KYB: Know Your Business Verification in the Philippines
KYB (Know Your Business) is the process of verifying a business entity’s legal identity, ownership structure, and Ultimate Beneficial Owners (UBOs) before forming a business relationship. In the Philippines, KYB is a compliance obligation for banks, fintechs, and other covered persons under AMLA, with UBO disclosure requirements considerably tightened by SEC Memorandum Circular No. 15, Series of 2025 (effective January 2026). Businesses that automate KYB cut onboarding fraud risk while meeting SEC and AMLC requirements in a single workflow.
What Is KYB (Know Your Business)?
KYB stands for Know Your Business. It is a due diligence process used to verify the legal identity and legitimacy of a business entity before entering a financial or commercial relationship with it. Where KYC (Know Your Customer) focuses on verifying individuals, KYB goes one layer deeper: it verifies the company itself, its registration status, ownership structure, and the real people who ultimately own or control it.
The core question KYB answers is: Is this business legally registered, actively operating, and controlled by people who are not on sanctions lists, PEP registers, or adverse media databases?
A complete KYB check typically covers five elements:
| KYB Element | What Is Verified | Philippine Source |
|---|---|---|
| Business registration | Legal existence, active status, registration number | SEC / DTI / CDA registry |
| Corporate documents | Articles of incorporation, business permits, licenses | SEC eFAST, LGU permits |
| Ownership structure | Shareholders, directors, corporate layers | SEC General Information Sheet (GIS) |
| Ultimate Beneficial Owner (UBO) | Natural persons owning 25%+ or exercising control | SEC HARBOR Registry (2026) |
| AML screening | Sanctions lists, PEP status, adverse media | AMLC watchlists, OFAC, UN sanctions |
KYB vs. KYC: What Is the Difference?
KYC and KYB share the same compliance goal: verifying that the party you are dealing with is legitimate and not a financial crime risk. But the subject of verification is different, and so is the complexity.
KYC verifies an individual: their government-issued ID, liveness, address, and risk profile. See how KYC solutions in the Philippines handle individual onboarding across banking, fintech, and lending.
KYB verifies a business entity. And because businesses can be layered across multiple corporate structures, jurisdictions, and nominee arrangements, the verification is considerably more complex. A single KYB check may require verifying the company itself, its parent company, its directors as individuals, and the ultimate natural person(s) who control the whole structure.
| Aspect | KYC | KYB |
|---|---|---|
| Subject | Individual person | Business entity |
| Core check | ID + liveness + risk profile | Registration + ownership + UBO + AML screening |
| Philippine regulator | BSP, AMLC | SEC, BSP, AMLC |
| Complexity | Single layer | Multi-layer (company, directors, UBOs) |
| Refresh cadence | Risk-based, typically annual | Risk-based + triggered by ownership changes |
Who Needs to Conduct KYB in the Philippines?
KYB obligations in the Philippines apply to any covered person under AMLA that onboards or transacts with corporate clients. That includes banks, quasi-banks, money service businesses, insurance companies, securities dealers, lending companies, financing companies, virtual asset service providers (VASPs), and real estate developers above applicable thresholds.
When a covered person onboards a corporate client, they must apply Customer Due Diligence (CDD) not just to the business entity but to its directors and Ultimate Beneficial Owners (UBOs). This is the regulatory basis for KYB: AMLA’s CDD requirement extends to legal persons, not just natural persons. You cannot complete CDD on a company without knowing who controls it.
Beyond financial institutions, any business engaged in B2B procurement, supply chain partnerships, or marketplace seller verification also benefits from KYB as a fraud prevention measure, even outside of strict AMLA coverage.
The UBO Requirement: SEC MC 15-2025 and the HARBOR Registry
The most substantial recent development in Philippine KYB compliance is SEC Memorandum Circular No. 15, Series of 2025, which introduced the Beneficial Ownership Disclosure Rules of 2026. These rules took effect on 1 January 2026 and represent the most substantial overhaul of UBO disclosure requirements in the Philippines since the AMLA was enacted.
