Ultimate Beneficial Owner (UBO) Checks in Business KYC: What Indian Lenders Must Verify

Under Indian anti-money laundering rules, an Ultimate Beneficial Owner is always a natural person. This individual ultimately owns or controls a business customer.

Under Section 12 of the Prevention of Money-Laundering Act, 2002, lenders must complete client due diligence. Rule 9 of the PML Rules, 2005 requires banks and NBFCs to identify beneficial owners. Lenders must verify every owner using reliable sources before opening accounts or disbursing loans.

This rule focuses strictly on natural persons. Companies, Limited Liability Partnerships (LLPs), and trusts are legal fictions. Behind every corporate borrower sits a living human being. That person collects profits, votes shares, or directs capital. Identifying the living controller stops borrowers from hiding true ownership behind holding webs.

The framework also governs group entities and cross-border risks. Under March 2023 amendments to the PML Rules, financial groups must maintain group-wide anti-money laundering programs to share due diligence data across entities. Furthermore, foreign Politically Exposed Persons (PEPs) require enhanced due diligence and senior management approval when identified as beneficial owners.

Indian regulations set specific ownership thresholds, control tests, and fallback rules for each legal entity type.

To identify beneficial owners, lenders apply statutory tests tailored to each organizational structure:

1. Companies

Under Rule 9, lenders follow a three-step sequence:

• •Controlling ownership interest: The Ministry of Finance amended the PML Rules in March 2023. This change lowered the company threshold from 25% to 10% of shares, capital, or profits. The Reserve Bank of India adopted this 10% threshold across all regulated lenders through an amending circular in April 2023.
• •Control through other means: If no person holds 10%, lenders verify anyone exercising control through other means. This includes the right to appoint majority directors or manage executive policy through voting pacts or informal influence.
• •Senior Managing Official fallback: If no individual meets the ownership or control tests, the lender must identify the Senior Managing Official. For a company, this person is the Managing Director, CEO, or whole-time director.

2. Partnership Firms and LLPs

In a partnership firm or LLP, the beneficial owner is the person holding more than 10% of capital or profits. The Ministry of Finance reduced this threshold from 15% to 10% under a second amendment to the PML Rules in September 2023. If no partner meets 10%, lenders verify the partner exercising management control, falling back to the designated partner.

3. Trusts and Other Entities

Under Rule 9(3)(e), lenders must identify the author or settlor, trustees, protector, beneficiaries with 10% or more interest, and any person exercising ultimate control. When onboarding Non-Profit Organizations, lenders must also verify registration on NITI Aayog's DARPAN portal. For unincorporated associations, the threshold is more than 15% of property, capital, or profits. Under Rule 9(3)(f), lenders do not need to identify shareholders of companies listed on recognized Indian stock exchanges, their qualifying subsidiaries, or entities listed in notified foreign jurisdictions.

Company law filings for Significant Beneficial Owners do not satisfy a lender's independent customer due diligence duties.

Corporate borrowers often offer Registrar of Companies filings as ownership proof. However, Significant Beneficial Ownership under Section 90 of the Companies Act, 2013 and beneficial ownership under banking rules serve different purposes.

Section 90, read with the Companies (Significant Beneficial Owners) Rules, 2018, governs internal corporate disclosures. Individuals holding indirect stakes file Form BEN-1 with the company, which files Form BEN-2 with the Registrar of Companies. If an individual fails to supply required information within 30 days of receiving Form BEN-4 notice, the company applies to the National Company Law Tribunal within 15 days to restrict share rights and dividends.

Corporate filings contain a structural blind spot. Under company law, an individual who owns 100% of a company directly is recorded on the Register of Members under Section 88 of the Companies Act. Company law defines an SBO as someone holding rights indirectly. Therefore, that direct 100% owner never files Form BEN-1 or Form BEN-2.

Under PML Rules and RBI directions, that direct 100% owner is the primary beneficial owner a lender must verify. A lender asking only for Form BEN-2 receives a return stating no beneficial owners exist. Customer due diligence under Section 12 of the PMLA is an independent legal duty resting directly on the lender.

Verifying a business customer requires confirming the entity's legal standing and collecting identity documents for each beneficial owner.

