Know Your Business verifies a business customer's legal existence, ownership, control structure, and legitimacy before and during the relationship. Onboarding a fake or hidden-owner business exposes a firm to fraud losses and to AML liability for the money it moves.
What is KYB, in plain English?
Know Your Business is KYC for companies. Before you onboard a business as a customer, you confirm it legally exists, you find out who really owns and controls it, and you check that it is a legitimate operating business rather than a shell built to move money. Then you keep watching, because ownership and behavior change over the life of the relationship.
The hard part is that a company can hide behind layers. On paper it may look ordinary, while the real controller sits behind nominees, holding companies, or a cross-border chain. So KYB is not just reading a registration certificate; it is tracing ownership and control down to the real people, the ultimate beneficial owners, and screening them and the business against sanctions and adverse media.
In the fraud and AML stack, KYB sits at the front of any relationship with a business customer: a bank onboarding a corporate client, a payment processor signing a merchant, a lender underwriting a company. Get it wrong and you inherit that business's fraud and its money-laundering exposure as your own liability.
What a KYB check covers
Element | What it confirms |
Registry check | The business is legally registered, in good standing, and matches its claimed details. |
Ownership tracing | Who ultimately owns and controls the entity, piercing layers to the real people. |
Screening | The business and its owners against sanctions, watchlists, and adverse media. |
Operating footprint | Evidence the business actually trades: address, website, activity, filings. |
Ongoing monitoring | Re-checking as ownership, control, or behavior changes over time. |
What it looks like in practice
In practice
A payment processor onboards a new merchant that presents clean registration papers and a plausible website. The automated KYB check pulls the registry record and it matches, but the ownership trace surfaces something odd: the listed director is a nominee tied to dozens of other recently formed companies, and the registered address is a single unit shared by unrelated firms.
The footprint check deepens the concern: the website is a template with no transaction history, and the business was incorporated only weeks ago. The analyst treats it as a likely shell set up to launder card volume, declines the merchant, and links the shared address and nominee to flag the related applications sitting elsewhere in the queue.
Why it matters to operators
A business customer moves far more money than an individual, and it can move it for many hidden parties at once. If you onboard a shell or a hidden-owner entity, you become the channel for whatever fraud or laundering it is built to do, and you carry the regulatory liability when it surfaces. KYB is where you stop that at the door.
The reason it is hard is that legitimacy on paper is easy to fake and control is easy to hide. Registration is cheap, a template website costs nothing, and layered structures are designed to keep the real controller out of view. Effective KYB looks past the paperwork to ownership, footprint, and behavior, and it keeps looking, because a business that was clean at onboarding can change hands later.
What to watch for
- No real footprint. A registered business with no genuine address, activity, or web presence may be a shell.
- Shared addresses. One address hosting many unrelated firms points to a formation mill or nominee operation.
- Rapid ownership changes. Frequent transfers of control can be an attempt to outrun screening and monitoring.
- Layered structures. Ownership deliberately stacked through holdings and nominees is a signal to trace, not accept.
- Brand-new incorporation. A company formed days before onboarding, applying for high-value services, warrants a closer look.
Quick questions
How is KYB different from KYC?
KYC verifies an individual; KYB verifies a business and, crucially, the real people who own and control it. KYB is more complex because a company can hide its true controller behind nominees and layered structures, so it includes ownership tracing that KYC does not.
What is the hardest part of KYB?
Finding the ultimate beneficial owner. Structures are often layered on purpose to obscure who is really in control, so piercing them to a real, accountable person is the core challenge and the main place fraud and laundering hide.
Is KYB a one-time check?
No. Ownership, control, and behavior change over the relationship, so KYB includes ongoing monitoring. A business that was legitimate at onboarding can be sold, restructured, or repurposed, and monitoring is how you catch that.
What makes a business look like a shell?
No genuine operating footprint: a registration but no real address, no activity, a template website, and often a nominee director and a shared address. On their own each is weak, but together they point to an entity built to move money rather than trade.
Why screen the owners and not just the company?
Because a clean-looking company can be controlled by a sanctioned or high-risk person. Screening the beneficial owners against sanctions and adverse media is how you catch risk that the corporate record alone would hide.