UBO Discovery: Unwrapping Complex Corporate Structures
Ultimate beneficial ownership identification is the hardest part of KYB and the part regulators scrutinise most aggressively. FATF Recommendation 24 requires firms to identify the natural person who ultimately owns or controls the customer — and to verify that identification with confidence. This guide explains the seven structures designed to obscure ownership, the step-by-step methodology for unwrapping them, and the data sources that produce defensible records.
UBO discovery is where corporate KYC meets investigative work. A simple owner-managed business presents no real difficulty: the founder owns 100%, is named on the company register, and signs the bank's onboarding documents personally. The complexity lives at the top of the corporate market — funds, family offices, holding-company structures spanning multiple jurisdictions, where the natural person sits behind two or three layers of intermediate vehicles deliberately structured for tax efficiency, asset protection, or, in a minority of cases, opacity.
Regulators care intensely about UBO because the financial-crime literature shows that opaque ownership is a recurring feature of the most serious cases. FATF Recommendation 24 (and parallel obligations in MAS Notice 626 paragraph 7, the EU AMLR, UK MLR 2017, and FinCEN's Corporate Transparency Act) make the firm responsible for identification, not the customer responsible for declaration. The firm must look behind what the customer says.
The 25% Threshold and Why It Is Not Enough
Across regulatory regimes the headline UBO definition uses a 25% ownership threshold: any natural person who owns or controls 25% or more of the customer is a beneficial owner. The threshold is administratively useful — it gives firms a clean trigger for identification work — but it is widely misunderstood as the definition of UBO. It is not. It is one input among several.
A natural person who owns less than 25% but exercises effective control through other means is still a beneficial owner. Examples that recur in enforcement cases:
- Voting-rights control — a shareholder owns 10% of the equity but, through a class-A/class-B share structure, controls 60% of voting rights at general meeting.
- Board control — a shareholder owns 5% but holds the right to appoint a majority of directors under a shareholders' agreement.
- Contractual control — a creditor or licensor whose contractual rights (debt covenants, exclusive licence terms) effectively direct the company's strategic decisions.
- De facto control — no formal ownership or contractual rights, but operational reality (the person who actually makes the decisions, signs the cheques, hires the team) sits with one named individual.
Where no natural person meets any of these tests, regulators expect the firm to identify the senior managing official(s) of the customer as fallback UBOs — and to document explicitly that no other UBO could be identified, rather than leaving the field blank.
Seven Structures Designed to Obscure Ownership
Recognising the structure is half the battle. The seven patterns below cover the substantial majority of obscuring techniques encountered in practice.
Layered Holding Companies
The most common technique: company A is owned by company B is owned by company C is owned by a natural person. Each layer is legitimate in isolation; the cumulative effect is that an analyst looking only at the immediate shareholder records sees only company B, not the natural person at the end. Discovery requires tracing every layer and verifying ownership at each step from authoritative registries — not from the customer's declaration alone.
Nominee Directors and Shareholders
A nominee holds legal title to shares or directorship on behalf of an unnamed beneficial owner. Nominee services are legitimate in many jurisdictions (Cayman Islands, BVI, Hong Kong) but are also extensively used to obscure ownership. The discovery technique is to require the nominee's declaration of beneficial ownership, supported by the underlying nominee agreement and evidence of the natural person whose instructions the nominee acts upon.
Trust Structures
Trusts separate legal ownership (the trustee) from beneficial interest (the beneficiaries). Discovery must identify the settlor (who provided the assets), the trustee, the beneficiaries, the protector if any, and any person with power to remove or replace the trustee — typically all four or five roles need documenting, not just the trustee whose name appears on the bank account.
Private Foundations
Civil-law jurisdictions (Panama, Liechtenstein, Curacao) use private foundations as functional equivalents of common-law trusts. The structure has founders, council members, and beneficiaries — and the discovery work is similar to trusts. The complication is that foundation records are typically not public; the firm must obtain the foundation charter and by-laws directly from the customer and apply substantial scepticism to the documentation provided.
Shell Companies
A shell company has no real operations, no employees, and no physical presence — only legal personality. Shells have legitimate uses (special purpose vehicles, holding structures) but are also the workhorses of obscuring structures. Indicators include registered addresses at corporate service provider offices, sole directors who hold positions across many unrelated companies, and minimal or no financial substance.
Bearer Shares
Bearer shares — physical share certificates with no registered owner, transferred by physical delivery — have been almost entirely phased out under FATF pressure but persist in a small number of jurisdictions. Where they exist, beneficial ownership at any point in time is effectively undocumented in any registry. FATF expects firms either to refuse to bank entities with bearer shares or to require their conversion to registered shares as a condition of the relationship.
Cross-Border Layering
Structures that combine multiple of the above across jurisdictions — a BVI shell company owned by a Liechtenstein foundation managed by a Swiss trustee with beneficiaries declared in a will held with a Panama law firm. Each jurisdiction's registry can be queried only for its slice of the structure; assembling the complete picture requires obtaining documentation from the customer that the firm then independently corroborates where possible.
Step-by-Step UBO Unwrapping Methodology
A disciplined methodology applies the same sequence to every corporate customer, regardless of complexity. The depth of work varies; the sequence does not.
