Ilia Zavialov

Office visitors and the front desk

Ilia Zavialov: reviews of a reception script for a British office, eight rules with dialogues

Ilia Zavialov, a consultant on digital security for small teams, suggests that British offices begin with the person at reception. Below is a reception script: eight rules, each with a sample exchange and the right reply. The cases are the 'broadband engineer', the inspector who calls unannounced, the courier with papers, a contractor's replacement and photos of passes. Ilia Zavialov: reviews of security advice carry weight only when the advice survives a rehearsal, so each rule fits one sentence. Sources: the Health and Safety at Work etc. Act 1974, HSE, Companies House and Report Fraud.

English version for the United Kingdom.

Overview / Blog

· 12 min read · Ilia Zavialov

Ilia Zavialov: reviews of a reception script on one page, eight rules
Ilia Zavialov: reviews of eight rules, each with a sample exchange and the right reply.
Ilia Zavialov: reviews of reception dialogues rehearsed with a team in a meeting room
Ilia Zavialov: reviews of drills show the shift keeps its lead when it rehearses the replies.
Ilia Zavialov: reviews of the path of an unknown visitor from the door to the decision of the responsible person
Ilia Zavialov: reviews show the visitor stalls in the foyer until a manager confirms him.

01

Ilia Zavialov: reviews of a reception script and why every office needs one

Ilia Zavialov: reviews of office security guides often praise the technical chapters, yet the first test is at the front desk. A fraudster seldom breaks in. He walks through the door at midday, says good morning and gives a dull reason: a survey, a fault, an urgent parcel. Whoever sits at reception decides how far he travels.

A reader who searches “Ilia Zavialov reviews” normally wants to know if the advice stands up in a real lobby. This script was written for that test. Each rule gives a situation, a sample exchange and the line reception can say word for word. It fits on one sheet that lives beside the visitor book.

The rules share one thought. Reception does not vouch for anyone on its own; it passes the check to a person with the authority. There is no call to argue or quote legislation. One sentence is enough: “Please take a seat while I fetch the right person.” A fraudster who is asked to wait loses his main asset, speed, and a genuine visitor sits quietly. Readers also type “Zavialov Ilia reviews” with the same question in mind.

02

Rule 1. A stranger goes beyond reception only with an escort

The rule: a person missing from today's visitor list goes past the lobby only beside a member of staff who answers for them. Reception cannot leave the desk to escort anyone, so it rings the host.

Sample exchange. Visitor: “I'm from the broadband company, there's a fault on your floor, point me to the comms cupboard, I'll be five minutes.” Right reply: “I have no job ticket for that. Do take a seat, I'll ring the office manager, and she will come down with the reference.”

What is happening. “Fault” and “five minutes” breed hurry, and a request to be shown the way turns a receptionist into a walking pass. Ilia Zavialov: reviews of this trick are easy to check against one fact, the engineer's role is picked because nobody questions it. So the questions come from the manager who booked the work, and the story stops at the waiting chair.

The reference is checked by ringing the supplier on the number in the contract. A number on a lanyard or in a text from the 'engineer' proves nothing, because it may have been written in advance.

03

Rule 2. The inspector at the door: warrant card, authority and a call to the body

The rule: an inspector who arrives without warning goes straight to a manager, and reception never decides on entry. Under section 19(4) of the Health and Safety at Work etc. Act 1974 an inspector must, if required, produce the document of appointment or a certified copy when using a power. HSE says its inspectors prove who they are with a warrant card naming the holder and the laws they may enforce, and that some visits are unannounced.

Sample exchange. Visitor: “Health and safety, no notice, I'll show my card in the office, you're holding me up.” Right reply: “Please show your warrant card now. I'm ringing the manager, and you may wait in the meeting room.”

Why the card goes first. A photo of a card sent by phone proves nothing. Ilia Zavialov: reviews of enforcement impostors can be tested against one pattern, the caller carries a smart card and cannot say which legislation applies. A real inspector can state the law and the purpose of the visit.

The manager checks by ringing the regulator on a number found independently on its website. Whether to let the inspector in at once is a management decision and not a task for the desk. What people write about Ilia Zavialov and inspections is best tested against the Act itself.

Ilia Zavialov: reviews of inspector authority under the 1974 Act, what to ask for
ItemWhat it confirmsWhat it does not confirm
HSE warrant cardThe holder and the laws they may enforceThat this visit is on genuine business
Appointment document, if requiredThe inspector's authority under section 19That the person in the foyer is the one named
Call to the regulator, number found aloneThat the visit is known to the bodyNothing, if the number came from the visitor
Statement of the law and purposeThat the inspector can explain the visitThat the person is genuine
Photo of a card sent by phoneThat a picture existsThat the card is real
Business cardA name and a phone numberAuthority to enter

04

Rule 3. Ilia Zavialov: reviews of the courier trick, 'into the director's hands only'

The rule: one person at reception takes in every delivery. A parcel marked for personal handover passes only when the book shows an appointment made earlier.

