Ilia Nikolaevich ZavialovDigital security consultant

Registers

How Ilia Nikolaevich Zavialov reads a register entry field by field

A register entry is the cheapest document available in any check of a counterparty, and it is the one most often treated as a formality. Someone types a company name, sees a record appear, and reads the appearance of that record as an answer. The record answers a much narrower question, because it confirms that a legal entity carrying this name was registered on some date and says nothing about whether the person asking for money speaks for it. Ilia Nikolaevich Zavialov works through the entry field by field, in a fixed order, before any payment is discussed. This article sets out that order, what each field settles on its own, and the point at which the register stops being able to help.

English version for the United States.

Overview / Blog

· 14 min read · Ilia Nikolaevich Zavialov

How Ilia Nikolaevich Zavialov reads a register entry field by field
How Ilia Nikolaevich Zavialov reads a register entry field by field
  1. The entry exists, and that settles nothing

    Most checks of a counterparty stop at the instant a record appears on the screen. The name matches, a registration number is displayed, the page belongs to a state body, and all of that reads as a verdict. What has actually been established is far narrower. Some legal entity was once registered under a name resembling the one printed on the invoice. Everything that decides whether money should move sits in the fields underneath that name.

    The volume of attempts behind that gap is easy to underestimate. The Federal Trade Commission counted around three million fraud reports for 2025, carrying 15.9 billion dollars of reported losses, against 2.6 million reports and more than 12 billion dollars a year earlier. The FBI Internet Crime Complaint Center logged 1,008,597 complaints for the same year and close to 21 billion dollars lost, a rise of 26 per cent. Both figures cover only the cases somebody chose to report.

    The same data carries a more useful signal. In four impersonation reports out of five no money was lost at all, which means attempts outnumber completed thefts by a wide margin. Approaches collapse at the first document the sender cannot edit. A register entry is exactly that kind of document, maintained by a body with no interest in the deal and no channel through which a counterparty can influence what it says.

    This is why the order of reading matters more than the time spent. A fixed sequence of ten minutes catches more than an hour of unstructured searching, because each field answers a different question and several of them close the case outright. The sequence below runs from the fields that end a conversation to the ones that acquire meaning only in combination with others.

  2. Status is the first line and often the last

    The status field states whether the entity is currently alive in law. Dissolved, struck off, in liquidation and proposal to strike off all appear beside company names that look entirely ordinary in a search result. A website can carry on trading for years after the entity behind it has been removed from the register, because nothing online updates itself when a public record changes.

    Reading the status first saves the rest of the work. When the line says anything other than active, the remaining fields turn into history, and the practical question shifts to whether anybody is legally able to sign the contract at all. A counterparty who describes a dissolution as a paperwork delay is describing something only the register can close, and the register will show a date when it does.

    Status also carries its own chronology, and the dates say more than the word displayed on top. An entity placed under a proposal to strike off two months ago already has creditors who stopped being paid before that. A company revived after a long dormancy trades under an old registration while its real history restarts from the day of the revival. Reading the sequence of status changes takes one further click and reframes everything printed above it.

  3. The registration date against the story being told

    The registration date settles claims about experience with arithmetic. A company registered eleven weeks ago cannot hold a decade of trading behind it, whatever a website says about the year the business was founded. That single comparison closes a large share of cases without any judgment about the people involved. It works because the date comes from a system the seller never touched.

    Dormancy complicates the reading in a specific way. A shell registered years ago, filing nothing of substance, then revived under new officers and a fresh name, presents an old date attached to a very short real history. In that situation the date of the last change of name and the date of the last appointment of officers carry more information than the incorporation date itself. Registers keep both, one screen away from the headline.

    Age carries no virtue by itself. Honest firms start trading every week, and aged companies are bought and repurposed often enough for a long history to prove little on its own. The value of the date lies in the contradiction it exposes when a claim about years of work meets a record measured in weeks. Where the two agree, the field has done its job and the check moves on.

