UK KYB Compliance and Corporate Verification Requirements: 2026 Guide

Verifying that a company exists is only the first part of UK corporate verification. A reliable KYB process must also establish who owns and controls the company, whether the person completing the application is authorised to represent it, what the business actually does, and whether the relationship creates money laundering, sanctions, fraud or reputational risk. For organisations reviewing business verification UK obligations, this broader view is essential because a registry match alone does not establish legitimacy.

These checks have become particularly important in 2026. Mandatory Companies House identity verification is being phased in for directors and people with significant control, or PSCs. Updated UK Money Laundering Regulations also took effect on 30 June 2026. Together, these developments shape the KYB regulations UK businesses need to interpret alongside sector-specific guidance. At the same time, an FCA review found that some firms still had unclear review cycles, insufficiently detailed CDD procedures and weak documentation of enhanced due diligence decisions.

This guide explains UK KYB compliance, corporate documents, Companies House checks, director and beneficial owner verification, AML screening, risk assessment, enhanced due diligence and ongoing monitoring. It also explains how businesses can use automated KYB verification software without replacing human compliance judgement. In practical terms, it connects KYB compliance UK expectations with a clear business verification UK workflow. Binderr Services brings company verification, UBO identification, AML screening and ongoing monitoring into one streamlined workflow.

What Is KYB Compliance in the UK?

Know Your Business, or KYB, is the process of identifying, verifying and assessing a corporate customer before starting a business relationship and throughout its lifecycle. Effective UK KYB compliance helps organisations confirm that a company is legitimate, understand who controls it and evaluate whether the relationship creates financial crime or commercial risk. A well-designed KYB compliance UK framework therefore connects legal-entity checks, ownership analysis and risk-based monitoring.

For businesses covered by the UK Money Laundering Regulations, KYB is generally performed as part of business customer due diligence rather than under a separate law called the “KYB Act.” The phrase KYB regulations UK is often used as shorthand for the combination of AML rules, Companies House requirements, sanctions obligations and supervisory guidance that affects corporate onboarding. The precise KYB requirements in the UK depend on the regulated activity, customer profile, ownership structure and level of risk involved.

UK Laws and Regulations Governing Corporate Verification

Several UK laws shape how regulated businesses identify companies, verify beneficial owners, screen financial crime risk and maintain customer records. These frameworks overlap, but they serve different purposes, so an effective UK KYB compliance programme should understand how each one affects corporate onboarding and ongoing monitoring. Collectively, these are often described as the KYB regulations UK firms must interpret when building their policies and controls. 

Money Laundering Regulations 2017 

The Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017 form the core framework for business customer due diligence in the UK. They require firms to verify corporate identities, confirm authorised representatives, understand ownership structures, assess risk levels and apply enhanced due diligence where necessary. These requirements are central to preventing financial crime within regulated sectors and underpin many KYB compliance UK procedures.

Verification should usually be completed before onboarding, although limited exceptions allow checks to be finalised during setup if risk is low and delays would disrupt business. Firms must document such decisions and ensure ongoing monitoring, record-keeping and compliance with updated requirements introduced by the 2026 amendments. This approach helps maintain transparency and accountability throughout the customer lifecycle.

Proceeds of Crime Act 2002

The Proceeds of Crime Act 2002 defines key money laundering offences, including handling, concealing or facilitating the use of criminal property. For corporate verification in the UK, this means suspicious ownership structures or unexplained financial activity may trigger legal obligations beyond standard checks. Businesses must remain vigilant when assessing unusual 

patterns or inconsistencies.

If a UK company verification process raises suspicion, employees must escalate concerns internally and potentially submit a Suspicious Activity Report to the National Crime Agency. Staff must also avoid tipping off customers or disclosing information that could interfere with investigations. Proper internal reporting procedures are essential for compliance with this law.

