How to Map Connected Companies in a UK Fraud Investigation

To map connected companies in a UK fraud investigation, start from every appointment held by every officer of your subject, trace each PSC chain to an individual, group the results by address and filing pattern, then layer on charges, CCJs and property, and record each step as evidence.

Fraud rarely sits in one company. Money moves between entities, assets are parked in separate vehicles, and the same few people appear as directors, shareholders or persons with significant control (PSCs) across companies that look unrelated at first glance. For forensic accountants, investigators, insolvency practitioners and litigation teams, the subject company is usually the starting point, not the answer.

This guide sets out an eight-step method for mapping connected companies from UK public records, the red flags to look for along the way, and how to keep the work defensible if it ends up in a report, a self-report or a court bundle.

Why connected-company mapping matters now

Three recent developments make the network view more important than ever.

• Linked companies are being shut down as a group. On 22 September 2026 the High Court in Manchester wound up seven companies in the public interest after a joint investigation by the Insolvency Service and Companies House. The companies had appeared unrelated on the public register. Investigators linked them through similar incorporation histories, company name changes and comparable business descriptions, and found filed accounts that appeared to contain false or misleading auditor information (Insolvency Service, 24 September 2026).
• Self-reporting is getting faster. On 13 October 2026 the Serious Fraud Office updated its corporate self-reporting guidance. Companies that report promptly and cooperate fully will generally be invited to negotiate a Deferred Prosecution Agreement, and companies are expected to take a "proportionate, risk-based approach" to identifying the full extent of any offending (SFO, 13 October 2026). Working out that extent is, in large part, a connected-party exercise.
• Corporate liability now reaches associated persons. The failure to prevent fraud offence under the Economic Crime and Corporate Transparency Act 2023 came into force on 1 September 2025. It applies to large organisations where an associated person, such as an employee, agent or subsidiary, commits a fraud intended to benefit the organisation (GOV.UK).

The scale is not shrinking either. UK Finance reports that criminals stole £1.28 billion through payment fraud in 2025, with authorised push payment fraud losses up 19% to £576.4 million (UK Finance, June 2026). Behind many of those losses sit UK companies that receive, move or hide the money.

What counts as a connected company?

In practice, a company is worth adding to your map if it shares one or more of the following with your subject.

Shared people

Current or former directors, company secretaries, PSCs, shareholders or LLP members. Resigned appointments matter as much as current ones: a director who stepped down a month before the fraud is still part of the story.

Shared ownership

A common parent, a corporate PSC, or ownership chains that converge on the same individuals, trusts or overseas entities.

Shared footprint

The same registered office, service address, accountant, auditor, trading name or website, or a recognisable pattern in incorporation dates, name changes and business descriptions.

Shared assets and money

Charges in favour of the same lender or individual, property moving between entities, and intercompany balances in filed accounts.

How to map connected companies: eight steps

Building the network

1. Fix your starting point. Record the subject's company number, registered name, previous names and the officers and PSCs in post at the dates that matter to your investigation, not just today. Names change; company numbers do not.
2. Pull every appointment for every officer. For each director and secretary, list all their current and resigned appointments. Watch for name variations and different dates of birth or service addresses for what may be the same person, and confirm matches before you rely on them.
3. Trace each PSC chain to an individual. Where a PSC is another company, follow it up the chain until you reach people. Note any statements that there is no registrable PSC, corporate PSCs registered overseas and chains that run into trusts. These are where control is most often obscured.
4. Group the results by address. Cluster companies by registered office and service address. A shared trading address can be a strong link; an address used by large numbers of unrelated companies, such as a formation agent's, is weaker evidence on its own, but worth noting.

Testing the links

5. Compare patterns across companies. Line up incorporation dates, name changes, business descriptions and filing dates. This is exactly how the seven Manchester companies were connected: not by a shared name, but by similar histories.
6. Read the filings for anomalies. Check the accounts type, the auditor named and whether that firm confirms it did the audit, late or missing confirmation statements, and repeated changes of accounting reference date. Since 18 November 2025 identity verification has also been a legal requirement: existing directors provide their personal code with the company's next confirmation statement, and PSCs who are not directors provide theirs within the first 14 days of their birth month (GOV.UK). A missing or late verification is a reason to look harder.
7. Layer on charges, CCJs and property. Registered charges show who has lent against which entity's assets. County Court Judgments show which companies are not paying their debts. Property searches show where value actually sits, and UK land held through an overseas entity sits on a separate register: since 1 August 2022, overseas entities that buy, sell or transfer UK land have had to register with Companies House and disclose their registrable beneficial owners or managing officers (Companies House).
8. Record and evidence the map. Save each source record with the date you retrieved it, note why each company was added, and grade each link (confirmed, probable or possible). A map that cannot be explained line by line will not survive cross-examination or a regulator's questions.

Red flags checklist

As the network takes shape, look for:

• Several companies incorporated within days of each other, by the same people or at the same address
• Frequent name changes, or a business description that does not match the filed accounts
• Accounts naming an auditor that denies doing the work
• Directors who resign shortly before a company fails and reappear at a new one
• PSC chains that end in an overseas entity, a trust or a statement that no PSC can be identified
• Property or charges held in a different entity from the trading business
• CCJs clustered across companies that share directors
• No genuine business presence at the registered office

For the specific pattern of directors closing one company and restarting under a new name, see our phoenix company red flags checklist.

Running it under time pressure

Most investigations start with a deadline: a freezing order application, an insolvency report, a self-report decision or a client asking what else is exposed. Three habits keep the work fast without cutting corners.

• Work outwards in rings. Map first-degree connections fully before moving to the second degree. Most useful links sit one or two steps from the subject.
• Search people, not just companies. Officer and PSC searches surface companies that a company-name search never will.
• Use a tool that joins the records. Building a network by hand from individual filings is slow. A platform such as ProbeDigital Corporate Links maps the people and companies around a business in one view, and UK & Foreign Ownership shows the corporate and overseas owners behind UK property.

FAQ

What is connected-party analysis in a fraud investigation?

It is the process of identifying the companies and individuals linked to a subject through shared people, ownership, addresses, assets or money, so that investigators can see where funds and assets may have moved and who controls them.

Can I rely on the PSC register alone?

No. The PSC register is a starting point. Corporate PSCs need tracing further up the chain, entries can be wrong or out of date, and control can sit with people who are not registered. Cross-check it against officer appointments, filings and property records.

How far should the map go?

Go as far as the evidence leads and the mandate allows. In practice, map first- and second-degree connections fully, and go further only where a specific link, such as a shared charge holder or property, justifies it.

Does Companies House identity verification help investigators?

It helps. Verification makes it harder to appoint fictitious directors, and a director or PSC who has not verified when they should have is itself a useful signal. It does not tell you who really controls a company, so the network still needs mapping.

Next step

ProbeDigital brings UK company ownership, PSC chains, directors' other appointments, charges, CCJs and property, including property held by overseas entities, into one corporate intelligence platform, so your team can see the network before it chooses where to dig.

See it on a company from one of your own matters: book a 40-minute demo, or sign up free and run your first search today.