A precise, sourced definition of ultimate beneficial ownership: what a UBO is, the ownership and control tests, how the 25 percent threshold differs across the US, EU and UK, how ownership is hidden, and how UBOs are found and verified. This is the bridge between the KYC and KYB sub-clusters.
An ultimate beneficial owner (UBO) is the natural person who ultimately owns or controls a company, whether directly or indirectly through a chain of other companies, trusts, or nominees. A person qualifies through either an ownership test, commonly a 25 percent stake, or a control test that catches those who pull the strings with no shares at all.
An ultimate beneficial owner (UBO) is the natural person who ultimately owns or controls a legal entity, whether that ownership or control runs directly or indirectly through a chain of other companies, trusts, or nominees. The whole point of the concept is to see past the company on the paperwork to the flesh-and-blood human who really benefits from, or pulls the strings behind, the entity.
The globally accepted definition comes from the Financial Action Task Force (FATF), the intergovernmental anti-money-laundering standard-setter. A beneficial owner is the natural person who ultimately owns or controls a customer or the legal person on whose behalf a transaction is conducted, and it always includes the person who exercises ultimate effective control. Two words carry the weight. Natural person: the answer is never another company, so the chain must resolve to a human. Ultimately: you follow the chain to its end, however many layers deep it runs.
Why does this matter so much? Anonymity is the enabler of most serious financial crime. The United Nations Office on Drugs and Crime estimates that 2 to 5 percent of global GDP, roughly 800 billion to 2 trillion US dollars, is laundered every year, and so much of it moves undetected because criminals hide behind companies whose true owners are unknown. When investigators cannot name the person behind an entity, they cannot screen that person against sanctions or PEP lists, cannot assess their source of wealth, and cannot hold anyone to account. That is why beneficial ownership sits at the centre of both know your customer (KYC) and know your business (KYB), and why FATF, the EU, the UK, and the US have all rewritten their beneficial ownership rules since 2022.
Every serious framework applies two independent tests. A person can be a UBO through either of them, and both must be assessed, not just the first.
The ownership test. The person owns or controls a defined percentage of the entity's shares, capital, or voting rights, directly or indirectly. The common benchmark is 25 percent, but the exact figure, and whether it reads as '25 percent or more' or 'more than 25 percent', varies by jurisdiction (see the next section).
The control test. The person exercises control by other means, regardless of any shareholding. This catches anyone who runs the entity through voting agreements, the right to appoint or remove the board, veto rights, or simply de facto influence. Someone can own zero shares and still be a UBO under the control test.
A frequent and serious error, in practice and on weaker glossary pages, is to treat UBO discovery as an ownership-percentage arithmetic exercise and stop there. The control prong exists precisely because the people who matter most in a laundering structure often hold no formal equity.
Direct versus indirect ownership. Direct ownership is simple: a person holds shares in the entity in their own name. Indirect ownership is where the difficulty, and most of the concealment, lives. If person A owns 50 percent of company X, and company X owns 60 percent of company Y, then A's indirect stake in Y is calculated by multiplying down the chain: 50 percent times 60 percent is 30 percent, which clears a 25 percent threshold. This multiplication, applied at every level and then added across every separate chain that reaches the same person, is what the EU's incoming rules make explicit as the accumulation method. Building this picture is what practitioners call unwinding the ownership tree.
The rules distinguish two things, and FATF gives each its own Recommendation. For legal persons (companies, partnerships, foundations), Recommendation 24 applies: the UBO is the human at the top of the ownership or control chain. For legal arrangements (trusts and similar), Recommendation 25 applies: here 'beneficial owner' is defined by role, not by percentage, and it covers the settlor, the trustees, the protector, the beneficiaries or class of beneficiaries, and any other natural person exercising ultimate control. Trusts are singled out because they separate legal ownership from beneficial enjoyment by design, which is exactly the property that makes them useful for concealment.
The defining feature of the current moment is a common FATF baseline sitting under sharply divergent national implementations. There is no single global threshold, and the precise wording differs in ways that matter.
FATF does not fix a single hard percentage in the standard itself. It sets the ownership-or-control principle and lets countries set thresholds, with 25 percent as the widely adopted reference point.
