KYC vs KYB in bank onboarding

KYC (Know Your Customer) verifies individual customer identity through standard procedures, whilst KYB (Know Your Business) establishes the legitimacy and ownership structure of business entities. Both form mandatory components of anti-money laundering (AML) and counter-terrorism financing (CTF) compliance under international standards set by the Financial Action Task Force (FATF).

The distinction reflects regulatory reality: customer verification takes different forms depending on whether the client is a natural person or a legal entity. This difference structures separate but complementary onboarding streams within banks and financial institutions.

What KYC covers

KYC establishes customer identity through a Customer Identification Program (CIP). Financial institutions verify four core elements: legal name, date of birth, residential address, and an official identification number.

Customer Due Diligence (CDD) then assesses the customer relationship itself. This involves understanding the nature of the business relationship, source of customer funds, and actual financial crime risk profile. The process remains iterative; institutions conduct ongoing monitoring to detect suspicious activity patterns emerging during the relationship.

For higher-risk customers, institutions apply Enhanced Due Diligence (EDD). This involves deeper source-of-wealth verification, additional scrutiny of beneficial owners, and more frequent transaction review. Risk-based approaches determine when EDD applies. A customer receiving wire transfers from politically exposed persons or moving funds through jurisdictions of concern triggers escalated scrutiny.

What KYB covers

KYB operates on different ground. Business entities present structural complexity that individual customers do not: multiple potential owners, hierarchical control structures, and often opaque decision-making authority.

KYB verification requires identification of the business entity itself: its registered name, jurisdiction of incorporation, and legal structure. The critical KYB element is beneficial ownership identification. A beneficial owner is the natural person (or persons) who ultimately owns or controls an interest in the business entity. A business might be registered under a company name, but actual control lies with individuals, often invisible to routine registry checks.

The EU Fourth AML Directive mandated that member states implement beneficial ownership disclosure requirements. This established binding requirements for identification of true controllers, not merely nominal shareholders. The UK's persons with significant control regime imposes similar disclosure duties, and the Economic Crime (Transparency and Enforcement) Act 2022 extended beneficial ownership disclosure to overseas entities holding UK property. The US Corporate Transparency Act introduced beneficial ownership reporting to FinCEN, covering full legal names, dates of birth, addresses, and identification numbers, although a 2025 FinCEN interim final rule narrowed the reporting requirement to foreign companies registered to do business in the United States.

Why the distinction matters in practice

The difference shapes the entire onboarding workflow. KYC for an individual customer concludes when identity verification completes. The bank now holds a verified identity and can begin CDD assessment.

KYB cannot conclude at entity identification. A bank must also identify the beneficial owners of that entity, a potentially complex task when ownership spreads across multiple jurisdictions, nominee structures, or layered holdings. A private equity fund, holding company, or multi-tier corporate group requires tracing through multiple entities to reach natural persons with actual control.

This cascading obligation means KYB onboarding typically consumes more time and documentation than KYC. Applicant businesses must provide certified corporate documents, ownership registers, director identification, and often statutory declarations confirming beneficial owner details.

The regulatory mandate

FATF established the global standard through its 40 Recommendations on money laundering. The Recommendations explicitly require that financial institutions implement customer due diligence, maintain records of customer identity and beneficial ownership, and report suspicious transactions.

For natural persons, the mandate is straightforward: establish identity. For legal entities, the mandate extends further: establish identity and then establish the identities of beneficial owners. This reflects global recognition that legal entities can obscure illicit ownership in ways individual identities cannot.

The EU codified this through its Anti-Money Laundering Directive, now updated in 2024. The directive harmonises beneficial ownership requirements across member states and extends scrutiny to more customer categories and higher-risk jurisdictions.

KYC and KYB as layered due diligence

In practice, onboarding typically applies both processes simultaneously. A bank receiving an application from a limited company must verify the company's existence and legal status through registry records, identify all beneficial owners listed in beneficial ownership registers or company filings, conduct standard KYC verification for each beneficial owner (identity, address, identification document), and assess the entire relationship for money-laundering risk.

The outcome is a multi-layered due diligence record where KYB establishes business legitimacy and confirms who truly owns or controls it, whilst KYC confirms the identity of those individuals. Neither can be skipped; both are regulatory obligations under FATF standards and implemented AML legislation across jurisdictions.