Economic Crime and Corporate Transparency Act 2023

The Economic Crime and Corporate Transparency Act 2023 strengthens the role of Companies House by allowing it to actively verify and challenge submitted information. This helps improve data accuracy and reduce misuse of UK corporate structures for fraud and financial crime. It represents a significant shift toward proactive regulatory oversight.

The Act introduces identity verification and enhanced powers to reject or remove inaccurate filings. However, businesses should not rely solely on Companies House data and must still conduct independent corporate customer verification, including ownership checks and AML risk assessments. Independent verification ensures a more comprehensive compliance approach and supports stronger business verification UK controls.

Companies Act and PSC Regime

The Companies Act requires UK companies to identify and report People with Significant Control (PSCs), typically individuals holding over 25% ownership or exercising significant influence. This framework supports transparency in corporate ownership structures. It also helps regulators and businesses identify key decision-makers within organisations.

During PSC verification in the UK, firms should cross-check Companies House data with internal documents and declarations. While PSC and UBO definitions may overlap, they serve different regulatory purposes and should not be treated as identical. Accurate verification reduces the risk of incomplete or misleading ownership information.

UK Sanctions Regulations

UK sanctions laws restrict dealings with designated individuals and entities listed on the UK Sanctions List. Businesses must ensure their AML screening UK processes use the latest list and remain updated with regulatory changes. Regular updates are critical to avoid unintentional breaches.

Sanctions risk extends beyond listed entities to those owned or controlled by designated persons. Effective corporate sanctions screening in the UK requires analysing ownership structures, UBOs and control mechanisms to identify indirect exposure. This broader approach strengthens overall risk management.

Data Protection Requirements

KYB processes involve handling personal data of directors, shareholders and beneficial owners, which must comply with UK data protection principles such as lawfulness, transparency and data minimisation. Firms must ensure data is collected and used appropriately. Compliance with these principles builds trust and protects individual rights.

A compliant business verification UK process should limit data collection to necessary information, maintain accuracy and ensure secure storage. Businesses must also align AML obligations with data protection rules, including proper retention and deletion practices. This balance ensures both regulatory compliance and responsible data handling within a wider KYB compliance UK programme.

How to Complete a UK KYB Check

A complete UK KYB check should verify the company, identify the people behind it and assess whether the proposed relationship creates financial crime risk. The process should be consistent, evidence-based and proportionate to the customer’s legal structure, activities and risk profile. The following business verification UK workflow can be adapted to the firm’s sector, products and supervisory expectations.

Step 1: Identify the Customer

Begin by establishing the exact legal entity entering the business relationship. Confirm its registered name, legal form, jurisdiction of incorporation and company number, and determine whether any connected companies will also receive services or form part of the arrangement.

You should also confirm whether the applicant is acting personally or on behalf of the company. This prevents corporate verification UK checks from being completed against a trading name, dormant entity or unrelated company that is not the actual customer, supporting accurate KYB compliance UK records from the outset.

Step 2: Collect Corporate Information

Collect the core information needed to create a reliable corporate customer profile. This normally includes registered and trading names, incorporation date, company number, registered office, operating address, contact information, business activities and relevant tax or regulatory numbers.

The application should also explain which products or services the company intends to use. Structured digital forms can make UK business verification more consistent by ensuring every customer provides comparable information and reducing incomplete or ambiguous responses.

Step 3: Verify Registry Information

Compare the information supplied by the customer with Companies House or the appropriate overseas corporate registry. Check the company’s status, incorporation details, registered office, directors, PSCs, accounts, confirmation statements and filing history.

Look for warning signs such as overdue filings, strike-off action, insolvency indicators or unexpected changes in directors and ownership. Where regulated activity is claimed, the UK company verification process should also include the FCA Financial Services Register, HMRC supervision records or another relevant professional register.

Step 4: Verify Directors and Representatives

Confirm the identities of directors, officers and representatives who manage the company or act on its behalf. Review identity documents or electronic verification results, appointment records, screening outcomes and each person’s relationship with the legal entity.

