KYB: Business Document Verification for US Onboarding
Know Your Business checklist for US companies: Certificates of Good Standing, articles of incorporation, beneficial ownership filings, powers of attorney.

Summarize this article with
An estimated $300 billion in illicit proceeds moves through the US financial system each year, according to the United Nations Office on Drugs and Crime, with a disproportionate share flowing through shell companies and businesses with fabricated documentation. Yet most compliance programs still allocate 80% of their verification resources to KYC for natural persons โ while business entity verification, where the most sophisticated financial crime schemes are caught or missed, remains underprioritized.
This asymmetry creates a structural vulnerability. The Know Your Business (KYB) process is where the most sophisticated financial crime schemes are either caught or missed. A company with a clean Certificate of Good Standing, a plausible set of articles of incorporation, and an up-to-date beneficial ownership filing can still be a vehicle for fraud if those documents are not verified against each other and against official registries.
The Corporate Transparency Act (CTA) of 2021 fundamentally reshaped the US approach to beneficial ownership by requiring most companies to report their beneficial owners to FinCEN. This guide provides a document-by-document methodology for building a KYB process that meets current US regulatory requirements and catches the red flags that manual review routinely misses.
This article is for informational purposes only and does not constitute legal, financial, or regulatory advice.
KYB vs KYC: Why You Need Both, and Why They Are Different
KYB (Know Your Business) verifies a legal entity's existence, corporate structure, beneficial ownership chain, authorized representatives, and financial standing โ a fundamentally different process from KYC (Know Your Customer), which verifies individual identity through government-issued ID and proof of address.
The Bank Secrecy Act (BSA) Customer Due Diligence (CDD) Rule (31 CFR ยง 1010.230) requires covered financial institutions to identify and verify the identity of beneficial owners of legal entity customers, establishing distinct obligations for business verification that go beyond standard KYC checks on natural persons.
| Dimension | KYC (Natural Person) | KYB (Legal Entity) |
|---|---|---|
| Verification target | Individual identity | Corporate existence and structure |
| Core documents | US passport, driver's license, SSN | Certificate of Good Standing, articles of incorporation, BOI report |
| Regulatory basis (US) | BSA CIP Rule (31 CFR 1020.220) | BSA CDD Rule + CTA 2021 BOI reporting |
| Reference registries | DMV records, SSA, sanctions lists | Secretary of State registries, FinCEN BOI database |
| Update frequency | At trigger events | Annual review minimum + at any corporate change |
| Complexity | Moderate | High (ownership chains, multi-state structures) |
The critical mistake is treating KYB as an extension of the director's KYC. Verifying an officer's driver's license does not tell you whether the company's beneficial ownership filing is accurate, whether the articles of incorporation grant the signatory the power to bind the company, or whether the registered address matches a real operational premises. KYB requires its own document set, its own verification logic, and its own red flag framework.
For a broader view of KYC obligations, see our KYC 2026 guide.
Regulatory Framework: What US Law Requires
The US regulatory landscape for KYB operates through a combination of federal statutes, FinCEN regulations, and state-level business registration requirements.
The Bank Secrecy Act and CDD Rule
The Bank Secrecy Act (BSA) is the foundational US anti-money laundering statute. The CDD Rule, effective since May 2018, requires covered financial institutions to:
- Identify and verify the identity of the natural persons who are beneficial owners of legal entity customers (anyone owning 25% or more, plus one individual with significant managerial control)
- Understand the nature and purpose of the customer relationship
- Conduct ongoing monitoring to maintain and update customer information
- File Suspicious Activity Reports (SARs) when warranted
The Corporate Transparency Act (CTA 2021)
The Corporate Transparency Act, enacted as part of the Anti-Money Laundering Act of 2020 (AMLA), represents the most significant US beneficial ownership reform in decades. Key requirements include:
- Beneficial Ownership Information (BOI) reporting: Most US companies and LLCs must report their beneficial owners to FinCEN, including full legal name, date of birth, address, and a unique identifying number from an acceptable identification document
- 25% ownership threshold: Any individual who directly or indirectly owns or controls 25% or more of the ownership interests
- Substantial control: Any individual who exercises substantial control over the entity, regardless of ownership percentage
- Reporting deadlines: Companies formed before January 1, 2024, had until January 1, 2025, to file initial reports. Newly formed companies must file within 90 days of formation
FinCEN's BOI reporting system creates, for the first time, a federal database of beneficial ownership that financial institutions can access for CDD purposes โ fundamentally changing how KYB verification works in the United States (FinCEN BOI FAQs).
