Beneficial ownership verification is the process by which a bank, payment firm or other regulated business confirms the identity of the individuals who ultimately own or control a customer that is a company, partnership, trust or other legal entity. It goes beyond recording what the customer says: the firm must take reasonable measures to check the information against reliable, independent sources.
Verification is a required part of customer due diligence (CDD) for legal entities and the central task of know your business (KYB) onboarding. It is the counterpart, on the side of regulated firms, to the duty of entities to make a beneficial ownership disclosure. The international standard is set by the Financial Action Task Force, and national rules apply it with different thresholds and levels of prescription.
Identification and verification
Two steps are involved. Identification means establishing who the beneficial owners are: understanding the ownership and control structure and naming each ultimate beneficial owner (UBO) who meets the legal test. Verification means confirming that those people exist, are who they are said to be, and do hold the interest claimed.
The legal test usually has two limbs. The ownership limb captures any individual who holds, directly or indirectly, more than a set share of the equity or voting rights, commonly 25%. The control limb captures anyone who controls the entity by other means. In the United States, the customer due diligence rule that took effect in 2018 requires covered financial institutions to identify each individual owning 25% or more of a legal entity customer and one individual with significant responsibility to control or manage it.
How verification is carried out
A typical process runs as follows. The firm collects the customer's constitutional documents and an ownership chart, then traces each branch upward through intermediate holding companies until it reaches individuals, a listed company, a government or another exempt owner. Indirect interests are calculated by multiplying percentages along each chain and adding the results where a person holds through several routes.
The structure is then checked against independent evidence:
- Registers. Company registries and the beneficial ownership register in each relevant country are searched, and differences from the customer's account are queried.
- Documents. Share registers, shareholder agreements, trust deeds and certified corporate records are reviewed, especially where registries are unreliable.
- Data providers. Commercial databases that aggregate registry data, and reference sources such as the Legal Entity Identifier (LEI) system with its parent relationship data, help confirm the chain.
- Identity checks. Each beneficial owner's identity is confirmed through identity verification (IDV), with documents or electronic sources.
Once identified, the owners are put through sanctions screening, politically exposed person screening and adverse media screening.
Risk-based depth
Firms apply a risk-based approach. For a low-risk customer with a simple structure, reliance on a reputable registry and a signed declaration may be enough. Higher-risk cases call for enhanced due diligence (EDD): verifying owners below the standard threshold, obtaining certified documents for every layer, and establishing the source of the owners' wealth. Triggers include structures with no evident commercial purpose, entities in secrecy jurisdictions, bearer shares, nominee shareholders or directors, and trusts in the chain.
Sanctions rules impose their own test. Under the 50 percent rule applied by the US Treasury, an entity owned 50% or more in aggregate by blocked persons is itself treated as blocked, so ownership must be understood precisely even where anti-money laundering thresholds are not reached.
Common difficulties
Verification is one of the more demanding parts of onboarding. Registries differ widely in coverage and reliability, and many do not verify what is filed. Ownership through several jurisdictions means consulting sources in different languages and formats. Trusts, foundations and funds do not have shareholders in the ordinary sense, so control must be assessed case by case. A shell company may have accurate paperwork that nonetheless hides an informal arrangement under which someone else gives the instructions.
Customers often find the process slow and repetitive, since each institution asks for the same documents. Firms face the opposite pressure: regulators have fined institutions for accepting ownership declarations at face value or for failing to identify the real controller.
Ongoing obligations
Verification is not a one-time event. Ownership changes through share sales, restructurings and inheritance, so firms refresh the information at periodic reviews, with the frequency set by the customer's risk rating, and when a trigger event occurs, such as a change of directors, an unusual transaction or new adverse information. Evidence and the reasoning behind decisions are kept in the customer file so that the firm can show supervisors how it reached its view.
Regulation continues to tighten. Some jurisdictions require firms to report mismatches with the register, and the European Union's anti-money laundering regulation sets out harmonised rules on beneficial ownership, including a lower ownership threshold for certain higher-risk categories. Automated tools that build ownership trees from registry data have reduced manual work, but judgement about control remains with the analyst.