United States (FinCEN). The beneficial owner is any individual who directly or indirectly owns or controls at least 25 percent of the ownership interests, the ownership prong, or exercises substantial control, the control prong.
European Union. The threshold is currently 25 percent under the Anti-Money Laundering Directives, expressed historically as 'more than 25 percent'. The incoming Anti-Money Laundering Regulation (AMLR, Regulation (EU) 2024/1624) lowers and hardens this to 25 percent or more, and gives the Commission power to lower it to 15 percent or even lower for categories of entity assessed as high risk. AMLR makes ownership and control two mandatory, independent tracks that must both always be assessed, and sets out the multiplication-and-accumulation method for indirect ownership.
United Kingdom (PSC regime). A person with significant control (PSC) is broadly anyone who holds more than 25 percent of shares or voting rights, holds the right to appoint or remove a majority of the board, or otherwise exercises significant influence or control. Beneficial owners sitting behind nominee arrangements are PSCs if they meet the criteria.
State the 'more than 25 percent' versus '25 percent or more' distinction plainly, because it is a real difference. A person on exactly 25.0 percent is a UBO in the incoming EU regime and in the US, but not under the UK 'more than 25 percent' test. The table below sets out the current position side by side.
Beneficial ownership registers were meant to make ownership transparent. The current reality is turbulent, and this is the part most competitor pages get wrong or leave stale.
United States: the Corporate Transparency Act reversal. The Corporate Transparency Act (CTA) created a federal beneficial ownership information (BOI) registry at FinCEN, with reporting due from 1 January 2024. It then went through a whipsawing sequence of litigation. In March 2024 a federal court in Alabama held the CTA likely unconstitutional, but only as to the named plaintiffs. On 3 December 2024 a federal court in Texas issued a nationwide preliminary injunction blocking enforcement. Through late December 2024 and into January 2025 that injunction was stayed, reinstated, and litigated up to the Supreme Court, leaving reporting effectively paused. Then, in an interim final rule dated 21 to 26 March 2025, FinCEN removed BOI reporting obligations for all entities created in the United States and for US persons, and redefined 'reporting company' to mean, with limited exceptions, only entities formed under foreign law that have registered to do business in a US state. In short, US domestic companies and US persons are exempt; only foreign reporting companies remain in scope. The register that was meant to shine a light on American shell companies now largely exempts them.
European Union: the CJEU ruling and its aftermath. On 22 November 2022 the Court of Justice of the European Union ruled that the Fifth Anti-Money Laundering Directive provision giving the general public open access to beneficial ownership registers was invalid, because unrestricted public access is a serious interference with the rights to privacy and data protection under the EU Charter. Many member states shut public access to their registers overnight. Access now reverts to a legitimate-interest model rather than fully open public access: competent authorities, financial intelligence units, and regulated firms retain access for due diligence. The incoming EU package codifies this and, critically, presumes a legitimate interest for journalists, civil society organisations, and academia connected to anti-money-laundering work, so they get generalised access rather than having to prove their interest case by case. Implementation across member states has been uneven, with several missing deadlines and access requests reportedly stalled by fees, paperwork, and language barriers.
United Kingdom: the PSC register and ECCTA reform. The UK has run a public PSC register at Companies House since 2016, and, unlike the EU, it has not been forced to close public access. The problem was never access, it was reliability: for years Companies House did not verify the identities it published, so fictitious and stolen identities were used to form companies and appoint bogus directors. The Economic Crime and Corporate Transparency Act 2023 (ECCTA) is the fix. Mandatory identity verification for directors and PSCs opened voluntarily on 8 April 2025 and became mandatory from 18 November 2025, with a 12-month transition requiring more than 7 million existing directors and PSCs to verify their identity. Verification uses document plus likeness matching, tying a real, checked human to each PSC entry, which is the mechanism that makes the data genuinely reliable rather than merely declared.
Beneficial ownership rules exist because ownership is actively concealed. The techniques are well documented, and they reinforce one another when layered.