State Business Registries
Every US state maintains a Secretary of State registry (or equivalent) that serves as the primary source of truth for business entity verification.
| State | Registry | Online Access |
|---|---|---|
| Delaware | Division of Corporations | corp.delaware.gov |
| New York | Division of Corporations | dos.ny.gov |
| California | Secretary of State | bizfileonline.sos.ca.gov |
| Texas | Secretary of State | sos.state.tx.us |
| Florida | Division of Corporations | dos.myflorida.com |
| Nevada | Secretary of State | nvsos.gov |
| Wyoming | Secretary of State | sos.wyo.gov |
Unlike many European countries with centralized registries, the US system requires checking the specific state(s) where a company is incorporated and where it maintains foreign qualifications to operate.
SEC and FINRA Requirements for Financial KYB
For financial services firms, SEC Rule 17a-8 and FINRA Rule 3310 impose additional KYB obligations including enhanced due diligence for correspondent accounts, omnibus accounts, and institutional customers. Broker-dealers must maintain an AML compliance program that includes procedures for verifying the identity of legal entity customers.
The Complete KYB Document Checklist
1. Certificate of Good Standing / Certificate of Existence
| Criterion | Requirement |
|---|---|
| Source | Secretary of State (state of incorporation) |
| Validity | Typically less than 90 days (industry standard, not always statutory) |
| Data to verify | Company name, entity type, state of formation, status (active/dissolved), filing date |
| Cross-check | Match company name, state, and entity type against all other submitted documents |
Common pitfalls. A Certificate of Good Standing is a snapshot. It does not reflect changes that occurred after the certificate date: officer resignations, registered agent changes, or administrative dissolution proceedings. Always verify the certificate date and, where possible, query the Secretary of State database directly for real-time status.
2. Articles of Incorporation / Certificate of Formation (LLC)
| Criterion | Requirement |
|---|---|
| Format | Filed version from the Secretary of State, stamped and dated |
| Data to verify | Corporate purpose, authorized shares, initial directors/members, registered agent |
| Cross-check | Corporate purpose must be consistent with the proposed business relationship |
Common pitfalls. Articles that have not been updated through amendments after a change of registered agent, authorized shares increase, or change of purpose are a red flag. Compare the filing date of the articles against any subsequent amendment filings with the Secretary of State.
3. Beneficial Ownership Information (BOI) Report
| Criterion | Requirement |
|---|---|
| Source | FinCEN BOI database (for reporting companies) |
| Current threshold | 25% of ownership interests or substantial control |
| Data to verify | Full identity of each beneficial owner, nature and extent of ownership or control |
| Supporting document | Organizational chart if ownership chain exceeds 2 levels |
Common pitfalls. The BOI report filed with FinCEN may not reflect recent ownership changes. Companies must update their filings within 30 days of any change in beneficial ownership. Cross-reference the BOI report against the operating agreement, cap table, and annual reports filed with the Secretary of State.
4. Identity Documents of Officers and Authorized Signatories
| Criterion | Requirement |
|---|---|
| Document | Valid US passport, US driver's license, or state-issued ID card |
| Cross-check | Name and date of birth must match the officer or member listed on formation documents |
| Additional | For signatories who are not officers: corporate resolution or power of attorney |
Common pitfalls. A signatory presenting themselves as "VP of Finance" or "CFO" has no inherent authority to bind the company unless they hold a formal corporate resolution or power of attorney from a duly authorized officer. The absence of a documented delegation chain is one of the most common KYB failures.
