KYC Published: Updated: By

What is a beneficial owner?

Quick answer

A beneficial owner is the natural person who ultimately owns or controls a legal entity, or on whose behalf a transaction is conducted. FinCEN's CDD Rule sets the threshold at 25% ownership or significant management control. EU AML Directives use the same 25% floor.

The full answer

A beneficial owner is the natural person who ultimately owns, controls, or benefits from a legal entity. It's the human being behind the company: the one who actually controls its assets and decisions, not whoever appears on the share register.

In the US, FinCEN's CDD Rule (31 CFR § 1010.230, effective May 2018) applies a two-prong test to legal entity customers:

  • Ownership prong: Any natural person holding 25% or more of the equity. An entity with four equal 25% shareholders has four ownership-prong beneficial owners.
  • Control prong: One natural person with significant responsibility to control, manage, or direct the entity. CEO, CFO, COO, managing member, general partner. Mandatory regardless of whether anyone crosses the 25% ownership threshold.

The minimum the rule requires is one individual: the control-prong person. A company with 10 shareholders each holding 10% still needs a beneficial owner identified under the control prong.

FATF Recommendation 10 requires member countries to mandate beneficial ownership identification as a core element of Customer Due Diligence. The standard explicitly requires looking through ownership chains until a natural person is reached.

The EU's 5AMLD uses the same 25% threshold. Where no individual exceeds it, or doubt exists about accuracy, the senior managing official becomes the default beneficial owner. All EU member states must maintain central beneficial ownership registers, accessible to the public and to reporting entities as of January 2020.

The Corporate Transparency Act, effective January 2024, extended the framework beyond banks. Most US companies with fewer than 20 employees or under $5 million in annual revenue must now report their beneficial owners directly to FinCEN, creating a centralized registry that should reduce reliance on self-reported customer data.

The look-through requirement

When a legal entity owns 25% or more of another entity, the institution must look through each ownership layer until it reaches natural persons. There's no statutory cap on how many layers to traverse. A chain of four nested holding companies still requires identifying the individual human at the top.

Nominees don't count. The person listed on a share register as nominee shareholder is not the beneficial owner. It's the person giving instructions and receiving the economic benefit.

Trusts require identifying the trustee, the settlor, any protector, and any beneficiary with a 25% or more beneficial interest. For discretionary trusts where no beneficiary holds a fixed interest, the institution must identify the full class of potential beneficiaries and exercise judgment on who may benefit.

Risk-based threshold adjustments

The 25% threshold is a floor, not a fixed rule. For higher-risk customers, institutions commonly apply 10% or lower as part of Enhanced Due Diligence (EDD). A politically exposed person holding 12% in a private equity fund warrants identification even below the standard threshold. This is the risk-based approach both FinCEN and FATF Recommendation 1 require.

The Ultimate Beneficial Owner (UBO) is the natural person at the very top of the ownership chain, after all intermediary entities have been looked through.

Why this matters

Beneficial ownership opacity is the central mechanism in most complex money laundering and sanctions evasion schemes. Shell companies with hidden owners are the standard vehicle for moving proceeds from corruption, fraud, and illicit trade.

The 2020 FinCEN Files, a leak of thousands of suspicious activity reports published by BuzzFeed News in collaboration with the International Consortium of Investigative Journalists, showed that major banks processed transactions for entities whose beneficial owners were either unknown or flagged as high-risk but never effectively actioned. The documents covered roughly $2 trillion in transactions flagged as suspicious between 1999 and 2017.

U.S. Bancorp's 2018 deferred prosecution agreement with DOJ and FinCEN cited systemic failures in its AML program, including inadequate controls on high-risk shell company accounts. The total penalty was $613 million. Examiners found the bank had identified risks but had not implemented adequate controls to address them.

For a compliance team, the practical stakes are specific:

  • Examination findings: Incomplete or unverified beneficial owner records are consistently cited in OCC, Federal Reserve, and FinCEN examination reports as primary BSA deficiencies.
  • SAR quality: If a transaction looks suspicious and the beneficial owner is unknown, the SAR goes out with incomplete subject information. This weakens the filing and may itself draw scrutiny.
  • Sanctions screening: You can't run an effective SDN or PEP screen if you don't know who actually controls the account. A 25% shareholder from a sanctioned jurisdiction breaks the chain entirely.
  • Ongoing monitoring: Beneficial ownership must be updated when the institution becomes aware of changes, not only at onboarding. A share transfer, a merger, or a death can change ownership overnight. KYB processes should include triggers for periodic refresh.
  • Regulatory exams: Gaps in beneficial ownership documentation are among the most common deficiencies that trigger an escalated regulatory examination.

At the country level, weak beneficial ownership frameworks are a direct driver of FATF Grey List designation, which raises counterparty risk for any bank dealing with entities in those jurisdictions.

Related questions

Related concepts and regulations

← All compliance questions