KYB: The Complete Guide to Business Entity Verification

KYB (Know Your Business) is the regulatory process of verifying the identity, legal structure, and compliance status of a corporate entity before establishing a business relationship. In the United States, this obligation falls under the Bank Secrecy Act (BSA), the BSA Customer Due Diligence (CDD) Rule, and the Corporate Transparency Act (CTA) of 2021, which created the first federal beneficial ownership reporting requirement. While KYC focuses on individual identity verification, KYB addresses the unique challenges of verifying corporations, LLCs, partnerships, trusts, and other legal entities that can be used to obscure beneficial ownership and facilitate financial crime.

In the 2023–2024 enforcement period, FinCEN and federal banking regulators imposed over $2 billion in penalties for BSA/AML failures across financial institutions, with a significant proportion relating to inadequate corporate customer due diligence. Secretary of State registries across all 50 states and FinCEN's Beneficial Ownership Information (BOI) database are the primary sources for business verification in the US, with the Corporate Transparency Act substantially expanding verification requirements starting in 2024.

This article is provided for informational purposes only and does not constitute legal, financial, or regulatory advice. Consult a qualified professional for questions relating to your specific situation.

What Is KYB and Why Does It Matter

KYB (Know Your Business) is the corporate equivalent of KYC. It is the set of checks that regulated firms must perform to verify that a business counterparty is a legitimate, registered entity with transparent ownership and no links to financial crime.

Under the BSA CDD Rule (31 CFR § 1010.230), covered financial institutions must identify and verify the identity of the beneficial owners of legal entity customers, understand the nature and purpose of the customer relationship, and conduct ongoing monitoring to maintain and update customer information. This goes beyond a simple Secretary of State search: it requires cross-referencing multiple data sources to build a complete picture of the entity and its control structure.

The Corporate Transparency Act of 2021 introduced mandatory beneficial ownership reporting to FinCEN, making federal beneficial ownership data available for the first time. However, financial institutions cannot rely solely on FinCEN data and must conduct independent verification using source documents and state-level registries.

KYB vs KYC: Key Differences

KYB and KYC are complementary processes under the same AML framework, but they differ in scope, complexity, and cost. The following table summarizes the core distinctions.

KYB is inherently more complex than KYC because corporate structures can span multiple states and jurisdictions with layered holding companies, nominee officers, and trusts. Tracing the ultimate beneficial owner often requires navigating registries in several states and potentially foreign jurisdictions.

For a comprehensive overview of the KYC process, see our complete KYC guide for businesses.

The KYB Process in the US: Step by Step

Verifying Legal Existence

The first step is confirming that the entity exists as a registered legal person. In the United States, this means obtaining or verifying the Certificate of Good Standing (also called Certificate of Existence or Certificate of Status, depending on the state) and checking the company's status on the relevant Secretary of State registry. State registries provide the entity number, registered agent, principal office address, formation date, entity type (corporation, LLC, LP, LLP), and the names of officers, directors, or managing members.

For foreign entities (companies incorporated outside the US) operating domestically, verify both the home jurisdiction registration and any foreign qualification filings in the states where the entity conducts business.

Identifying Beneficial Owners

Under the BSA CDD Rule, covered financial institutions must identify each individual who owns 25% or more of the equity interests of a legal entity customer, plus at least one individual who has significant managerial control (such as a CEO, CFO, COO, or managing member).

The Corporate Transparency Act requires most US entities to report beneficial owners directly to FinCEN. Beneficial owners include anyone who directly or indirectly exercises substantial control over the entity or owns or controls at least 25% of the ownership interests. Twenty-three categories of entities are exempt from BOI reporting, including publicly traded companies, regulated financial institutions, and certain large operating companies.

Financial institutions should cross-reference customer-provided beneficial ownership information against FinCEN's BOI database, the entity's operating agreement or shareholder records, and any available cap table information.

Document Collection and Verification

The following table details the documents required by entity type in the US.

For vendor and supplier relationships, firms should also obtain evidence of state business licenses, professional licenses (where applicable), and relevant insurance certificates. See our guide on vendor compliance certificate verification.

OFAC Screening and Adverse Media

KYB requires screening the entity, its officers, and its beneficial owners against sanctions lists: the OFAC Specially Designated Nationals (SDN) List, the Sectoral Sanctions Identifications (SSI) List, and other OFAC-administered lists. This screening must be performed at onboarding and on an ongoing basis.

OFAC compliance is a strict liability obligation — intent is not required for a violation. Even inadvertent transactions with sanctioned parties can result in civil penalties of up to $356,579 per violation (as adjusted annually for inflation) or twice the value of the transaction, whichever is greater.

Adverse media screening supplements sanctions checks by identifying negative news coverage relating to fraud, corruption, regulatory action, or litigation involving the entity or its principals.