Under Chapter VI of the Reserve Bank of India (Commercial Banks – Know Your Customer) Directions, 2025, lenders collect certified constitutional records:

• •Companies: Certificate of Incorporation, Memorandum and Articles of Association, company PAN, and a Board Resolution granting signing authority.
• •Partnerships: Registration certificate (if registered), partnership deed, firm PAN, and partner identity records.
• •Trusts: Registration certificate (if registered), trust deed, trust PAN or Form 60, and records identifying settlors, trustees, and beneficiaries.

For each beneficial owner, the lender collects a recent photograph, PAN or Form 60, and one certified Officially Valid Document (Passport, Driving License, proof of Aadhaar possession, Voter ID, NREGA job card, or NPR letter). Staff verify these through Original Seen and Verified checks or digital Video-based Customer Identification with live geolocation.

Under Rule 9(1A) of the PML Rules and RBI directions, lenders must upload verified customer files to the Central KYC Records Registry within 10 days of account opening. The registry issues a 14-digit KYC Identification Number for inter-bank file retrieval.

Borrowers involved in loan diversion often use multi-tiered corporate structures, nominee directors, and shared office addresses to conceal beneficial ownership.

Dishonest borrowers rely on three structural typologies to evade detection during credit underwriting:

• •Corporate layering: Borrowers place multiple holding companies, Special Purpose Vehicles (SPVs), or offshore entities between operating businesses and individuals to keep individual stakes just below 10%.
• •Nominee directors: Promoters name low-income third parties as nominal directors, as documented in forensic due diligence typologies. These individuals know nothing about operations. Meanwhile, true controllers direct bank accounts through unrecorded side agreements or informal instructions.
• •Address clustering: Unrelated borrowers sharing identical registered offices, company secretary emails, or common directors indicate paper shell networks.

The scale of paper entities is large. In data given to Parliament, the Ministry of Corporate Affairs confirmed authorities identified 238,223 suspected shell companies between 2018 and 2021, striking off over 200,000 entities under Section 248 of the Companies Act (PIB report on Rajya Sabha Unstarred Question No. 450).

These typologies appeared in the ₹450 crore bank loan fraud investigation involving Santosh Overseas Ltd (CIN U52100DL2007PLC161735). The Central Bureau of Investigation filed a First Information Report in 2020. The Enforcement Directorate searched premises under the PMLA in July 2026, as reported by ThePrint.

Agencies alleged that export packing credit borrowed from an IDBI Bank-led 7-bank consortium was diverted through shell companies, accommodation-entry operators, and non-consortium accounts using fake purchase orders and circular transactions. While these allegations remain under active investigation with no conviction reported, the case shows why lenders must unmask beneficial ownership networks. Compliance teams can review our case study on the Santosh Overseas bank loan fraud investigation.

Beneficial ownership verification is an ongoing duty that lenders must maintain across the loan lifecycle.

Under Chapter VII of the RBI 2025 KYC Directions for commercial banks, lenders refresh customer records based on risk tier:

• •High-risk customers: Refreshed at least once every 2 years.
• •Medium-risk customers: Refreshed at least once every 8 years.
• •Low-risk customers: Refreshed at least once every 10 years.

Lenders must also run trigger-based reviews. Immediate re-verification is required when a borrower changes shareholding, replaces directors, amends its partnership deed, or alters authorized signatories. If transaction monitoring detects unusual transfers to non-consortium accounts, risk teams must re-verify ownership right away. Connecting core banking alerts with AML transaction monitoring and automated KYC onboarding verification prevents ownership changes from slipping through unnoticed.

The practical implication of the 10% beneficial ownership threshold is that corporate due diligence must shift from passive document collection to forensic ownership mapping.

Read together, the 10% threshold, the Senior Managing Official fallback, and the exclusion of direct owners from company filings mean that self-declarations leave severe blind spots. Accepting Form BEN-2 without unrolling share registers misses direct owners and layered holding webs.

For risk and compliance teams, this suggests three operational priorities:

• •First, underwriting workflows should automate cap-table unrolling to calculate cumulative equity across holding layers, flagging individuals over 10%.
• •Second, compliance teams should cross-screen borrower registries. Checking registered addresses, directorship networks via CIN number search, and contact details catches address clustering and dummy directorship networks before loan disbursal.
• •Third, operations units should link core banking records to corporate registry feeds so automated alerts trigger ad-hoc reviews whenever corporate filings change.

Looking ahead, banking supervision will likely focus on whether lenders maintain clear audit trails showing how they traced each borrower to living individuals. Institutions that build continuous, registry-backed beneficial ownership checks will mitigate loan diversion risks while meeting regulatory standards.