Strategic resilience

  • Periodically reassess fraud risk models to incorporate new threat vectors.
  • Collaborate with external specialists where needed to test controls and simulate advanced attack scenarios.

Staying ahead of AI-enabled fraud

AI is transforming both the opportunities and risks faced by businesses. As recent headlines make clear, fraudsters are rapidly embracing generative AI to make scams more believable, scalable and profitable. However, the same technological forces that enable this evolution also empower defenders: advanced detection tools, analytics and enhanced verification frameworks can help organisations stay ahead of these threats.

By monitoring emerging trends, investing in adaptive controls and educating teams, companies can turn awareness into action and safeguard themselves in an age of increasingly sophisticated deception.

ESA Risk investigations and enhanced due diligence

The illusion of legitimacy has never been easier to fake or more dangerous to ignore. Deepfake directors and AI-generated documents are not science fiction, they’re happening now.

If you’re unsure whether a document or company is real, or if you need help investigating a suspicious entity, our team is here to help.

For further details of these services or to instruct us on a matter, contact our Client Services team at advice@esarisk.com, on +44 (0)343 515 8686, or via our contact form.

How enhanced due diligence protects your business

In a competitive global market, businesses increasingly face threats from financial crime, regulatory breaches, and reputational damage. Standard checks may tell you who a customer or partner is, but they rarely reveal the deeper risk profile, historical concerns or behaviours that could adversely affect your organisation.

Enhanced due diligence fills that gap. It is a more detailed form of investigation designed to uncover issues that could expose a business to financial loss, compliance penalties or reputational harm. enhanced due diligence supports better decision making by providing a complete picture of risk, enabling organisations to act with confidence and clarity.

What Is enhanced due diligence?

Enhanced due diligence goes well beyond basic identity verification or simple checks. It’s a detailed risk assessment process that helps you understand not just who you’re dealing with, but what risks they may pose – including legal, compliance, financial and reputational factors.

enhanced due diligence is especially valuable when your standard Know Your Customer (KYC), Anti-Money Laundering (AML) or compliance processes need to be strengthened, or when you encounter complex risk scenarios that warrant a more investigative approach. At ESA Risk, this means combining open-source intelligence, data analysis and expert human investigation to produce intelligence that informs and protects your organisation.

The following are key areas where enhanced due diligence provides deeper insight:

  • Complex ownership structures: Clarifying who truly controls a company or business arrangement.
  • Legal and regulatory history: Examining past litigation, regulatory interventions or sanctions exposure.
  • Financial anomalies: Identifying signs of fraud, money laundering or financial irregularity.
  • Reputational factors: Reviewing public record, adverse media or lifestyle discrepancies.

When enhanced due diligence is critical

Enhanced due diligence should be considered whenever a transaction, relationship or customer profile suggests a heightened level of risk that could negatively impact your business. Standard due diligence alone is often insufficient in these scenarios, as it may miss subtle indicators of risk or fail to assess the full scope of potential problems.

Enhanced due diligence is particularly important when dealing with:

  • Mergers and Acquisitions (M&A): Before committing to major transactions, you must understand risks that could affect valuation, compliance or integration.
  • Lending and financing decisions: Assessing borrowers and investment partners beyond surface level credit data.
  • Insolvency and corporate recovery: Tracing assets and uncovering possible misconduct, fraud or concealed liabilities.
  • Cross-border transactions: Managing differences in regulatory regimes, sanctions or challenge jurisdictions.
  • High value clients or sensitive contracts: Verifying credibility and legitimacy where business or reputational stakes are high.

Key risks addressed by enhanced due diligence

Enhanced due diligence is designed to uncover risk factors that standard checks would normally overlook. These risks can expose a business to legal action, regulatory fines, reputational damage or significant financial loss if not identified and addressed early.

