UBO Identification & Complex Structures
How to Trace Beneficial Ownership to Natural Persons
Every major beneficial-ownership scandal — Panama Papers, Pandora Papers, 1MDB, FinCEN Files — came down to UBO controls that stopped at a corporate layer instead of reaching the natural person. This guide shows you how to trace ownership through trusts, foundations, and multi-jurisdiction structures the way regulators expect.
Ultimate Beneficial Ownership (UBO) is where most serious KYC failures trace back to. When HSBC paid its Mexico fine, when Danske Bank’s Estonia book collapsed, when the 1MDB bankers at Goldman Sachs faced individual prosecution, the root cause wasn’t that sanctions screening missed a name or that PEP screening failed. It was that beneficial-ownership tracing stopped at a corporate layer instead of reaching the natural person who actually owned and controlled the money.
UBO identification is also the single most technical skill that separates senior KYC analysts from juniors. At tier-1 banks like JPMorgan, Morgan Stanley, Barclays, BofA, Citi, BNY, State Street, HSBC Private, Emirates NBD, and sophisticated KPOs like eClerx and Genpact, your ability to trace ownership through a seven-layer offshore structure — or to recognise when a 23% shareholder is actually a UBO through control — is what gets you promoted into EDD and private-banking teams.
This guide covers UBO identification as it actually runs at global banks in 2026: the FATF framework, the 25% threshold (and when it’s wrong to use mechanically), the seven structure types you need to know, control paths that exist without ownership, multi-layer tracing technique, registry cross-referencing, and real scenarios from HNW private banking, corporate banking, fund administration, and complex trust arrangements.
What UBO Actually Means Under FATF
FATF Recommendations 24 and 25 define beneficial ownership as “the natural person(s) who ultimately owns or controls a customer and/or the natural person on whose behalf a transaction is being conducted.” Two words matter most: natural person. You cannot stop at a corporate layer, a trust, or a foundation. UBO tracing continues until you reach a living, breathing individual — with an identity document, a date of birth, a nationality, and an address.
UBO is not purely about ownership percentage. A person can control a customer without owning any of it — through voting agreements, director appointments, veto rights, family-linked aggregate holdings, or being the sole beneficiary of a trust that holds the customer entity. FATF R24 explicitly extends the definition to control paths. Banks that apply a mechanical 25% ownership test and miss control-based UBOs produce the files that generate the worst regulatory findings.
The 25% Threshold — What It Is and Why It’s a Floor, Not a Ceiling
Virtually every major AML regulation — FinCEN 2016 CDD Rule, UK MLR 2017 Regulation 5, EU 6AMLD, UAE DFSA AML Module, MAS Notice 626, RBI Master Direction on KYC — uses 25% as the default ownership threshold for UBO identification. But every one of those regulations also makes explicit that 25% is a minimum, not a cap. You must also identify parties with effective control, even at lower ownership levels.
| Regulation | UBO Threshold | Control Extension |
|---|---|---|
| FinCEN CDD Rule (US) | 25%+ ownership | Plus one “control person” regardless of ownership |
| UK MLR 2017 Regulation 5 | 25%+ ownership | Plus control via other means |
| EU 6AMLD | 25%+ ownership | Plus control via other means; member states may apply stricter thresholds |
| UAE DFSA AML Module | 25%+ ownership | Plus control per FATF R24/25 |
| MAS Notice 626 (Singapore) | 25%+ ownership | Plus control paths |
| RBI Master Direction (India) | 25%+ for corporates, 15% for trusts | Plus control via other means |
| FINTRAC (Canada) | 25%+ ownership | Plus control |
Several regulators have explicitly called out mechanical UBO application as a failure pattern. FCA Final Notices, DFSA Dear SEO letters, and FinCEN enforcement actions have all named banks that identified only 25%+ shareholders while missing effective control through voting agreements, family networks, or trustee arrangements. The regulatory expectation is: 25% triggers automatic UBO identification, but lower thresholds can still produce UBO status through control paths.
The 7 Structure Types — And How to Trace UBO Through Each
Private Limited Company
The simplest case. Pull the shareholder register, identify anyone holding 25%+ directly, check for voting agreements or control arrangements separately. For UK entities, Companies House PSC (Persons with Significant Control) register provides a verified baseline. For US entities, state-level filings supplemented by Corporate Transparency Act BOI reporting (currently paused for domestic reporting companies but relevant for foreign-owned entities). For EU entities, the central beneficial ownership register (access patterns vary by country post-2022 CJEU ruling).
Always verify: shareholder register against independent registry, cross-check for voting/shareholder agreements, screen every 25%+ owner individually.