Under SEC MC 15-2025:
- All registered corporations (excluding one-person corporations and sole proprietorships) must submit UBO information to the SEC’s new HARBOR (Hierarchical and Applicable Relations and Beneficial Ownership Registry) platform.
- UBO disclosure now covers not just legal ownership but also control and economic benefit, capturing nominee arrangements, trust structures, and offshore layering that previously allowed real beneficial owners to remain hidden.
- The SEC no longer accepts beneficial ownership disclosures via the General Information Sheet (GIS). Corporations must complete HARBOR filing before submitting their annual GIS.
- For each beneficial owner, disclosure must include complete name, residential address, date of birth, nationality, TIN, civil status, and whether the individual is a politically exposed person (PEP).
- The board of directors and corporate secretary carry personal liability for the accuracy of UBO disclosures.
- Penalties for non-compliance include monetary fines, daily penalties, and potential revocation of SEC registration.
For businesses conducting KYB on Philippine corporate counterparts, this means the HARBOR registry is now the authoritative source for UBO data. Once a business misses its HARBOR disclosure deadline, that business itself becomes a compliance risk to onboard.
KYB and AMLA: Corporate Due Diligence Obligations
Under AMLA and BSP Circular No. 1022 (2020), covered persons are required to apply CDD to legal persons and arrangements in the same way they apply it to individuals. For a corporate client, this means verifying the entity’s legal status, understanding the nature and purpose of the business relationship, and identifying and verifying the beneficial owners behind the corporate structure.
Where the corporate client poses elevated AML risk, Enhanced Due Diligence (EDD) applies. High-risk corporate clients include companies from high-risk jurisdictions, companies with complex multi-layer ownership structures, companies where a director or UBO has PEP status, and companies in sectors flagged in the AMLC National Risk Assessment, such as real estate, VASPs, and casinos.
The intersection of KYB with AML risk is direct: shell companies and nominee structures are among the primary vehicles for smurfing and structuring operations in the Philippines. A KYB check that fails to reach the actual UBO leaves a covered person exposed to the exact risk AMLA is designed to prevent.
The KYB Verification Process: Step by Step
A complete KYB workflow for Philippine corporate onboarding typically runs in four stages.
Stage 1: Entity Verification
Confirm the business is legally registered and in good standing. For Philippine entities, this means checking the SEC online verification portal for corporations and partnerships, the DTI registry for sole proprietors, or the CDA registry for cooperatives. Verify the registration number, business name, date of incorporation, and current status (active, dissolved, revoked).
Stage 2: Document Collection and Validation
Collect and authenticate core corporate documents: Articles of Incorporation, Certificate of Registration, General Information Sheet, business permits, and any sector-specific licenses (BSP license, SEC secondary registration, etc.). Document authentication should cross-reference data against official registries, not just accept scanned copies at face value.
Stage 3: UBO Identification and Verification
Map the full ownership structure to identify all natural persons who own 25% or more of the entity, or who exercise effective control regardless of ownership percentage. Each UBO must then undergo individual identity verification equivalent to a full KYC check: government ID verification, liveness detection, and AML screening against sanctions lists, PEP databases, and adverse media. Under SEC MC 15-2025, this information is now also required to be on file in the HARBOR registry.
Stage 4: Ongoing Monitoring
KYB is not a one-time event. Ownership structures change: directors resign, shares transfer, new UBOs emerge. Covered persons must monitor corporate clients on a risk-based cadence and re-trigger KYB whenever material ownership changes are detected or when the AMLC or BSP flags a client through updated watchlists.
Common KYB Failure Points for Philippine Businesses
Most KYB failures in the Philippines fall into three categories.
The most common failure is stopping at entity-level verification. Confirming SEC registration without drilling down to UBOs is the single most common KYB gap in the Philippines. A legally registered company can still be a shell controlled by a sanctioned individual. Entity verification is the floor, not the ceiling.
Document fraud is the second gap. Collecting an Articles of Incorporation without cross-checking the registration number against the SEC online portal leaves the verification open to forgery. Covered persons that accept documents without registry cross-reference are essentially trusting the fraudster’s paperwork.