5. Corporate Resolution / Power of Attorney
| Criterion | Requirement |
|---|---|
| Format | Written instrument, signed by an authorized officer or the board of directors, specifying the delegate's identity and scope of authority |
| Validity | Must include effective date, expiration date, and any monetary limits |
| Cross-check | Signatory must match formation documents; grantor must be a current officer or director |
Common pitfalls. A power of attorney signed by a former officer is void. An unlimited power of attorney (no monetary cap, no expiration) is atypical and warrants enhanced scrutiny. Always verify the grantor's current status against the Secretary of State records.
6. Annual Reports / Financial Statements
| Criterion | Requirement |
|---|---|
| Source | Secretary of State (annual report) or directly from the client (financial statements) |
| Period | Most recent fiscal year; ideally the last 2 years |
| Data to verify | Revenue, equity, debt levels, going concern opinions |
| Note | Not all states require annual report filings; requirements vary significantly by state |
Common pitfalls. Failure to file annual reports with the Secretary of State can result in administrative dissolution โ a significant red flag. Negative equity or consecutive years of losses should trigger deeper analysis. Compare reported revenue against the expected transaction volume in the business relationship.
7. Proof of Business Address
| Criterion | Requirement |
|---|---|
| Document | Commercial lease, utility bill, or registered agent confirmation |
| Validity | Less than 90 days for utility bills; lease must be current |
| Cross-check | Address must match the principal office address on formation documents or annual reports |
Common pitfalls. A registered agent address is not the same as a principal business address. Many Delaware and Nevada corporations use registered agent services that provide a legal address but no physical presence. Combined with other indicators (recently formed company, minimal capitalization, vague business purpose), a registered-agent-only address warrants further investigation.
8. Bank Account Details
| Criterion | Requirement |
|---|---|
| Content | Routing number, account number, account holder name |
| Cross-check | Account holder must match the legal entity name on formation documents exactly |
| Additional | If the account is held by a different entity: documentary justification of the relationship (subsidiary, management company) |
Ready to automate your checks?
Free pilot with your own documents. Results in 48h.
Request a free pilotDocument Validity Reference Table
| Document | Typical Validity Period | Verification Source |
|---|---|---|
| Certificate of Good Standing | 90 days | Secretary of State |
| Articles of incorporation | No expiry โ must reflect current situation | Secretary of State (amendment filings) |
| BOI report | No expiry โ must be updated within 30 days of any change | FinCEN |
| Identity document | Per document expiry date | Automated document verification |
| Power of attorney | Per terms of the instrument | Cross-check against formation documents |
| Financial statements | Most recent fiscal year available | Secretary of State (annual report) or client |
| Proof of address | 90 days (utility bills); lease term | Cross-check against formation documents |
| Bank details | No expiry | Cross-check against formation documents |
Red Flags in Company Documents
Effective KYB identifies risk patterns across the full document set โ not just individual document validity. FinCEN and FATF identify beneficial ownership opacity, nominee structures, and address mismatches as primary red flags warranting enhanced due diligence.
FinCEN's advisories on beneficial ownership identify shell company structures, frequent officer changes without commercial rationale, and registered-agent-only addresses combined with newly formed entities as high-risk indicators requiring enhanced due diligence (FinCEN Advisories).
Structural Red Flags
- Newly formed entity (less than 6 months old) with minimal capitalization and no demonstrable operational activity.
- Opaque ownership structure: more than 3 layers of intermediary holding companies, especially involving jurisdictions with weak AML frameworks.
- Nominee officers: the registered officer has no operational role and serves purely as a legal placeholder.
- Frequent officer changes: more than 2 changes within 12 months without a clear commercial rationale.
- Circular ownership: Company A owns Company B, which owns Company C, which owns Company A.
- Multi-state layering: entity incorporated in one state, qualified in a second, with principal office in a third โ without clear business justification.
Documentary Red Flags
- Expired Certificate of Good Standing and client reluctance to provide a current one.
- Address mismatches between formation documents, annual reports, proof of address, and bank details.
