Beneficial Ownership Registers and Corporate Registries

1. Why This Topic Matters

Money launderers rarely hold dirty assets in their own names. They hide behind layers of companies, trusts, foundations, nominees and partnerships spread across several jurisdictions so that the person who really owns or controls the money, the beneficial owner, is invisible to banks, regulators and law enforcement. The Panama Papers (2016), the Paradise Papers (2017), the FinCEN Files (2020) and the Pandora Papers (2021) all demonstrated the same thing: anonymous shell companies are the single most important vehicle for laundering, sanctions evasion, tax evasion, corruption and terrorist financing.

Beneficial ownership registers and corporate registries exist to strip away that anonymity. For the CAMS candidate this topic sits inside Data Onboarding and Screening Technology because modern compliance programs no longer rely only on a customer filling in a form. They pull registry data electronically into onboarding systems, map ownership chains, verify declared owners against independent sources, screen those owners against sanctions and PEP lists, and monitor the registers for changes. Understanding how these registers work, what they can and cannot tell you, and how they are integrated into technology is core CAMS knowledge and a recurring exam theme.

2. Key Definitions You Must Know

Beneficial owner (FATF definition): the natural person(s) who ultimately owns or controls a customer and/or the natural person on whose behalf a transaction is being conducted. It also includes those persons who exercise ultimate effective control over a legal person or arrangement. A beneficial owner is always a natural person, never another company.

Legal owner: the person or entity whose name appears on the share register or title document. The legal owner may be a nominee or an intermediate holding company and is often not the beneficial owner.

Legal person: a company, corporation, foundation, partnership or similar body that can own assets and enter contracts in its own right.

Legal arrangement: an express trust or similar structure (for example a fiducie, Treuhand or waqf) in which legal ownership and beneficial interest are separated.

Ownership threshold: most regimes treat anyone owning or controlling 25 percent or more of shares or voting rights as a beneficial owner. Some jurisdictions and some high-risk contexts use lower thresholds (10 percent is common for higher-risk customers, and some sanctions and tax regimes use 10 percent). The threshold is a starting point; control can exist without any shareholding.

Control test: if no natural person meets the ownership threshold, you identify the natural person who exercises control by other means (right to appoint or remove directors, veto rights, dominant influence, control through a trust). If no one is identified under control either, the senior managing official (for example the CEO or managing director) is recorded as a fallback.

Corporate registry (company register): the official government record of legal entities incorporated in a jurisdiction. It normally holds the company name, registration number, status, registered address, date of incorporation, directors, legal (registered) shareholders and filed accounts. Examples include Companies House (UK), state Secretary of State offices (US), the Handelsregister (Germany), ACRA (Singapore) and the Hong Kong Companies Registry.

Beneficial ownership register: a database, usually maintained by the government, that records the natural persons who ultimately own or control legal entities and, in many jurisdictions, trusts. Examples include the UK PSC (People with Significant Control) register, the EU central registers created under the 4th and 5th Anti-Money Laundering Directives, the UK Register of Overseas Entities, and the US FinCEN Beneficial Ownership Information (BOI) database created by the Corporate Transparency Act.

Key distinction for the exam: a corporate registry tells you who a company says its directors and registered shareholders are. A beneficial ownership register tells you which natural person stands behind the whole structure. A corporate registry alone will often only show another company as the shareholder.

3. The Regulatory Framework

FATF Recommendation 24 (legal persons): revised in March 2022. Countries must ensure adequate, accurate and up-to-date beneficial ownership information is available to competent authorities in a timely manner. The revision pushed countries toward a multi-pronged approach: a registry (or an alternative mechanism that is equally effective), information held by the company itself, and information held by obliged entities such as banks. It also requires countries to prohibit new bearer shares and to manage the risk of nominee shareholders and directors.

FATF Recommendation 25 (legal arrangements): revised in February 2023 to strengthen beneficial ownership requirements for trusts and similar arrangements, including trustee obligations to hold and disclose information.

FATF Recommendation 10 (CDD): requires financial institutions to identify the beneficial owner and take reasonable measures to verify identity, understanding the ownership and control structure of the customer. This is the obligation that drives the use of registers in onboarding.