Obtain the Customer's Declaration
Start with the customer's own declaration of beneficial ownership: who they say the UBOs are, percentages, control mechanisms beyond ownership. This is the baseline against which the firm's independent verification will be measured. Declarations should be made in writing, signed, and dated by a senior officer of the customer.
Map the Ownership Chain From Authoritative Sources
For each entity in the declared chain, obtain ownership records from the relevant corporate registry — Companies House (UK), ACRA (Singapore), Companies Registry (Hong Kong), Delaware Division of Corporations, BVI Registry, Cayman General Registry, EU Business Registers Interconnection System. Where central beneficial-ownership registries exist (UK PSC register, EU UBO registers under AMLD5/AMLD6), use them — but treat them as inputs, not conclusions, because the data quality varies.
Reconcile Declaration Against Independent Sources
Compare what the customer declared with what authoritative sources show. Differences require explanation — not rejection of the declaration, but a documented explanation of why the registry record is incomplete or out of date. Material unexplained differences are red flags and should escalate to senior compliance review.
Identify and Verify the Natural Person UBO
Once the chain terminates in a natural person (or persons), apply standard CDD verification to that person: identity document, address verification, sanctions and PEP screening, source-of-wealth analysis. This is where many programmes fall short — UBO identification is performed, but UBO verification to the same standard as direct customers is not. Regulators expect parity of verification depth between direct customers and UBOs.
Document Residual Uncertainty
Where the discovery exercise leaves residual uncertainty — a registry that returned incomplete data, a nominee whose underlying beneficial owner the firm has reason to question — document the uncertainty explicitly rather than papering over it. The defensible posture is recorded residual risk, not pretended completeness. The risk may then be mitigated by additional controls (enhanced monitoring, tighter transaction thresholds, periodic refresh at higher frequency) or by declining the relationship.
Data Sources for UBO Verification
The quality of UBO discovery is bounded by the quality of available data sources. Major sources used in production KYB programmes:
- Companies House (UK) — comprehensive, machine-readable, includes the PSC (People with Significant Control) register since 2016.
- ACRA (Singapore) — corporate filings via Bizfile; beneficial ownership register accessible to law-enforcement and competent authorities.
- Companies Registry (Hong Kong) — public filings; the Significant Controllers Register is not publicly accessible but is required to be maintained.
- OpenCorporates — aggregator covering more than 200 million companies across 130+ jurisdictions; depth varies by jurisdiction.
- Orbis (Bureau van Dijk) — commercial database with structured ownership data for several hundred million entities, widely used by financial institutions.
- Sayari, Moody's RDC, LexisNexis Bridger — enriched aggregators combining registry data with adverse media and risk signals.
- BVI Financial Investigation Agency BOSS system — beneficial ownership data accessible to BVI authorities and competent authorities of partner jurisdictions.
- EU Business Registers Interconnection System (BRIS) — connects EU member state registries.
- FinCEN BOI Registry (US) — beneficial ownership information collected under the Corporate Transparency Act; access subject to specific legal pathways.
No single source is sufficient for all UBO discovery work. A defensible programme combines authoritative registry data with at least one commercial aggregator for cross-referencing and gap coverage.
Red Flags in UBO Declarations
Patterns that consistently indicate ownership obscuring rather than legitimate structuring:
- Inability or unwillingness to provide direct UBO documentation — the customer can produce documentation for the immediate corporate shareholder but resists or delays producing documentation for upper-tier entities.
- Nominee director on a high-volume corporate-service-provider register — the same individual appearing as director of dozens or hundreds of unrelated companies, typically from a service-provider address.
- Ownership chains terminating in jurisdictions with no public registry — and no alternative documentation offered.
- Inconsistency between declared structure and observed transaction patterns — the declared UBO would not, on the firm's understanding, be capable of generating the volume or value of activity the account is conducting.
- Recent restructuring with no clear commercial rationale — particularly restructuring that increases opacity in advance of onboarding with the firm.
- Material differences between the customer's UBO declaration and independent registry data with explanations that fail basic plausibility tests.
Each red flag in isolation has innocent explanations; the combination of two or more in a single relationship should trigger escalation under the firm's EDD procedures.
Automating UBO Discovery at Scale
Manual UBO discovery on every corporate customer is unsustainable for any firm with material corporate volume. A modern KYB platform automates the structural work — querying registries, traversing ownership chains, applying threshold tests, screening identified UBOs against sanctions and PEP lists — and surfaces only the cases requiring analyst judgement: residual uncertainty, red flags, structures the algorithm cannot resolve definitively.
The objective of automation is not to remove analyst involvement; it is to focus analyst time on the cases that genuinely warrant it. A KYB system that auto-clears the straightforward 80% of corporate customers and routes the complex 20% to senior analysts produces dramatically better outcomes than one that requires the same shallow review on every case. For the broader corporate KYC framework, see our KYC vs KYB guide.
UBO Discovery Built for the Hard Cases
One Constellation's KYB platform traverses ownership chains across more than 130 jurisdictions, applies threshold and control tests automatically, and surfaces residual uncertainty for analyst review — with the audit trail regulators expect.
