Beneficial ownership and the RBO: What Irish firms must verify

What beneficial ownership actually means

A beneficial owner is the natural person who ultimately owns or controls the customer. The emphasis belongs on natural and on ultimately. A company owned by another company has not given you a beneficial owner. It has given you the next question.

The point of the exercise is not to complete a field. It is to know whose money you are handling, so that when something looks wrong you know who benefits from it. A file that names a holding company as the beneficial owner has answered nothing.

If you cannot say, in one sentence and without opening the file, who ultimately benefits from a client relationship, the due diligence on it is not finished.

Three registers, not one

Companies and industrial and provident societies file to the Central Register of Beneficial Ownership, run by the CRO. Trusts file to the Central Register of Beneficial Ownership of Trusts, run by Revenue. Collective asset-management vehicles, credit unions and unit trusts file to the register the Central Bank maintains. A firm whose clients span all three needs an access route to each, and a file that shows which register was consulted and when.

The 25% test, and what happens when nobody meets it

The working threshold is ownership or control of more than 25% of the shares, voting rights or ownership interest. That is a starting point for the enquiry, not the whole of it. Control can sit somewhere other than the shareholding: a shareholders’ agreement, a golden share, a right to appoint the board, or a dominant influence exercised in practice.

Where no natural person can be identified after exhausting all reasonable means, the Act allows you to record the senior managing official. Two disciplines apply when you do:

1. Record the exhaustion, not just the conclusion. The file must show what you tried before you fell back. Naming a director because it was quicker is not the same as naming one because the structure genuinely has no identifiable owner.
2. Treat it as a risk signal. A structure that cannot produce a beneficial owner is telling you something. That should feed the risk rating rather than close the question.

Supervisors read the senior-managing-official route as the exception it is written to be. A book where it appears frequently invites the question of whether the enquiry was ever really made.

Three worked examples

1. A company is 60% owned by a holding company, which two individuals own equally. Each holds 30% indirectly, so both are beneficial owners. The file shows both layers and both people.
2. Four unrelated shareholders hold 25% each. Nobody passes the threshold, so the enquiry turns to control: a shareholders’ agreement, a right to appoint the board, or one person who runs the business in practice. Only if that produces nobody does the senior managing official go on the file, with the reasoning.
3. A 20% shareholder has the right to appoint a majority of the board. They are a beneficial owner by control, whatever the percentage, and the file should say so in those words.

What the RBO is, and what it is not

The Central Register of Beneficial Ownership holds beneficial ownership data filed by Irish companies and industrial and provident societies. As a designated person you are expected to consult it when carrying out due diligence on a relevant entity.

What it is not is verification. The register is a self-declaration by the entity, filed by the entity, and nobody at the RBO has audited it. Consulting it discharges an obligation to look. It does not discharge your obligation to be satisfied.

• Consult the register and record the date you did so
• Compare what it says against what the client told you and what the corporate documents show
• Verify the individual identified, to the standard your risk rating requires
• Keep the evidence of all three, not just the last one

Access to the register is restricted rather than open to the public, and the basis on which designated persons obtain access has moved more than once in recent years. Confirm your firm’s current access route before an inspection asks how you have been checking.

Screen every beneficial owner

Identification is not the end of the exercise. Each beneficial owner is screened for PEP status and against the sanctions lists at onboarding and at every review, because both attach to people rather than to entities. A customer entity with a clean screening result and an unscreened owner is an open finding, and after a sanctions designation it is an exposure the firm cannot explain.

Discrepancy reporting

This is the obligation firms forget. Where what you find during due diligence does not match what the RBO holds, you are required to report the discrepancy. It is not optional, it is not a courtesy to the client, and the fact that the client says they will fix it does not remove it.

Practical consequences worth building into the process:

• Somebody has to own discrepancy reporting, or it will fall between onboarding and compliance
• The reporting decision and its date belong on the client file
• Telling the client to update the register is sensible, and is not a substitute for reporting

A missing entry is a gap of the same kind. An entity that should be on the register and is not has told you something about how it runs its compliance; most firms treat it as a discrepancy to notify, ask the client why, and let the answer feed the risk rating.

A discrepancy is not automatically suspicious. It is often administrative. But an unreported discrepancy is a clean, documentary finding for an inspector, which is exactly the kind you do not want.

Layered structures, trusts and partnerships

Corporate chains have to be walked until they reach people. Each layer is a place the enquiry can quietly stop, and the file should show the chain rather than its conclusion. A structure diagram, dated and signed off, is worth more than a paragraph asserting the answer.

Trusts are a different question rather than a harder version of the same one. You are identifying the settlor, the trustees, the protector where there is one, the beneficiaries or the class of beneficiaries, and anyone else exercising ultimate control. Partnerships turn on the partnership agreement rather than on the register.

Where any layer sits outside Ireland, the verification standard does not relax because the documents are harder to obtain. If anything it tightens, because the risk factors that made the structure attractive are the same ones that make it opaque.

Public access to beneficial ownership registers across the EU was curtailed after the Court of Justice’s 2022 ruling, so an Irish firm often cannot consult a foreign register directly. Certified corporate documents, a structure chart signed off by the client’s advisers and independent data sources carry the verification instead, and the file should say which were used.

What the file has to show

Assume the file will be read by somebody who was not there and has no reason to be generous. It should carry:

• The ownership structure as you established it, dated
• The identity of each beneficial owner, and how each was verified
• The RBO consultation, with its date
• Any discrepancy identified, and what was done about it
• The reasoning where a senior managing official was recorded instead
• The risk rating the structure produced, and why

The consistent finding across Irish enforcement is not that firms failed to ask. It is that they asked, got a partial answer, and wrote the partial answer down as though it were the whole one. Training the people doing onboarding to recognise an incomplete answer is cheaper than remediating a book of them.

The MLRO’s beneficial ownership checklist

Beneficial ownership is where remediation programmes usually start, so it pays to test the book before a supervisor does. Each quarter, on a sample weighted to the corporate and trust clients:

• Every corporate file holds a register extract dated within its review cycle, and the extract matches the file
• Every layered structure has a dated structure chart that reaches natural persons
• The senior managing official appears rarely, and each time with the exhaustion of the enquiry recorded
• The discrepancy log has entries, dates and outcomes, and somebody owns it
• Each beneficial owner has a PEP and sanctions screening result with a date
• Ownership changes reach the file: a share transfer, a new director or an annual return triggers a review
• The firm’s access route to each of the three registers has been confirmed this year

Report the results alongside the CDD file review. A board that sees the senior-managing-official rate and the discrepancy count every quarter asks better questions than one that hears about beneficial ownership for the first time from an inspector.