Beneficial ownership verification ranges from a simple registry lookup to deep multi-jurisdiction ownership tracing. The three levels — registry-based identification, ownership-chain analysis, and enhanced verification with screening — reflect increasing complexity and risk exposure rather than a fixed regulatory hierarchy.
What Are the Three Levels of UBO Verification?
The three levels can be understood as a tiered approach, where each level builds on the previous one. They are not formally codified as “levels” in the German Money Laundering Act (GwG), but they map closely to the risk-based due diligence framework that the GwG and the EU Anti-Money Laundering Directives require.
| Level | Scope | Typical Methods |
|---|---|---|
| 1 — Registry identification | Direct UBO lookup | Transparency Register query, commercial register extract |
| 2 — Ownership-chain analysis | Tracing through layers | Shareholding analysis, corporate structure mapping |
| 3 — Enhanced verification & screening | Confirmation and risk screening | Source-of-wealth checks, sanctions and PEP screening, adverse-media review |
How Does Level 1 — Registry Identification Work?
Level 1 is the baseline step. It involves querying the relevant beneficial ownership register to identify individuals who ultimately own or control a legal entity. In Germany, the Transparency Register (Transparenzregister) is the primary source. In Switzerland, UBO information is typically obtained through the commercial register (Handelsregister) and related declarations. Austria maintains its own beneficial ownership register (Firmenbuch / Register der wirtschaftlichen Eigentümer).
At this level, the goal is to obtain a structured record showing the named individuals, their ownership proportions, and the nature of their control. The threshold commonly applied is a significant ownership or control interest, consistent with EU AML framework requirements.
Registry identification is efficient and suitable for lower-risk relationships. However, register data quality varies. Entries may be outdated, incomplete, or based on self-declarations without independent verification. For higher-risk cases, Level 1 alone is insufficient.
What Does Level 2 — Ownership-Chain Analysis Involve?
Level 2 goes beyond a single register entry. It requires tracing ownership through multiple corporate layers to confirm that the individuals listed as UBOs are indeed the ultimate controllers. This is particularly relevant when a counterparty is part of a holding structure, involves intermediate entities across jurisdictions, or includes trust or foundation arrangements.
The process typically involves:
- Mapping the full ownership chain from the contracting entity upward.
- Identifying each intermediate legal entity and its registered seat.
- Applying the ownership threshold at each relevant layer.
- Documenting where control is exercised through means other than direct shareholding — for example, voting rights, board appointments, or contractual arrangements.
Ownership-chain analysis is where many practical difficulties arise. Cross-border structures may involve jurisdictions with limited public register access. Nominee arrangements and bearer shares, though increasingly restricted, can still obscure true ownership. In Germany, the GwG explicitly requires obliged entities to take reasonable steps to identify the ultimate beneficial owner, which in practice means that a single register query is rarely adequate for complex structures.
What Happens at Level 3 — Enhanced Verification and Screening?
Level 3 combines ownership verification with active risk screening. It is required for higher-risk relationships, including those identified through the risk-based approach under the GwG or equivalent DACH frameworks. Enhanced due diligence (EDD) measures apply when there are indications of higher risk — for example, complex ownership structures, cross-border exposure, or connections to high-risk jurisdictions.
At this level, the following elements come into play:
- Source of funds and source of wealth checks: Understanding how the UBO acquired their assets and the origin of the funds involved in the specific transaction or relationship.
- Sanctions screening: Checking UBOs against current sanctions lists, including EU, UN, and national designations.
- PEP screening: Identifying whether a UBO is a politically exposed person, which triggers additional risk management measures.
- Adverse-media screening: Reviewing negative news coverage that may indicate financial crime, regulatory action, or reputational concerns.
- Human final review: A qualified analyst assessing screening hits, resolving false positives, and documenting the rationale for the decision.
Level 3 is where automation and human judgment intersect. Screening tools can flag potential matches, but the interpretation of those results — particularly in nuanced cases involving common names, historical sanctions designations, or context-dependent adverse media — requires experienced review.
How Do the Levels Map to Regulatory Obligations?
The GwG does not prescribe a fixed three-level model. Instead, it requires obliged entities to identify the beneficial owner, take risk-based measures to verify identity, and apply enhanced due diligence where risk is higher. The three-level framework described here is a practical interpretation that helps structure internal workflows and allocate resources according to risk.
For banks, insurers, and other regulated entities in the DACH region, the key obligation is proportionality. A straightforward domestic company with a single direct shareholder may be adequately addressed at Level 1. A cross-border holding structure with trust elements will typically require Level 2 and Level 3 measures.
What Are the Common Pitfalls in UBO Verification?
Several recurring issues affect UBO verification quality:
- Relying solely on self-declared register data without cross-checking against commercial register filings.
- Stopping the ownership trace at the first entity that appears to meet the threshold, without confirming whether further layers exist.
- Failing to document the reasoning behind UBO determinations, which creates problems during audits.
- Treating screening as a one-time event rather than an ongoing monitoring obligation.
- Overlooking indirect control mechanisms that do not appear in shareholding ratios.
A structured, level-based approach helps address these issues by making the depth of investigation explicit and proportionate to the identified risk.
This article provides general information and does not constitute legal advice in individual cases.