The Anatomy of a Shell Company: 3 Red Flags Hiding in Plain Sight

There is a dangerous misconception in the UK recruitment sector; "If the company is 'Active' on Companies House, it must be safe."

This assumption is a primary vector for supply chain fraud. In the era of algorithmic mass registration, a company can be legally Active while being functionally fraudulent. The Mini-Umbrella Company (MUC) model relies on this veneer of legitimacy to infiltrate Payment Service Lists (PSLs).

Companies House is a registry, not a regulator.

At Diligens, we analyse the deeper entity-level movements. Our forensic algorithms are looking at the behaviour of the corporate structure.

Here are three red flags that are often hiding in plain sight.

The Director Flip

One of the most reliable indicators of a constructed MUC scheme is the "Director Flip."

Promoters know that banks and agencies perform Know Your Customer (KYC) checks at the point of onboarding. To pass these checks, they need a UK-resident Director with a clean credit history.

However, keeping a UK director is legally risky for the fraudster. So, they execute a pre-planned swap.

• Month 1 (Onboarding): A UK resident is appointed. The bank account is opened. The agency signs the contract.
• Month 3 (The Flip): The UK director resigns.
• Month 4 (The Ghost): A foreign national - often resident in a high-risk jurisdiction for money laundering—is appointed as the sole director.

Note how in the above example, it only took a matter of weeks for the Director Flip to occur. However, sometimes fraudulent entites will wait months, or even years, before changing Director, giving you plenty of time to onboard and forget about them.

If you onboarded a supplier in January, have you checked who the director is in April? If the Director has implausibly changed name and country of resience, your liability risk has just skyrocketed.

The Impossible Office

Where does your supplier physically exist?

MUC promoters need to register thousands of companies. They cannot rent thousands of offices. Instead, they utilise Virtual Office providers or formation agents to register mass "litters" of companies at a single address.

While using a virtual office is legal, and indeed perfectly legitimate in most cases, the volume is the indicator.

If you look up an address on Companies House and find more than 1,000 active companies registered to a single room in a terraced house in Potters Bar or assertion, you are likely looking at a "Farm."

Legitimate recruitment agencies usually operate from distinct commercial premises or clearly identified accountancy HQs. MUCs operate from "ghost" postboxes.

The Wrong Label

Every Limited Company in the UK must select a Standard Industrial Classification (SIC) code to describe their activities.

• 78200: Temporary employment agency activities.
• 78100: Activities of employment placement agencies.

These are the codes you should see. However, MUCs frequently attempt to exploit the VAT Flat Rate Scheme (FRS). To maximise the margin on this scheme, they need to be categorised as a "low cost" business.

Consequently, fraudsters often register their shell companies under:

• 70229: Management consultancy activities other than financial management.

Ask yourself: Why is a company that supplies 50 warehouse operatives or HGV drivers registered as a "Management Consultancy"? It is an economic mismatch that signals tax avoidance intent.

The Velocity Problem

The human brain is excellent at spotting patterns, but it is slow. You might catch one of these red flags if you spend 20 minutes auditing a single supplier.

But the fraudsters are not building companies manually; they are using artificial intelligence to build them in high volume batches. The velocity of fraud has outpaced the capacity of human compliance teams.

To protect your agency ahead of the 2026 liability shift, you need a defence that moves as fast as the threat.