Beneficial Ownership Reporting and FinCEN: A 2026 Guide

Beneficial ownership reporting is the disclosure of the real people who own or control a company, rather than the legal entity that sits on paper. In the United States this happens in two places. Companies file beneficial ownership information (BOI) reports with the Financial Crimes Enforcement Network under the Corporate Transparency Act, while banks separately identify the beneficial owners of their business customers under FinCEN's customer due diligence rule. FinCEN is a bureau of the US Department of the Treasury, set up to fight financial crimes such as money laundering and terrorism financing.

Both halves of that picture changed in 2025 and 2026. The rules that say who must report, and when, are not what most older guides describe. So this guide sets out the current state: what beneficial ownership reporting means, who files with FinCEN now, what the penalties are, how other regions compare, and how a compliance team actually verifies the owners it uncovers.

What Changed for Beneficial Ownership Reporting in 2026

The American rules reversed sharply. For a brief window the Corporate Transparency Act looked set to pull tens of millions of small US companies into a federal beneficial ownership database, and then that window closed.

In March 2025 FinCEN issued an interim final rule that removed BOI reporting under the Corporate Transparency Act for every company formed in the United States and for the people who own them. Published on March 26, 2025, it rewrote the definition of a "reporting company" so that the term now covers only entities formed under the law of a foreign country that have registered to do business in a US state or tribal jurisdiction. Domestic LLCs and US corporations no longer file. They no longer have to update or correct anything they filed earlier either.

Foreign reporting companies still file, though on a narrower basis: they report only their non-US beneficial owners. A foreign entity does not have to report any US person as a beneficial owner, and a US person who owns part of one of these entities does not file on its behalf. Timing splits by registration date. Foreign companies already registered to do business in the US before March 26, 2025 had until April 25, 2025 to file. Those registering on or after that date get 30 calendar days from the moment their registration takes effect.

One detail matters for anyone reading older material. The rule is still interim. FinCEN has said it intends to finalize it, so the scope could shift again, but as of mid-2026 the domestic exemption stands, and any beneficial ownership guide written before March 2025 overstates the US filing obligation.

Europe moved the opposite way. The EU's single Anti-Money Laundering Regulation, Regulation (EU) 2024/1624 fixes one beneficial owner threshold of 25% or more across every member state and widens which entities must identify their owners. It applies from 10 July 2027, and for higher-risk sectors the European Commission can drop that threshold to 15%. The new EU Anti-Money Laundering Authority, AMLA, has been operational since 1 July 2025. So a group that now files almost nothing in the US can still owe detailed ownership disclosures across its European arms.

What Is Beneficial Ownership?

Beneficial ownership refers to the individuals who ultimately own or control a legal entity, such as a corporation or a limited liability company. Reporting it makes the financial system more transparent. It also makes hidden control harder to use for crime.

Consider a corporation owned by another company. On the register, the owning company is the legal owner. The real beneficial owners are the people who own and control that parent, and because they benefit from what the corporation does, they are the ones regulators want identified and verified.

A beneficial owner usually shares a few traits. The person is a human being, not another entity, and holds a meaningful stake, often 25% or more of shares or voting rights. That control can run directly or wind through layers of intermediate companies. Either way, the person has real influence over how the business is run.

Who Has to Report Beneficial Ownership to FinCEN?

There are two separate reporting duties, and people often confuse them. Keep them apart and you have the fastest route to knowing what your business actually owes.

First, the Corporate Transparency Act BOI report. After the March 2025 interim final rule, this falls only on foreign-formed companies registered to do business in a US state. Domestic US companies are out. Form your entity under the law of a US state and you do not file a BOI report.

The second duty points the other way. FinCEN's customer due diligence (CDD) rule does not ask companies to report themselves. Instead it requires banks, credit unions, money services businesses, and other covered financial institutions to identify the beneficial owners of their legal-entity customers. So a US business that files no BOI report of its own will still be asked, by its bank, to name the people behind it when it opens an account.

That CDD duty has its own 2026 update. In February 2026 FinCEN issued an order that eased how often institutions must re-identify owners. Under it, a covered institution identifies beneficial owners at three moments: when a legal-entity customer first opens an account, when it learns something that casts doubt on information it already holds, and as its own risk-based monitoring calls for. Banks open between 140 and 160 million new accounts a year. Dropping automatic re-identification at every single new account removes a heavy operational load, and FinCEN has said it expects to fold the change into a future revision of the 2016 CDD rule.

What Information Goes Into a Beneficial Ownership Report?

