Beneficial Ownership Verification: A Practical UBO Identification and Review Workflow

Overview

A UBO is the natural person who ultimately owns or controls a company, whether through direct ownership, indirect ownership, voting rights, appointment rights, agreements, or another form of effective control. The relevant ownership threshold, control test, evidence standard, and filing obligation depend on the jurisdictions and risk policies involved. Treat those requirements as variables to confirm rather than assumptions to copy from another case.

Beneficial ownership verification usually forms part of KYB verification and may support AML, sanctions, onboarding, private-market compliance, or account-access decisions. A reliable process connects four activities:

1. Map: identify every entity, individual, ownership percentage, voting right, and control relationship.
2. Evidence: collect authoritative company records and identity documents that support the map.
3. Authenticate: verify that documents, signatures, people, and records are genuine and consistent.
4. Decide: record the conclusion, unresolved discrepancies, risk treatment, and approval or escalation.

Do not treat a registry extract, ownership chart, or signed declaration as conclusive on its own. Each may be incomplete, outdated, unavailable, or based on information supplied by another party. Use multiple sources where the structure, jurisdiction, risk level, or discrepancy requires it.

Visual ownership-structure walkthrough

Customer: Northstar Trading Ltd.
        | 60% owned by
        v
Harbor Holdings Ltd. -------- 40% owned by -------- Lina Chen (individual)
        |
        | 75% owned by
        v
Orion Capital S.A.
        |
        | 80% owned by
        v
Marcus Reed (individual)

Review path:
Northstar → Harbor → Orion → Marcus
Northstar → Lina
Record direct ownership, indirect ownership, voting rights,
control agreements, and any ownership interests that do not add up.

In this example, the reviewer should calculate indirect interests, examine voting and appointment rights, and determine whether either individual meets the applicable ownership or control test. The diagram is a starting point, not the final conclusion.

Checklist by scenario

Scenario 1: A simple company with individual shareholders

• Confirm the company’s legal name, registration number, status, jurisdiction, and registered address.
• Obtain a current shareholder record, registry extract, or equivalent source appropriate to the jurisdiction.
• List each individual shareholder, their ownership percentage, voting percentage, and relevant control rights.
• Verify each person’s identity using an accepted identity-proofing method and record the document type, issuer, expiry status, and verification result.
• Check whether the ownership record, identity record, and onboarding information agree.
• Capture the rationale for including or excluding each person as a UBO.

Scenario 2: Layered corporate ownership

• Request an ownership chart that reaches natural persons rather than stopping at the first corporate shareholder.
• Collect records for every entity in the chain, including incorporation details and ownership or control evidence.
• Calculate indirect ownership through each path and document the calculation.
• Review voting agreements, shareholder agreements, board appointment rights, veto rights, trusts, nominees, and other arrangements that may create control.
• Verify the identity of each natural person who may own or control the customer.
• Compare the customer-provided structure with independent records where available.
• Escalate a structure that cannot be reconciled, terminates at another opaque entity, or depends on unsupported declarations.

Scenario 3: Ownership is dispersed or no person meets the ownership test

• Confirm that the ownership percentages and voting rights have been reviewed across all relevant classes of shares.
• Test for control through management rights, board appointment powers, contractual arrangements, or coordinated ownership.
• Apply the organization’s documented fallback approach only after ownership and control have been assessed.
• Record why no individual met the applicable ownership test and identify the person or role treated as the controlling senior official, where the relevant process requires one.
• Obtain compliance or legal review when local rules or internal policy require it.

UBO evidence checklist

• Company registry extract or equivalent official record, with retrieval date.
• Articles, shareholder register, cap table, partnership agreement, trust deed, or other ownership instrument when relevant.
• Ownership and control chart showing each entity, person, percentage, and relationship.
• Government-issued identity document or approved digital identity result for each relevant individual.
• Evidence that documents were authenticated, not merely uploaded.
• Signed ownership declaration when required, including signer identity and authority to sign.
• Sanctions, PEP, adverse-media, or other risk-screening results where relevant to the risk policy.
• Notes explaining missing records, conflicting data, assumptions, remediation, and escalation.

Reusable reviewer template

Use the following fields in a case file or verification system:

What to double-check

Thresholds and definitions: Ownership thresholds are not universal. Confirm the applicable rule, including how indirect ownership, voting rights, and control are treated.

Registry limitations: A public or commercial register may not show the complete current structure. Check the registry’s coverage, update timing, and document type before relying on it.

Document integrity: Look for altered fields, inconsistent fonts or dates, unexplained gaps, mismatched registration numbers, and copies that cannot be traced to a reliable source. A document verification workflow should distinguish authenticity checks from simple data extraction.

Signature authority: Confirm that the person who signed an ownership declaration or corporate document is identified and authorized to represent the relevant entity. An electronic signature may prove signing activity without proving the signer’s authority or the truth of the underlying ownership statement.

Privacy and retention: Collect only information needed for the stated verification purpose, restrict access, protect identity documents, and apply the organization’s retention and deletion rules. A privacy-first authentication process should make the evidence trail useful without creating an unnecessary repository of personal data.

For complex structures, compare this workflow with the complex ownership escalation guide. For evidence management and audit preparation, see the identity verification audit-readiness checklist.

Common mistakes

• Stopping at the first company: A corporate shareholder is not the end of the UBO investigation.
• Using a single ownership percentage: Share ownership, voting power, and practical control can differ.
• Accepting an unsigned or unauthenticated chart: Treat charts as representations that require supporting evidence.
• Ignoring minority control: A person may control decisions through agreements, board rights, or coordinated holdings without holding the largest percentage.
• Copying old records forward: Ownership can change after investment, restructuring, death, acquisition, or a new control agreement.
• Recording only the outcome: A bare “verified” status does not show how the reviewer reached the conclusion.
• Over-collecting personal data: More documents do not automatically create better verification. Define the evidence needed before requesting it.

When to revisit the workflow

Revisit beneficial ownership verification when a company is first onboarded, when ownership or control changes, when a corporate document expires or becomes stale under policy, when a periodic review is due, or when screening produces a new risk signal. Reopen the case when the customer changes jurisdiction, legal name, directors, signatories, banking arrangements, or operating model.

Compliance teams should also review the workflow before seasonal planning cycles and whenever their verification tools, registry sources, document requirements, or escalation rules change. Ownership-threshold guidance, registry availability, accepted documents, and jurisdictional requirements can change, so maintain a dated policy version and identify which cases need re-review.

Practical next step: Turn the reviewer template into a required case record, configure a hold for unresolved ownership discrepancies, and schedule the next review trigger before closing the file. If evidence is collected through software, confirm that the KYB integration preserves source records, authentication results, reviewer notes, and decision history rather than returning only a pass-or-fail signal.