Ultimate Beneficial Owner (UBO) Verification: A Complete Guide
Ultimate Beneficial Ownership identification is the most challenging and most regulator-scrutinised part of corporate due diligence. This guide explains who qualifies as a UBO, how the 25% threshold works in practice, how to unwrap multi-layer ownership structures, and how to evidence UBO verification to a regulator.
The reason UBO verification matters is simple: criminals do not open accounts in their own names. The textbook structure of financial crime — money laundering, sanctions evasion, tax evasion, kleptocratic asset hiding — relies on layers of corporate vehicles that obscure the natural person at the end of the chain. UBO verification is how regulated firms see through that obscurity.
Recent enforcement makes this concrete. The Singapore S$3 billion money laundering case, the Pandora Papers, the Russia-related sanctions enforcement post-2022 — every major financial-crime story of the last decade has turned on opaque ownership structures that should have been unwrapped at onboarding and were not. Regulators have reacted with significantly tougher UBO regimes, and supervisory inspections now routinely test UBO verification end-to-end.
What Counts as Beneficial Ownership
FATF Recommendation 24 and most national rules define a beneficial owner through three alternative tests. A natural person qualifies as a UBO if any one of them is met:
The three UBO tests:
- Direct ownership — holds 25% or more of the company's shares or voting rights in their own name.
- Indirect ownership — holds 25% or more through one or more intermediate entities (shares held by a holding company, trust, or partnership the natural person controls).
- Control by other means — exercises significant influence or control through mechanisms other than ownership: a shareholders' agreement, a casting vote, the right to appoint a majority of directors, or any other arrangement that gives effective decision-making power.
If no natural person meets any of these tests — for example, in a widely-held public company with no controlling shareholder — most regimes require the firm to identify the senior managing official(s) of the entity as the UBO. This is a fallback, not a substitute. Skipping UBO identification because no 25% holder exists is one of the most common compliance failures.
Unwrapping Multi-Layer Ownership Structures
Real corporate ownership is rarely a single layer. A typical structure for a mid-sized international business may have an operating company owned by a holding company in one jurisdiction, owned by another holding company in a second jurisdiction, owned by a trust whose beneficiaries include a family office. Identifying the UBO requires walking the entire chain.
The arithmetic is straightforward: ownership multiplies through each layer. A natural person who owns 60% of Holding A, which owns 50% of Holding B, which owns 100% of the operating company, indirectly owns 30% of the operating company (60% × 50% × 100%). They cross the 25% threshold and qualify as a UBO. A 30% owner of Holding A in the same chain owns only 15% indirectly and does not qualify on the ownership test alone — though they may qualify on the control test.
Obtain the Ownership Diagram
Request a complete corporate organogram from the customer showing every entity in the ownership chain, every percentage holding, and every natural person at the end of every chain. Obtain certified incorporation documents and shareholder registers for each entity in the chain. Where the customer's declared structure differs from registry data, treat the discrepancy as a red flag, not a clerical error.
Verify Each Layer Against Independent Sources
Cross-check the declared structure against corporate registry data: Companies House in the UK, ACRA in Singapore, BvD/Orbis or equivalent for international coverage. For trusts and unregistered structures, obtain the trust deed or partnership agreement and the most recent register of trustees, settlors, and beneficiaries. Document any inconsistency and resolve it before completing onboarding.
Verify the UBOs as Individuals
Once the natural persons at the end of the chain are identified, each one is subject to the same identity verification standard as any individual KYC subject — government identification, biometric verification where available, address verification, and screening against sanctions and PEP lists. The identity verification of UBOs is not lighter because they sit behind a corporate layer; in many cases it should be deeper.
Beneficial Ownership Registers Around the World
Public and authority-only registers of beneficial ownership now exist in most major jurisdictions. They are an essential starting point but not a complete answer: registers can be out of date, can be filed by the entity itself without independent verification, and can omit indirect ownership chains. They reduce verification burden but do not eliminate the firm's obligation to verify UBOs through independent means.
Major registers that compliance teams should know:
- UK PSC Register — Persons with Significant Control register held by Companies House, publicly accessible, covers all UK companies and LLPs.
- EU UBO registers — required of every member state by AMLD 5; access varies by jurisdiction following the November 2022 CJEU ruling that restricted public access.
- FinCEN Beneficial Ownership Information (BOI) Reporting — US Corporate Transparency Act regime requiring most US-formed entities to report UBOs to FinCEN.
- Singapore ACRA Register of Registrable Controllers — non-public register held by ACRA, accessible to regulators and law enforcement.
- Hong Kong Significant Controllers Register — required to be maintained at a company's registered office and made available to law enforcement on request.
Common Failure Modes — and How to Avoid Them
UBO verification fails in predictable ways. Almost every enforcement action involving deficient UBO verification can be traced to one of a handful of recurring errors.
The recurring failure modes:
- Stopping at the first corporate layer — recording the immediate parent as the UBO without unwrapping further. The UBO is always a natural person, never a company.
- Treating the 25% threshold as an exemption — concluding that no UBO exists because no shareholder crosses 25%, without applying the control test or the senior managing official fallback.
- Relying solely on customer-provided structures — accepting the customer's declared organogram without independent verification against registries or supporting documentation.
- Static UBO records — verifying UBO at onboarding and never refreshing. Ownership changes; the verification must be refreshed periodically and triggered by material events.
- Failing to screen UBOs — verifying UBO identity but omitting sanctions and PEP screening of the verified UBOs. The screening obligation extends to UBOs in full.
Automating UBO Verification at Scale
Manual UBO verification works for low volumes and simple structures. It collapses under any combination of high onboarding volume, international ownership chains, or rapid regulatory change. Automation has become non-optional for any business onboarding more than a handful of corporate customers per month.
Automated KYB platforms ingest the customer's declared ownership structure, cross-reference it against international corporate registries, unwrap multi-layer holdings to identify the natural persons at the end of every chain, run identity verification on each UBO, and screen each UBO against sanctions and PEP lists — all in a single workflow with full audit trail. What used to take a senior analyst three to five days completes in under five minutes for routine structures and surfaces the genuine edge cases that need human judgement.
See our KYC vs KYB guide for the corresponding view on the broader corporate due diligence process.
UBO Verification Built for Real Corporate Structures
One Constellation's KYB platform identifies UBOs through global corporate registries, unwraps complex multi-layer holdings, and runs full identity, sanctions and PEP verification on every beneficial owner — with a complete audit trail.