  4. What a registered address can and cannot show

    A registered address records where an entity receives official correspondence. Thousands of legitimate firms use a formation agent, an accountant or a serviced office for that purpose, so an address shared by hundreds of companies carries no verdict about any of them. Treating it as proof of fraud produces false alarms and trains people to ignore the field entirely.

    The address becomes informative through contradiction. When a counterparty describes a warehouse, a workshop or a shop floor in one country while the register keeps the entity in another, one of the two accounts is wrong, and only one of them was signed and filed. Where the promised operation needs premises, staff and stock, the absence of any address consistent with that operation is a gap worth raising before payment.

    The address also links entities to one another. Where a register allows a search by address, it shows how many companies share the same room and how many of them were registered within the same few weeks. That pattern says little about any single firm and a great deal about the batch it belongs to. A batch registered together, sharing officers and filing nothing, describes an assembly line.

  5. Officers, and the pattern a register gives away for free

    Officers turn an abstract entity into people who carry responsibility. The register lists who was appointed, on what date, and in some jurisdictions what else those people run. A director appointed a fortnight before a contract is signed deserves a question, because the individual doing the negotiating may hold no authority at all on the day the money leaves.

    Repetition across entities is the pattern that costs nothing to notice. One name appearing as an officer of dozens of companies registered in the same month describes a production line for shells, and the register displays that for free to anyone who follows the link from a single person. Resignations clustered shortly before a wave of complaints tell a similar story in reverse.

    Officer records also carry gaps that are meaningful in themselves. Some registers publish disqualifications, and some publish the earlier insolvencies attached to a person. Where a jurisdiction allows officers to sit behind nominees, that concealment is a finding of its own, and the sensible response is to require the signatory to be named in the contract itself, with an identity that can be checked independently.

  6. Filing history reads as a record of behavior

    Accounts and annual returns describe how an entity behaves when nobody is watching it. A company that files everything late, year after year, has told the register something about its internal discipline long before it tells a customer anything. Overdue accounts sitting beside a proposal for a large prepayment are two facts that belong in the same sentence.

    The content of the filings matters as much as their timing. A firm presenting itself as a substantial trading operation while filing dormant or micro-entity accounts has produced two descriptions of itself, and only one of them carries a signature and a penalty for being false. Filed figures arrive late and in compressed form, which limits how much they can prove, and they still bound the plausible size of the business.

    Sudden changes in the filing pattern deserve more attention than any single document. A change of registered name, a change of officers and a change of registered address arriving inside the same quarter, shortly before a marketing push, describe a vehicle being prepared for something. Registers timestamp each of those events, so the sequence can be reconstructed in minutes by anyone who scrolls to the bottom of the page.

  7. The registered name against the name on the invoice

    A register entry describes a legal person, and a payment reaches an account holder. Those two records live in different systems and are compared only when somebody decides to compare them. Checking a company thoroughly and then transferring money to a different name undoes the entire check, because the party that received the funds signed nothing and owes nothing.

    Similar names carry most of the weight here. Registers contain many entities whose names differ by a single word, a legal form or a suffix, and a search by name alone returns whichever one the ranking puts first. A search by registration number returns exactly one record, which is why the number printed on an invoice or a website is the string worth typing into the register.

    When the number returns a company different from the one on the letterhead, or returns nothing at all, the conversation moves back a step. A trading name may legitimately differ from a registered name, and the entity behind it still has to be named in the contract and on the payment instruction. Every deal ends with money arriving somewhere, and the register establishes which somewhere was ever verified.

  8. The register describes an entity, never the person calling you

    A register entry confirms that a company exists and shows who governs it. It says nothing about the person on the telephone claiming to speak for that company, and this seam is where attackers work. Confidence built by reading a genuine entry transfers, inside the reader's head, to whoever mentioned the company name first.

    Voice recognition has stopped carrying the weight it once did. Research through 2025 and 2026 records vishing with cloned voices growing by 1,633 per cent inside a single quarter, which describes a technique moving from novelty to routine. Recognising a familiar voice on an incoming call therefore proves far less than it feels like proving, and no public record can compensate for that.