- Overly broad business purpose ("consulting, trading, import-export, services") with no specificity.
- Missing annual reports for two or more consecutive years (in states that require them).
- Power of attorney signed by a former officer or with no scope limitations.
- BOI report listing only the managing member for a company with multiple owners.
Behavioral Red Flags
- Unreasonable urgency to complete onboarding without providing the full document set.
- Refusal to disclose the organizational chart or financial statements.
- Transaction volumes inconsistent with company size: an entity with $1,000 in capitalization and 3 months of existence projecting $5 million in annual transactions.
Manual vs Automated KYB Verification: The Numbers
Manual KYB verification takes 45โ90 minutes per case. For a compliance team processing 200 files per month, that represents 150โ300 hours per month โ the equivalent of 2โ4 full-time employees dedicated to document verification.
CheckFile data across 2,300 companies verified through its platform found that 8.7% had an expired Certificate of Good Standing or a discrepancy between Secretary of State records and the articles of incorporation โ anomalies invisible without automated cross-document validation and detectable only through real-time registry queries.
| Criterion | Manual Verification | Automated Verification |
|---|---|---|
| Time per file | 45โ90 minutes | 3โ8 minutes |
| Average error rate | 12โ18% (expired documents, missed inconsistencies) | Less than 2% |
| Registry cross-check | Manual lookup on Secretary of State websites | Real-time API queries |
| Scalability | Linear (more files = more headcount) | Logarithmic |
| Audit trail | Depends on individual analyst discipline | Automatic, timestamped, auditable |
| Annual cost (200 files/month) | $110,000โ$180,000 (staff costs) | $18,000โ$48,000 (SaaS license) |
The real risk is not the processing cost. It is the cost of a missed red flag: onboarding a shell company, failing to file a SAR, or facing a FinCEN enforcement action that can reach $1 million per violation under the BSA.
For a detailed analysis of the total cost of manual verification, see our article on the true cost of manual document validation.
Cross-Referencing Company Data Against Official Registries
Document verification has limited value in isolation. Its power comes from cross-referencing every data point across the full document set and against official registry data.
| Data Point | Document Source | Registry Source | Cross-Check |
|---|---|---|---|
| Company name | Articles, bank details | Secretary of State | Exact match (watch for variations: LLC, L.L.C., Limited Liability Company) |
| Principal address | Articles, lease, utility bill | Annual report or BOI filing | Strict match |
| Officers | Articles, corporate resolution | Secretary of State | Name, title (President, CEO, Managing Member) |
| Beneficial owner | BOI report | FinCEN BOI database | Identity, ownership percentage, nature of control |
| Authorized shares/capital | Articles | Secretary of State | Exact amount |
| Business activity | Articles (business purpose) | Secretary of State (NAICS code if available) | Sector consistency |
Cross-document validation is the highest level of verification reliability. It is the only method that catches an authentic but outdated Certificate of Good Standing, valid but non-current articles of incorporation, or an accurate but incomplete BOI filing.
CheckFile data: Across 2,300 companies verified through CheckFile, 8.7% had an expired Certificate of Good Standing or a discrepancy between Secretary of State records and the articles of incorporation โ anomalies that are invisible without automated cross-document validation.
Building an Operational KYB Process
Step 1: Standardized Collection
Define a document checklist by entity type (corporation, LLC, partnership, foreign entity) and risk level. Deploy a collection portal with format validation and completeness checks at submission.
Step 2: Automated First-Level Verification
Automated checks on the formal validity of each document: issue date, field consistency, document format. Data extraction via OCR and NLP.
Step 3: Registry Cross-Referencing
Automated queries to Secretary of State databases and FinCEN's BOI registry. Comparison of extracted data against registry records. OFAC SDN list and other sanctions screening.
Step 4: Consistency Analysis
Detection of inter-document inconsistencies: formation document address vs. annual report address, formation document officer vs. contract signatory, authorized shares vs. financial statements.
