Beneficial owner verification: what it is and how it works

A corporate client can look perfectly ordinary on paper: a registered company, an active bank account, a familiar line of business. Then you open the ownership tree and find three layers of entities, a nominee shareholder, and a holding company in a jurisdiction where records are thin. At that point, your onboarding decision stops being about the company name and becomes about one question: who ultimately owns or controls this customer?

That question sits at the heart of a beneficial owner verification process. Done well, it gives you defensible clarity on who you are really dealing with. Done poorly, it creates a blind spot that regulators, auditors, banks, and counterparties will treat as a governance failure.

What is a beneficial owner verification process?

A beneficial owner verification process is the set of controls a firm uses to identify the natural person or persons who ultimately own or control a customer, and to verify that identity using reliable, independent evidence. It is not limited to collecting names from a company registry. It is an end-to-end method for getting to the “ultimate beneficial owner” (UBO) or “beneficial owner” as defined in the applicable regime, then evidencing the result to an audit-ready standard.

In practical terms, the process typically covers four connected outcomes. You identify the ownership and control structure, determine which individuals meet the beneficial owner threshold (ownership, voting rights, or other forms of control), verify their identities, and document how you reached those conclusions – including what you did when information was missing, inconsistent, or high risk.

The important nuance is that beneficial ownership is not only about share percentages. Control can be exercised through voting arrangements, rights to appoint directors, shareholder agreements, or more informal influence. A strong process is designed to capture both ownership and control, and to handle cases where no individual is clearly identifiable through ownership alone.

Why regulators focus on beneficial ownership

Beneficial owners matter because they are a common route for obscuring proceeds of crime, sanctions exposure, tax offences, and corruption risk. Shell entities, layered structures, and nominees can be perfectly legal, but they are also standard tools for hiding who benefits.

For regulated firms, beneficial ownership verification supports several regulatory expectations at once: understanding the customer relationship, applying risk-based customer due diligence, screening the right individuals, and recognising when enhanced due diligence (EDD) is required. It also supports operational decision-making. If you cannot confidently identify the controlling persons, you cannot reliably price risk, set transaction monitoring expectations, or explain why you accepted the relationship.

There is a trade-off here. Over-engineering the process increases friction and cost, and it can slow onboarding for legitimate customers. Under-engineering it increases regulatory exposure, creates inconsistent decisions, and leads to expensive remediation after an inspection or internal audit. The right approach is risk-based and consistent.

When the process is triggered and who it applies to

Beneficial owner verification is most often associated with legal entity customers: companies, partnerships, foundations, trusts, associations, and other vehicles. It is triggered at onboarding, but it should not be treated as a one-time event. Changes in ownership, control, directors, business model, or jurisdictions can all require refresh.

The process also extends beyond the customer itself. If a customer is owned by another entity, you generally follow the chain until you reach the relevant natural persons. Where the chain includes trusts or similar arrangements, you may need to identify and verify additional roles (for example, settlor, trustees, protector, beneficiaries or classes of beneficiaries), depending on the applicable rules and risk.

The core stages of a beneficial owner verification process

A process that stands up to scrutiny usually follows a clear logic, even when individual cases become complex.

1) Map the ownership and control structure

You start by establishing what the customer is, where it is registered, and how it is governed. You then build an ownership and control map, typically using company documents and registry extracts.

This stage is not just administrative. It is where you test whether the structure makes sense for the stated business rationale and source of funds. A simple trading company with a multi-layered offshore structure is not automatically unacceptable, but it is a prompt for sharper questions and stronger evidence.

2) Identify the beneficial owners

You apply the relevant definition and thresholds to the mapped structure. Depending on the jurisdiction and sector, the threshold may be a specific percentage of ownership or voting rights, plus a “control through other means” test.

Where no individual meets the ownership threshold, many regimes require you to identify the senior managing official(s) as a fallback – but that is not a shortcut. If you are using a fallback, you should be able to evidence why no beneficial owner was identifiable through ownership or control and what checks you performed to reach that conclusion.

3) Verify the identity of each beneficial owner

Verification means more than recording a name and date of birth. You verify identity using reliable, independent sources, and you document what you used, why it was sufficient, and any gaps.

