UK CDD and KYC regulatory answers

    What should firms do when beneficial ownership changes?

    Agora Consulting Solutions•Reviewed by •

    Short answer

    Treat a change of beneficial ownership as a trigger for a scoped review: refresh the ownership chain, identify and verify the incoming parties, screen them, reassess the customer risk rating and the due diligence measures that follow from it, record the change with its source and date, and consider the discrepancy reporting position where the information differs from the relevant public register.

    What the rules and guidance say

    HMRC guidance for supervised businesses describes customer due diligence as including beneficial owner checks where applicable, understanding ownership and control, and updating information on change. Its ongoing monitoring guidance describes keeping customer due diligence and beneficial ownership information current and acting on triggers such as changed circumstances and doubts about previously obtained information.

    GOV.UK guidance sets out the position for obliged entities on reporting a discrepancy about a beneficial owner on the PSC register, both when establishing a new business relationship and during ongoing due diligence. The Money Laundering Regulations 2017 provide the statutory framework, and the detail of what applies depends on the firm's sector and supervisor. This page is general information, not legal or compliance advice.

    Practical implications

    1. Re-resolve the ownership chain rather than editing a single name, so indirect holdings are recalculated through the structure.
    2. Identify and verify incoming beneficial owners and controllers to the standard the risk requires.
    3. Screen the new parties, including for sanctions and PEP status, and work any resulting matches.
    4. Reassess the customer risk rating, and consider whether enhanced due diligence is now engaged.
    5. Review whether the recorded purpose and expected activity still hold under the new ownership.
    6. Consider the discrepancy position where the firm's information differs from the register.
    7. Record the change: what changed, source, date, checks performed, conclusion and who reached it.
    8. Reset review dates and monitoring settings where the risk profile has moved.

    Agora practitioner interpretation

    The weakness we see most often is detection rather than process. Firms have a competent procedure for handling an ownership change and no reliable way of learning that one has occurred, so the procedure runs at the next scheduled review, sometimes years later.

    We would also keep a snapshot of the previous chain rather than overwriting it. A reviewer assessing a decision made under the old structure needs to see that structure as it stood. The fuller treatment is in beneficial ownership and KYB.

    Primary sources

    Frequently asked questions

    Does a change of beneficial owner require a full KYC refresh?

    Not necessarily. The proportionate response is usually a scoped review: identify and verify the incoming party, screen them, reassess the customer risk rating and record the change. A full refresh is warranted where the change undermines the basis of the original assessment.

    What if the firm's information differs from the public register?

    The difference should be handled deliberately: recorded, investigated to establish which source is correct, considered against the discrepancy reporting position for obliged entities in the GOV.UK guidance, and reflected in the risk assessment with the conclusion evidenced.

    How would a firm learn that ownership has changed?

    Through monitored registry and corporate data feeds, customer notification obligations in the terms of business, outreach at review points, and information surfacing through screening or adverse media. Relying on the customer to tell the firm is a single point of failure.

    Ownership and KYB

    Beneficial Ownership and KYB: A Practical UK Guide

    Remediation and ongoing KYC

    KYC Trigger Events: When Should Customer Due Diligence Be Reviewed?

    Regulatory answer

    When should existing customer due diligence be updated?

    CDD and onboarding

    Enhanced Due Diligence (EDD): Triggers, Evidence and Controls

    Next step

    Detecting ownership change between reviews

    See ownership resolution, monitored registry data and scoped re-reviews in the Agora platform.

    See the Due Diligence PlatformBook a demonstration