Multi-Layer Corporate Holding
Company A is owned by Company B, which is owned by Company C, which is owned by natural persons. You must trace the entire chain. At each layer, identify 25%+ owners, then aggregate percentages to the top of the chain. If 80% of Company A → 60% of Company B → 40% of Company C is owned by a single person, that person effectively owns 19.2% of Company A — below the 25% threshold at the top, but the control pattern needs documented analysis.
The aggregation test: if the same natural person controls multiple entities in the chain, aggregate their effective ownership; they may cross 25% at the top when their individual-layer holdings are below 25%.
Trust
The hardest UBO case. Under FATF R25, a trust’s UBOs include: settlor (who funded the trust), trustee (who administers it), protector if one exists (who oversees the trustee), beneficiaries (named or class), and any other natural person exercising effective control. For discretionary trusts, identify the classes of beneficiaries plus any who have actually received distributions.
Documents required: trust deed, settlor ID, trustee ID (corporate trustees get their own CDD), protector ID if applicable, named beneficiaries list, letter of wishes where available, distribution history.
Control paths specific to trusts: the settlor often retains influence through letters of wishes even when the trustee has technical control. Protector appointments are particularly material. In asset-protection trusts, the settlor may be a formally excluded beneficiary but still practically the economic beneficiary.
Foundation (Stiftung, Liechtenstein / Panamanian / Dutch)
Foundations are hybrids — legal persons in their own right but with trust-like characteristics. UBOs include the founder (settlor-equivalent), council members (trustee-equivalent), beneficiaries, and protector if one exists. Liechtenstein Stiftungen and Panamanian Foundations appear regularly in global private banking and have their own national registration requirements post-EU AMLD alignment.
Partnership / Limited Liability Partnership (LLP)
For general partnerships, UBOs are partners holding 25%+ capital or profit interest. For LLPs, UBOs include any person with 25%+ rights to surplus on winding up, 25%+ voting rights, or the right to appoint or remove a majority of the management. Where a partner is itself a corporate entity, drill through to natural persons.
Investment Fund (GP/LP Structure)
For a private equity or hedge fund customer, UBOs are typically the General Partner and Investment Manager — the controlling parties. Limited Partners (LPs) are typically not treated as UBOs unless an individual LP holds 25%+ of the fund. Request: PPM, GP/LP split, regulator of the fund, senior investment-team identities.
Exception: for funds with concentrated LP base (family offices, single-investor funds), LPs may themselves be UBOs. The “25%+ of the fund” test is critical here.
Non-Profit Organisation (NPO) / Charity
NPOs do not have owners in the ordinary sense. UBOs are the controlling parties: trustees or directors, settlor-equivalent (if founded by a single person), and major donors where policy identifies them as controlling. FATF R8 specifically flags NPOs for enhanced scrutiny given terrorist-financing risk through the NPO sector.
Control Paths That Exist Without Ownership
One of the most tested topics in senior KYC interviews at Goldman Sachs, JPMorgan, Morgan Stanley, Barclays, HSBC Private, and Emirates NBD is: “Name five ways someone can control a company without owning 25% of it.” Strong candidates know them cold.
1. Voting agreements and shareholder pacts
Two minority shareholders agreeing in writing to vote together can hold majority voting power. A 15% holder with a voting agreement from a 20% holder effectively controls 35% of voting rights. Voting agreements must be requested and reviewed as part of EDD; they are not always visible in the public share register.
2. Board appointment rights
A shareholder with the right to appoint or remove a majority of directors controls the company regardless of ownership percentage. This is often set out in a shareholders’ agreement, preferred-share rights, or constitutional documents.
3. Veto rights on major decisions
The power to block corporate actions — dividend declarations, share issuances, major transactions, change of control — is a form of control. Investors with blocking veto rights, even at minority percentages, are UBOs via control.
4. Family-linked aggregate holdings
A family with six relatives each holding 5% is not six unrelated minority shareholders — they aggregate to 30% and the individual or individuals effectively directing the family block are UBOs. Relationship disclosure is required for UBO analysis, not just independent screening.
5. Trustee arrangements and declarations of trust
A nominee shareholder holds shares on trust for a beneficial owner. The nominee appears in the share register; the beneficial owner appears in the declaration of trust. UBO is always the beneficial party, never the nominee. Declarations of trust must be requested and reviewed.
6. Powers of attorney and agency arrangements
A person holding a general power of attorney from the beneficial owner has operational control. For senior roles, request POA documentation and include the POA holder in screening.
7. Economic arrangements (profit rights, carried interest, promote)
Some arrangements decouple ownership from economic benefit. A manager with carried interest over a fund has economic exposure that makes them a UBO despite holding only a nominal equity percentage. Profit rights and promote structures often reveal UBO status that percentage-only analysis would miss.