Appearing as a director on Companies House does not automatically complete your own customer due diligence. Effective company director verification should independently confirm that the individual is genuine and has the authority to establish or operate the business relationship.

Step 5: Map the Ownership Structure

Create a structured ownership chart showing every company, person or arrangement within the ownership chain. Include direct and indirect shareholding percentages, voting rights, parent companies, intermediate entities, trusts, nominees and other control mechanisms.

For a straightforward UK company, the structure may contain only one ownership layer. For an international group, corporate ownership structure verification may require several registry searches, shareholder records and supporting documents before the natural persons at the end of the chain can be identified.

Step 6: Identify and Verify UBOs

Identify the natural persons who ultimately own or control the corporate customer. Consider direct and indirect ownership, voting rights, board appointment powers, significant influence and control exercised through contracts, trusts or nominee arrangements.

Support UBO verification UK with independent evidence wherever reasonably available, including registers of members, shareholder declarations, group charts, trust documents, partnership agreements and corporate registry records. A customer’s self-declaration may be useful, but it should not automatically be accepted as the only evidence. This independent approach is central to reliable business verification UK controls.

Step 7: Screen the Entity and Connected Persons

Screen the company together with the individuals and organisations connected to it. Relevant subjects may include trading names, former names, directors, PSCs, UBOs, authorised representatives, shareholders, parent companies and other controlling entities.

Corporate AML screening UK should identify sanctions and PEP exposure and may also cover adverse media, regulatory enforcement, director disqualification, insolvency and relevant watchlists. Potential matches should be reviewed using additional identifiers rather than accepted or dismissed based only on a similar name.

Step 8: Understand the Relationship

Establish why the company wants the service and what normal activity is expected to look like. Record its commercial purpose, expected transaction volume, typical payment size, operating countries, customer base, suppliers, source of funds and anticipated counterparties.

Answers such as “general business use” or “international payments” may be too broad to support meaningful monitoring. Effective business customer due diligence should collect enough detail to compare future activity with the purpose and transaction profile established during onboarding.

Step 9: Assign a Risk Rating

Assess the corporate customer using clearly defined and consistently applied risk factors. These may include legal form, industry, jurisdiction, ownership complexity, products, delivery channels, expected transactions, source of funds, adverse media and sanctions or PEP exposure.

The final rating may classify the company as low, standard, medium or high risk, depending on the organisation’s methodology. A defensible business risk assessment UK should record the evidence, reasoning and relevant mitigating controls rather than displaying only a score without explanation.

Step 10: Apply EDD Where Necessary

Higher-risk relationships may require enhanced due diligence before approval. Additional measures can include collecting more corporate documents, independently verifying ownership, investigating adverse media, checking source of funds or wealth and obtaining senior management approval.

From 30 June 2026, automatic EDD under the relevant country provision is connected to jurisdictions on the FATF Call for Action list. Exposure to countries under increased monitoring can still influence a UK KYB compliance risk assessment, but it does not necessarily create the same automatic regulatory requirement without considering the complete relationship. Firms should reflect this distinction when translating the KYB regulations UK framework into internal EDD rules.

Step 11: Approve, Reject or Escalate

Once the checks are complete, record whether the customer has been approved, rejected or escalated for further review. The file should include the decision date, reviewer, risk rating, supporting rationale, completed EDD, approval conditions and planned monitoring frequency.

Where corporate customer verification cannot be completed, a regulated business may be unable to start or continue the relationship. Unexplained inconsistencies, suspicious ownership arrangements or concerns about criminal property should be escalated internally, and the business should consider whether a Suspicious Activity Report is required.

Companies House Identity Verification Requirements in 2026

Mandatory Companies House identity verification began on 18 November 2025 under the Economic Crime and Corporate Transparency Act 2023. It aims to confirm the identities of individuals managing and controlling UK companies.

These checks improve register accuracy but do not replace UK KYB compliance. Businesses must still carry out due diligence, AML checks and risk assessments. Companies House verification is therefore one part of a wider KYB compliance UK and business verification UK process.