A mature enhanced due diligence process looks at indicators such as:

  • Money laundering concerns and unusual financial activity.
  • Links to criminal activity, whether direct or indirect.
  • Insolvency issues that may indicate financial instability or distress.
  • Regulatory intervention or history of sanctions.
  • Suspected fraud or dubious investment behaviour.
  • Disqualified or problematic management histories.
  • Tax evasion, financial irregularity or multiple identities.
  • Political exposure or high-risk networks.
  • Litigation involvement or inconsistent income/lifestyle patterns.
  • Potential connections to illegal or terrorist financing.

Benefits of enhanced due diligence for Businesses

Conducting enhanced due diligence delivers benefits that extend far beyond merely avoiding risk. The process equips businesses with insights that inform strategic decisions while strengthening risk management frameworks. By understanding the true risk profile of clients, partners or counterparties, organisations can operate with greater confidence and resilience.

Key advantages include:

  • Protecting financial interests through early identification of damaging risk indicators.
  • Supporting regulatory compliance by meeting and exceeding AML, KYC and counter‑terrorist financing expectations.
  • Providing actionable intelligence that enhances decision making and strategic planning.
  • Safeguarding reputation by avoiding associations with individuals or entities with negative histories.
  • Reducing legal exposure by building a defensible audit trail of risk assessment.

How ESA Risk delivers enhanced due diligence

The value of enhanced due diligence lies not only in identifying risks but in delivering intelligence that you can act upon. At ESA Risk, we combine data driven research, deep web analytics and expert investigative resources to provide meaningful insights tailored to your needs. Our process includes:

  • An experienced investigative team capable of interpreting complex data and contextualising risk.
  • Advanced intelligence gathering using open-source and machine assisted tools.
  • Global research capability to assess risk across jurisdictions and corporate structures.
  • Clear, concise reporting that summarises findings in a decision ready format.

Through this approach, ESA Risk provides a scalable, flexible enhanced due diligence service designed to evolve with changes in your business, regulatory landscape and customer behaviours.

Enhanced due diligence is an indispensable part of modern risk management. By going deeper than standard checks, enhanced due diligence provides the context and confidence your business needs to protect its financial interests, its reputation and its people.

Protect your business, reputation and investments with ESA Risk

Whether you’re onboarding a new partner, evaluating an investment or assessing customer risk, enhanced due diligence is a vital part of any effective risk strategy. To learn how ESA Risk can help safeguard your business and provide actionable intelligence, contact our Client Services team today at advice@esarisk.com, on +44 (0)343 515 8686 or via our contact form

How people and asset tracing can benefit insolvency practitioners

Insolvency practitioners are increasingly required to operate in complex, high-risk environments where assets may be deliberately concealed, transferred or obscured through sophisticated structures. Identifying and recovering those assets is central to maximising returns for creditors and fulfilling statutory duties.

Professional people tracing and asset tracing services play a critical role in modern insolvency investigations. By uncovering hidden assets, locating key individuals and establishing ownership and control, tracing services provide insolvency practitioners with the intelligence needed to make informed decisions and pursue effective recovery strategies.

The asset recovery challenge in insolvency

Asset recovery is one of the most challenging aspects of insolvency appointments. In many cases, practitioners encounter:

  • Incomplete, inaccurate or misleading company records
  • Uncooperative or absconded directors
  • Assets transferred prior to insolvency
  • Complex corporate, trust or offshore ownership structures

As financial misconduct becomes more sophisticated and assets more mobile, reliance on standard searches alone can leave material gaps. Specialist tracing investigations help close those gaps by providing a deeper, evidence-led understanding of asset location and movement.

What is people tracing?

People tracing involves locating individuals whose whereabouts are unknown or intentionally concealed. In an insolvency context, this often includes:

  • Directors and former directors
  • Shareholders and beneficial owners
  • Debtors and guarantors
  • Connected or associated parties

Effective people tracing supports statutory investigations, examinations, service of proceedings and enforcement actions. It can also assist in establishing patterns of behaviour and relationships relevant to insolvency and misconduct investigations.

What is asset tracing?

Asset tracing focuses on identifying, locating, and evidencing assets that may not be disclosed or immediately visible. These can include:

  • UK and overseas property
  • Accounts and financial instruments
  • Business interests and shareholdings
  • High-value personal assets
  • Digital assets, including cryptocurrency

Professional asset tracing goes beyond surface-level searches, using investigative methodologies, specialist intelligence sources and analytical techniques to build a defensible picture of asset ownership, control and movement.