European Union: 4AMLD (2015) required each member state to create a central beneficial ownership register. 5AMLD (2018) made the registers accessible to the general public and introduced an obligation for obliged entities to report discrepancies between the register and the information they hold. In November 2022 the Court of Justice of the European Union ruled that unrestricted public access was invalid on privacy grounds, so access is now limited to competent authorities, obliged entities and persons with a legitimate interest. The 2024 EU AML package (the AML Regulation and 6AMLD) keeps central registers, harmonises the beneficial owner definition (25 percent plus one share or voting right, or control by other means), and strengthens verification and discrepancy reporting. Registers are to be interconnected through the BORIS platform.

United Kingdom: the PSC register has operated since 2016 and is public. The Register of Overseas Entities (2022) captures foreign companies owning UK property. The Economic Crime and Corporate Transparency Act 2023 gave Companies House powers to verify identities and query or reject filings, addressing long-standing criticism that UK registry data was unverified.

United States: the Corporate Transparency Act (2021) created a FinCEN-held BOI database that is not public; access is restricted to law enforcement, certain regulators and, with customer consent, financial institutions for CDD purposes. Reporting began on 1 January 2024, but the scope has since been narrowed significantly for domestic US companies through litigation and FinCEN rule changes, with the focus shifting to foreign entities registered to do business in the US. Separately, the FinCEN Customer Due Diligence Rule (2018) requires covered financial institutions to identify and verify beneficial owners of legal entity customers at 25 percent ownership and one control person. For the exam, know that US financial institutions still have their own CDD obligation regardless of what the government register contains.

Other models: many offshore centres (for example the Cayman Islands and the BVI) maintain non-public registers accessible to authorities and, in some cases, to obliged entities. Some jurisdictions have no central register and rely on company service providers to hold the data.

4. How Registers Are Used in Data Onboarding and Screening Technology

A modern onboarding and screening workflow for a corporate customer typically follows these steps:

Step 1: Entity identification and resolution. The system captures the legal name, registration number, jurisdiction and address, and queries the corporate registry (directly or through a data aggregator) to confirm the entity exists, is active, and matches the details provided. Entity resolution technology matches the record to a unique identifier such as the registration number or Legal Entity Identifier (LEI) so that duplicate or misspelled records are not created.

Step 2: Collecting the self-declared ownership structure. The customer supplies an organisational chart and a beneficial ownership declaration or certification. This is the customer's own statement and must be treated as a claim to be verified, not as proof.

Step 3: Retrieving registry and register data. The platform pulls director and shareholder data from the corporate registry and beneficial owner data from the beneficial ownership register, usually via API. Commercial providers (Bureau van Dijk Orbis, Dun and Bradstreet, Refinitiv, LexisNexis, Moody's, OpenCorporates and others) aggregate hundreds of registries into a single interface and add ownership-chain linking across borders.

Step 4: Unwrapping the ownership chain. The system (or the analyst) follows each shareholder that is itself a company up the chain until natural persons are reached. Indirect ownership is calculated by multiplying percentages along the chain. Example: Customer Co is 60 percent owned by Holdco; Holdco is 50 percent owned by Ms Lee. Ms Lee indirectly holds 60 x 50 = 30 percent of Customer Co, so she is a beneficial owner at a 25 percent threshold. If the same person appears through several branches, the percentages are added together.

Step 5: Verification and reconciliation. Register data is compared with the customer's declaration. Matches raise confidence; mismatches generate a discrepancy alert. In the EU, material discrepancies must be reported to the register authority. Where register data is unavailable, unreliable or the jurisdiction is high risk, the institution obtains independent documents (share registers, trust deeds, partnership agreements, certified structure charts, notarised declarations).

Step 6: Screening. Every identified beneficial owner, director and controlling party is screened against sanctions lists (OFAC, UN, EU, UK HMT), PEP databases and adverse media. This is critical because sanctions programmes apply to entities owned 50 percent or more by designated persons (the OFAC 50 Percent Rule) even if the entity itself is not listed. Registers are therefore a sanctions tool as well as an AML tool.

Step 7: Risk rating. Ownership complexity, number of layers, use of nominees, presence of trusts, jurisdictions involved and PEP involvement feed into the customer risk score, which determines whether standard or enhanced due diligence applies.

