Beneficial Ownership Checks: Screening Real Owners

When a company opens an account, you are not really dealing with the company. You are dealing with the people who own it and control it. A company can have a valid commercial registration, a real office, and years of trading history, and still be owned by someone you are not allowed to do business with.

That is why beneficial ownership is the part of business onboarding that matters most, and the part that is skipped most often.

Who counts as a beneficial owner

A beneficial owner is a natural person who ultimately owns or controls the company, directly or through other companies. In practice, programs look for three kinds of people:

• Owners: anyone holding a significant share of the company, commonly 25% or more, directly or through a chain of other entities.
• Controllers: anyone who controls the company by other means, such as voting rights, the power to appoint the board, or an agreement with the shareholders.
• Senior managers: when no one meets the first two tests, the most senior person managing the company is recorded as the beneficial owner.

Your policy sets the exact threshold. The point is to end at a person, not at another company.

Follow the chain to the end

A common mistake is to stop at the first layer. The applicant is owned by a holding company, the holding company passes screening, and the file closes. But the holding company is owned by people too.

Ask for the full ownership structure and follow every branch until it ends in an individual. If a branch ends in a trust, a foundation, or a company in a jurisdiction where ownership is not disclosed, that is not a dead end. It is a reason for enhanced due diligence.

Signs that a structure needs a closer look:

• several layers of holding companies with no clear business reason
• owners just under the ownership threshold, so no one appears as a beneficial owner
• nominee shareholders or directors
• a recent change of ownership right before the account application
• companies registered in places with little ownership transparency

Screen every owner, not just the company

Screen the company name, and then screen each beneficial owner as an individual: full name, date of birth, and nationality. A sanctioned person rarely owns a business in their own name at the top of the structure. They show up two or three layers down.

Two things to check beyond the obvious sanctions list:

• PEP status: an owner who is a politically exposed person, or a close relative of one, calls for enhanced due diligence, not automatic rejection.
• Ownership by listed persons: some sanctions regimes extend restrictions to companies majority-owned by sanctioned individuals, even when the company itself is not on any list. Your ownership data is what lets you see that.

Keep the structure current

Ownership changes. Shares are sold, directors are replaced, new holding companies appear. A beneficial ownership check done once at onboarding goes stale. Ask business customers to confirm their structure periodically, re-check it when you notice a change, and re-screen every owner when sanctions and PEP lists update.

Store each owner as a person with a stable ID linked to the company record. That way a new match on an owner during re-screening lands on the right company and the right case.

When the structure is unclear

Some applicants cannot or will not show you who owns them. That is information in itself. Record what you asked for, what you received, and what was missing. Then decide according to your policy: approve with enhanced monitoring, ask for more evidence, or decline. Do not approve quietly and hope it sorts itself out.

A short checklist

• Is the ownership chain followed to individuals on every branch?
• Is every beneficial owner screened as a person, with date of birth and nationality?
• Are PEP owners routed to enhanced due diligence?
• Is the structure re-confirmed periodically and re-screened when lists change?
• Is every gap in the structure documented with a decision?

Naiza screens companies and individuals in the same workflow, so the business and each of its owners can be checked against sanctions, PEP, and watchlist sources and tied to one case. The know your business entry covers KYB terminology, and the AML screening API page shows the fields to send.