Why asset tracing is critical for insolvency practitioners

Tracing services are particularly valuable where there is suspicion of asset dissipation, concealment or misconduct. Early access to reliable intelligence can help insolvency practitioners:

  • Identify undisclosed or hidden assets
  • Understand pre-insolvency asset transfers
  • Establish beneficial ownership and control
  • Prioritise recovery and enforcement action

This intelligence often informs decisions relating to litigation, settlement, funding and the pursuit of antecedent transactions such as preferences or transactions at undervalue.

Practical uses of tracing in insolvency appointments

People and asset tracing can support insolvency practitioners at various stages of an appointment:

Asset identification and recovery

Tracing investigations help identify assets omitted from statements of affairs or deliberately placed beyond reach, allowing practitioners to assess recovery potential early.

Director and debtor tracing

Locating individuals is essential for interviews, examinations and statutory processes, particularly where directors are evasive or based overseas.

Litigation and enforcement support

Asset intelligence underpins recovery actions, enforcement strategies and applications for freezing or disclosure orders.

Cross-border insolvency matters

Where assets or individuals are located outside the UK, specialist tracing expertise can help navigate jurisdictional complexity and support international recovery efforts.

Evidential value in civil and insolvency proceedings

A key advantage of professional tracing services is the evidential quality of the findings. Intelligence gathered through structured investigations can be used to:

  • Support legal advice and recovery strategy
  • Prepare reports for creditors and the court
  • Assist solicitors and counsel in litigation
  • Inform negotiations and settlement discussions

When conducted correctly, tracing investigations provide insolvency practitioners with reliable, defensible intelligence suitable for use in civil proceedings and regulatory contexts.

The benefits of using specialist tracing services

Engaging specialist investigators offers insolvency practitioners:

  • Access to advanced intelligence sources
  • Objective, independent findings
  • Time and cost efficiencies
  • Reduced risk of missed recovery opportunities

By outsourcing tracing to experienced professionals, insolvency practitioners can focus on their statutory and commercial responsibilities while ensuring asset recovery efforts are thorough and proportionate, enhancing recovery prospects and delivering better outcomes for creditors and stakeholders.

People and asset tracing services from ESA Risk

When it comes to supporting insolvency practitioners with complex investigations, ESA Risk provides expert people and asset tracing services designed to deliver clarity, confidence, and actionable intelligence. Our experienced investigators produce concise, evidence-led findings that help you assess recovery prospects, inform strategy and determine the most effective next steps.

With access to specialist intelligence sources and a trusted global network, ESA Risk is well placed to support domestic and cross-border insolvency matters, even where assets or individuals are deliberately concealed.

To instruct us on an investigation or to find out more about our people and asset tracing services, contact our Client Services team, at advice@esarisk.com on +44 (0)343 515 8686, or via our contact form.

Hidden hands: Shadow directors and undisclosed corporate control

While Companies House may list the appointed directors, the real decision-makers, those often responsible for misconduct or value extraction, aren’t formally recorded as directors or shareholders. Instead, they operate through proxies, nominee structures, and informal influence, hidden in plain sight. For lawyers and insolvency practitioners, uncovering them can transform a case, opening new avenues for asset recovery or establishing personal liability.

Shadow directors, undeclared controllers and disguised beneficial owners are a recurring theme in fraud and financial mismanagement cases. Identifying them requires investigators and legal professionals to look beyond Companies House and understand how control is actually exercised.

Understanding shadow directors

A shadow director is someone who directs or instructs the board of a company, without being officially appointed. Under Section 251 of the Companies Act 2006, a shadow director is defined as “a person in accordance with whose directions or instructions the directors of the company are accustomed to act.” These individuals typically avoid formal roles precisely to evade liability, scrutiny or regulatory bans.