Risk Assessment and Ongoing Monitoring

Each verified entity is classified by risk level (low, standard, enhanced) based on objective criteria: industry sector, state of incorporation (with heightened attention to states with minimal disclosure requirements like Delaware, Nevada, and Wyoming), ownership structure, PEP exposure, and regulatory history.

Enhanced due diligence (EDD) is mandatory for entities operating in high-risk industries identified by FinCEN including money services businesses, marijuana-related businesses, private ATM operators, and correspondent banking relationships.

Ongoing monitoring involves tracking Secretary of State filings (annual reports, officer changes, mergers, dissolutions), OFAC list updates, FinCEN BOI updates, and adverse media alerts. Federal examiners expect firms to maintain a risk-based approach with documented policies and periodic reviews.

Sectors with the Highest KYB Exposure

All covered financial institutions under the BSA must perform KYB on legal entity customers, but certain sectors face heightened requirements. Banks, credit unions, broker-dealers, mutual funds, futures commission merchants, and introducing brokers process the largest volumes of corporate onboarding. Money services businesses (MSBs), including virtual currency exchangers, casino and card club operators, and insurance companies are also covered institutions under FinCEN regulations.

FinCEN has identified specific high-risk areas including correspondent banking, trade finance, company formation services, and virtual currency operations. Firms operating in these areas must apply enhanced due diligence as standard for all corporate relationships.

Non-financial businesses — including real estate professionals, attorneys, and accountants — are not currently covered institutions under the CDD Rule but may face KYB-like obligations under state law or through the application of OFAC sanctions requirements.

Automating the KYB Process

Manual KYB verification for a single US entity takes 3 to 6 hours on average: gathering documents, querying Secretary of State registries, cross-referencing beneficial ownership data, screening OFAC lists, and documenting findings. This timeline is unsustainable for firms onboarding dozens or hundreds of corporate clients monthly.

Automated KYB platforms reduce this to under 15 minutes by integrating directly with Secretary of State APIs, FinCEN's BOI database, OFAC screening tools, and document verification engines. CheckFile provides a unified document verification platform that handles both KYC and KYB workflows, with automated extraction and validation of corporate documents.

For a sector-specific breakdown of due diligence requirements, consult our customer due diligence checklist by sector.

For a comprehensive overview, see our document verification complete guide. Our platform processes over 180,000 documents per month with 98.7% OCR accuracy and a 67% cost reduction compared to manual KYB verification.

Take action

CheckFile verifies 180,000 documents per month with 98.7% OCR accuracy. Test the platform with your own documents — results within 48h.

Request a free pilot

---

FAQ

What is the difference between KYB and corporate due diligence?

KYB is the regulatory component of corporate verification mandated by anti-money laundering law. Corporate due diligence is a broader commercial process that includes KYB but also covers financial health assessment, credit risk, operational capacity, and reputational checks. KYB is a legal obligation for covered financial institutions under the BSA; corporate due diligence also serves commercial risk management purposes.

How often should KYB checks be renewed?

The BSA CDD Rule requires a risk-based approach rather than fixed timescales. High-risk entities should be reviewed annually, standard-risk entities every two to three years, and any material event (change of officer, BOI update, new regulatory action) should trigger an immediate review. Continuous monitoring of Secretary of State filings, OFAC updates, and FinCEN BOI data enables event-driven reviews between scheduled assessments.

Does KYB apply to sole proprietors and partnerships?

Sole proprietors are verified through KYC rather than KYB, as they are natural persons operating under their own name or a DBA. General partnerships without separate legal entity status are subject to KYC for each partner. LLCs (including single-member LLCs), corporations, limited partnerships, and limited liability partnerships — all of which have separate legal existence — require full KYB verification including beneficial ownership identification.

What happens if a firm fails to conduct adequate KYB?

Federal banking regulators (OCC, Federal Reserve, FDIC) can impose civil money penalties, consent orders, and cease-and-desist orders. FinCEN can impose penalties of up to $1 million per willful BSA violation. OFAC penalties for sanctions screening failures can reach $356,579 per violation or twice the transaction value. For broker-dealers, FINRA can impose fines, suspensions, and bars from the industry. Individual compliance officers can face personal liability under BSA enforcement provisions.

Can Secretary of State data be relied upon for KYB?

Secretary of State data provides a starting point but cannot be relied upon in isolation. Unlike some foreign jurisdictions, US Secretary of State registries vary significantly in the depth and timeliness of information available. Many states do not verify the information filed and simply record it. Federal banking examiners make clear that reliance on a single source is insufficient — firms must verify information independently using source documents, FinCEN's BOI database, and direct engagement with the customer.

---

Processing high volumes of business verifications and looking to reduce onboarding times? Try CheckFile free and automate your KYB checks in minutes.