An ultimate beneficial owner is the natural person who ultimately owns or controls a customer, or on whose behalf a transaction is conducted. Identifying that person is the point of due diligence on a company, because a legal entity cannot launder money on its own, and the hard part is deciding how far to trust the agent who formed it.
Beneficial ownership rules sit across the FATF standards and each regulator's own framework, and the exact ownership or control threshold is set locally. The principles below are general; confirm the specific threshold and documentary requirements against your regulator's rules before applying them.
This guide is written for CCOs, AMLCOs and onboarding leads who screen corporate customers and have to judge the ownership behind the entity and the intermediary in front of it.
What is an ultimate beneficial owner?
The natural person, or persons, who ultimately own or control a legal entity, or who exercise effective control over it, whatever the layers of ownership in between.
Beneficial ownership looks through the company to the people behind it. The standard has two limbs: ownership, where a natural person holds a stake above the threshold the regulator sets, and control, where a person exercises ultimate effective control by other means, such as through nominees, agreements or senior management positions. The FATF standards on beneficial ownership of legal persons require countries to ensure adequate, accurate and up-to-date information on who ultimately owns and controls companies. The control limb matters as much as the ownership limb, because a launderer who wants to stay hidden will hold influence without holding a reportable stake.
Legal entity
Companies and nominees
Owns above the regulator’s threshold
Controls without a reportable stake
ownership
Why does beneficial ownership matter for money laundering?
Because companies, trusts and other legal arrangements are the main tools used to hide the person behind illicit funds.
A legal entity is a layer, and layers are what laundering uses to break the link between a person and their money. At BNM's DNFBP Compliance Conference on 22 October 2026, Deputy Governor Marzunisham Omar noted that companies, trusts and legal arrangements can be misused to disguise beneficial ownership and conceal the origins of illegal proceeds. The same cover is what makes a corporate account attractive as a mule, a pattern we cover in our piece on corporate mule accounts. Identifying the beneficial owner is how an institution reattaches the entity to a real person, which is why a passed identity check on the company settles very little, a point our note on why identity verification is not KYC develops.
How is a beneficial owner identified in practice?
By tracing ownership through each layer to the natural persons above the threshold, then testing for control that ownership alone does not show.
The practical steps are ownership first, then control. Trace the ownership chain through holding companies and nominees to the natural persons who hold more than the regulator's threshold. Then ask who actually controls the entity, because a senior manager, a founder with a veto, or a person who directs a nominee may control without owning. Record the basis for each conclusion, because an examiner will test it. Where a beneficial owner is a politically exposed person, enhanced due diligence follows, as our PEP screening guide sets out, and the named parties feed name screening and the customer's risk rating.
Who are the gatekeepers, and why do they matter?
Lawyers, accountants and company service providers who form and administer companies are gatekeepers, because they sit between the real owner and the financial system.
These professionals can see the ownership an entity is designed to obscure, which is why the FATF treats many of them as covered persons and why supervisors watch them. The BNM Deputy Governor cited a UNODC assessment identifying lawyers and accountants among the specialist facilitators within criminal networks. He described these businesses and professions as well placed to detect, prevent and report illicit activity before it enters the financial system. The point for a bank is twofold. A gatekeeper who does their job is a line of defence. One who does not, wittingly or not, is how a clean-looking shell reaches your onboarding desk.
How far can a bank rely on the intermediary that formed the company?
Only so far. A bank may use information from a third party, but the accountability for the due diligence stays with the bank.
This is the judgement the whole topic turns on. The FATF framework allows reliance on a third party for elements of customer due diligence, but the institution that relies remains responsible for the result. It must be satisfied the third party is regulated, supervised and will provide the underlying records on request. The practical test is concentration and verification. If a single formation agent or introducer accounts for a large share of your corporate book, that concentration is itself a risk signal. And reliance is never blind: the bank should still see the beneficial ownership and be able to produce the basis for it. Document the decision to rely, and what was independently checked, in the case record, as our guide to case management and the audit trail describes.
What should a lean team get right on beneficial ownership?
Capture the owners and the basis for control at onboarding, refresh them when control changes, and keep the introducer relationship under review.
For a small team, beneficial ownership is where effort pays back most, because it is the control that most other controls depend on. Three disciplines matter. Capture the beneficial owners and the reasoning for each at onboarding, not a box ticked against a form. Refresh them when ownership or control changes, which is a trigger for an off-cycle review. And monitor introducer concentration, so reliance on one agent does not quietly become a blind spot. The wider due diligence benchmark for the region sits in our Southeast Asia CDD comparison.
How does Fyscal ARCX support beneficial ownership work?
Fyscal ARCX holds the beneficial ownership picture where screening and monitoring can use it. Named owners and controllers can be screened against sanctions, PEP and watchlists, and the Case Management record keeps each due diligence decision, its basis and its approver, so the reasoning behind a reliance decision is retrievable for an examiner. Where ownership or control changes, the customer's risk rating and monitoring can be updated from the same record. Collecting and verifying beneficial ownership data itself remains the institution's process, supported by the registry and documentary sources it uses.