If you use a virtual office or registered office address for your UK company, your provider is legally required to be AML registered with HMRC as a Trust or Company Service Provider. Checking takes under two minutes. This complete guide walks you through what that means, how to verify it, and what happens if your provider falls short.
Key Takeaways
Every UK virtual office provider offering registered office, correspondence address, or mail forwarding services must hold anti money laundering supervision from HMRC (or another approved body). Being AML registered means a business is supervised by an authority to prevent financial crime.
You can verify any provider on HMRC’s Supervised Business Register by searching for their business name, postcode, and sector. Look for “Trust or Company Service Provider” in the sector field and confirm the registration number matches what the provider claims.
Trading as an unregistered business in the TCSP sector is a criminal offence. Failure to register for AML can lead to criminal penalties for the provider’s owners and managers, plus serious disruption for their clients.
A properly registered provider will ask for identity documents (passport or driving licence), proof of residential address (bank statement or utility bill), and may carry out enhanced checks. This is a legal obligation, not a sign of distrust.
Corby Business Centre is AML registered with HMRC under registration number XGML00000205373, supervised until 30 June 2027. You can verify this yourself on the public register.
Why virtual office providers have to be AML registered
The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, as amended in 2019 and 2020, place specific duties on businesses that form companies or provide address services. These money laundering regulations require supervised businesses to maintain policies, controls, and procedures that reduce the risk of money laundering and terrorist financing. AML Regulations 2017 govern virtual office compliance in the UK, and certain sectors must register for AML supervision under UK regulations – not all UK businesses require AML registration, as it is sector-specific.
So why are virtual office providers in scope? Because they can give a company a UK legal footprint – a registered office address, a business address, even a director service address – without ever meeting the people behind it in person. That makes them attractive to anyone wanting to set up shell structures for fraud or money laundering unless proper checks are in place. Companies in sectors like accountancy and estate agency are typically considered high risk for money laundering, and company service providers that offer address services sit squarely alongside them.
The regulatory bar keeps rising. The Economic Crime and Corporate Transparency Act 2023 introduced the “appropriate address” test: since 4 March 2024, a virtual office must meet the Companies House appropriate address test, meaning statutory documents sent to the registered office must actually reach someone acting on behalf of the company. A PO Box cannot be used as a registered office address. These changes sit alongside anti money laundering aml rules and push providers toward higher standards of mail handling, delivery, and identity verification.
See Companies House Identity Verification: What It Means If Your Registered Office Is a Virtual Office
What “Trust or Company Service Provider” (TCSP) means
Under UK anti money laundering supervision rules, a Trust or Company Service Provider is any business that, by way of business, does one or more of the following: forms companies, provides a registered office or business address, offers correspondence or administrative address services, handles mail forwarding, or acts as a nominee director or secretary.
In practice, that covers a wide range of services. A virtual office package that gives you a London office address for your incorporation documents, a separate director service address so directors don’t need to use their home address, or a mail scanning and forwarding service for overseas owners – all of these make the provider a TCSP. Virtual offices are legal for non-UK residents incorporating UK companies, but the provider must still be registered. Even consultants, freelancers, and remote teams who simply need a professional address and privacy protection from publishing their residential address are clients of TCSPs.
Registration with a supervisory body – for most independent virtual office providers, that’s hm revenue and Customs (HMRC) – is mandatory. The registration process for AML typically involves preparing documentation and paying fees, including application fees, per-premises charges, and fees for each person assessed. Crucially, HMRC applies a fit and proper test to every Beneficial Owner, Officer, and Manager (BOOM) of the business. This proper test examines criminal records, any history of fraud or money laundering, bankruptcy, and broader integrity issues. AML compliance includes checks on directors and beneficial owners. It is repeated when control of the business changes and periodically thereafter.
How to check if a virtual office provider is actually AML registered
You do not need to take a provider’s word for it. HMRC maintains a Supervised Business Register that anyone can search to verify whether a virtual office provider holds the registration they claim.
The register shows each supervised firm’s business name or trading name, AML sector (for example, “Trust or Company Service Provider”), registration number, the first part of the business postcode, and the date supervision started. Here is how to check:
Step 1 – Go to GOV.UK and search for “HMRC Supervised Business Register.”
Step 2 – Open the online search tool or download the current CSV/ODS file.
Step 3 – Search for the exact trading name of the provider. If several results appear with similar names, filter by postcode to find the correct jurisdiction and premises.
Step 4 – Confirm that the registration number, postcode, and sector all match what the provider states on their website, engagement letter, or correspondence.
There are edge cases to be aware of. A provider in the middle of an application will not yet appear on the register. In that situation, ask for written confirmation of their application, the expected approval date, and avoid using their address for a Companies House registered office or any official filing until supervision is confirmed. If they are unable to produce any proof of application, treat that as a significant red flag.
One important caveat: inclusion on the HMRC supervised business register is not an endorsement or guarantee of service quality. It simply proves that the provider is under anti money laundering supervision and must comply with hmrc requirements. You still need to evaluate their mail handling, customer service, and terms separately.
See our full Virtual Office Compliance & Setup Guide for the complete checklist.
What it means for you if your provider is not AML registered
Providing registered office, correspondence, or director service address services in the UK without AML registration – where required – is a criminal offence under the Money Laundering Regulations. Virtual office providers must register for AML supervision, and failure to comply with AML can lead to company registration rejection by Companies House.
