Before you agree with the new supplier you should carry out a check on them. The company must be genuine and officially registered, its records have to be up to date, and the director’s name should come back clear. There is nothing to be concerned about on paper, so you then sign the agreement.
The facts that the paperwork failed to reveal are that the director is in fact a nominee, that is, a stand-in whose entire role is just to be listed on the register so that someone else does not have to. The person who actually runs the company is located two entities and a secrecy jurisdiction away and has both sanctions exposure and a record of fraud which you would have rejected immediately. Although you approved the company, you never approved the individuals, and in this business the two things are not identical.
A few years ago, all you would have had to do was check the owner’s name in the public register. By 2026, that suggestion had stopped working quietly. In the United States, the federal beneficial ownership registry was abolished. In the EU, public access was ruled invalid by a court and has since been replaced by a series of ‘legitimate interest’ rules which differ from one country to another and, in some cases, still do not work. Although more registers now exist than ever before, you can rely on even fewer of them to actually provide an answer.
This leaves people who need to know who they’re dealing with in a rather difficult position since the registered owner is merely a front and not the real answer. The true owner, the beneficial owner, is the person who actually controls the company and receives the benefits, and locating them now involves less relying on a single lookup and more assembling the full picture from a number of different sources. Here’s how this process is carried out.
The legal owner is not the real owner
The key point in this whole matter is the difference between the legal owner of a company and the beneficial owner. The legal owner is the person whose name appears on the registration documents, while the beneficial owner is the individual who actually owns or controls the company and derives the benefits from it. In most cases these two people are the same. However, when they are not, it is in that gap between the legal and beneficial owner that the risk lies.
It is by no means automatically sinister to separate the two. There are completely normal reasons why a person might hold assets through a company or a trust—such as keeping things private, arranging taxes, or planning an estate. However, it is precisely the same kind of arrangement that gives legitimate privacy that also offers excellent concealment, and that is the problem. A layer between the legal owner and the actual owner is exactly what a sanctioned individual, a corrupt official, or a fraudster needs in order to carry on business under a clean name.
In such cases, when a compliance team gives the okay for ‘the company’, it is usually only approving the outward aspects and failing to address the real issue. The important question—to find out who is actually responsible and whether we would do business with them—is a question concerning people, and the registration seldom provides an answer to it by itself. This is so even if all the parties concerned are acting in good faith, and even more so when at least one person is not.
What the gap actually costs you
It’s tempting to regard hidden ownership as merely a technicality, something that can be left to a later section of the form. That’s a mistake. The difference between the legal owner and the actual owner is the most dependable method by which the wrong person can pass through a front door that appears clean. This is the way a permitted party is able to carry on trading through an entity which is not itself listed. It’s how a supplier turns out to be secretly owned by a competitor or by the very official who is supposed to be giving the contract. It’s how a fund only discovers, long after the fact, that its portfolio company shares an owner with a business that is already under investigation. In all of those situations, the companies seemed all right. The issue was the people.
Why “just check the registry” stopped working
For a time it appeared that there was going to be a simple solution. Having followed the international standards such as the FATF’s recommendations on beneficial ownership transparency, after one country another established registers, a number of which were made public, and the notion was that you could just look up anyone. But by 2026 this situation had broken down, and it’s important to understand exactly how it has done so since it affects the way you have to proceed.
In the United States the Corporate Transparency Act has been reversed. The federal beneficial-ownership registry now covers only foreign companies, and the information that US companies had previously filed is being deleted. Since most American companies are therefore left without a federal registry to consult.
In the European Union, access by the general public has been rejected. A decision by the Court of Justice in 2022 abolished the right of the public to look at the beneficial-ownership registers, and the new system, which grants access on the basis of “legitimate interest” pursuant to the EU’s anti-money-laundering rules, has been implemented in an inconsistent manner among the member states. In some cases the registers are open to eligible users, in others they are slow to respond or are blocked by fees and administrative procedures, and in some they have remained completely suspended. Transparency International has tested the access in various member states and has found that requests have been left pending for weeks. The deadline for the new rules was 2026, and the situation on the ground still differs from country to country.
The UK is the exception to the rule. The list of people with significant control, which is available on Companies House, is regarded as the gold standard. Yet a single such register is not enough to overcome the global issue, and in this case too it relies on companies stating the truth.
If you step back, the pattern becomes obvious. Registers are in place in over 170 jurisdictions, but there is a huge variation in their quality and accessibility, and the rules are constantly changing. Supervisors have begun to make this point directly: having a register is not the same as having a useful one, and businesses should not just wait for the quality of the registry to improve. The reliable lookup that existed a few years ago can no longer be counted on.