The third failure is treating KYB as a one-time onboarding event. Ownership structures change. A corporate client whose UBO was clean at onboarding may become a risk two years later if that UBO is subsequently sanctioned or faces an AMLC investigation. Ongoing monitoring is what makes KYB durable, not just defensible at the time of onboarding.
How Verihubs Supports KYB for Philippine Businesses
Verihubs provides business verification infrastructure that covers the individual identity layer within KYB workflows. When a Philippine business conducts KYB on a corporate counterpart, the directors and UBOs identified in Stage 3 must each undergo a KYC-equivalent check. This is where Verihubs eKYC obligations intersect directly with KYB: Verihubs eKYC API verifies Philippine government IDs (PhilSys, UMID, SSS, passport, and 15+ document types), performs AI-powered biometric liveness detection, and runs deepfake detection to eliminate synthetic identity fraud at the UBO verification stage.
For businesses building a full KYB pipeline, Verihubs handles the identity verification component that sits at the heart of every UBO check, with API integration that connects directly to onboarding workflows without manual processing overhead.
Frequently Asked Questions About KYB in the Philippines
What does KYB stand for?
- KYB stands for Know Your Business. It is a due diligence process that verifies the legal identity, registration status, ownership structure, and Ultimate Beneficial Owners (UBOs) of a business entity before entering a financial or commercial relationship with it.
Is KYB required by law in the Philippines?
- Yes. Under AMLA (Republic Act No. 9160 as amended) and BSP Circular No. 1022, covered persons are required to apply Customer Due Diligence to legal persons and arrangements, which includes verifying UBOs. SEC Memorandum Circular No. 15, Series of 2025 requires all registered Philippine corporations to disclose beneficial ownership information through the HARBOR registry, effective 1 January 2026.
What is a UBO in the context of Philippine KYB?
- A UBO (Ultimate Beneficial Owner) is the natural person who ultimately owns or controls a business entity, either through direct ownership of 25% or more of shares, or through effective control of the entity regardless of ownership percentage. Under SEC MC 15-2025, UBO information must be filed with the SEC’s HARBOR registry and includes full name, address, TIN, nationality, and PEP status.
What is the HARBOR registry in the Philippines?
- HARBOR stands for Hierarchical and Applicable Relations and Beneficial Ownership Registry. It is the SEC’s centralized digital platform for beneficial ownership disclosures, introduced under SEC MC 15-2025. As of 2026, all Philippine corporations must submit UBO data to HARBOR before filing their annual General Information Sheet (GIS). The GIS no longer serves as the primary vehicle for beneficial ownership disclosure.
What is the difference between KYB and KYC?
- KYC verifies individual persons: their ID, biometrics, and personal risk profile. KYB verifies business entities: their registration, corporate structure, and the UBOs behind them. In practice, a complete KYB check includes KYC-equivalent verification of each director and UBO as individuals.
Can KYB be automated in the Philippines?
- Yes. The SEC registry, HARBOR platform, and DTI databases support API-based verification for entity-level checks. For UBO identity verification, Verihubs eKYC API automates government ID authentication and biometric liveness detection across 15+ Philippine ID types, integrating directly into KYB workflows without manual processing.
KYB in the Philippines Has a Regulatory Deadline. Most Businesses Are Behind.
What’s often missed is that KYB compliance failure in the Philippines is not just a regulatory problem. It’s a fraud exposure problem. SEC MC 15-2025 took effect on 1 January 2026. Corporations that have not migrated their beneficial ownership disclosures to the HARBOR registry are already non-compliant with SEC filing requirements. For covered persons under AMLA onboarding corporate clients, this creates a layered obligation: you must verify your clients are registered, that their UBOs are identified, and that those UBOs have been individually verified against identity and AML databases.
Manual KYB cannot scale to meet these requirements without introducing error and delay. Automated eKYC and identity verification infrastructure is what makes the UBO layer of KYB executable at onboarding volume. Verihubs provides that infrastructure, built for the Philippine regulatory environment.
Talk to the Verihubs team about integrating automated identity verification into your KYB workflow.
