What Is KYB — And Why It Matters More Than KYC for Platform Businesses

Why KYB Matters More Than KYC for Platforms

The Shell Company Problem

A platform that verifies the individual signing up for a business account but does not verify the business itself has solved half the problem. The person is real. The business may not be.

Shell companies — legal entities that exist on paper but have no real operations, employees, or economic purpose — are the primary vehicle for money laundering, sanctions evasion, and financial fraud at the corporate level. A shell company can open merchant accounts, process payments, receive loans, and move money across borders — all while obscuring the true source, destination, and beneficiary of those funds.

The Financial Action Task Force has identified deficiencies in beneficial ownership transparency as one of the most critical gaps in the global AML framework. Regulators worldwide are responding with requirements for platforms to verify not just who is using the account, but who ultimately controls the business behind it.

The Marketplace Fraud Vector

For marketplace platforms — Amazon, Shopify, Etsy, and hundreds of vertical-specific marketplaces — business verification is a fraud prevention issue as much as a compliance issue. Fraudulent merchants use shell companies to create seller accounts, list counterfeit products, collect payments, and disappear before complaints surface.

The platform bears the consequences: chargebacks, customer complaints, regulatory scrutiny, and reputational damage. A marketplace that cannot verify its merchants cannot protect its customers — and regulators are increasingly holding platforms accountable for the businesses operating on them.

How KYB Works

Business Registration Verification

The first step is confirming that the business is a registered legal entity in good standing. This means checking the company's registration number against the official corporate registry in its jurisdiction of incorporation — Companies House in the UK, the Secretary of State databases in the US, SIREN/SIRET in France, the Handelsregister in Germany, and equivalent registries worldwide.

Registration verification confirms that the business exists, when it was incorporated, its registered address, its registered directors and officers, and its current status (active, dissolved, suspended). It does not confirm that the business operates as described or that its stated ownership is accurate.

Document Authentication

KYB requires authenticating corporate documents: articles of incorporation, certificates of good standing, shareholder registers, operating agreements, and in some jurisdictions, annual filings. These documents confirm the legal structure of the entity, its authorized activities, and its ownership chain.

Document authentication for corporate entities follows the same principles as individual document verification — checking for forgery, tampering, and fabrication — but the document types are different and the verification databases are jurisdiction-specific.

Ultimate Beneficial Owner (UBO) Resolution

The most complex component of KYB is Ultimate Beneficial Owner resolution. A UBO is the natural person who ultimately owns or controls the business entity, regardless of how many corporate layers sit between them and the entity being verified.

Regulatory thresholds for UBO identification vary by jurisdiction. The EU's AML framework requires identification of any natural person owning or controlling more than 25% of the entity. The US Corporate Transparency Act requires reporting of any person with "substantial control" or owning 25% or more. Other jurisdictions set different thresholds.

UBO resolution is challenging because ownership structures can be deliberately complex. A business may be owned by another business, which is owned by a trust, which is controlled by a holding company registered in a different jurisdiction. Following this chain to the natural person at the top requires accessing corporate registries across multiple jurisdictions and understanding each jurisdiction's corporate structure rules.

For platforms, the practical challenge is automating this process. Manual UBO resolution — pulling documents from multiple registries, tracing ownership chains, verifying identities at each level — can take days for complex structures. Automated systems that query corporate registries, parse ownership data, and flag structures that require manual review compress this timeline significantly.

Ongoing Monitoring

Like individual KYC, business verification is not a one-time event. Corporate structures change. Directors resign. Ownership transfers. Businesses are dissolved. Sanctions designations are added. A business that was legitimate at onboarding may become high-risk through changes that occur after verification.

Ongoing KYB monitoring tracks changes in corporate status, ownership, directorship, sanctions status, and adverse media. When a material change is detected — a new director who appears on a sanctions list, a change of ownership to an entity in a high-risk jurisdiction, or dissolution of the business — the system alerts the compliance team for review.

KYB Across Jurisdictions

United States

The Corporate Transparency Act (CTA), effective January 1, 2024, requires most US companies to report their beneficial owners to the Financial Crimes Enforcement Network (FinCEN). This creates, for the first time, a federal database of beneficial ownership information that can be accessed for verification purposes.

The CTA reporting requirement covers LLCs, corporations, and similar entities. Exemptions exist for publicly traded companies (which already disclose ownership), regulated financial institutions, and certain large operating companies. For platforms conducting KYB on US entities, the FinCEN BOI database provides an authoritative source for ownership verification.

European Union

The EU's Anti-Money Laundering Directives (AMLD4, AMLD5, AMLD6) require member states to maintain beneficial ownership registers accessible to obliged entities. The upcoming EU AML Regulation (AMLR), applicable from July 2027, will further harmonize KYB requirements across member states and establish interconnection between national registers.

UBO identification thresholds in the EU are generally set at 25% ownership or control, with some member states applying lower thresholds for higher-risk sectors.

United Kingdom

Companies House in the UK maintains the People with Significant Control (PSC) register, which records individuals who own more than 25% of shares or voting rights, or who otherwise exercise significant control over a company. The Economic Crime and Corporate Transparency Act 2023 strengthened Companies House's powers to verify the information on the PSC register.

KYB vs KYC: The Key Differences

The fundamental difference is that KYC verifies a person, while KYB verifies an entity and the people behind it. This creates several operational distinctions.

KYC requires one identity document and one biometric. KYB may require multiple documents (registration, articles, shareholder register, UBO identification) from multiple jurisdictions. KYC verification is typically a single event per person. KYB verification involves multiple steps — entity verification, UBO identification, director verification, and potentially verification of each UBO as an individual (KYC within KYB). KYC monitoring tracks one person's sanctions status and activity. KYB monitoring tracks the entity's corporate status, ownership changes, director changes, and the sanctions status of every identified UBO.

For platforms, the implication is clear: KYB is not KYC applied to a business. It is a separate, more complex verification discipline that requires different data sources, different workflow logic, and different monitoring infrastructure.