Beneficial Ownership: Finding the Humans Behind the Entity

Onboarding a company is not onboarding a person. A limited company, trust, or partnership is a legal construct, and behind it sit the individuals who own or control it. Finding those people — the ultimate beneficial owners (UBOs) — is one of the harder parts of customer due diligence, because ownership can be deliberately layered to obscure the natural persons at the end of the chain.

What Counts as a Beneficial Owner

Most frameworks define a beneficial owner as a natural person who owns or controls an entity above a threshold, or who exercises control through other means. The common reference point is 25% ownership or voting rights, used in the EU's AML directives and reflected in many national regimes. Some jurisdictions and risk categories push lower — 10% or even any identifiable controller for higher-risk structures.

Ownership is only one route. Control can also come from:

• Rights to appoint or remove a majority of the board
• Shareholder agreements granting veto or directive powers
• Positions as trustees, settlors, protectors, or beneficiaries in a trust
• Informal control — a person who directs decisions without a formal stake

When no natural person meets the threshold, most rules fall back to identifying a senior managing official. That fallback is a last resort, not a shortcut; documenting why no UBO was found matters as much as naming one.

Unwrapping the Layers

A clean structure has one company owned directly by named individuals. Real structures nest: a UK company owned by a Maltese holding company owned by a Cyprus entity owned by a trust. Each layer multiplies ownership fractionally, so a person holding 60% of a parent that owns 50% of the target controls 30% — above threshold, but only visible if you calculate through the chain.

Working practice for each layer:

• Pull the registry extract or incorporation documents for the entity
• List its direct shareholders and their percentages
• For any corporate shareholder, repeat the process one level down
• Multiply ownership along each branch to find effective control
• Flag circular holdings, bearer shares, and nominee arrangements that break the arithmetic

Registers help but do not close the question. Many corporate registries are self-declared, outdated, or — following the 2022 EU Court of Justice ruling restricting public access — no longer openly searchable. Treat registry data as a starting hypothesis to be corroborated, not a verified fact.

Verifying, Not Just Collecting

Collecting a list of names is declaration. Verification means tying each named UBO to an identity and confirming the ownership claim. That splits into two tasks: proving the structure (who owns what) and proving the person (that the named individual is real and is who they say).

The structural evidence comes from share registers, certificates, trust deeds, and shareholder agreements. The identity evidence is ordinary individual KYC applied to each UBO — document checks, liveness, and screening against sanctions and PEP lists. A chat-based flow suits this: once the structure is mapped, each identified owner can be sent a verification link to complete their own check without routing documents through an intermediary.

Apply data minimization here. You need enough to evidence control, not every page of every corporate filing. Define which documents you retain, for how long, and configure retention so that supporting files expire on a schedule rather than accumulating indefinitely.

Keeping It Current

Ownership changes. Shares transfer, trusts restructure, and a 24% holder becomes a 26% UBO overnight. A one-time check captured at onboarding degrades with every corporate action. Tie beneficial ownership review to event triggers — a filed change of control, a new registry entry, or an adverse media hit on a known owner — rather than relying only on periodic refresh.

The standard to aim for is a reviewer, months later, being able to reconstruct who controlled the entity, by what route, and on what evidence. If the chain, the arithmetic, and the identity checks are all documented, the file holds up. This is general information, not legal advice; thresholds and obligations vary by jurisdiction, so confirm the specifics that apply to you.