For beneficial owners, the verification standard should be aligned to risk. For lower-risk domestic structures with clear registry data and straightforward ownership, you may rely on a balanced combination of registry evidence and identity documents. For higher-risk profiles – complex structures, high-risk jurisdictions, politically exposed persons (PEPs), adverse media, or unexplained nominee arrangements – you should expect more detailed corroboration and closer review.

4) Screen, assess risk, and decide

Once you have verified identities, you screen beneficial owners against relevant sanctions and PEP lists (and consider adverse media where appropriate). You then incorporate those results into your customer risk assessment.

This is where many firms fall into a “checkbox” trap. Screening alone is not the risk assessment. The assessment is your view, supported by evidence, on how the ownership structure and individuals affect the overall risk and what controls you will apply: EDD, transaction monitoring intensity, senior approval, or refusal.

5) Recordkeeping and audit trail

A beneficial owner verification process is only as strong as its file. Regulators and auditors will look for a clear chain from initial information to final conclusion.

A defensible file shows the ownership map, the documents used, the rationale for determining beneficial owners, the verification evidence for each individual, discrepancies identified and resolved, and the approvals taken. It also shows what you did when the customer could not provide satisfactory information.

What “verification” looks like in practice

Verification is often misunderstood as a single document check. In reality, it is a credibility test across sources.

For the entity, you may use registry extracts, constitutional documents, certificates of incumbency, partnership agreements, trust deeds, and director registers. For individuals, you may use government-issued identity documents and proof of address, supported by electronic verification where appropriate.

The judgement call is how much you rely on a registry versus supplementary evidence. Some registers are reliable and current; others may be incomplete or lag behind changes. A risk-based approach recognises that a registry entry is evidence, not a guarantee. Where the risk is higher, you strengthen verification by triangulating sources and requiring clearer explanations.

Common failure points and how to avoid them

Weak beneficial ownership files tend to fail in predictable ways.

One is stopping at the first corporate shareholder and not reaching the natural person. Another is accepting a declared UBO without resolving inconsistencies, such as mismatched share percentages, missing intermediate entities, or unexplained changes shortly before onboarding.

A third is confusing roles. Directors and authorised signatories are not automatically beneficial owners, and beneficial owners are not always directors. Your process should treat each role distinctly while recognising that the same individual may hold multiple roles.

Finally, many firms struggle with “control through other means”. If your process only calculates percentages, it will miss the person who controls decisions via voting agreements or rights. This is an area where structured questioning and governance document review add real value.

It depends: complexity, jurisdiction, and risk

There is no single “correct” evidence pack that fits every customer. The depth of verification should change with the risks you face.

If the customer is a local operating company with a transparent structure and a low-risk profile, a proportionate process can still be rigorous without being heavy. If the customer uses layered holding structures, nominee shareholders, bearer share history, or jurisdictions with limited transparency, a proportionate response may require EDD, deeper corroboration, and more senior oversight.

There is also a commercial reality. Some legitimate customers will not welcome extensive questioning, particularly if they have been onboarded elsewhere with minimal friction. The right response is not to weaken your standards, but to be clear and consistent: explain what you need, why you need it, and what happens if it cannot be provided.

Building a process that stands up to regulatory scrutiny

A beneficial owner verification process is not just a workflow in an onboarding tool. It is a governance control. It needs ownership, clear procedures, training, and quality assurance.

The most reliable programmes define decision thresholds, escalation routes, and what “good” looks like in file notes. They also test the process through internal controls reviews and targeted file sampling, focusing on higher-risk relationships and complex structures.

If your teams are seeing inconsistency – different conclusions on similar structures, or recurring remediation on ownership files – that is often a sign your procedures need tighter definitions and better decision support. This is where a specialist compliance partner can help translate regulatory expectations into practical controls and file standards. Complipal typically approaches this by aligning beneficial ownership verification to your broader risk-based CDD framework so decisions are consistent, evidenced, and operationally workable.

The aim is straightforward: when a regulator asks “who ultimately owns or controls this customer, and how do you know?”, your file should answer the question without guesswork.

A well-run beneficial owner verification process does more than satisfy an obligation. It gives you confidence that your growth is built on relationships you understand, can defend, and can continue to manage as risks evolve.