Multi-Layer Tracing — The Working Technique
When a customer presents a three-, four-, or seven-layer ownership structure, the job is to map the entire chain on an ownership chart and track both ownership percentages and control paths at each layer.
Step 1: Request the full ownership chart from the customer, showing every layer down to natural persons.
Step 2: At each layer, verify 25%+ ownership against independent registries or audited documentation.
Step 3: At each layer, request voting agreements, shareholder pacts, board-appointment rights, veto rights, and POA arrangements.
Step 4: Aggregate ownership paths — trace each 25%+ chain to natural persons at the top. Aggregate same-person holdings across multiple layer paths.
Step 5: Aggregate control paths separately. Identify anyone with effective control below 25% ownership.
Step 6: Produce a final UBO list — both ownership-based and control-based — and document why each identified person is classified as UBO. Screen each individually.
Registry Cross-Referencing — Never Rely on Customer Attestation Alone
For EDD customers and any file where UBO analysis is material, customer-provided ownership information must be cross-verified against independent registries. Reliance on customer attestation alone is a common audit finding.
| Jurisdiction | Primary Registry | Notes for 2026 |
|---|---|---|
| United Kingdom | Companies House PSC Register | Public, well-maintained, primary UBO reference for UK entities |
| United States | State Secretary of State filings | Corporate Transparency Act BOI reporting paused for domestic entities in 2025 pending litigation; foreign-owned reporting continues |
| European Union | National beneficial-ownership registers | Access restricted post-2022 CJEU ruling; banks have legitimate-interest access; quality varies by member state |
| UAE | UAE Ministry of Economy Beneficial Owner Register | Mandatory registration since 2020; DFSA and ADGM maintain their own free-zone registers |
| India | MCA Significant Beneficial Owner filings | Filed under Companies Act 2013 section 90 |
| Singapore | ACRA Register of Registrable Controllers | Company-maintained; accessible to law enforcement and regulators |
| Hong Kong | Significant Controllers Register | Company-maintained; not publicly accessible but available to designated officers |
| Offshore (BVI, Cayman, Bermuda, Jersey, Guernsey) | Beneficial-ownership registers maintained by each jurisdiction | Access varies; most now share with home-jurisdiction regulators post-2023 reforms |
Real-World UBO Scenarios
Scenario 1 — Six-layer offshore structure at JPMorgan London
A family office at JPMorgan London applies to open a £75M investment relationship. The presented structure: UK LLP → Luxembourg holding → Jersey trust → BVI company → Cayman fund → natural-person beneficiaries. No single layer exceeds 25% ownership when viewed in isolation.
Workflow: The KYC Manager maps the complete chart. At the Jersey-trust layer, she identifies the trust settlor (a UK-resident individual) and reviews the letter of wishes. At the BVI-company layer, she identifies the 60% owner (the same UK individual). Aggregation test: the UK individual effectively controls the entire chain through settlor-equivalent role at the trust plus majority at the BVI company.
Outcome: UBO identified. Full EDD applied on the UK individual including Source of Wealth reconstruction. Senior approval obtained. Annual review cycle with quarterly PEP re-screening.
Scenario 2 — Control below 25% at Barclays GCC
A private company at Barclays GCC Mumbai presents three shareholders: A holds 23%, B holds 23%, C holds 54%. On the surface, only C is a UBO. But the shareholders’ agreement reveals: A and B together have veto rights over dividend declarations, share issuance, and change of control. C can operate the business but cannot make major distributions without A and B’s consent.
Outcome: A and B are UBOs via control paths (veto rights) despite sub-25% ownership. All three are screened, and EDD depth is proportional to the control each actually exercises. File documented with the shareholders’ agreement as the rationale.
Scenario 3 — Nominee arrangement at HSBC Private
A Hong Kong company onboarding at HSBC Private shows a single 100% shareholder: a BVI company. The BVI company’s “director” is a corporate service provider. No natural person is apparent on the surface.
Workflow: The KYC team requests the declaration of trust from the BVI company’s director. The document reveals the BVI company holds shares on trust for a named individual — a Mainland China-resident industrialist. The individual is now the UBO and becomes the subject of full EDD including Source of Wealth reconstruction.
Outcome: Declaration of trust is retained in the file as documentary evidence. UBO is screened directly; nominee arrangement is documented so future reviewers understand the layering.
Scenario 4 — Circular ownership at BNY
During onboarding at BNY, the KYC team identifies a three-entity structure where A owns 40% of B, B owns 40% of C, and C owns 40% of A. No external UBO is apparent.