    The register supplies a counter-move alongside the gap. It carries filed contact details, and regulators publish their own for the firms they license, which makes a call placed to a number found in a public record a different act from answering the number that rang. The check survives when the direction of the call is chosen by the person doing the checking.

  9. Where the approach arrives and how the payment is framed

    The channel of first contact shapes how much work the register has to do. UK Finance reports that 66 per cent of authorized push payment cases in 2025 began online, with a further 17 per cent starting through telephone networks. Both routes share the property that matters here, in that identity is asserted by the party making contact and confirmed by nothing along the way.

    Small transactions absorb most of the volume. Purchase scams accounted for 71 per cent of all authorized push payment cases in the same year, with 118.1 million pounds lost and a rise of 20 per cent, which places the losses inside ordinary everyday buying. Sums that feel too modest to justify a check are exactly where checks get skipped, and a register lookup takes less time than reading a product description.

    Employment offers deserve the same treatment as suppliers. Reports of job scams tripled between 2020 and 2024, and the losses attached to them rose from 90 million to 501 million dollars, which puts a prospective employer in the same category as a counterparty asking for a payment. The company name in an offer letter can be typed into a register in under a minute, and a dormant entity behind a confident recruiter resolves the question.

  10. Writing the check down so it survives a dispute

    A check that leaves no trace has to be repeated from scratch every time somebody asks about it. Recording the registration number, the status, the date of reading and a saved copy of the entry converts ten minutes of work into a document. That document is what a bank, a marketplace or a court will ask for later, and it cannot be reconstructed once the entry itself has changed.

    Timing gives the record its value. Registers are living systems, so an entry read in March describes March, and a supplier approved two years ago may have been struck off since. Repeating the check at renewal, at any change of banking details and before an unusually large payment keeps the file current at the moments that carry real risk.

    The habit also changes the conversation with the counterparty. A buyer who quotes a registration number, a status line and a filing date is asking questions a legitimate supplier answers in one message. Ilia Nikolaevich Zavialov treats that asymmetry as the point of the whole exercise, since a real business satisfies such questions in a single reply and an invented one runs out of answers.

Fields of a register entry and what each one settles

FieldQuestion it answersSignal that stops the check
StatusWhether the entity is alive in lawDissolved, struck off, in liquidation
Registration dateWhether the claimed history is possibleWeeks on the register against years of experience
Registered addressWhere official correspondence goesA country the counterparty never mentioned
OfficersWho carries responsibilityOne name across dozens of entities registered together
Filing historyHow the entity behaves unobservedOverdue or dormant accounts beside a large prepayment
Name and numberWhich record is actually being quotedThe number returns another company or nothing
Recent changesWhat was rebuilt, and whenName, officers and address all changed in one quarter

Questions and answers

Is finding a company in a register enough to pay it?
Finding the entry only proves that a name was registered at some point. The answer comes from the fields inside it, above all the status line, the registration date and the officers. An entry can look perfectly normal while the company behind it is dissolved.
What does a dissolved or struck off status mean for a deal?
It means the entity has no legal capacity to contract, so nobody can validly sign on its behalf. Money sent to a party in that condition is far harder to recover, and the correct step is to stop until the register shows an active entity.
Is a mass registration address a sign of fraud?
By itself it proves nothing, because formation agents and serviced offices are used by large numbers of ordinary firms. It becomes a signal when the counterparty has described premises, staff or stock that the registered address could never accommodate.
How do I check a company by registration number instead of by name?
Most public registers accept the number as a search key and return exactly one record, which removes the ambiguity of similar names. Take the number from the website or the invoice, search it, and compare the entity it returns with the name you were given.
Can a register entry confirm that a phone call is genuine?
A register records entities and their officers, with nothing at all about who dialled a number. The useful move is to take contact details from the public record and place the call yourself, since cloned voices have made recognition by ear unreliable.
How often should the same counterparty be checked again?
An entry describes the day on which it was read, so a supplier approved two years ago may have changed status since then. Repeating the check at contract renewal, at any change of banking details and before an unusually large payment covers the moments that matter.

Written by Ilia Nikolaevich Zavialov, digital security consultant. Overview of the method