Step 8: Ongoing monitoring. Technology subscribes to register change feeds so that a change of director, shareholder or beneficial owner triggers a review. Periodic refreshes are scheduled according to risk rating, and trigger events (new ownership filing, adverse media, sanctions update) prompt an event-driven review.

5. Strengths and Limitations of Registers

Strengths: independent source separate from the customer; fast and scalable through APIs; supports consistency across the institution; enables cross-border linkage; supports discrepancy reporting that improves register quality over time; provides an audit trail of what was known at onboarding.

Limitations (very frequently tested):
- Much register data is self-reported and unverified; a criminal can simply file false information.
- Data can be stale because filing deadlines are annual or event-based and are not always enforced.
- Thresholds and definitions differ between countries, so a person below the threshold in one jurisdiction may not appear at all.
- Many jurisdictions have no register, or a register that is not accessible to foreign institutions.
- Nominees, bearer shares (where still legal), trusts, foundations and multiple layers can defeat register logic.
- Registries record legal, not beneficial, shareholders; stopping at the registry is a common compliance failure.
- Name matching across languages and transliterations creates false positives and false negatives.

Core principle: a register is a source of evidence that supports CDD; it does not replace the institution's own obligation to identify and take reasonable measures to verify the beneficial owner using a risk-based approach.

6. Ownership Red Flags Linked to Register Data

- Unnecessarily complex or multi-jurisdictional structure with no commercial rationale.
- Ownership chain that passes through secrecy jurisdictions or jurisdictions with no register.
- Shareholder of record is a corporate service provider, nominee or trust company.
- Circular ownership (Company A owns B, B owns C, C owns A).
- Frequent, unexplained changes of directors or shareholders shortly before or after large transactions.
- Registered address shared with hundreds of unrelated companies (mass registration address).
- Directors who serve on an implausible number of boards (professional nominee directors).
- Discrepancy between the customer's declaration and the register, or refusal to explain it.
- Dormant or recently incorporated company suddenly receiving high-value flows.
- Beneficial owner is a PEP or a close associate who was not disclosed by the customer.

7. How to Answer Exam Questions on This Topic

CAMS questions are scenario-based and ask for the best or most appropriate action. Apply this mental checklist:

1. Identify what the question is really testing: definition of beneficial owner, threshold calculation, the role of registers versus CDD, verification, screening, discrepancy handling, or red flags.
2. Remember the beneficial owner must be a natural person. Any answer that stops at a holding company is wrong.
3. Apply the two-step test: ownership first, then control, then senior managing official as a last resort.
4. Multiply percentages along a chain for indirect ownership; add the branches if the same person appears more than once.
5. When an answer says the institution can rely solely on the register, be suspicious. The correct answer usually involves independent verification, reasonable measures, or a risk-based approach.
6. When the register and the customer disagree, the correct action is to investigate, document, and (in the EU) report the discrepancy, and consider whether suspicion exists, not to simply accept the customer's version.
7. When a jurisdiction has no register or weak data, escalate to enhanced due diligence and obtain original documents; do not decline automatically unless the beneficial owner cannot be identified at all.
8. If an identified beneficial owner is a PEP or sanctioned, the answer will involve EDD and senior management approval (PEP) or blocking and reporting (sanctions).
9. Remember that screening technology applies to the people behind the entity, not just the entity name.

8. Exam Tips: Answering Questions on Beneficial Ownership Registers and Corporate Registries

Tip 1 - Know the vocabulary precisely. Legal owner versus beneficial owner, legal person versus legal arrangement, corporate registry versus beneficial ownership register, nominee, bearer share, senior managing official. Many distractors swap these terms.

Tip 2 - Default to the 25 percent threshold but watch for the word control. If the scenario says a person with 10 percent appoints the board or holds a veto, that person is a beneficial owner by control even though they fall below the threshold.

Tip 3 - Do the arithmetic. Expect at least one chain calculation. Write out each layer and multiply. Check whether a person appears in two branches and add them. Then compare with 25 percent.

Tip 4 - Registers are supporting evidence, not a safe harbour. Any answer implying that consulting the register discharges the CDD obligation is almost always incorrect. FATF Recommendation 10 requires the institution to take reasonable measures to verify.

Tip 5 - Unverified data is the classic weakness. If asked about a limitation of registers, the best answer is usually that information is self-declared and may not be verified or current.