The core data set is consistent across both duties. For each beneficial owner, the report or the customer file captures the full legal name, the date of birth, a current residential address, and a unique identifying number from an acceptable document such as a passport or a driver's license.

Under the CDD rule, a financial institution looks at a legal-entity customer through two lenses. The ownership prong asks for any individual who directly or indirectly owns 25% or more of the entity. The control prong asks for at least one individual with significant responsibility to control or direct it, such as a chief executive or managing member. One person can satisfy both prongs. And where its own risk assessment justifies it, an institution may set a lower ownership threshold than 25%.

Records have to stay current and be available to law enforcement on request. Institutions keep the identifying information collected, including each owner's name, address, date of birth, and identification number, then update it through ongoing monitoring.

How to Run Beneficial Ownership Reporting in Practice

Whether you are a foreign company filing a BOI report or a bank identifying the owners behind a corporate customer, the workflow rests on a few moving parts. Getting them right is what separates a clean file from a finding in your next exam.

It starts with mapping the ownership chain. Many entities are owned by other entities, sometimes across several jurisdictions, so you trace the structure upward until you reach the natural persons at the top. This is the step where shell companies and nominee arrangements are designed to lose you, and it is where most of the real work sits.

Next comes the people, not just the paperwork. A name on a form means little until you confirm the person exists and is who they claim to be. That calls for identity verification against reliable documents and data sources, the same discipline you would apply to any individual customer.

Then screen what you find. Each beneficial owner runs against sanctions lists, watchlists, and adverse media, so that a hidden owner who is a sanctioned individual or a known financial crime risk does not slip through behind a corporate name.

And keep it fresh. Ownership changes. People sell stakes, restructure holdings, or step back from control, so a one-time check ages quickly. Ongoing monitoring catches the change that turns a clean customer into a risky one.

Run this manually across a portfolio of corporate customers and it becomes slow and error-prone. That is the case for automating it, which is where the right KYB platform earns its place. Book a demo to see how it handles your own ownership structures.

Penalties for Getting Beneficial Ownership Reporting Wrong

The stakes differ by duty. Both are worth knowing.

Under the Corporate Transparency Act, a willful failure to file, or filing false information, can draw a civil penalty for each day the violation continues. That daily figure carries an annual inflation adjustment and had risen to $606 per day by early 2026. A willful violation can be criminal too, carrying a fine of up to $10,000 and up to two years in prison. Worth repeating, though: after the 2025 interim final rule, the Treasury Department said it would not enforce these penalties against US citizens or domestic reporting companies.

Heavier numbers sit behind the CDD rule, in the older Bank Secrecy Act framework. Failures there can lead to civil or criminal penalties, including fines of up to $500,000 and imprisonment for up to 10 years in the most serious cases. The fine is not the whole cost. An institution found non-compliant also risks losing customer trust and damaging its reputation, and that damage often outlasts the penalty itself.

How Beneficial Ownership Reporting Affects Different Industries

The duty applies broadly. It bites unevenly.

Real estate has long been a focus. Hiding the true owner of a property behind an anonymous company has been a common laundering tactic, and beneficial ownership transparency is meant to make that harder. For exactly this reason, FinCEN has continued to tighten reporting around real estate transactions.

Banking and financial services carry the heaviest load, because the CDD rule lands squarely on them. Every legal-entity customer they onboard triggers the ownership and control analysis described above.

Other sectors feel it less directly. Parts of the technology industry are one example. Even so, any business that opens an account with a covered institution will be asked to name its beneficial owners, whatever industry it sits in.

How KYC Hub Helps With Beneficial Ownership

Tracing who really owns a company is the part of corporate onboarding that most tools handle badly, especially once ownership runs across borders. KYC Hub's Global KYB Solution is built for exactly that problem.

It supports automated, swift onboarding of business customers, so corporate due diligence does not stall at the first holding company. UBO and PSC detection traces ownership and control through layered structures to surface the natural persons at the top, rather than stopping at the first corporate shareholder. Verification then confirms those people are real and screened. And because the platform is built for global compliance, it pulls registry data and ownership structures from across jurisdictions into one flow, which matters when one company files little in the US yet owes full disclosure across its European entities. Workflows are tailored to how your own team handles cases, so the controls fit your risk appetite instead of forcing a generic process.

The result is corporate onboarding and due diligence that keeps pace with both the eased US rules and the stricter European ones, without the manual chain-tracing that slows teams down. Book a corporate due diligence demo to see it run against your own ownership structures.