Know Your Business (KYB) is the due-diligence process that verifies a business is legally registered, in good standing, and controlled by identifiable people before a financial institution opens an account or payment relationship for it, and on an ongoing basis afterward. In the United States, the anchor is FinCEN's Customer Due Diligence (CDD) Rule: covered institutions must verify the entity and identify every beneficial owner holding 25% or more of it, plus one individual who controls it. Two rule changes in 2025 and 2026 altered the paperwork around KYB, but not that core duty.
Key takeaways:
Save this reference card — the five-step KYB flow in one image.
When a company applies for a bank account, a lending product, a payment platform, or a merchant account, the provider must confirm the business exists, is in good standing, operates for a legitimate purpose, and is controlled by identifiable people. KYB answers a deceptively simple question: is this company what it says it is, and who is behind it? A fraudster can register a shell entity in an afternoon. KYB catches the gap between a name on a form and a verifiable, lawful business.
For financial institutions, KYB is the entity-facing expression of anti-money-laundering (AML) obligations under the Bank Secrecy Act. For fintechs and platforms onboarding business users, it is both a compliance requirement passed down from banking partners and a fraud-prevention necessity.
In September 2023, FinCEN assessed a $15 million civil money penalty against Bancrédito International Bank and Trust Corporation for willful Bank Secrecy Act violations, including failing to maintain an AML program and failing to timely report suspicious activity. The bank also had to surrender its operating license. AML failures end in fines and lost charters, and KYB is the front door where most of that risk is either caught or let through.
KYC (Know Your Customer) verifies individuals. KYB (Know Your Business) verifies the entity, then runs KYC on the individuals who own and control it. A complete business onboarding runs both; you cannot satisfy one without the other.
| Dimension | KYC (Know Your Customer) | KYB (Know Your Business) |
|---|---|---|
| Subject | An individual person | A business entity (plus its owners) |
| Verifies | Name, DOB, address, government ID, SSN | Legal name, registration status, EIN, ownership structure |
| Primary sources | ID documents, credit bureaus, watchlists | Secretary of State records, IRS/EIN, formation docs, registries |
| Beneficial owners | The person is the customer | Must identify and verify the people behind the entity |
| Typical complexity | One person, one identity | Layered ownership, multiple stakeholders, corporate chains |
| Regulatory anchor | BSA/AML, CIP rule | BSA/AML, CDD rule (legal entity customers) |
The short version: KYC asks "who is this person?" KYB asks "what is this company, and who controls it?" The second question almost always pulls KYC back in for the beneficial owners.
KYB is driven by U.S. anti-money-laundering law, and the rules deserve precision because they changed twice in the past year. Here is where each obligation stands as of July 2026.
FinCEN's Customer Due Diligence Rule, effective since 2018, requires covered institutions to identify and verify the beneficial owners of legal-entity customers when those entities open accounts. The rule defines a beneficial owner under two prongs: an ownership prong (any individual who directly or indirectly owns 25% or more of the equity) and a control prong (a single individual with significant responsibility to control or manage the entity). Its four core elements: identify and verify customer identity; identify and verify beneficial owners of legal-entity customers; understand the nature and purpose of customer relationships; and conduct ongoing monitoring.
On February 13, 2026, FinCEN issued an exceptive relief order that removed one repetitive step. Covered institutions no longer have to re-identify and re-verify beneficial owners every time an existing legal-entity customer opens an additional account. Verification is still required at the first account opening, when the institution learns facts that call previously obtained information into question, and as its risk-based ongoing due diligence otherwise requires. Institutions must still maintain written procedures to identify and verify beneficial owners. In short: the onboarding obligation stands; the per-account repetition was relaxed.
