Ultimate Beneficial Owner (UBO): Identification and Verification Guide
The Ultimate Beneficial Owner (UBO) is the natural person who ultimately owns or controls a corporate entity. Identifying UBOs — and verifying their identity — is mandatory under FATF Recommendation 10 and the cornerstone of every modern KYB programme. This guide explains who qualifies as a UBO, the ownership thresholds that apply, how to unwrap multi-layer corporate structures, and how to operationalise UBO verification at scale.
UBO identification exists for a single regulatory reason: corporate entities cannot launder money, only natural persons can. The corporate structure exists as a legal fiction; behind it are always real human beings who benefit from the entity's activities. AML regulation requires firms to identify those human beings, not just the legal entity that fronts for them.
In simple cases — a single-shareholder limited company owned by an individual — UBO identification is trivial. In complex cases — a Cayman holding company owned by a BVI vehicle owned by a Jersey trust whose beneficiaries include a discretionary class — UBO identification is one of the most technically demanding processes in compliance. This guide covers both ends of the spectrum.
The Three Pathways to UBO Status
A natural person can become a UBO of a corporate entity through any of three pathways. A complete UBO identification process must check all three.
Direct Ownership
A natural person is a UBO if they directly hold 25% or more of the entity's shares or voting rights (the standard threshold; some jurisdictions apply 10% or 20% for specific sectors). Direct ownership is the simplest case and is fully evidenced by the entity's share register.
Indirect Ownership
A natural person is a UBO if they hold 25% or more indirectly — through one or more intermediate corporate entities. Calculating indirect ownership requires multiplying the ownership percentages along each chain. For example, an individual who owns 60% of Holdco A, which owns 50% of Operating Co, has 30% indirect ownership of Operating Co (60% × 50%) and qualifies as a UBO. Where ownership runs through multiple chains converging on the same entity, the percentages from each chain are aggregated.
Control Other Than Through Ownership
A natural person is a UBO if they exercise control over the entity by means other than ownership — for example, through voting agreements, the right to appoint or remove the majority of the board, contractual rights, or family ties that confer de facto control. Control-based UBO identification is harder to evidence than ownership-based UBO and requires the firm to look beyond the share register to operational reality.
Unwrapping Multi-Layer Ownership Structures
A meaningful proportion of corporate customers — particularly larger or wealthier ones — own their underlying assets through intermediate corporate vehicles. The typical structure includes a UK or US operating company owned by a Cayman or BVI holding entity, in turn owned by a personal investment vehicle in Jersey or Luxembourg, with the natural person sitting at the top of the chain.
UBO unwrapping is the process of tracing through these layers until natural persons are identified. At each level, the firm must obtain the share register or equivalent ownership record, identify the shareholders of that entity, and continue the trace if those shareholders are themselves corporate. Where any link in the chain is incomplete, the UBO determination is incomplete.
In our experience, this is the part of KYB where firms most frequently cut corners — accepting the first layer of corporate shareholders as adequate or relying on the customer's own attestation about UBO identity without independent verification. Both shortcuts fail at supervisory inspection. Automated KYB platforms address the operational challenge by integrating directly with corporate registries across jurisdictions and unwrapping ownership chains automatically where data is available.
Trusts, Foundations, and Other Non-Corporate Structures
Trusts and foundations create particular UBO complexity because they do not have shareholders in the traditional sense. The applicable identification rules — set out in FATF guidance and implemented in national regulations — typically require identification of:
- The settlor — the person who established the trust and contributed assets to it.
- The trustees — the persons who hold legal title to the trust assets and administer the trust.
- The protector (if any) — a person with oversight or veto rights over trustee decisions.
- The beneficiaries — named beneficiaries entitled to the trust assets, or for discretionary trusts, the class of beneficiaries.
- Any other natural person exercising effective control over the trust.
For discretionary trusts where the beneficiary class is broadly defined, regulators expect the firm to obtain enough information to assess the risk profile of the actual beneficiaries — not just the description of the class. This typically requires a copy of the trust deed and engagement with the trustees to identify the specific individuals likely to receive distributions.
UBO Verification: Beyond Identification
Identifying the UBO is the first step. Verifying the UBO's identity is the second — and equally important — step. Once the UBO is identified, the firm must apply full KYC to that individual: identity document verification, biometric matching, sanctions and PEP screening, and risk rating.
Where the UBO is also a customer of the firm in their personal capacity, the existing KYC record may be reusable. Where the UBO is not otherwise a customer, the firm must obtain identity documents from them — which can be operationally challenging when the UBO is geographically distant or reluctant to engage with the verification process. Modern KYB platforms address this through customer-facing portals that allow UBOs to complete identity verification remotely. See our KYC vs KYB guide for the integrated workflow.
Operationalising UBO Verification at Scale
A retail bank onboarding a small business customer, a fund administrator onboarding a corporate investor, and a payment processor onboarding a merchant client all face the same UBO challenge — and all benefit from the same operational pattern: integrate UBO identification into the corporate onboarding workflow, draw ownership data from authoritative sources where available, present the analyst with a structured ownership chart for review, and route identified UBOs into KYC verification automatically.
One Constellation's customer onboarding platform implements this end-to-end. The corporate customer is verified through KYB; ownership is unwrapped through registry integration; identified UBOs are routed into KYC verification through customer-facing portals; and the resulting case file presents the analyst with a complete view of entity, ownership chain, and verified individuals — ready for risk rating and approval.
UBO Verification Built for Multi-Layer Structures
One Constellation automates UBO identification and verification across multi-jurisdictional ownership structures — registry integration, automated unwrapping, ownership chart visualisation, and integrated KYC for identified individuals on a single platform.
