Someone Registered a Business at My Address. What a Filing Office Can and Cannot Undo

Why the filing went through without anyone checking the address

State business filing offices are, in most states, repositories. The National Association of Secretaries of State published a report titled “Business Filing Fraud”, written for state business filing agencies, in September 2025. It describes the role directly: “In most states, the Secretary of State’s business filing role is ministerial, and the office serves only as the official repository for business records. As long as the basic filing requirements are met, the office may have little or no authority to question or reject a document submitted for filing or to verify information included in the filing.”

Florida makes the consequence visible inside a single subsection. Section 605.0201(2) lists what articles of organization must state, and two consecutive paragraphs ask for addresses under different terms. Paragraph (b) asks for “The street and mailing addresses of the company’s principal office.” Paragraph (c) asks for “The name, street address in this state, and written acceptance of the company’s initial registered agent.” One line carries a consent document. The other carries addresses and no signature.

The registered agent line carries a document the statute requires before the filing can be accepted. Florida requires the agent to file a written statement accepting the appointment, and that statement must say the agent is familiar with and accepts the obligations of the position. Nothing equivalent attaches to the principal office field, the field this article is about and the one that ends up holding a home address.

This is where a common assumption breaks. Consent is not missing from the law. Ohio prohibits including an address in a document filed with the secretary of state without the consent of either the owner or occupant of that address, under Section 111.243, effective October 24, 2024. A New Hampshire law in effect since January 1, 2026 reaches further and names the “business, mailing, or registered office address” of a person who did not consent. Connecticut goes further still. It prohibits using a person’s name or address in a business filing without that person’s written consent, attaches criminal penalties to violations, and asks for proof that the entity is authorized to use the address it lists as its principal business address. Colorado works the other way around. It does not prohibit the filing, and it lists including an address in a filed business document without the consent of the owner or occupant of that address as a ground for the complaint process in the section below.

What those laws mostly change is what happens afterward. They give the state a rule to enforce and the affected person something to point at. Ohio and New Hampshire do not put a clerk between the form and the record. Connecticut is the one of the three that does, and the association report describes it as authorizing the office to verify the information in a filing, authenticate the person submitting it, and reject filings that cannot be verified. The same report names other states that have given their offices room to refuse a filing they believe is fraudulent.

What the public record shows, and which states let anyone search it by address

People discovering this often want to know how a stranger found their address in the first place, and whether anyone else can now look them up the same way. Whether a filing record can be searched by address at all depends on the state, and the answer is less uniform than the search results suggest.

Florida runs a dedicated address search. The page is titled “Search for Corporations, Limited Liability Companies, Limited Partnerships, and Trademarks by Street Address,” with a single street address box and a separate search by ZIP code. It matches on the beginning of the stored address string rather than anywhere inside it, which changes how you have to type. Searching for “100 Main St” returns records stored as “100 MAIN STREET STE 302.” Searching for “MAIN STREET” returns only records that start with those words, so the same “100 MAIN STREET” record does not appear. Adding a suite, a city, or a state produces no records, because the stored string does not read that way. Shorter searches find more.

We opened the search forms in six states in September 2026 and read a seventh, Illinois, from an archived copy, to see which ones accept an address at all. Three more, Ohio, New York, and Pennsylvania, blocked our request or were down for maintenance when we tried, so the table has no row for them, and that blank is not an answer.

Which office takes the complaint

There is no single national process. The association report names six states that have established a formal complaint mechanism for fraudulent business filings: Colorado, Connecticut, Indiana, Minnesota, Ohio and Tennessee. Outside that group the report describes a harder path, where the affected entity may need to submit new filings or obtain a court order to correct or remove the unauthorized filing, and where dissolving a fraudulently formed entity may require court action. That path is written for a business whose record was taken over. A resident with no entity of their own has nothing to file, which leaves the court order, or the complaint process in the states that run one.

Colorado publishes its process in a business FAQ on fraudulent filings. The complaint is filed by an individual, requires an affirmation under the state’s perjury statute, and needs no court order to start. Colorado also names two situations its process will not take. The process is not for disputes where you know the other party, such as a disagreement with a partner, a family member, or a landlord. It also does not cover a business that never updated its records after moving out of an address you now occupy, because keeping records current is the entity’s own responsibility. A previous tenant who left a stale address behind is a different problem from a stranger who took yours.

Ohio built its process into statute. Section 111.243 lists what a complaint must include, including the document identification number of the filing and a statement made under penalty of perjury, and gives the filer twenty-one days to respond before the allegations are treated as admitted. Tennessee applies a clear and convincing evidence standard and voids the challenged record when the standard is met. New Hampshire sits outside that group of six with a route of its own, where a person affected by a fraudulent filing submits a sworn statement and the office is authorized to cancel filings it finds unauthorized or fraudulent.

