KYC for Complex Corporate Structures: Navigating Multi-Layered Offshore Entities

Know Your Customer (KYC) for complex corporate structures is one of the most technically demanding areas of financial crime compliance. Where a straightforward UK limited company requires verification of company registration, directors, and beneficial owners, a multi-entity offshore structure — a Cayman Islands Foundation Company owning a BVI holding company owning a Malta MGA-licensed operating company — requires a systematic tracing exercise through each layer of the structure to identify the ultimate beneficial owners (UBOs) who actually control and benefit from the group's activities. The complexity is not administrative inconvenience; it reflects the genuine risk that layered structures can be used to obscure beneficial ownership from law enforcement and financial institutions, which is why the regulatory framework requires it to be pierced systematically.

The Legal Requirement: Beneficial Ownership Tracing to Natural Person

The obligation to identify and verify UBOs arises from MLR 2017 Regulation 28, which requires regulated firms to identify and take reasonable measures to verify the identity of any beneficial owner of a customer. "Beneficial owner" for a corporate entity is defined in MLR 2017 Regulation 5 as an individual who ultimately owns or controls the entity, meaning: an individual who holds, directly or indirectly, more than 25% of the shares or voting rights; an individual who otherwise exercises control over the management of the entity; and where no such individual is identified, the senior managing official of the entity.

The key phrase is "directly or indirectly" — the 25% threshold applies at the ultimate natural person level, not at each intermediate corporate layer. If natural person A owns 60% of Company X, and Company X owns 50% of Company Y (your client), then A's effective interest in Company Y is 30% (60% × 50%), which exceeds the 25% threshold. A is therefore a UBO of Company Y and must be identified and verified regardless of the number of corporate layers between A and Company Y.

For structures with very large numbers of shareholders at the ultimate level — a BVI company owned by a Cayman company that is in turn owned by 50 individual shareholders — identifying all individuals above the 25% threshold may result in no UBOs being identified (because no single individual holds 25%). In this case, the senior managing official falls back as the UBO for KYC purposes. Where structures are specifically designed so that no individual technically exceeds the 25% threshold while maintaining effective control through voting arrangements, MLR 2017 Regulation 5(2)(c) allows the firm to look through to the individuals who exercise control by other means.

Jurisdiction-Specific KYC Challenges

BVI (British Virgin Islands): BVI exempted companies are not required to file beneficial ownership information on a publicly accessible register. The BVI Beneficial Ownership Secure Search System (BOSS) maintains beneficial ownership records that can be accessed by competent authorities under the Beneficial Ownership Secure Search (Amendment) Act 2017, but financial institutions do not have direct access to BOSS. This means BVI beneficial ownership must be established through documents provided by the client (Register of Members, Declaration of Trust where applicable) and verified against other information sources. The BVI's close working relationship with HMRC through the UK-BVI Exchange of Notes arrangement provides some transparency for tax purposes but not for financial institution KYC directly.

Cayman Islands: The Cayman Islands Companies Act requires exempted companies to maintain a register of members (shareholders), which must be filed with the Cayman Registrar of Companies but is not publicly accessible. The Cayman Islands competent authority (CIMA — Cayman Islands Monetary Authority) has access to beneficial ownership information through the Beneficial Ownership Regime established under the Beneficial Ownership Transparency Act 2023. Again, financial institutions' access is indirect — through client-provided documentation and regulatory cooperation channels. Cayman Foundation Companies (the structure used by many Web3 entities) present additional complexity because foundations have no shareholders and governance is through a board of directors and a supervisor; UBO identification requires analysis of the foundation's constitutive documents.

Malta: Malta's Companies Act requires registration of shareholders and directors, and the Malta Business Registry (MBR) makes company information publicly accessible. Malta also maintains a beneficial ownership register as required by the EU 5AMLD (Fifth Anti-Money Laundering Directive). This means Maltese companies are significantly more transparent for KYC purposes than BVI or Cayman entities, with publicly accessible registers providing a first-layer verification source. MGA-licensed entities in Malta are also subject to the MGA's own fit and proper requirements for shareholders and directors, providing an additional layer of verified information.

Nominee Directors and Shareholders

Nominee arrangements — where a professional service provider acts as a company's director or registered shareholder on behalf of the actual beneficial owner — are a common feature of offshore corporate structures, used for confidentiality and administrative convenience. From a KYC perspective, nominee arrangements require careful treatment. If a corporate service provider acts as nominee director, the actual controller must still be identified as the UBO. Nominee shareholder arrangements are addressed by Declaration of Trust documentation, which records that the nominee holds shares as bare trustee for the beneficial owner.

Financial institutions are required under MLR 2017 Regulation 28(3)(a) to look through nominee arrangements and identify the actual beneficial owners behind them. Client structures that rely on nominees as the only identified parties — and decline to identify the beneficial principals behind the nominees — are not KYC-compliant and cannot be onboarded by a regulated financial institution. CCYFX requires full disclosure of the beneficial ownership chain regardless of the use of nominees at any corporate layer.

Preparing for KYC: What Complex Structure Clients Should Have Ready

Businesses with complex structures can significantly accelerate their banking onboarding by assembling comprehensive KYC documentation before approaching any financial institution. The standard package for a multi-entity offshore structure should include:

• Corporate documents for each entity in the structure: Certificate of incorporation, M&A/articles/constitutional documents, Certificate of good standing (within 12 months)
• Register of directors and register of members/shareholders for each entity
• Structure chart showing the complete ownership chain from each operating entity to each natural person UBO
• Passport copies and proof of address for each UBO above the institution's threshold
• Declaration of Trust or nominee disclosure where nominees are used
• Source of funds/wealth for each UBO (particularly important where UBO nationality is a higher-risk jurisdiction)
• For regulated entities (MGA, FCA, etc.): copy of the relevant licence and regulatory authorisation

CCYFX has developed a streamlined KYC process specifically for complex offshore structures, with a dedicated relationship manager coordinating the documentation review for multi-entity groups rather than routing each entity through a generic digital flow. Contact info@ccyfx.com to discuss your specific structure and begin the onboarding process.