Tip 6 - Discrepancies must be acted upon. The exam favours answers that investigate, document, report to the register authority where required, reassess risk, and consider a suspicious activity report if the explanation is unsatisfactory.

Tip 7 - Link ownership to sanctions. Questions about an entity that is not on a sanctions list but is majority owned by a designated person test the OFAC 50 Percent Rule and the need to screen beneficial owners, not just entity names.

Tip 8 - Think risk-based. Complex structures, offshore layers, nominees and PEP ownership push toward enhanced due diligence, senior approval and more frequent review. Simple domestic companies with transparent owners do not require the same depth.

Tip 9 - Technology questions focus on process, not brand names. You will not be asked to name a vendor. You will be asked about APIs, aggregation, entity resolution, ownership mapping, automated alerts on register changes, and the need for human review of discrepancies and false positives.

Tip 10 - Know the headline regulatory landmarks. FATF Recommendations 24 and 25 (revised 2022 and 2023), EU 4AMLD and 5AMLD central registers and the 2022 CJEU ruling on public access, UK PSC register, US Corporate Transparency Act and FinCEN BOI (restricted access, not public), and the FinCEN CDD Rule (25 percent ownership plus one control person).

Tip 11 - Eliminate extremes. Answers such as always reject, never accept, or rely entirely on the customer declaration are rarely correct. The best answer is usually proportionate, documented and risk-based.

9. Practice Questions

Question 1. A bank is onboarding Alpha Trading Ltd. The corporate registry shows its sole shareholder is Beta Holdings SA. Beta Holdings is owned 40 percent by Mr Novak, 35 percent by Ms Okafor and 25 percent by Gamma Trust. Which persons must the bank identify as beneficial owners at a 25 percent threshold?
Answer: Mr Novak (40 percent of 100 percent = 40 percent) and Ms Okafor (35 percent). The bank must also look through Gamma Trust (25 percent) to identify the settlor, trustee, protector, beneficiaries and any other natural person exercising control. Beta Holdings SA is a legal owner, not a beneficial owner.

Question 2. During onboarding, the national beneficial ownership register lists a different individual from the person named in the customer's declaration. What is the most appropriate first step?
Answer: Investigate and document the discrepancy, request supporting documentation from the customer, report the discrepancy to the register authority where the law requires it, reassess the risk rating, and consider whether the inconsistency gives rise to suspicion. Simply accepting the customer's declaration or the register entry without inquiry would be incorrect.

Question 3. Which statement best describes a limitation of public beneficial ownership registers?
Answer: Information is frequently self-reported by the company and may not be independently verified or kept current, so it should be corroborated through additional CDD measures.

Question 4. A compliance officer confirms a corporate customer is not on any sanctions list. The register shows the customer is 55 percent owned by an individual who is designated under OFAC. What should the officer conclude?
Answer: The entity is blocked property under the OFAC 50 Percent Rule because it is owned 50 percent or more by a designated person. The account must be blocked and reported; screening must cover beneficial owners, not only the entity.

Question 5. A customer from a jurisdiction with no beneficial ownership register provides only a self-certification. What is the best course of action?
Answer: Apply enhanced due diligence appropriate to the risk: obtain the share register, constitutional documents, certified structure chart and identification documents for each natural person, consider independent sources such as commercial databases, and document the reasonable measures taken. Decline only if the beneficial owner cannot be identified or verified.

10. One-Page Summary

- Beneficial owner = natural person who ultimately owns or controls; usually 25 percent or more, or control by other means, or senior managing official as fallback.
- Corporate registry = legal entity facts and registered shareholders. Beneficial ownership register = natural persons behind the structure.
- FATF R.24 and R.25 drive country registers; R.10 drives institution-level identification and verification.
- EU: central registers, discrepancy reporting, access limited after the 2022 CJEU ruling. UK: public PSC register. US: CTA and FinCEN BOI (non-public) plus the FinCEN CDD Rule.
- Technology: API retrieval, aggregation, entity resolution, ownership unwrapping, discrepancy alerts, screening of owners, change monitoring.
- Registers support CDD; they never replace reasonable verification and a risk-based approach.
- In the exam, choose the answer that identifies natural persons, verifies independently, investigates discrepancies, screens the owners, and scales effort to risk.