Beneficial ownership verification: why the UBO register is not enough

Banks and payment service providers that onboard business clients check the UBO register. In Germany that is the Transparenzregister, the national beneficial ownership register. In Austria it is the Register der wirtschaftlichen Eigentümer (beneficial ownership register). The harder question is what comes after that check. Beneficial ownership verification means confirming who really owns and controls a client. The register entry is where that work starts.

AMLA has now put this in writing. In its final report on the draft customer due diligence standards, published on 30 September 2026, AMLA states that consulting the central register is necessary for all customers that are not natural persons, but that central registers are not sufficient on their own to fulfil the verification requirements (AMLA, final report on the draft CDD standards). The standards are still a draft and may change before they are adopted.

Below: what verification means under the AMLR, where register data falls short, why discrepancies with the register cost so much manual work, and what a UBO file needs to hold up.

Status: November 2026. Based on the AMLR and AMLA's drafts published by 30 September 2026. No legal advice, see the note at the end.

Beneficial ownership verification under the AMLR is a due diligence duty, not a register lookup

The AMLR is directly applicable in all Member States and applies from 10 July 2027 (Regulation (EU) 2024/1624). From that date one set of rules decides what an institution has to know about the people behind a business client.

Article 20(1)(b) AMLR makes beneficial owners part of customer due diligence: institutions identify the beneficial owners and take reasonable measures to verify their identity, so that they understand the customer's ownership and control structure.

Who counts is set out in Article 51 AMLR. Beneficial owners of a legal entity are the natural persons who directly or indirectly have an ownership interest in it or control it, and control via other means must be identified independently of and in parallel to ownership interest. How ownership chains can be resolved automatically is covered in our article on automated UBO drill-down.

The verbs in Article 20 do different jobs. Identifying produces a name and a structure. Verifying means the institution has checked that result against evidence it can show to an auditor or supervisor later. A register extract filed in the client folder shows that someone looked. It does not show that the structure behind it was checked.

Why the UBO register is not enough on its own

Registers are getting better, and the EU rules push them further. Under AMLD6, Member States must hold beneficial ownership information in a central register in the Member State where the legal entity is created, in machine-readable format (Article 10(1) AMLD6). The central registers are interconnected via the European Central Platform (Article 10(19) AMLD6, Directive (EU) 2024/1640).

The companies themselves get stricter duties too. Legal entities in the EU must report any change to their beneficial ownership information within 28 calendar days and verify at least annually that it is up to date (Article 63(2) AMLR).

Still, a register entry is what the company declared about itself. AMLA's draft draws the line here: the register must be consulted, but it does not count as verification.

Austria shows that even a strong register does not change this. In its 2026 mutual evaluation, the FATF found that the Register der wirtschaftlichen Eigentümer holds adequate, accurate and up-to-date basic and beneficial ownership information on 98% of domestic legal persons and relevant foreign entities, and that obliged entities receive automatic alerts on changes to their customers' beneficial owners. Yet Austrian law bars them from relying solely on the register, and they must report discrepancies unless the customer corrects the entry itself (FATF, Mutual Evaluation Report of Austria 2026).

Discrepancy reports: where differences with the register create manual work

Verification has a second job besides confirming the client's structure. It shows where the register is wrong, and a wrong register entry turns into a discrepancy report.

In Germany the duty sits in section 23a(1) GwG. Obliged entities report a discrepancy to the Transparenzregister without delay ("unverzüglich"). A discrepancy exists when they identified beneficial owners other than those in the register, or when individual details on the beneficial owners differ. Those details include the nature and extent of the beneficial interest (section 19(1) no. 4 GwG), so differing ownership percentages count as well, and the comparison has to be exact.

The reports go through the Transparenzregister website with a user account; email, fax, letter or phone are not possible. The access the register gives obliged entities under section 23(3) GwG is for viewing entries, not for filing reports.

From 10 July 2027 the AMLR sets the timing across the EU. Under Article 24(1) AMLR, institutions report discrepancies without undue delay and in any case within 14 calendar days of detecting them, together with whom they consider the beneficial owners to be and why. Article 24(2) leaves a narrow exception: for clerical errors, transliteration differences or minor inaccuracies, or for outdated data where the beneficial owners are known from another reliable source and nothing is suspicious, the institution may first ask the customer to correct the register within 14 calendar days and report only if that does not happen. The exception does not apply in higher-risk cases.

This is where KYB teams lose time. Banks and payment service providers in Germany tell us that even with interfaces to the Transparenzregister and the business register, their staff still retype data by hand and file the register PDFs in the electronic client file, where the data cannot be read out or reused.

In their experience, data bought in does not close the gap either. Those that get beneficial owners from a business data provider still research a large share of business clients by hand, because the provider's data is incomplete for some legal forms, unclear ownership chains and foreign parent companies.

So the process stays manual right where it has to be exact. An analyst compares a register extract with a shareholder list, works out the percentages on each layer by hand and then types the difference into a form. Each of those steps can go wrong, and each has to be documented.

What a verifiable UBO file contains

AMLA's draft is specific about the sources. When verifying beneficial owners, institutions may use public registers other than the central registers, such as the business register, and third-party sources such as reputable data services providers, credit or financial institutions and group entities (Article 10 of the draft).

It is just as specific about depth. Where a customer's ownership and control structure contains more than one legal entity or arrangement, institutions must obtain for each intermediate layer the legal form, any nominee directors or shareholders, the jurisdiction of incorporation and, where applicable, the shareholdings and voting rights as percentages. The number of layers and high-risk jurisdictions count as elements that may increase complexity (Article 11 of the draft).

Put together, a UBO file that holds up has a clear order of work:

• take the register entry as the starting point and record when it was consulted
• pull the ownership structure from primary sources such as the business register, layer by layer
• record the legal form, jurisdiction of incorporation, nominees and percentages for each intermediate entity
• compare the result with the register entry, percentages included
• document each discrepancy and the report that followed

Most of these steps are retrieval and comparison work that needs little judgment. Sinpex has direct primary-source registry access in more than 200 jurisdictions. Registry data is pulled and extracted into a structured ownership view instead of being retyped from PDFs, which leaves analysts the cases that need a decision. Why documents from the source carry more weight than aggregated data is the subject of our article Document beats database.

Structures also change after onboarding. Without ongoing register monitoring, banks only learn that an intermediate holding in a client's ownership chain has changed when the client submits a new chart, or at the next periodic review. Continuous registry monitoring is part of the end-to-end KYB process on Sinpex.

FAQ: beneficial ownership verification

Sources: Regulation (EU) 2024/1624 (AMLR) · Money Laundering Act (GwG), section 23a · Transparenzregister · Directive (EU) 2024/1640 (AMLD6) · AMLA, final report on the draft customer due diligence standards · FATF, Mutual Evaluation Report of Austria 2026

This article is for general information only and does not constitute legal advice. It reflects the AMLR, the related EU implementing acts and the published AMLA drafts as of November 2026. Some technical standards are still drafts and may change before they are adopted. Whether and how the rules apply depends on your institution's business model, risk profile and national supervisory practice. Please verify the information independently and seek legal advice for your specific situation. Status: November 2026.