Virtual Office KYC: Cross-Checking the Company File

Virtual office KYC is the review of a company file whose registered address is provided by a third party: you compare the address contract, the company register extract, the beneficial owner declaration and the directors' IDs field by field, and you check that the provider itself is supervised. A virtual address is legal and common. It simply means the address cannot confirm anything about the business, so the consistency of the rest of the file has to do that work.

This article is for informational purposes only and does not constitute legal or regulatory advice. Regulatory references reflect the position at the date of publication and apply to the United Kingdom unless stated otherwise.

What a virtual office changes in a KYB review

A virtual office changes one thing: the registered office no longer tells you where the people behind the company are. The address becomes a shared mailbox, often used by hundreds of companies, so its presence in the file is neutral. What matters is whether the other documents agree with each other and with the public register.

Reviewers often ask on compliance forums whether a virtual office address is a red flag in itself. It is not. Banks and onboarding teams decline files because the address is paired with other inconsistencies, such as a director living abroad, a UBO declaration that contradicts the share register, or a company incorporated two weeks earlier with no activity trail.

Synthesis: since 4 March 2024, every company on the UK register must have an "appropriate" registered office address, meaning a physical UK address where documents can be delivered and acknowledged (GOV.UK, registered office rules). A mailbox that fails that test can be replaced by Companies House with a default address, which is itself a mismatch worth catching.

The cross-check map

The table below is the core of the review. Each row names the field on the first document, the document or register it is compared with, and the outcome a reviewer should expect.

Cross-check 1: the address contract against the register

The registered office agreement must name the same legal entity, at the same address, as the register. Compare the company number first, because names collide and numbers do not. Then compare the address line by line, including suite or mailbox numbers, which providers use to distinguish clients.

Two timing checks are easy to forget. The agreement should not start after the incorporation date unless a change of address was filed, and a recent address change within weeks of an onboarding request deserves a question about the previous address. A company that moved from a residential address to a mailbox the week before applying is not suspicious on its own, but the reviewer should know why.

Cross-check 2: is the provider supervised?

A company registered office provider is a "trust or company service provider" under regulation 12 of the Money Laundering Regulations 2017, and must be supervised for anti-money laundering purposes. HMRC's registration guidance states that a business providing a registered office address must register with HMRC unless it is already supervised by the FCA or a professional body, and that applicants go through a fit and proper test.

What this proves is narrow: the provider has a supervisor. It does not prove that the provider checked your customer well. Ask the provider whether it performed its own customer due diligence on the company, and keep the answer in the file. If the provider cannot be found on any supervisory list, treat the address as unverified.

Cross-check 3: the UBO declaration against the share register and PSC data

The beneficial owner declaration is the document most often wrong, usually by accident. The question is whether the natural persons named, and their percentages, can be reproduced from independent documents.

1. Take the percentages from the share register or the latest confirmation statement.
2. Compare with the people with significant control listed on Companies House. The statutory test covers more than 25% of shares or voting rights, the right to appoint a majority of directors, and significant influence or control.
3. If a legal entity holds the shares, follow the chain until you reach a natural person. A declaration that stops at a holding company is incomplete.
4. Note any difference between PSC data and your own calculation. Neither source is automatically right; the gap itself is the finding.

Our guide on AML beneficial ownership verification details the thresholds used across EU member states, which matters when a UK company is held through an EU holding.

Synthesis: Regulation 28 of the Money Laundering Regulations 2017 requires obliged entities to identify the beneficial owner and take reasonable measures to verify that identity, and to understand the ownership and control structure (legislation.gov.uk). A declaration copied from the customer is a starting point, not verification.

Cross-check 4: people against people

Directors' IDs are compared with the officer record, not with the address contract. The fields that matter are the full name (including order of forenames), date of birth, and the expiry date of the ID. Differences in name order or a missing middle name are usually transcription errors and are resolved by asking. A different date of birth is not a transcription error until proven so.

Then compare the proof of address. If the director's "residence" is the virtual office address, the document is not a proof of residence. Users on small-business forums frequently ask whether they can use their mailbox on a bank application; the answer is that the registered address and the director's residential address answer two different questions, and the file needs both.

What to do when the file does not match

Classify each gap before reacting.

• Clerical gap: typo, name order, outdated registry data. Request a corrected document and close the finding.
• Structural gap: UBO percentages that do not add up, a missing intermediate holding, a director absent from the register. Pause onboarding and request the ownership chain.
• Unverifiable provider or address: apply enhanced measures and escalate to the MLRO, as set out in our enhanced due diligence guide.

Record the comparison itself, not only the conclusion: which fields, which versions of which document, on which date. A file reviewed in March against a register extract pulled in March is defensible; one with an undated extract is not.

Where automation helps

Most of the nine rows above are mechanical comparisons: names, numbers, dates, percentages. CheckFile's KYC and banking onboarding checks compare these fields across the uploaded documents and flag differences for a reviewer. They check consistency and completeness; they do not establish that a document is genuine, and the decision to onboard stays with your team. Details on how files are handled are on the security page, and plans on the pricing page.

For the wider context of sector-specific file checks, see our industry verification guide and the broader KYB document verification guide.

Frequently Asked Questions

Is a virtual office address a red flag for KYC?

No. It is a lawful and widely used arrangement. It removes the address as evidence of where the business operates, so reviewers rely more on the consistency of the register extract, the UBO declaration and the directors' documents.

Can a virtual office address be used as the registered office in the UK?

Yes, provided it is an appropriate address under the rules in force since 4 March 2024: a physical UK address where documents can be delivered and acknowledged. A mailbox that does not meet that test can be replaced by Companies House with a default address.

Who supervises a company that sells registered office addresses?

Registered office providers are trust or company service providers under the Money Laundering Regulations 2017. They register with HMRC unless already supervised by the FCA or a professional body.

What should I ask the registered office provider?

Ask for the signed agreement, confirmation of its supervisory registration, and confirmation that it carried out customer due diligence on the company. Ask whether the address is shared and how mail is handled.

Does a clean register match prove the beneficial owners are correct?

No. It shows that the documents agree with the register. The register is itself based on filings by the company, so independent evidence such as the share register or a chain-of-ownership chart is still needed.