Workflow: Circular ownership is itself a red flag. Escalation to senior compliance. Investigation reveals a minority external shareholder holding 15% of A with exclusive voting rights and board-appointment rights over all three entities. That minority shareholder is the effective UBO of the entire circular structure.
Outcome: UBO identified via control. Relationship onboarding proceeds with full EDD on the external controller. Circular structure itself prompts senior management approval with documented commercial rationale for continuing the relationship.
Common UBO Identification Failures
Analyst identifies only 25%+ shareholders and declares UBO analysis complete. Control paths below 25% are missed. Fix: control-path analysis is a mandatory second step even when 25%+ owners exist.
Analyst captures the corporate parent as “UBO” without drilling to natural persons. Fix: UBO under FATF is always a natural person; tracing continues until individuals are reached.
The customer’s ownership chart is not cross-verified against independent registries. Fix: material UBO analysis requires registry cross-check (Companies House PSC, MCA SBO, ACRA RRC, etc.).
A nominee shareholder is captured as UBO while the actual beneficial party is never identified. Fix: always request declaration of trust or equivalent where a corporate service provider or nominee director is in the chain.
Ownership register is reviewed but voting agreements, veto rights, and appointment rights are not requested. Fix: EDD files on complex corporates request the shareholders’ agreement and review for control paths.
Interview Question: Trace Me Through This Structure
“A customer presents a four-layer structure: UK LLP owns a Luxembourg holding company that owns a BVI entity that is 100% owned by a Jersey trust with four named beneficiaries. How do you identify UBO?”
“I start by mapping the full chart and verifying each layer against independent registries where possible. At the Jersey trust layer, I apply FATF R25 — the trust’s UBOs are settlor, trustee, protector if one exists, and all named beneficiaries, with classes of beneficiaries where discretionary. I request the trust deed and letter of wishes. Each of the four named beneficiaries is screened individually for PEP, sanctions, and adverse media. The settlor is cross-verified for SoW consistency with the trust’s assets. At the BVI entity I request the shareholder register and any declaration of trust; the BVI layer itself typically becomes a conduit so I document that and focus UBO analysis at the trust. At the Luxembourg holding layer I verify the direct ownership chain back to the trust. At the UK LLP I capture the members and any members’ agreement governing voting and distributions. My final UBO list includes every natural person with 25%+ effective ownership and every natural person with control paths regardless of ownership — typically this will be the settlor, the protector if one exists, and any beneficiary who has actually received distributions or has voting control. All UBOs are fully screened and documented.”
How UBO Mastery Accelerates Senior KYC Careers
UBO capability is the clearest single accelerator into senior KYC, EDD, and private-banking roles. Level 1 analysts identify obvious 25%+ owners. Senior analysts navigate control paths and challenge presented structures. Managers own UBO governance at program level — this is the work that earns Director and VP-level compliance roles. Candidates who build real UBO depth early are almost always the ones who get moved into complex-structures teams, HNW private banking desks, and financial-crime investigations.
A common mistake among aspiring KYC professionals is defaulting to CAMS — but CAMS is primarily designed for AML investigators, transaction-monitoring analysts, SAR/STR filing, and broader financial-crime program roles. If your day-to-day is onboarding, CDD/EDD, UBO tracing, and screening disposition, a KYC-specific credential converts faster into interviews. GO-AKS (Globally Certified KYC Specialist) and IKYCA (Internationally Certified KYC Specialist) are built around the CDD/EDD execution and UBO work KYC analysts actually do. IR-KAM (Internationally Certified KYC Manager) maps to UBO governance and approval at Team Lead / Manager level. For crypto and VASP contexts where UBO tracing includes wallet forensics and on-chain analysis, C2KO (Certified Crypto KYC Officer) and C3O (Certified Crypto Compliance Officer) are the focused credentials. Pick the credential that matches the role you actually want.
Related Reading
- False Positives in KYC Screening
- Adverse Media Screening Explained
- PEP Screening Explained
- Enhanced Due Diligence (EDD) Guide
- Source of Funds vs Source of Wealth
- Top 100 KYC Interview Questions & Model Answers
Own the Toughest Question in Every KYC Interview
UBO scenarios are the single most-tested topic at Goldman Sachs, JPMorgan, HSBC Private, Barclays, and Emirates NBD senior KYC interviews. Practise the multi-layer tracing scenarios out loud on AGZIT’s voice-based AI Mock Interview — with a 10-dimension Scorecard after every session.
ATS Resume Builder
Voice-based
10-dimension
Coaching
Elevator pitch
DPR-based
30-day roadmap
Silver/Gold/Platinum
Trusted by KYC candidates targeting roles in Mumbai · Dubai · London · New York · Toronto · Singapore