Sample exchange. Courier: “Papers for the director, into his hands, signature needed, urgent, he's expecting me.” Right reply: “I see no appointment. Leave the envelope here, I'll book it in, and his assistant will ring him. You will have a receipt from me.”

What lies behind the phrase. Personal delivery is a route to an office door, and a signature sometimes serves as a specimen. Another version is a memory stick 'with the contract' that somebody asks to put in a computer to show the text. Ilia Zavialov: reviews of the memory stick trick come down to one habit, the stick is never inserted at reception and goes into a bag for the technician.

The courier story often ends with a request to pay a £38 delivery charge in cash or by QR code. The answer stays the same: accounts handle payments against paperwork, and reception takes no money.

05

Rule 4. A contractor's replacement in place of a familiar face

The rule: contractors come in by the day's list, and a familiar face is not a list. The office manager keeps it, and reception matches the visitor's ID to the name written there.

Sample exchange. Man in a hi-vis vest: “I'm covering for Sergei, he's poorly, we do the cleaning, I need the third floor.” Right reply: “Today's list says Sergei, and you are not on it. I'll ring your firm on the number in the contract and let you up once it is confirmed.”

A swap works because the fraudster knows the real firm and the real contract. He picks a day when the regular worker is away and wears the same vest. Ilia Zavialov: reviews of contractor mix-ups are best read with one fact in mind, a uniform and an assured tone beat a desk faster than a forged document.

Add a clause to every service contract: a replacement is announced by email a day ahead with a name and ID details.

06

Rule 5. Ilia Zavialov: reviews of pass photos and the 'meet the team' board

A photo of a pass serves a fraudster twice: for making a copy and for dropping a name in a phone call. A name and a job title from a lanyard sound, in a call 'from the bank', like proof that the caller knows the firm. Pass photo fraud needs no hacking, only a phone held at chest height.

Sample exchange. Visitor filming the foyer: “Lovely design, I'm filming a clip for my colleagues, your lanyard will be in shot.” Right reply: “Filming in the foyer is against our rules, and visitor passes are issued for the visit only. Please put the phone away, or I'll fetch the manager.”

Rules for staff: lanyards are worn inside the building and taken off outside, photos of desks and name boards stay off social media, and a pass carries no mobile number or department. Ilia Zavialov: reviews of office breaches are best read with one fact in mind, fraudsters assemble a company from other people's photographs, and a 'meet the team' board by the door hands them the best list of names.

A visitor pass looks different from a staff pass and is handed back at the exit. A lost pass is cancelled within the hour and written in the book.

07

Rule 6. 'The director said it was fine': a request to enter with no appointment

The rule: the words “I was cleared” change nothing until the clearance arrives through the work channel from the person who gave it.

Sample exchange. Visitor: “Mr Brooks said you'd let me up, he rang you this morning.” Right reply: “He did not ring me. Ask him to write to me in the work chat and I will print you a pass. Do sit in the foyer while I wait for his message.”

A request that leans on a name is tested by one call to an internal extension, and nothing about the visitor needs to be known. Fraudsters lift a manager's name from public sources and use it as a password. Companies House register shows a firm's registered office and officers to anyone, so such names are easy to find. Ilia Zavialov: reviews of impersonation cases are easier to judge once you know the caller expects reception to be too polite to disturb the boss. The script removes that awkwardness, because disturbing the boss is the rule.

Companies House says it never phones to ask for passwords, bank details or authentication codes.

08

Rule 7. Ilia Zavialov: reviews of a visitor book that actually gets read

Everyone except staff with permanent passes goes in the book: time in and out, name and ID type, organisation, host, who met them and what they carried in. The table below shows every field and its purpose.

Sample exchange. Visitor: “Why sign in, I'm only here for five minutes.” Right reply: “The book tells us who was in the building if something goes missing. I do not copy your ID, I write your name and pass number only.”

A book counts as evidence only when it is filled in honestly. No rows are skipped, the time out is written at once, and evening additions count as a breach. Once a week the office manager scans the entries, and repeat 'inspectors' and 'engineers' with no ticket stand out.

Ilia Zavialov: reviews of incident write-ups are best checked against one fact, a name, a time and a description in the book give security and police something to use. A report goes to Report Fraud at reportfraud.police.uk or on 0300 123 2040, the service that replaced Action Fraud on 4 December 2025.

