What is KYB? Business Identity Verification Explained

KYB versus KYC: the same question, one level up

KYC verifies an individual: their identity document, their liveness, their risk profile. KYB asks the same question about a legal entity, which makes it a two-layer problem. The first layer is the entity: is this company registered, active, and operating under the name and number it presents? The second layer is the humans behind it: who are the directors, who are the ultimate beneficial owners, and can each of them pass the individual verification that KYC would demand?

The second layer is the entire point. A company is a legal fiction that cannot commit fraud on its own; every shell company scheme and sanctions-evasion network resolves, eventually, to people. A KYB program that verifies the paperwork but not the people has verified the costume and ignored the wearer.

What a KYB check actually contains

A complete KYB process runs five checks in rising order of difficulty. Registry verification confirms the company against its official register. Document verification examines articles of incorporation, ownership attestations, and licenses. Ownership resolution maps the control structure to its ultimate beneficial owners, the natural persons holding or controlling, typically, 25 percent or more. Person verification puts the identified directors and UBOs through individual identity proofing, document authentication, passive liveness, and the same anti-spoofing rigor a bank applies to a retail customer. Screening runs the entity and every resolved person against sanctions, PEP lists, and adverse media, then keeps running them.

The first two checks are commodity. The last three are where programs differentiate, and where they break.

Why KYB is having an enforcement moment

For most of its history, KYB failure carried paperwork consequences. That changed in September 2026, when the UK's Insolvency Service secured its first convictions for director identity verification failures under the Economic Crime and Corporate Transparency Act: three directors fined, including one who had verified his own identity and was prosecuted for allowing an unverified colleague to keep acting. The urgency has a face in the A7 case, a Moscow-backed network estimated to have settled more than $86 billion while evading sanctions, running on real companies and real filings rather than forged documents.

Person-level KYB: the architecture that survives

The KYB build regulators are now examining runs entity and registry checks automatically as the cheap first pass, produces a named list of natural persons through ownership resolution, and puts each of them through real identity proofing: document authenticity, biometric matching, and liveness that proves a present human. Screening becomes continuous, triggered by events rather than calendar anniversaries, and every decision lands in a per-case evidence record, because the UK just demonstrated that KYB outcomes get litigated. The same [verification engine](/technology) standard applied to high-risk retail onboarding applies here.