Investor Verification for Venture Capital: A Practical KYC, AML, and Accreditation Checklist

Overview

A sound investor verification workflow should answer five practical questions:

1. Who is the person or organization?
2. Who is authorized to act on behalf of an entity?
3. Where do the funds or investment instructions originate, at least to the extent required by the applicable process?
4. Does the investor present sanctions, fraud, money-laundering, or other defined risk indicators?
5. What evidence supports the decision, and can an authorized reviewer understand it later?

The exact requirements depend on the fund structure, offering, jurisdictions, counterparties, and role of each participant. A regulated investment business may have obligations that differ from those of a startup conducting a limited fundraising process. Treat this checklist as an operating framework, not a substitute for legal or compliance advice.

Risk-based verification is usually more practical than applying identical checks to every investor. A low-complexity individual investor may need a different path from a foreign company, trust, family office, or special-purpose vehicle. The objective is not to collect the maximum amount of personal information. It is to collect enough reliable evidence for the decision being made, protect that information, and escalate uncertainty consistently.

For a broader onboarding sequence, see the private market onboarding checklist for LPs, founders, and SPVs. Teams choosing a platform can also use the digital identity verification guide for investor portals as a companion resource.

Checklist by scenario

1. Individual investor

• Collect core identity details: Obtain the legal name, date of birth where appropriate, residential address, nationality or country of residence where relevant, and contact details needed for the relationship.
• Perform identity proofing: Use a suitable document verification and liveness or possession process when the risk profile calls for it. Check that the document is valid, consistent with the submitted information, and not obviously altered.
• Run screening: Apply sanctions screening and any required AML or politically exposed person screening. Define how potential matches are reviewed rather than treating every name similarity as a confirmed match.
• Confirm authority and intent: Ensure the person is investing for themselves unless the workflow identifies another beneficial owner or principal.
• Handle accreditation separately: Investor accreditation verification may require evidence distinct from identity verification. Document the basis used, the date of review, and any expiration or refresh requirement.

2. Corporate investor, fund, or family office

• Verify the entity: Confirm the legal name, registration details, formation jurisdiction, status, registered address, and entity type. The appropriate evidence may include a registry record, formation document, certificate, or equivalent source.
• Map ownership: Identify beneficial owners and control persons according to the applicable policy and jurisdiction. Record ownership percentages or control relationships where they are relevant to the review.
• Verify representatives: Check the identity of each person authorized to provide instructions, sign documents, or commit capital. Request evidence of authority when it is not clear from the entity records.
• Screen relevant parties: Screen the entity, beneficial owners, directors or equivalent controllers, and authorized representatives as required by the risk model.
• Reconcile inconsistencies: Investigate differences between corporate records, ownership charts, submitted forms, and payment instructions before approval.

For entity-specific considerations, review entity verification for Delaware corporations, LLCs, and foreign subsidiaries and the guide to founder, director, and officer screening.

3. Trust, nominee, or special-purpose vehicle

• Identify the legal vehicle, trustee or manager, settlor or equivalent originator where relevant, beneficiaries or controlling persons, and anyone authorized to act.
• Obtain governing documents or reliable extracts sufficient to understand control and authority.
• Do not assume that the signatory is the beneficial owner. Trace the structure until the relevant ownership or control information is documented.
• Confirm that the subscription, capital call, and payment instructions are consistent with the verified structure.
• Escalate layered, opaque, rapidly changing, or cross-border structures for manual review.

4. Accredited investor evidence

Accreditation is a separate determination from identity and AML screening. First define which accreditation pathway the offering accepts. Then specify acceptable evidence, who reviews it, how sensitive financial information is protected, and how long the determination remains usable. Avoid asking for broad financial records when a narrower, policy-approved document or attestation can support the same decision. Record the conclusion and rationale without exposing unnecessary detail to deal teams.

What to double-check

Before marking an investor verified, review the case as a connected record rather than a set of isolated checks.

• Name and date consistency: Compare the application, identity document, entity records, signature, and payment details. Differences may be innocent, but they should have an explanation.
• Sanctions and PEP alerts: Confirm whether a result is a true match, a false positive, or unresolved. Record the source, search date, reviewer, and disposition.
• Beneficial ownership: Make sure the ownership chart reaches the people or control arrangements that matter under the policy. A company name alone is not a beneficial ownership review.
• Authority: Verify that the person signing subscription documents can bind the investor. This is especially important for funds, trusts, and SPVs.
• Accreditation basis: Check that the evidence matches the selected pathway and has not passed an internal validity or refresh date.
• Payment destination: Treat last-minute changes to bank or wallet instructions as a separate risk event. Use a trusted channel to confirm them and avoid relying solely on email.
• Access controls: Separate verification data from general deal-room access where possible. An investor may be approved for a transaction without every employee receiving access to identity documents.
• Audit trail: Preserve the decision, evidence references, timestamps, reviewer actions, manual overrides, and reason for escalation. The audit trail should show what was known at the time, not merely the final status.

Good records do not require retaining every file forever. Define retention, deletion, access, and correction procedures that fit the organization’s obligations and privacy commitments. For implementation guidance, see how to design an audit trail for identity and business verification.

Common mistakes

1. Confusing a completed form with verification: A self-declaration can begin a review, but it does not independently establish identity, ownership, or authority.
2. Using one workflow for every investor: Uniformity can create unnecessary friction for simple cases and insufficient scrutiny for complex ones. Define risk tiers and escalation rules.
3. Screening only the lead contact: The contact may not be the beneficial owner, controller, or person authorized to commit funds.
4. Ignoring stale results: A screening result or ownership chart can become outdated when a round, fund, structure, or relationship changes. Record when checks were performed and when they should be refreshed.
5. Automating unresolved matches: A verification API can prioritize cases, but ambiguous identity and sanctions matches require a documented human decision. See manual review triggers in identity verification.
6. Collecting excessive data: More documents do not automatically produce better decisions. Excess collection increases privacy, security, and operational risk.
7. Skipping workflow testing: Test ordinary applications, failed document checks, name variations, foreign entities, ownership changes, duplicate profiles, and interrupted sessions before launch. Track approval rates, false positives, and review time using the methods described in identity verification metrics that matter.

When to revisit

Review this checklist before each major fundraising or onboarding cycle, especially when the investor mix, jurisdictions, fund structure, payment process, or verification tools change. Revisit it after a material ownership change, a new distribution channel, a security incident, a recurring false-positive pattern, or a failed manual review. It is also useful to schedule a periodic policy review so that internal procedures remain aligned with the organization’s current legal advice and compliance responsibilities.

For a practical refresh, start with these actions:

1. Write down the investor categories your workflow supports and assign a risk tier to each.
2. List the minimum evidence required for identity, entity status, authority, beneficial ownership, screening, and accreditation.
3. Define automatic pass, automatic fail, and manual-review conditions.
4. Test the process with realistic edge cases and measure where applicants stall.
5. Confirm that staff can explain an approval decision without exposing unnecessary personal data.
6. Review vendor controls, API behavior, access permissions, retention settings, and audit-log completeness whenever tools or workflows change. The verification API evaluation checklist can help structure that review.

A well-designed investor verification process protects the transaction without turning onboarding into an opaque obstacle. Keep the purpose of each check clear, match scrutiny to risk, document exceptions, and make privacy part of the workflow from the beginning.