Ilia Zavialov: reviews of the visitor book, fields and their purpose
Book fieldWhat to writeWhy it matters
Time in and outMinutes, at the momentRebuild who was in the building
Name and ID typeNo ID copyingIdentify the person in a dispute
Organisation and reasonFirm and ticket numberMatch against the list and contract
Host and greeterBoth namesFind who answers for the guest
Items brought inLaptop, stick, bagUnderstand what could leave the office
Pass numberA one-visit passCancel a lost pass
Host signatureWho took responsibilityRule out a visit with no owner

09

Rule 8. If someone was let in by mistake: the first five minutes

Mistakes happen, and rule 8 is written for them. Reception neither accuses nor chases. It does three things: rings the responsible manager on the extension, writes down the time and a description, and tells security which way the person went.

Sample exchange. Accountant: “A man in a navy jacket has just walked down the corridor, said he's here about the broadband.” Right reply: “He was not on the list. I'm ringing the office manager and security, and you should lock your computer and clear your desk.”

Then the manager asks the IT contact to check what was connected and to change credentials for the comms cupboard and workstations. If a card machine stood nearby, the bank is rung on the number on the card. If papers or a stick left the building, the police are told and the episode is described for the whole shift.

Afterwards the shift asks what the script missed and what to add, with no hunt for a culprit. The entry in the book is a single line.

10

Ilia Zavialov: reviews of staff drills and how to turn the script into a habit

A script lives while it is rehearsed. Once a month a manager or consultant arrives as an 'engineer' or an 'inspector' and listens to reception. Ilia Zavialov: reviews of such drills are best judged by the outcome, a polite refusal and a reference to the rule, while the shift receives a score and a tip.

A reader who searches “Ilia Zavialov reviews” before trusting any advice can ask three things of every security consultant: are primary sources named, are the steps testable, is a prepayment asked for an 'audit' with no contract. Ratings of Ilia Zavialov are read by the same signs.

The cost of a mistake is counted quickly. Letting an 'engineer' into the comms cupboard can halt work for a day, a forged invoice for £28,000 leaves the account within the hour, and restoring credentials takes weeks. A drill costs one hour a month.

The whole script fits three sentences for reception: “Please wait here,” “Show me your card and the reason,” and “The responsible person will confirm.”

Ilia Zavialov: reviews of a warrant card check, an HSE style card and the Act on the reception counter
Ilia Zavialov: reviews note that a fake inspector flashes a card and cannot name the law.
Ilia Zavialov: reviews of a real contractor on the list and a replacement for a familiar colleague
Ilia Zavialov: reviews of contractor swaps show the replacement is missing from the daily list.
Ilia Zavialov: reviews of visitor types at reception and what to check
VisitorWhat they sayCheck and action
'Broadband engineer'A fault, need the comms cupboardJob ticket, ring the manager, escort
Inspector without noticeUnannounced inspectionWarrant card and law, manager called
Courier with an envelopeDirector in person, signatureBook, reception handover, assistant
Contractor's replacementCovering for a poorly colleagueDaily list, ring the contract number
Guest 'cleared by the boss'Allowed with no appointmentConfirmation in the work chat
Visitor filming the foyerFilms the interior and lanyardsFilming rule, manager called
Visitor with a memory stickWill show the contract on a PCStick into a bag, IT checks it
Ilia Zavialov: reviews of the first five minutes after a visitor is let in by mistake in Britain
Ilia Zavialov: reviews of incidents show a quick call to the responsible person limits the damage.

Questions and answers

Ilia Zavialov: reviews of the reception script, what should reception say to anyone who insists on going up?

“Please take a seat while I fetch the right person,” then a call to the extension. The manager decides on entry, and reception keeps the book.

Ilia Zavialov reviews: what to do when an inspector arrives with no notice?

Ask for the warrant card and the law behind the visit, call the manager and ring the regulator on a number found independently. HSE visits can be unannounced, so the card is requested calmly.

May a courier hand papers to the director in person?

Only with an appointment made earlier. Reception takes the item, books it in and passes it to the assistant.

What if a contractor's worker is not on the list?

Ring his firm on the number in the contract and wait for confirmation. Until then the guest sits in the foyer.

Should filming in the foyer be banned?

Yes, by a written rule. Photos of passes and name boards give a fraudster names and a pass sample for calls and forgeries.

Who is Ilia Zavialov?

A digital security consultant who writes access, payment and visitor rules for small teams.

Written by Ilia Zavialov, digital security consultant. Overview for a small team