This is not theoretical. The 2021 Pandora Papers, the largest leak of offshore data on record, comprised more than 11.9 million files and exposed the systematic use of anonymous shell companies and trusts to conceal the assets of 35 current and former world leaders and more than 330 public officials across 91 countries and territories. A single law firm in the leak had reportedly created at least 14,000 offshore entities. These are precisely the structures beneficial ownership rules exist to pierce.
UBO discovery is a sequence, and each step is a place where data can be thin, stale, or deliberately obscured. The core operational problem is that the data lives in many separate sources, in different countries, formats, and languages, with varying access rules, and, since the CJEU ruling, varying access at all. Assembling one coherent, evidenced ownership picture across those sources, and keeping it current, is the hard part. For the practical detail of going beyond the self-declared form, see how to verify a business.
Beneficial ownership is the linchpin that binds identity checks on people to identity checks on companies. KYC verifies a person. KYB verifies a business. To complete KYB on a company you must resolve its UBOs, and once you have them, verifying and screening each UBO is a KYC exercise. A business is only as clean as the people who ultimately own and control it.
The connection is most concrete at the screening step. When you resolve a UBO to a real human, the next move is to check that human against sanctions, PEP, and adverse-media sources. That is why screening UBOs for political exposure is the practical handover point from company due diligence back to person due diligence, and why PEP screening is inseparable from UBO discovery. Beneficial ownership sits at the join, which is exactly why the FATF, EU, UK, and US frameworks all treat it as a foundation rather than an add-on. FATF underpins the whole picture: Recommendation 24 covers legal persons, revised in March 2022 with guidance following in March 2023, and Recommendation 25 covers legal arrangements such as trusts, revised in February 2023 to bring them broadly into line with the tougher company standard. That is why every jurisdiction is moving at once.
UBO discovery is a fragmented, cross-source problem: the answer lives across many separate registries and data providers, and someone has to query them, reconcile them, unwind the tree, and keep one evidenced record. That is a natural fit for orchestration plus specialised AI sitting on top of the data you already license, rather than instead of it. Zenoo does not publish its own beneficial ownership registry and it does not replace the corporate-data and registry sources you rely on.
Concretely, and with all figures from the metrics registry: the Full KYB Pipeline cross-references multiple data sources in a single automated run and surfaces 2 to 4 times more relevant persons than a manual process, precisely because it does not stop at the first layer, moving end-to-end KYB onboarding from 3 to 5 business days to under 30 minutes. The KYB Researcher agent compiles a structured compliance dossier of 50 or more data fields per entity, taking manual KYB research from 2 to 4 hours to under 60 seconds. Because Zenoo routes company-data and registry checks across a marketplace of 240 or more check types with automatic failover, no single source's coverage caps a cross-border chain. Once UBOs are resolved, the same platform screens them against sanctions and PEP lists and pre-classifies up to 80 percent of alerts, cutting per-alert disposition from 20 to 45 minutes to 2 to 3 minutes. A 209-country risk database with 16 indicators per country weights the chain by jurisdiction risk, and every lookup and UBO decision is captured as an immutable audit event (32 event types across 8 categories), so you can show a regulator the evidenced ownership picture from one record rather than a scatter of provider screenshots. You choose which registry and data providers to route to across the Marketplace, and the same platform runs the KYB workflow end to end.
The honest limits: Zenoo cannot see ownership that no accessible source records, so if a jurisdiction hides the data or a nominee breaks the chain, orchestration surfaces the gap, it does not conjure the missing owner. It does not decide your threshold or policy, and it does not remove the legal obligation to verify and, where warranted, establish source of wealth. It speeds the work; a human still signs off.
Zenoo's headline platform figures, a 95 percent reduction in false positives and investigation time moving from an industry-benchmark 22 hours to 12 minutes, are stated as platform-wide results, not UBO-specific claims. Only Maples is a named Zenoo customer.
Where this fits, honestlyUBO discovery is a cross-source problem: the answer is scattered across registries and data providers, and someone has to query them, reconcile them, unwind the tree, and keep one evidenced record. Zenoo is an orchestration layer, your registries and data sources plus Zenoo, not instead of them. It runs discovery across sources in one pass, screens the UBOs you find for sanctions and PEP status, and writes every lookup and decision to one immutable audit trail. The analyst keeps the decision; the AI agents remove the grunt work.