How ownership hides
When the registries are incomplete, it is helpful to know what you’re dealing with since ownership isn’t hidden by chance; it is deliberately concealed using a few standard methods.
Instead of the actual owner, nominee directors and shareholders have someone willing to act as a stand-in entered on the register. By using layered structures companies are placed one on top of another, frequently spanning multiple countries, so that to establish who is in control requires following a chain rather than just looking at a single line. Secret jurisdictions provide types of entities that reveal very little or nothing at all. Trusts achieve the separation of legal title from benefit simply by their nature. And in cases where data does exist, a large part of it is self-declared and has never been verified, which is why it may be out of date, incomplete or entirely false.
Nothing in this situation is unusual; these practices are standard and are frequently combined together in such a way that the true owner can’t be found in just one step but has to go through five layers, with each register failing to communicate with the others. It is possible for a single company based in a secrecy jurisdiction to own another company, be controlled by a trust with an undisclosed beneficiary, and thus completely evade a check based on name while at the same time violating no rule that anyone can easily cite. Criminals are adept at exploiting the differences between what is legally disclosed, what is actually the case in a commercial sense, and what any individual registry happens to show.
The answer is triangulation, not a single lookup
The following change results from all of this. Since no single source is both complete, up-to-date and easily accessible, relying on any one source is a mistake. To identify the actual owner you have to triangulate: that is, cross-referencing various sources, the company’s official filings, databases such as OpenCorporates, and the networks of officers and directors, and then adding sanctions data, negative media, and legal records in order to not only find out who the individuals are but also to assess whether they are a problem.
That is precisely where the regulators have arrived. Instead of delaying action until the registers have improved, the supervisors now require firms to develop their own ability to go beyond the name of the legal owner as it appears in the records and to regard any one register as just one of several inputs. In reality, this presents a data problem since you need breadth, that is, information from many different sources in many different jurisdictions; the ability to link an entity to the individuals and other entities associated with it; and a method of resolving all this down to real, identifiable people rather than having a collection of similar names.
When carried out properly, triangulation converts a dead end into a series of links that can be followed. The person listed on the register leads to the company that appointed them, which in turn leads to the overseas holding entity, which eventually leads to an individual. And once you have identified that person, you are in a position to evaluate the risk. Although the task is not glamorous, it is the key distinction between a decision based on who a company claims runs it and one based on who in fact does.
From a name to a person
What does good look like when put into practice? It is a sequence which begins with an entity and ends with a decision.
Start by dealing with the entity in question: make sure it is genuine, still exists, and is indeed the one you believe it to be. Next, trace the ownership upwards through each level, identifying any nominees or front companies encountered rather than stopping when you reach the first name. Then check the actual individuals you have located against sanctions and watchlists, as well as look into any adverse media or legal proceedings, since it’s only important to know who these people are if you also know what they have done. And at all times, link each finding to its source and include a date so that the final conclusion can be presented to a committee or to a regulator, rather than having to rely on them taking it on trust.
The most difficult technical aspect of that process is resolution—ensuring that the John Smith whom you have traced the ownership to is indeed that particular John Smith and not one of the thousand other people. It is a failure in its own right to either clear the wrong person or to flag an innocent one, which is also why it is so important to match on something other than just a name.
Ownership is a moving target
One more point since there’s a tendency to see this as a one-off affair; ownership does change, shares are transferred and the holding structures are reorganised, so that a minor shareholder becomes a controlling one. Moreover, the people involved aren’t static either; an owner who was clean when they joined can later become a politically exposed person, receive an indictment, or end up on a sanctions list after a year of the relationship.
A beneficial ownership check is only a snapshot, and snapshots become outdated over time. For the relationships that are most important, it’s necessary to keep an eye on both the ownership and the people involved over a period, not just to verify the situation once, so that you are made aware of any change in who is actually in control when it occurs rather than having to wait until your next audit.
The costume and who’s wearing it
The costume is the name on the register, while the person who is actually in possession of it is the one wearing it, and in 2026 no one register does so reliably show you who that is. Finding out the real individuals behind a company now depends on carrying out a wide range of connections and verifications, which is precisely the kind of work that takes up an analyst’s entire week when it is carried out by hand.
That is the kind of work Beady is designed to carry out. It searches through more than 200 million legal entities and the officers associated with them around the world, checking corporate status, ownership, sanctions exposure, and legal history all in one place and traces ownership through each level until it reaches the actual decision-makers rather than stopping at the name on the registration form. Each finding is linked back to its original source so that you can verify what you have found and be able to screen the individuals behind the company, not just the company itself.
If you want to find out who is actually behind the company you are currently considering, then arrange a demo and we will accompany you in tracing it.
