Every compliance team knows KYC — Know Your Customer, the identity and risk verification you run on an individual. Far fewer are as fluent in KYB, Know Your Business: the same discipline applied to a legal entity rather than a natural person. Yet for banks, External Asset Managers (EAM) and fintechs onboarding companies, funds, trusts and foundations, KYB is where the real work — and the real risk — sits.
KYB (Know Your Business) is the process of verifying that a legal entity is genuine, lawfully constituted, and understood well enough to be onboarded and monitored: its legal existence and good standing, its registry data, its ownership and control structure down to the ultimate beneficial owners, its authorized signatories, and the sanctions, PEP and adverse-media exposure of both the entity and the people who control it. In short, KYC asks "who is this person and are they who they claim to be?"; KYB asks "what is this entity, who really stands behind it, and is any of it a problem?"
This article defines KYB precisely, contrasts it with KYC, sets out what a complete KYB check must establish, explains why doing it manually is so slow, and shows how automation compresses corporate onboarding from weeks to hours.
1. What KYB is — and how it differs from KYC
KYC and KYB share a goal — knowing who you are dealing with and what risk they carry — but they operate on fundamentally different objects. A person has one identity, one document set, and a bounded set of checks. An entity is an abstraction: it exists only on paper, it can own and be owned by other entities, it acts through appointed humans, and the people who ultimately benefit from it may be several layers removed from its name on a contract.
That difference cascades through the entire workflow. Where KYC verifies a passport, KYB must verify a certificate of incorporation. Where KYC screens one individual, KYB must screen the entity, its directors, its signatories and its beneficial owners. Where KYC is largely complete once identity is confirmed, KYB is only complete once the whole ownership chain has been unwound to the natural persons at the top.
| Dimension | KYC (Know Your Customer) | KYB (Know Your Business) |
|---|---|---|
| Subject | A natural person | A legal entity (company, fund, trust, foundation) |
| Core question | Is this person who they claim to be? | What is this entity and who ultimately controls it? |
| Primary evidence | ID document, proof of address, selfie | Registry extract, statutes, shareholder register, UBO chain |
| Parties to screen | The individual | Entity + directors + signatories + UBOs |
| Data sources | ID databases, biometrics | Business registries across jurisdictions |
| "Done" when | Identity verified and risk-rated | Ownership unwound to natural persons and all parties screened |
| Typical effort | Minutes | Hours to days |
KYB does not replace KYC — it wraps around it. Every KYB check eventually resolves to a set of natural persons (the UBOs and signatories), and each of those still needs a KYC-grade verification. KYB is best understood as the entity-level scaffolding that determines which individuals must be KYC'd in the first place.
2. What a complete KYB check must establish
A defensible KYB file is not a single lookup. It is a set of distinct findings, each of which must be evidenced and kept current.
Legal existence and good standing
The first question is whether the entity legally exists at all, and whether it is in good standing — active, not struck off, not in liquidation, not dissolved. This is established from the relevant business registry: incorporation date, legal form, registered address, company number, and current status.
Registry data and core attributes
Beyond mere existence, KYB captures the entity's identifying attributes: legal name and any trading names, registered and operating addresses, legal form, financial-year information, and regulatory licences where the activity requires them. These attributes feed both risk scoring and downstream screening.
Ownership and control — the UBO chain
The heart of KYB is reconstructing who owns and controls the entity, layer by layer, until the ultimate beneficial owners — the natural persons — are identified. Ownership may run through holdings, trusts and foundations across several jurisdictions, and control does not always follow shareholding: voting agreements, veto rights and senior-official status can all confer control without a majority stake.
Authorized signatories and representatives
KYB must establish who is legally entitled to act for the entity — to open the account, sign the mandate, and give instructions. Directors, officers and holders of powers of attorney are identified from statutes and registry data, and each is then verified as an individual.
Sanctions, PEP and adverse media — on the whole structure
Screening in KYB is not limited to the entity's own name. The entity, its directors, its signatories and every identified beneficial owner must be screened against sanctions and PEP lists and adverse-media sources. A clean entity controlled by a sanctioned individual is not a clean file.
Activity, source of funds and risk
Finally, KYB establishes what the entity actually does, the plausibility and legitimacy of its funds, and its overall risk rating — jurisdiction, sector, structure complexity and ownership opacity all feed the score. For higher-risk files this connects directly to source-of-wealth and source-of-funds verification.
3. Why KYB is hard
If KYB were a single registry lookup it would be trivial. It is hard because every one of the findings above must be assembled from fragmented, cross-border, often unstructured sources.
Multi-jurisdiction registries. There is no single global company registry. Each jurisdiction has its own portal, language, data format, access rules and cost. A structure spanning five countries means five different registries, five formats, and five sets of gaps.
Layered ownership. A holding owned by a holding owned by an intermediate owned by an offshore entity is routine. Each layer must be resolved in its own registry, and a single missing link breaks the calculation of who ultimately controls the entity.
Trusts, foundations and nominees. Ownership is not always about shares. Trusts separate legal ownership from economic benefit; foundations may have no owners in the conventional sense; nominees are placeholders by design. Resolving control here means reading trust deeds and statutes — unstructured, jurisdiction-specific documents that rarely sit in a public registry.
Document currency. Registry extracts and statutes go stale. A file that was correct at onboarding drifts out of date within months as shares change hands and directors are replaced — and the institution rarely learns until a periodic review or an incident surfaces the change.
Cross-border friction. Foreign-language documents, differing thresholds for beneficial ownership, and inconsistent disclosure standards all add manual translation and interpretation work to every branch of the structure.
