Ultimate Beneficial Owner (UBO)
The ultimate beneficial owner is the natural person who ultimately owns or controls a customer, identified by tracing ownership up through holding companies, trusts and nominees. Twenty-five percent is the common anchor in the United States, the United Kingdom and the European Union, but each states it differently and control is tested alongside it.
Also called: beneficial owner · BO
An ultimate beneficial owner is always a human being. That is the point of the exercise: a company cannot own itself all the way up, so behind the holding company, the trust and the nominee shareholder there is a person who benefits or decides. Finding that person is the core of know your business work, and it is where onboarding a corporate customer usually stalls.
How the tracing works
Ownership is followed upward and multiplied through each layer. Someone holding 60 percent of a company that holds 40 percent of the customer has an indirect interest of 24 percent — below a 25 percent test, and invisible to anyone who looked only at the immediate shareholder register. The figure itself is not identical wherever it appears: the United States catches an individual holding 25 percent or more of the equity, the United Kingdom more than 25 percent of shares or voting rights, and the European Union a holding of 25 percent plus one share, with member states free to set the bar lower. Trusts are traced to settlor, trustees, protector and beneficiaries. Nominee arrangements are traced to whoever the nominee acts for. Where the chain runs into a jurisdiction that publishes nothing, the firm has to obtain the structure chart and the underlying documents from the customer and then test them rather than accept them.
Why it matters
Beyond simply knowing who the customer is, sanctions exposure travels through ownership: under US rules an entity can be blocked because of who owns it, even though the entity itself appears on no list, so an unidentified owner is an unmeasured risk. Beneficial ownership registers, where they exist, are largely self-declared and are not verification — a register entry is something to reconcile against, not an answer. And where nobody meets the ownership test at all, most frameworks require a senior managing official to be recorded instead, so that a named individual is always attached to the file. The EU regulation that replaces the current directive in July 2027 makes the relationship between the two limbs explicit: control by other means is identified independently of, and in parallel with, control through an ownership interest.
In practice
The ownership percentage is where the test starts, not where it ends. The control limb runs in parallel with it rather than as a fallback: board appointment rights, veto rights, or a person whose instructions are simply followed make someone a beneficial owner whether or not anybody crosses the percentage. Both limbs have to be worked through on every file, and the percentage itself is written differently in each of the major regimes.
Example
A UK customer is owned by a Cyprus holding company, which is owned 70 percent by a BVI company and 30 percent by a named individual, and the BVI company’s shares are held by a trust. The individual with the direct 30 percent is visible on day one. The people behind the other 70 percent take a structure chart, the trust deed, and a week.
Commonly confused with
| Term | How it differs |
|---|---|
| Control Person | A control person is an individual who directs how a company is run; a beneficial owner may be identified through ownership alone and need not manage anything. |
| Registered shareholder | The shareholder on the register may be a nominee or another company; the ultimate beneficial owner is the person at the end of that chain. |
See also
- Know Your BusinessKnow Your Business, or KYB, is the verification of a corporate customer rather than an individual: that the entity legally exists, who owns and controls it, and what it actually does. It is the corporate counterpart to KYC, and the ownership chain is the hard part.
- Control PersonAn individual or entity whose ownership stake in, or authority over, a licensee is large enough to require regulatory disclosure, fingerprinting and background checks. Control usually arises from a threshold ownership percentage or from holding an officer or director position.
- Customer Due DiligenceCustomer due diligence, or CDD, is the baseline set of checks a regulated firm performs on a customer: who they are, who owns and controls them, and what activity to expect. It is done at onboarding and then kept current for as long as the relationship lasts, with risk rather than a fixed calendar setting when it is revisited.
- Enhanced Due DiligenceEnhanced due diligence, or EDD, is the additional scrutiny applied where money laundering risk is higher. In the UK and the EU it is mandatory in prescribed cases — politically exposed persons, high-risk countries, correspondent banking — as well as wherever a firm’s own risk assessment says the baseline is not enough.