This concept differs from a de facto director, who acts as a director without formal appointment. A shadow director, by contrast, may not visibly take actions themselves but wields real influence over the actual decision-makers. In many cases, they are disqualified directors, bankrupt individuals or participants in schemes designed to conceal beneficial ownership and control.

Recognising shadow directors isn’t just academic, the courts have increasingly treated them as equally liable in cases involving wrongful trading, breach of duty or fraudulent transactions. For insolvency practitioners and legal professionals, they often represent a critical link between wrongdoing and recoverable assets.

Why undisclosed control matters

Undisclosed control is rarely innocent. It often signals intentional concealment of liability, ownership or reputation.

In insolvency and fraud contexts, shadow directors may have stripped assets from a failing business, orchestrated preferential payments or continued to trade recklessly while insolvent.

In regulatory and sanctions contexts, hidden control can be used to circumvent disqualification orders or to front businesses for individuals on sanctions lists. For those conducting due diligence, failing to identify real-world control can lead to reputational exposure, enforcement action or transactional failure.

Identifying who truly controls a company can shift the legal strategy dramatically. It can support personal claims, trigger injunctions or form the basis for veil-piercing arguments.

How control is concealed

Individuals’ intent on concealing control rarely do so accidentally. Instead, they use a blend of informal influence and structural techniques designed to mislead both regulators and opponents.

Common concealment tactics include appointing nominee directors or shareholders, often trusted associates, family members, or offshore service providers, who act on instructions but have no independent role. Others rely on informal agreements, verbal instructions or control over key company functions such as banking, payroll or legal strategy.

In some cases, control is exerted through shared email accounts or generic communication channels that obscure authorship. Where anonymity is critical, offshore layering is used, a web of companies across multiple jurisdictions designed to create legal and evidential distance between the controller and the controlled.

Even within the UK, the repeated resignation and reappointment of directors, changes in registered office or sudden shifts in company purpose are used to confuse or reset scrutiny.

Detecting hidden control

Despite their efforts, shadow directors often leave a trail. Identifying them requires a blend of legal insight, behavioural analysis and investigative tools.

Red flags may include decisions being communicated by someone with no official role, or internal documents that consistently bear the editing metadata of the same individual. Frequent director changes, particularly around critical events such as winding-up petitions or asset sales, can also point to efforts to mask real control.

Identifying shadow directors

Investigators often begin with a review of email headers, looking for IP addresses or time zones that indicate where communications are really coming from. Digital forensics can reveal who authored or edited key documents, even if the content was relayed through a proxy.

Open-source intelligence (OSINT) is also vital. Cross-referencing directorships, media coverage and social profiles can help connect the dots between apparently unconnected individuals or businesses. Relationship mapping tools can then visualise these connections for legal teams.

A surprising amount can also be gleaned from local knowledge, surveillance or site visits, particularly where the controller is still operating informally from company premises or using company resources.

Evidence of hidden control in legal proceedings

Evidence of undisclosed control can fundamentally reshape a case. In insolvency proceedings, it may justify claims under Section 213 (fraudulent trading) or Section 423 (transactions at undervalue to defraud creditors) of the Insolvency Act 1986. Where trading has continued irresponsibly, Section 214 wrongful trading claims may extend to shadow directors.

In disqualification proceedings, shadow directors can be banned under the Company Directors Disqualification Act 1986, even without formal appointment. This is particularly relevant where disqualified individuals attempt to re-enter the market under different guises.

In litigation, proof of hidden control can justify freezing orders against third parties and bolster applications for disclosure. It also supports arguments for piercing the corporate veil, especially where the company is shown to be a sham or façade designed to shield the true actor.

Crucially, courts are increasingly responsive to well-evidenced claims of shadow control. While the threshold for liability remains high, the judiciary recognises that complex fraud often depends on influence exercised from behind the scenes.

Public corporate records are often only the starting point in understanding who controls a company. Behavioural indicators of control, such as who gives instructions and makes key decisions, can be more telling than formal titles. Early engagement of corporate investigators is crucial when nominee directors, offshore structures or unusual communication patterns are suspected. Evidence of shadow directorship can justify adding new defendants to proceedings, applying for disclosure orders or securing asset-freezing measures.