What a corrected record actually looks like

The word people reach for is delete, and it is usually the wrong word. Colorado spells out what a successful complaint produces. The office will mark the business to indicate that it is unauthorized or fraudulent, remove any address and any name that was included without authorization, and disable the ability for anyone to make additional filings on that record. The entity does not vanish. Its record stays in the database carrying a mark, minus your address, frozen against further changes. Colorado also tells complainants the process may take several months.

Ohio wrote its outcome into the same statute the complaint runs on. Following a prima facie showing, where an entity was created without authorization or for fraudulent purposes, the office cancels the business record with a notice that the entity is unauthorized or fraudulent, redacts each address and name that was used without authorization, and disables additional filing functionality on that record. Cancelled is a stronger word than marked, and the record still stays where it is.

Minnesota goes furthest, under a law in effect since January 1, 2026. Once the office issues a final order deeming the filing fraudulent, the filing is treated for legal purposes as if it never existed, and where a business was registered using a Minnesota resident’s name, address, or identity without authorization, the business is deemed dissolved. The office still marks the filing or the record as unauthorized or fraudulent, redacts the names and addresses that were used without authorization, and keeps a copy of the final order. Treating a filing as if it never existed is a statement about its legal effect, and all three states leave something in the database.

Those outcomes sound alike in one sentence and behave differently in practice. If you are checking your own state, ask the office what the record says when they are done, and whether anything stops the same person from filing again.

The mail keeps arriving after the record changes

Colorado answers this one bluntly in the same FAQ: “We do not have control over what mail is being delivered to your address.” Correcting a filing does not reach the mail stream, and the office notes you may keep receiving mail for the business depending on what that business is doing.

The instinct is to write “Refused” on the envelope and put it back. That endorsement belongs to someone else. USPS rules give delivery control to the addressee, and the refusal provisions say that the addressee may refuse a piece when it is offered, or after delivery may mark it refused and return it within a reasonable time if it has not been opened. Mail addressed to a company you do not own does not make you its addressee.

The endorsement list belongs to the Postal Service rather than to you. USPS marks undeliverable mail with a reason drawn from its own table, and the reason that fits this case is a delivery attempt where the addressee is not known at the place of address. The same table carries a dispute category for pieces where the right to receive them is contested, which postal officials handle through their own channel rather than at the mailbox. Your part is to hand the piece back unopened and let the carrier apply the reason.

Opening it is a separate matter with a federal statute behind it. Under 18 U.S.C. 1702, taking a letter before it has been delivered to the person it was directed to, with a design to pry into the business or secrets of another, or opening it, carries a fine or imprisonment of up to five years. The envelope is evidence of the address misuse, and it is more useful photographed than opened.

One federal form belongs here, and only for one thing. IRS Form 14039-B is the business identity theft affidavit, and its first checkbox describes exactly this reader: someone who is not a business owner, has not applied for an employer identification number, the EIN a business uses to file taxes, and is receiving IRS notices for an unknown business in their name with an assigned EIN. It is a tax channel. It tells the IRS to stop treating you as that business, and it does nothing to the state filing that started it.

Why your address was the one, and what changes it

Colorado’s filing office, its attorney general, and the Colorado Bureau of Investigation describe the motive together. One type of business identity theft involves hijacking an existing business by changing its information, including the entity address and registered agent. A second type is where someone creates an entirely new business using a victim’s address, and sometimes the victim’s name as well. In both cases, the guidance says, the point is to establish lines of credit with banks or retailers, and then buy items that can be exchanged for cash or sold with relative ease.

That explains the shape of the problem. The address is doing one job in a credit application: it has to look settled. The same association report describes the takeover version in the same terms, with altered information used to obtain loans or lines of credit.

That leads to the question with no comfortable answer: nothing you do to a filing prevents the next one. The complaint processes above are all after the fact, and the consent statutes in Ohio and New Hampshire operate after a filing is made rather than in front of it. Connecticut is the one state here that checks first, and it also runs one of the six complaint processes.

If you do run a business of your own, there is a second exposure worth separating from this one. If your home address is on your own formation filing, on an annual report, and in a licensing directory, it is already in the set of records that get scraped, and as the state table shows, some states hand out an address index while others do not.

For anyone who does file something of their own, an LLC registration, an annual report, or a professional license, that is the argument for keeping a separate business address, one you have written authorization to use, on the slots that allow one, which for most filers means the principal office or mailing address rather than the registered agent line. It does nothing about a filing that already exists. The registered office and registered agent slots are a separate question with their own rules, and the same New Hampshire law that added the consent requirement names virtual office and mail forwarding services as ineligible for the registered office slot from January 1, 2026. It changes what a stranger finds the next time they go looking, and it keeps your own filings from being the thing that put your home in the index.

If you have no filings of your own, that second layer of exposure is not yours to close. What is left is the complaint process if your state runs one, and a court order if it does not. Either way the question to put to the office is the same: what will the record say when they are done, and what happens if the same address turns up on a second filing.