What Is UBO Verification in Crypto?

What Constitutes a UBO and Why the 25% Threshold

An Ultimate Beneficial Owner is the natural person — a real human being, not a corporate entity — who ultimately owns or controls a business, either through direct share ownership or through a chain of intermediate entities. The EU's Anti-Money Laundering Directives and the FATF Recommendations both use a 25% ownership or voting rights threshold as the standard trigger for UBO identification: any individual who owns 25% or more of a company directly or indirectly must be identified and verified.

The 25% threshold is a policy balance, not a technical minimum. Some jurisdictions use lower thresholds for higher-risk entities: the UK's Companies House regime identifies Persons with Significant Control (PSC) at the same 25% level, but some regulated sectors apply 10% thresholds for specific business types. Crypto payment gateways operating under MiCA or processing payments for companies in multiple jurisdictions must know which threshold applies in each relevant country.

Tracing the Ownership Chain

UBO verification is straightforward when a company is directly owned by two individuals each holding 50% — the UBOs are obvious. It becomes complex when the ownership structure includes holding companies, trusts, nominee shareholders, or cross-border entities. A company registered in Ireland may be 80% owned by a holding company in Luxembourg, which is 100% owned by a trust established in the Cayman Islands, the beneficiary of which is an individual resident in Russia. Each layer must be traced and documented.

EU Beneficial Ownership Registers and Their Limitations

EU member states maintain national central registers of beneficial ownership information that are accessible to regulated entities — and in many jurisdictions, to the general public — for cross-reference during UBO verification. These registers, established under the 4th and 5th AML Directives, provide a standardised source of ownership data for EU-registered entities. A crypto payment gateway conducting KYB on an EU company can query the relevant national register to cross-check the UBO information provided by the applicant.

However, register data is not always accurate or current. In Manta S.A.F.A.R.I v. Luxembourg (2022), the Court of Justice of the EU restricted public access to the Luxembourg register on privacy grounds, and several other member states have since limited their public access provisions. More fundamentally, registers depend on companies filing accurate information — a company that files a nominee shareholder as the registered owner while an undisclosed individual holds the beneficial interest does not appear in the register as problematic. UBO registers are useful cross-references, not substitutes for direct verification with the applicant.

Ongoing UBO Monitoring

UBO structures change: shareholders sell stakes, controlling individuals change, trusts are restructured, and companies are acquired. A payment gateway that verified UBOs at onboarding and never revisited the question has a compliance record that accurately reflected reality at one point in time and may be entirely out of date years later. Ongoing UBO monitoring requires merchants to notify the gateway of material changes in beneficial ownership (typically required contractually) and periodic re-verification cycles for higher-risk accounts.

The most common material change that goes unreported is a change in beneficial ownership triggered by a corporate acquisition or investment round. A startup founder who originally held 80% of a company may, after a Series B funding round, hold only 18% — below the UBO threshold — while the new majority investor becomes the relevant UBO. Without re-verification, the gateway's records still show the founder as the only identified UBO, missing the new controlling party.

Compliance Note: This glossary entry is provided for general educational purposes only and does not constitute financial, investment, legal, or tax advice. Industry terminology may vary across jurisdictions and providers; definitions herein may not directly reflect the specific features, terms, or specifications of Finassets' services. For details on Finassets' offerings, please refer to official product documentation or contact our team directly.