HMRC has a range of enforcement powers it can deploy against non-compliant providers:
Civil penalties and fines
Publicly naming the business on its non-compliance report
Imposing conditions on or revoking registration
Criminal prosecution of owners and managers in serious cases
The practical risk to you as a customer is real. If HMRC orders an unregistered or persistently non-compliant TCSP to stop trading, you may suddenly need to move your registered office or director service address at short notice. Companies House can reject non-compliant virtual office addresses and, in some circumstances, can change a company’s address to a default location. HMRC may reject a virtual office if it fails AML requirements. Your mail – including statutory documents and legal correspondence from Companies House or HMRC – could go missing during a forced transition.
While a client acting in good faith is not normally prosecuted just for having used an unregistered provider, the indirect consequences carry real cost. Banks may fail to accept virtual office addresses during account opening, filings with Companies House could be queried or rejected, and you may face extra questions from HMRC about your business address arrangements. Directors could find themselves fielding compliance queries they never expected.
Before appointing or renewing any virtual office provider, check the supervised business register and ask for their AML registration number in writing. If they refuse or cannot provide it, walk away.
What to expect when you sign up with a properly AML-registered provider
If a provider asks for your identity documents during onboarding, that is a sign you are dealing with a serious, compliant business – not a sign they suspect you of anything. Businesses must verify customer identities as part of AML due diligence, and providers must verify identity for anti money laundering compliance. This obligation exists because registered businesses must monitor transactions for suspicious activity and carry out proper due diligence on every client.
Providers may also ask about the nature of your business, your source of funds, and your expected use of the registered office or business address – especially if you operate from a higher-risk jurisdiction (including, for example, businesses registered in Northern Ireland but using an English address) or work in an industry with elevated risk. Businesses must complete a documented risk assessment for AML compliance, and these questions feed into that assessment.
Ongoing monitoring is part of the deal. You might be asked to refresh your ID records every few years, report changes to your home address, or provide extra documents when ownership changes. If Companies House flags discrepancies – for example, if a company’s details no longer meet companies house requirements – your provider is obliged to act.
A virtual office cannot be a PO Box without a physical address, so any compliant provider will operate from real, staffed premises where mail can be received, acknowledged, and forwarded on your behalf.
For a more detailed walkthrough of the onboarding process, see our guide on Why Do Virtual Office Providers Ask for ID (and Why Companies House Verification Isn’t Enough) — it covers what we check, why, and how we handle your records.
Is Corby Business Centre AML registered?
Yes. Corby Business Centre is registered with HMRC as a Trust or Company Service Provider (TCSP) under the Money Laundering Regulations. AML registration supports businesses in building trust with clients and partners, and we believe transparency on this point matters more than any marketing claim.
Our details: HMRC AML registration number XGML00000205373, with a current supervision period confirmed by HMRC as running until 30 June 2027, subject to renewal under the usual annual declaration and fees process.
We encourage you to verify these details yourself on the HMRC Supervised Business Register, following the steps outlined above. Search for our business name and Corby postcode and confirm that the registration number and sector match our public details.
Our AML registration covers our virtual office services, registered office, director service address, and mail handling. We maintain documented AML policies, controls, and procedures, including a designated Money Laundering Reporting Officer (MLRO) responsible for oversight and compliance. We hold proof of identity and address verification for every client on our books.
If you have any AML or compliance questions before ordering a registered office or business address service, contact us. We would rather answer your questions upfront than have you take a chance with a provider you cannot verify.
For a closer look at what this actually costs you as a customer if it goes wrong, see the real cost of choosing an unregistered provider
FAQs about AML-registered virtual office providers
How do I check if a company is AML registered?
There is no separate “AML registered” badge or certificate. Instead, use the HMRC Supervised Business Register on GOV.UK. Search by the provider’s business name or trading name and postcode, then confirm the sector listed is “Trust or Company Service Provider.” If the registration number matches what the provider claims and the supervision date is current, they are legitimately supervised. If you cannot find them and they cannot provide proof of an active application, that is a red flag.
What is a Trust or Company Service Provider in practice?
A TCSP is any business that provides registered office address services, correspondence or administrative addresses, mail forwarding, company formation, or acts as a nominee director or shareholder. In everyday terms, that includes most virtual office providers, company formation agents, and some law firms or accountancy practices when they offer these services alongside their main work. If a business owner uses a provider for nothing more than physical office space rental with no address or formation services, that provider may not need TCSP registration.
Is it illegal to use an unregistered virtual office provider?
The offence sits with the provider: operating as an unregistered TCSP is a criminal offence. As a customer acting in good faith, you are unlikely to be prosecuted solely for using one. However, it is risky. Banks may refuse to accept virtual office addresses linked to unregistered providers, Companies House can reject a virtual office address if non-compliant, and you could face disruption, lost mail, and questions about your company’s legitimacy if HMRC takes enforcement action against your provider.
What happens if my registered office provider isn’t AML compliant anymore?
HMRC can revoke or restrict a provider’s supervision, at which point the provider should stop carrying on regulated activity. Clients may receive notices, have filings queried by Companies House, and could find their registered office treated as invalid. You should move quickly to a compliant provider to protect your company’s records and director service address details.
Can I change my registered office if I discover my provider is not on the HMRC register?
Yes. Directors can file an AD01 form at Companies House to change the registered office to a new, compliant address. The change is typically effective from the filing date. Act promptly rather than waiting for formal action against the old provider – delays increase the risk of missed correspondence, rejected filings, and reputational damage.
Looking for a virtual office or registered office address with a provider you can actually verify? Take a look at our virtual office packages and pricing.
