The study commissioned by life assistance company CPP shows that identity theft has affected almost 100,000 small businesses (1), costing them an average of £13,500 each – £1.3bn across the country – enough to cripple some businesses.
One in five SMEs (22 per cent) admit they may be vulnerable to corporate identity theft due to lax procedures and protocol – but this figure could soar as criminals catch-on to a loophole with Companies House data processing.
Fraudsters’ ‘modus operandi’ typically involves changing company directors’ details or the company’s registered office address, by submitting false documents to Companies House through amendments to the company records via a simple submission of a paper form.
Under current systems, Companies House does not verify paper document validity. There are no checks if impostors try to register as new company directors or change a business address. And legitimate business directors are not notified if new company documents are filed, so they may never be made aware of fraudulent claims.
The majority of SME company directors (87 per cent) are not aware of these loopholes, which could put them at risk of corporate identity fraud.
Only one in 10 (14 per cent) is taking advantage of the PROOF scheme offered by Companies House, which offers secure electronic filing of documents to protect them against potential fraud.
And SMEs are also exposed to risk through their own data handling. Nearly half (47 per cent) say that their current employees have access to sensitive company data, almost two-thirds (61 per cent) admit they don’t encrypt company data, and a further fifth (22 per cent) allow employees to take sensitive documents out of the office.
While over a third (34 per cent) of SMEs confess that they don’t understand what corporate ID theft is – they need to as the reality is real. Victims of corporate fraud have experienced fraudsters applying for corporate credit/debit cards, spending money on credit, ordering goods without authorisation and even being able to withdraw funds direct from corporate accounts.
And the impact is severe – with victims reporting their company credit rating being affected as a result, damage to their company reputation and losing customers.
Michael Lynch, fraud expert at CPP said: “Our report demonstrates that corporate identity fraud is a real concern for businesses. It’s key that organisations ensure that they have secure methods of storing sensitive information to avoid falling victim to this growing problem.
“The current loopholes in the Companies House system make it worryingly easy for impostors to steal company information, and forge its identity, which can have huge financial impacts. We urge SMEs to take advantage of the safe online systems in place, to protect their business and for many SMEs, their livelihood.”