January 12, 2026
12 min read
Ultimate Beneficial Owner (UBO) transparency has become a central pillar of global AML regulation. This article explains who qualifies as a UBO, why regulators worldwide are tightening ownership disclosure rules, and how businesses can identify, verify, and continuously monitor UBOs in line with evolving AML requirements. It also explores common challenges, regulatory trends through 2026, and the role of automation in effective UBO compliance.

In this post, we define UBOs, discuss the significance of verifying them, and provide a detailed how-to.
Globally, regulators have been developing strategies to stop money laundering from spreading. Governments discovered a due diligence gap—a lack of transparency in beneficial ownership—after the Panama Papers release. This made it possible for criminals to transfer money illegally offshore while hiding their identities, avoiding proper due diligence procedures, and getting beyond established Anti-Money Laundering (AML) protections.
Regulators responded by enacting regulations pertaining to Ultimate Beneficial Owners (UBOs) and the data that companies are required to submit about them. Financial institutions and other obligated entities are now required by rules in an increasing number of nations to identify and report on UBOs associated with their clients. As part of its fourth and later fifth AML Directives, the EU first implemented UBO checks in 2020. These requirements have since been strengthened under the new AML Regulation. In the meanwhile, nations like China and Saudi Arabia have implemented their own systems to recognize and validate UBOs.
If UBO duties are not fulfilled, some regulators have the power to remove companies from the registry or request judicial injunctions to ensure compliance.
The person who ultimately owns or controls a legal entity through direct or indirect ownership of a sufficient percentage of the shares, voting rights, or ownership interest in that entity—including through bearer shareholdings—or through control through other means is known as an ultimate beneficial owner, or UBO. Depending on the jurisdiction, a person who has voting rights and owns a sizable portion of a business (such as 10–25%) may be regarded as a UBO. When discussing UBO, it's also critical to differentiate between direct and indirect ownership.
When a beneficial owner has a large enough ownership stake in a business to exert influence or decision-making authority, this is known as direct ownership.
Controlling a business through another business or several businesses in equal measure is known as indirect ownership. The natural person who holds the position of senior managing official is considered a beneficial owner when all other means of identification have been exhausted, the beneficial owner cannot be identified, and there is no doubt that such a person exists, or when there are doubts as to whether the identified person is a beneficial owner.
The UBOs of their company-clients must be established and monitored by AML-obligated organizations, such as those involved in securities, currency exchange, commodities, forex, binary options brokers, hedge funds, casinos, futures commission merchants, blockchains, digital lenders, etc. UBOs are referred to by different names in some jurisdictions. For instance, they are referred to as "People with Significant Control" in the UK and "Registrable Controllers" in Singapore.
A person who ultimately controls a legal entity, like a firm, is referred to as a UBO in the business world. They may control the person or individuals who have legal ownership, or they may actually own the entity or a sizable portion of it. When it comes to illicit enterprises, there may be attempts to hide the identity of the UBO or UBOs through the use of complicated management structures or offshore shell corporations. For instance, a firm in France may be owned by a company registered abroad, and another company in a jurisdiction that does not mandate the disclosure of UBOs may then own this shell company.
Businesses and financial institutions operating in jurisdictions requiring UBO verification must make sure they have the procedures and resources in place to accurately identify and validate their clients' UBOs. This lessens the possibility of money laundering and other financial crimes while also promoting openness.
A risk-based approach to AML requires an understanding of a company's structure and Ultimate Beneficial Ownership. UBOs must be known in order to correctly risk-score a customer and do the appropriate degree of Customer Due Diligence. If not, it is impossible to properly evaluate their risk factors.
The individual or organization whose name appears on formal ownership records (such as share registers and corporate documents) is the legal owner.
They are legally entitled to a company's assets or shares. However, the individual who has ultimate authority over the business is not always the legal owner.
Regardless of whose name appears on the legal paperwork, the natural person who ultimately owns or controls a legal person is known as a beneficial owner.
A beneficial owner may be in charge by:
Important point: If the beneficial owner exercises ultimate control, they must be named even if they do not own shares in their own name.
A beneficiary is a person who gains money from a contract, trust, insurance policy, or other legal arrangement.
Important point: Although a beneficiary may not always have influence over the organization or arrangement, they do receive advantages.
In order to stop financial crimes like money laundering from being carried out through shell corporations, businesses that adhere to Anti-Money Laundering (AML) legislation must identify UBOs.
Jargon decoder: Shell firms have no substantial assets and just exist on paper. They are frequently established in countries with advantageous tax and regulatory frameworks to enable another business to outsource specific operations. Although there are legal reasons for shell corporations, criminals occasionally use them for things like tax evasion and money laundering.