Step 5: Decision and Audit Trail
Document the decision (acceptance, rejection, request for additional information, enhanced due diligence measures). Archive the complete file with timestamps and a full audit trail.
Sector-Specific KYB Considerations
Regulated professions โ law firms, accounting firms, broker-dealers โ face heightened KYB obligations under their respective regulatory frameworks. Law firms must reconcile AML obligations with attorney-client privilege, while broker-dealers must satisfy both FINRA and BSA requirements simultaneously.
Financial services firms operating across multiple states must account for variations in state business registration requirements, annual report formats, and formation document standards. A KYB process designed for Delaware corporations will not work without adaptation for California LLCs or New York partnerships.
Automate KYB with CheckFile
Manual business document verification is expensive, slow, and error-prone. CheckFile automates the entire KYB workflow: AI-powered data extraction, cross-referencing against official registries, inconsistency and red flag detection, and full audit trail generation.
Teams that switch to automated document validation reduce KYB processing time by 78% and error rates by 90% on average. The return on investment is measurable from the first month.
Explore our pricing or request a demo to see how CheckFile integrates into your B2B onboarding process.
For a comprehensive overview, see our document compliance complete guide.
Take action
CheckFile verifies 180,000 documents per month with 98.7% OCR accuracy. Test the platform with your own documents โ results within 48h.
Frequently Asked Questions
What is the difference between KYB and KYC in B2B onboarding?
KYC verifies an individual's identity through government-issued ID and proof of address. KYB verifies a legal entity's existence, corporate structure, beneficial ownership chain, authorized representatives, and financial standing. The two processes require different document sets, different verification logic, and different reference registries. A critical mistake in B2B onboarding is treating KYB as simply an extension of the officer's KYC: verifying the officer's driver's license tells you nothing about whether the company's BOI filing is accurate, whether the articles of incorporation grant the signatory authority to bind the company, or whether the registered address matches an active operational premises.
What documents are required for a complete KYB verification of a US company?
A complete KYB file covers eight document categories: the Certificate of Good Standing from the Secretary of State, the articles of incorporation or certificate of formation in their current version, the beneficial ownership information report filed with FinCEN, valid identity documents for all officers and authorized signatories, a corporate resolution or power of attorney for any signatory who is not a registered officer, the most recent annual report and financial statements, a current proof of principal business address, and bank account details with the account holder matching the legal entity name exactly. The Certificate of Good Standing should typically be less than 90 days old.
What are the red flags to look for when verifying US business documents?
Structural red flags include newly formed entities with minimal capitalization and no demonstrable operational activity, opaque ownership structures with more than three layers of intermediary holding companies, nominee officers with no operational role, frequent officer changes within 12 months, circular ownership arrangements, and multi-state layering without clear business justification. Documentary red flags include address mismatches between formation documents and annual reports, overly broad business purpose clauses such as "consulting, trading, import-export," missing annual reports for two or more consecutive years, and a BOI report that lists only the managing member for a company with multiple owners.
How does the Corporate Transparency Act change KYB in the US?
The CTA 2021 requires most US companies and LLCs to report their beneficial owners to FinCEN, creating a federal beneficial ownership database for the first time. This means financial institutions can now cross-reference customer-provided beneficial ownership information against FinCEN's records. Companies must report the full legal name, date of birth, address, and an identifying document number for each beneficial owner. Reports must be updated within 30 days of any change, making the FinCEN database a near-real-time verification source.
How does automated KYB verification compare to manual verification in terms of cost and accuracy?
Manual KYB verification takes 45 to 90 minutes per case and carries an error rate of 12 to 18 percent, primarily due to expired documents and missed inter-document inconsistencies. Automated verification reduces processing time to 3 to 8 minutes and cuts errors below 2 percent by performing real-time queries to Secretary of State databases and FinCEN's BOI registry rather than relying on manual lookups. For a team processing 200 files per month, fully loaded annual costs drop from $110,000 to $180,000 for manual processing to $18,000 to $48,000 for an automated SaaS solution.
Stay informed
Get our compliance insights and practical guides delivered to your inbox.