Who Currently Needs to Verify?

The Companies House identity verification requirements in 2026 mainly apply to company directors and people with significant control (PSCs). Deadlines depend on appointment dates and confirmation statement schedules.

Other roles, such as corporate directors and LLP members, will be included in later phases.

New Company Directors - New directors from 18 November 2025 must verify their identity and provide a personal code before or during appointment. This applies to both new and existing companies.

Existing Company Directors - Existing directors have a 12-month transition period. They must provide their personal code when filing the next confirmation statement. Companies should prepare early to avoid delays.

People With Significant Control - PSCs must verify their identity and link it to each role. If someone is both a director and PSC, they verify once but use their code for both roles.

Officers of Other Entity Types - Some officers (e.g. corporate directors, LLP members) will be required to verify in later phases. Businesses should still carry out their own corporate verification UK checks.

Authorised Agents and ACSP Users - Agents must register as Authorised Corporate Service Providers (ACSPs) to verify identities. They must be UK-based and AML-supervised. While staff don’t need separate verification, the ACSP is responsible for all checks and compliance.

What Is an Authorised Corporate Service Provider?

An Authorised Corporate Service Provider (ACSP) is a UK-based agent that is registered with Companies House and supervised by a recognised UK anti-money laundering (AML) supervisory body. ACSPs are authorised to carry out identity verification checks on behalf of clients as part of the Companies House identity verification framework.

To qualify as an ACSP, the organisation must be based in the UK, actively supervised for AML purposes, and meet Companies House requirements for authorised agents. This ensures that identity checks are conducted by regulated professionals who are already subject to compliance oversight.

Examples include:

• Accountants
• Solicitors
• Company formation agents
• Corporate service providers

ACSPs play a key role in helping businesses and individuals meet Companies House identity verification requirements, particularly where clients prefer to use a professional intermediary rather than completing the process directly through GOV.UK. Their work can support business verification UK processes, but it does not replace the customer’s broader AML risk assessment.

Future rules will expand the scope of ACSP registration. All third-party agents that file documents with Companies House on behalf of clients are expected to be required to register as ACSPs, with presenter restrictions planned for implementation no earlier than November 2026.

ACSP Record-Keeping Requirements

ACSPs must retain records of identity verification checks for seven years. These records must be sufficient to demonstrate that the identity verification process met Companies House standards and may be requested by Companies House for review or audit purposes.

This seven-year retention requirement is separate from standard AML record-keeping obligations, which typically require firms to retain customer due diligence records for five years. Organisations acting as both ACSPs and AML-regulated entities should ensure their record retention policies clearly distinguish between these requirements and apply the correct retention period to each type of record.

What Is the Difference Between a PSC and a Beneficial Owner?

A PSC and an AML beneficial owner will often be the same person, but they are not always identical.

The difference matters because an AML-regulated business should not simply copy the PSC register into its customer file.

A trust, nominee shareholder, overseas entity or contractual control arrangement may change the beneficial ownership conclusion. Companies House guidance expressly states that a beneficial owner under the Money Laundering Regulations is not always the same as a PSC.

Bottom Line

UK KYB compliance involves much more than finding a company on Companies House. An effective process verifies the legal entity, confirms directors and representatives, traces ownership, identifies beneficial owners, screens financial crime exposure and assesses the purpose and risk of the relationship. In practice, strong KYB compliance UK controls connect these checks into one consistent business verification UK process.

The work must also continue after onboarding. Changes in ownership, management, business activity, sanctions status or transaction behaviour may require updated due diligence or a revised risk decision. Ongoing review helps ensure internal procedures continue to reflect the KYB regulations UK businesses must follow.

Binderr helps compliance teams connect corporate verification, KYC, UBO identification, AML screening, risk scoring and ongoing monitoring in one platform. This makes it easier to build a consistent KYB compliance UK and business verification UK process while keeping the evidence and decisions in an audit-ready record.

FAQs - KYB Compliance UK and Business Verification UK