Need support uncovering who’s really in control of a company?

Our corporate investigators support legal teams, IP’s, and funders in tracing control, mapping connections and supporting litigation with actionable evidence.

To instruct us on an investigation or for more information on our services, contact us at advice@esarisk.com, on +44 (0)343 515 8686 or via our contact form.

 

Construction boss banned after selling £100,000 worth of classic cars for £1

A Staffordshire businessman, Kulbarg Singh, has been banned from serving as a company director for 6 years after transferring significant company assets, including a collection of classic cars worth more than £100,000, for just £1.

The case, investigated by the Insolvency Service, is a study in deliberate breach of fiduciary duties and transaction at undervalue, highlighting both the risks such misconduct poses and the type of behaviour that corporate investigators can be tasked with uncovering.

Singh, director of Aldridge Construction Engineering Ltd, transferred around £1.5 million in company assets to another company he controlled, Ace Earth Solutions Ltd, for just over £465,000. Singh had served as a director of Ace Earth Solutions Ltd between February 2020 and April 2022. Among the assets transferred were seven classic vehicles, a Daimler from 1936, Jaguars from the 1960s and 70s, and three Rolls Royces, collectively worth over £100,000, sold as part of this broader undervalued transaction.

The sale caused Aldridge Construction to lose more than £1 million, leaving it insolvent. By the time the company went into liquidation in June 2022, it had no remaining assets and total liabilities exceeding £1.5 million to HM Revenue and Customs and other creditors.

From a corporate investigator’s perspective, this case contains several red flags. First, the related-party nature of the transaction: Singh controlled both the selling and receiving companies. Second, the gross undervaluation: Assets worth six figures were effectively transferred for nothing. Third, the timing: The transaction occurred during a period when the company’s financial health was deteriorating. Together, these factors are typical of a transaction at undervalue to a related party, actionable under UK insolvency law.

Our approach in such cases is to reconstruct the true flow of value. That involves tracing the ownership of assets, assessing fair market worth, and examining the director’s role in authorising the transfer. Physical assets like classic vehicles present an advantage for investigators, they carry transparent market valuations, insurance records, and registration histories. This makes it more straightforward to demonstrate the disparity between the book value and the transfer price, and, crucially, to evidence intent.

The Insolvency Service’s decision to disqualify Singh until 2031 shows the strength of that evidence. But while disqualification protects the public from repeat behaviour, it rarely recovers value for creditors. That is where investigation plays a critical role, by equipping liquidators, creditors, and their legal teams with the evidence needed to challenge undervalued transactions and, where possible, claw back lost assets.

Why this case matters

From my perspective, this case underscores three important lessons for the investigative community and for creditors alike.

Related-party transfers can be obvious. Directors may attempt to move assets to companies they control, but these transactions are usually detectable with detailed scrutiny. Evidence is often in plain sight if you know what to look for.

Intent and breach of duties are central. Investigations hinge on demonstrating that a director knowingly acted against the company’s best interests. Selling £100,000 worth of classic cars to a company they controlled for £1 is a clear example of deliberate undervaluation and a breach of fiduciary duties.

Early detection preserves value. Waiting until insolvency occurs often makes recovery impossible. Monitoring and investigating suspicious related-party transactions early can safeguard company assets and strengthen any legal or regulatory action.

Insolvency and debt investigations

When a director sells assets undervalue, creditors lose, and without rigorous investigation, misconduct like this can easily go unchallenged. At ESA Risk, we ensure it doesn’t. For more information on how ESA Risk can help to identify hidden assets or locate targets who have gone to ground, contact Mike Wright, Investigations and Risk Management Consultant, at advice@esarisk.com, on +44 (0)343 515 8686 or via our contact form.

You can also learn more from our Insolvency & Debt Investigations brochure.

 

 

Deep dive for the answers you need
Or contact us on +44 (0)343 515 8686 or at advice@esarisk.com.

Deep dive for the
answers you need

Lawyers, accountants, advisors, investors, senior
management. You name them, we help them find the answers
they need. Ready to discover how we can help you?