The extensive use of anonymous shell corporations for illicit activities, such as money laundering and tax evasion, was made public by the 2016 Panama Papers leak. Regulators responded by introducing legislation mandating financial institutions to identify and confirm the identity of those who will eventually profit from any transactions that are started on their platforms. Increasing transparency and decreasing chances for financial crime, including money laundering, are the objectives.
The KYB (Know Your Business) and KYC (Know Your Customer) procedures now heavily rely on UBO verification. This enables required businesses to demonstrate that they have located and confirmed the final beneficiaries of any transactions that their clients initiate. People will be screened against sanctions lists and other watchlists as part of UBO checks, and their risk score will be determined by how likely it is that they are involved in financial crime. Because otherwise known criminals might utilize "clean" intermediates to carry out illicit activity on their behalf and avoid attention, full due diligence can only be completed through these processes.
Serious repercussions, like penalties, licensing risks for institutions, bad press, and a decline in client trust, may result from noncompliance with UBO verification regulations.
There are four steps in the UBO verification process.
Certain information must be gathered in order to confirm a company's validity and the correctness of its records. Depending on the country and fraud regulation rules, different information may be needed. In general, the following data ought to be gathered:
The information supplied must be supported by trustworthy records, data, or both.
Identification of natural individuals with a percentage of shares or interests in a company, as well as whether this control is direct or indirect, can be aided by documents or register data. The entire ownership structure should be examined until controlling natural persons (the UBOs) are identified if shares are held by intermediary legal entities.
Businesses should find out each person's entire proportion of shares, ownership stake, or potential indirect control and determine whether any of them fit the UBO definition.
The complete Know Your Customer (KYC) check, which we'll describe below, must be completed by everyone who is considered a UBO.
When onboarding with a new financial services provider or other regulated body, businesses in countries and regions with UBO disclosure requirements may, on an individual basis, be required to complete a UBO declaration. According to the regulations of the applicable jurisdiction, this disclosure must list every UBO.
Additionally, businesses might have to submit the information on their UBOs to a national register. Information on who ultimately controls different companies can be found in this database.
In certain nations, such as the UK, where information about UBOs, or "People with Significant Control," is accessible to all through Companies House, this information is made public. In some nations, such as Singapore's Central Register of Registrable Controllers, which is not accessible to the general public and can only be accessed by law enforcement agencies in order to perform their tasks, this register may be secret and only made public when necessary.
Companies must use a KYC solution to confirm UBOs after they have been identified. This entails setting up an appropriate Customer Due Diligence (CDD) process, which entails gathering, confirming, and keeping an eye on data supplied by clients.
Enhanced Due Diligence (EDD) monitoring should be carried out if it turns out that an established UBO is a high-risk client.
In order to determine whether their clients are on any sanction lists (OFAC, UN, HMT, EU, DFT, etc.), PEP lists, negative media, and so forth, businesses must also perform Anti-Money Laundering (AML) screening.
Customers should be continuously observed even after the onboarding process in case they later find themselves on a sanctions list.
CDD inspections are necessary since a customer's profile may vary over time. A UBO may, for instance, subsequently be sanctioned, carry out risky transactions, or alter their personal data.
Periodic verification is crucial because of this. Periodic verification reduces compliance risks and streamlines everyday operations by enabling automatic, continuous due diligence for KYC and KYB application checks. Usually, it is predicated on three main factors: applicant information, deadlines, and the actions taken against chosen applicants. This strategy guarantees that businesses maintain compliance, minimize manual labor, and grow their operations with assurance.
Verification of UBOs is not always simple. This is particularly relevant when dealing with businesses in jurisdictions with laxer standards or when there may have been deliberate attempts to conceal the identities of a company's UBOs.
Obligated businesses must be able to ensure compliance because UBO verification is now a common component of AML requirements in many nations and regions. Having KYC and KYB technologies that can automatically adapt to the needs of several countries and facilitate UBO verification is crucial. It not only makes compliance easier, but it also fosters trust between regulators and consumers.
Get personalized guidance from our expert volunteers. Whether you have questions about this topic or need help with your specific situation — we're here to help, completely free.
Get Free GuidanceHave questions about this topic? Need guidance on your specific situation? Or want to share your expertise? We're here to help — completely free.
Need advice about licensing, compliance, or entering regulated industries? Our volunteer experts can help you understand your next steps — completely free of charge for educational and nonprofit purposes.
Have expertise in fintech, crypto, law, or technology? Join our contributors' network and share your materials, articles, or tutorials to help others learn and grow.