Do not confuse the CDD Rule with beneficial ownership information (BOI) reporting under the Corporate Transparency Act. In March 2025, FinCEN issued an interim final rule removing the requirement for U.S.-formed companies and U.S. persons to file BOI reports; the reporting obligation now applies only to certain foreign entities registered to do business in the U.S. As of July 2026, that interim rule remains the operative standard, with a final rule still pending. The takeaway: even though most domestic companies no longer file BOI reports, your institution must still collect and verify beneficial ownership at onboarding under the CDD Rule. Two different obligations, easy to conflate.
A thorough KYB check pulls and cross-references several categories of data:
A typical KYB workflow moves through five stages, the same flow shown in the reference card above:
Manual versus automated KYB. Done manually, analysts log into dozens of state registries, request documents by email, and rekey data, stretching a small-business application across days. Automated, API-driven KYB connects directly to registries, tax records, and screening providers, returning verified results in seconds to minutes.
The friction matters more than compliance teams sometimes admit. In 18 years of delivering digital banking to credit unions, I have watched applications die over a third document request. Every extra day raises abandonment, and an owner who has to upload formation papers three times often walks to a competitor mid-application. It is one of the quiet reasons 87% of new LLCs default to national banks rather than the credit union down the street.
For an institution onboarding a business member, the single biggest predictor of a smooth KYB check is the quality of the data the applicant arrives with. When the EIN, the formation documents, and the ownership structure are already accurate and internally consistent, verification is fast. When the applicant typed their EIN from memory, named the wrong registered agent, or can't locate their articles of organization, the file stalls in manual review.
This is where the origin of a business matters. A company formed through a structured, embedded flow that captured the legal name, EIN, formation documents, and ownership at the moment of incorporation arrives at account opening with clean, verified identity data. The KYB check has authoritative inputs to confirm against, not a half-remembered application to untangle.
That is the connection between business formation and business onboarding. Treated as separate moments handled by separate vendors, they force the data to be reconstructed at each stage. When they share a single source of truth for the entity's identity, KYB stops being a bottleneck and becomes a confirmation step. This is the gap embedded models aim to close, pairing embedded finance with embedded formation. The same logic underpins banking-as-a-service, embedded banking, and embedded accounting. For the account-opening side, see our guide on how to open a business bank account.
A few patterns separate strong KYB programs from fragile ones:
Jupid embeds business formation, accounting, and tax directly inside bank and credit union apps through native integrations with Banno, Q2, and Alchemy, reaching more than 3,000 financial institutions. Because Jupid handles formation, it captures the legal name, EIN, and formation documents at the source, so the applicant arrives at account opening with clean, internally consistent identity data instead of a half-remembered application. Your compliance team keeps full ownership of the KYB and CDD program: verification decisions, beneficial-ownership determinations, screening, risk rating, and the audit trail. Jupid is SOC 2 compliant. If you lead onboarding or compliance at a financial institution, explore our partnership program or write to [email protected].
This article is for general informational purposes only and does not constitute legal, tax, or compliance advice. Regulatory requirements change and depend on your institution's specific circumstances. Consult qualified legal counsel and your compliance team before designing or modifying a KYB or AML program.
CBO & Co-Founder
Business leader with 18 years embedding fintech into U.S. banks, leading 200+ integrations across products and partnerships. Deep expertise in digital banking and fintech partnerships, building lasting relationships with financial institutions across the US.
Embedded accounting builds bookkeeping into the apps, platforms, and banks SMBs already use. What it is, who's adding it, and the ROI math, for 2026.
Embedded banking, embedded finance, BaaS, and open banking get used interchangeably. They are not the same. Here is the clean separation, with examples.
After Synapse, BaaS split into a high-risk sponsor-bank model regulators watch and a low-risk embedded model FIs can adopt safely. Here's how to tell them apart.
New here? Enter this code at checkout and your first month is on us — full AI bookkeeping, tax filing, and a 24/7 accountant, $0 for 30 days.
New customers. First month free with code NEW2026, cancel anytime.
Join 1,000+ businesses using Jupid to save time and money. Start simplifying your finances today.
30-day money-back guarantee
