KYC and KYB support
Layered ownership structures require verified beneficial owners, directors, registry records and addresses before acquirer assessment. Cardflo provides merchant identity verification and KYB assistance through document checklists aligned with each acquirer partner’s requirements.
- Category
- Onboarding
- Capabilities
- 10
- Available on
- All plans
Cardflo delivers integrated KYC (Know Your Customer) and KYB (Know Your Business) support, essential for compliance in high-risk sectors. Our systems automate and streamline these critical verification processes, reducing manual effort and accelerating merchant readiness.
We ensure adherence to regulatory standards while maintaining operational efficiency.
Applications, KYB and underwriting documents are collected once and reused across every acquirer we submit to, cutting weeks off go-live timelines. You always know which MID is at which stage and what is blocking approval.
KYC and KYB support overview
Know Your Customer (KYC) and Know Your Business (KYB) protocols are foundational components of modern anti-money laundering (AML) and counter-terrorism financing (CTF) frameworks. In the payments stack, these processes occur during the merchant onboarding phase and continue through the lifecycle of the account to ensure regulatory compliance.
KYC focuses on verifying the identity of individual users, while KYB extends this scrutiny to corporate entities, requiring the identification of the Ultimate Beneficial Owner (UBO) and legal structures. For payment service providers and acquirers, robust verification is necessary to mitigate the risk of financial crime and avoid regulatory fines.
Integrating these checks reduces the friction associated with manual documentation reviews, allowing for faster issuance of Merchant Identification Numbers (MIDs). These systems analyse government-issued identification, company registry filings, and global watchlists to establish a verified profile of the counterparty before any transaction processing commences.
How KYC and KYB support works
Data ingestion and document capture
The process begins by collecting essential identity markers from the individual or business entity. This includes government-issued photographic identification for KYC and corporate registration documents for KYB. Automated systems capture this data through secure interfaces, ensuring that the primary materials required for verification are formatted correctly for downstream analysis by the compliance engine.
Automated identity and entity verification
The system cross-references the provided information against authoritative databases, such as national identity registries or official company houses. For KYB, the logic parses complex corporate structures to identify individuals with significant control. This stage confirms the legal existence of the business and the validity of the individuals claiming to represent it.
Sanction and PEP screening
All parties are screened against global watchlists, including Politically Exposed Persons (PEP) lists and international sanction databases such as OFAC or HM Treasury. This screening is not a one-time event; rather, it is an ongoing requirement to ensure that participants have not been added to restricted lists after their initial approval.
Risk scoring and final adjudication
Algorithms assign a risk score based on the gathered data, location, industry type, and screening results. If the risk remains within acceptable thresholds, the account proceeds toward authorisation. Higher risk profiles may trigger a manual retrieval request for additional evidence, ensuring that the final decision aligns with the acquirer's specific risk appetite.
Why KYC and KYB support matters
Regulatory compliance and fine mitigation
Adherence to directives such as PSD2 and the forthcoming PSD3 necessitates rigorous identity verification. Failure to implement adequate KYC and KYB measures can lead to severe penalties from financial regulators and the potential loss of processing licences. By automating these checks, businesses maintain an audit trail that demonstrates a commitment to AML standards, protecting the organisation from the legal repercussions associated with facilitating illicit financial flows.
Operational efficiency in onboarding
Manual verification of business charters and ownership structures is time-intensive and prone to human error. Automated KYB triggers significantly reduce the time between application and settlement, allowing merchants to begin accepting payments sooner. Scaling a payment operation requires a system that can handle high volumes of verification requests without a linear increase in compliance staff, thereby protecting the operational margins of the PSP.
KYC and KYB support use cases
Layered beneficial ownership tracing
A merchant owned through trusts, holding companies and nominee shareholders must identify each ultimate beneficial owner and reconcile ownership percentages across corporate registry extracts. Cardflo helps compliance teams map the ownership chain, prepare UBO declarations and present the supporting records in the format requested by acquirer partners.
Post-merger control verification
A recently merged company may have new directors and shareholders while corporate registries still display pre-restructure appointments or ownership. Cardflo helps operations teams explain the effective dates, assemble board resolutions and updated directorship proof, and flag registry discrepancies for review by acquirer partners.
Overseas director address evidence
A company with directors resident outside its incorporation country may face differing proof of address formats, issue dates and translation requirements. Cardflo clarifies the evidence expected by acquirer partners, including acceptable utility bills, bank statements and certified translations, so each director’s residential address can be assessed consistently.
Sole trader incorporation change
A sole trader incorporating as a limited company must replace personal trading evidence with records for the new legal entity, directors and shareholders. Cardflo guides the merchant through certificates of incorporation, corporate registry extracts, UBO declarations and address evidence required for the acquirer partner to assess the revised structure.
KYC and KYB support by the numbers
This range reflects industry benchmarks for moving from manual document review to automated verification workflows, though actual results depend on the specific jurisdiction and data availability.
Typical efficiency gains for compliance teams when implementing automated UBO identification and watchlist screening for standard corporate entities.
The standard API response time for a single identity check against a live database, excluding times where manual intervention or additional document uploads are required.
Methodology: these figures are illustrative ranges drawn from published industry data and observed merchant cohorts, not guarantees. Actual results depend on your risk profile, card mix, geography and acquiring setup, and are confirmed only in your own pricing and approval terms.
Related terms
Talk to our team about a live rollout across our acquirer partners' rails.
What you get with KYC and KYB support
- Automated validation of government-issued IDs using biometric facial recognition and liveness detection.
- Real-time lookup of corporate registry data to confirm legal standing and registration numbers.
- Hierarchical mapping of corporate structures to identify Ultimate Beneficial Owners and controllers.
- Continuous monitoring of global sanction lists for immediate notification of status changes.
- Screening for Politically Exposed Persons to assess potential bribery or corruption risks.
- Verification of business physical addresses through utility bill analysis or official database matching.
- Detection of fraudulent or tampered documentation using digital forensic markers and metadata analysis.
- Customisable risk-weighting engines to align with specific institutional risk appetite and policies.
- Secure digital vaulting for all compliance documentation to satisfy external regulatory audit requirements.
- Integrated AML transaction monitoring to detect suspicious behaviour post-onboarding for existing accounts.
A short scoping call, then a written plan for your MIDs.
Questions about KYC and KYB support
What is the primary difference between KYC and KYB in the context of payment processing?
KYC, or Know Your Customer, focuses on individual identity verification to ensure a person is who they claim to be. In contrast, KYB, or Know Your Business, involves verifying the legal status of a company.
This includes reviewing articles of association, shareholder registries, and identifying the UBOs. While KYC verifies a single person, KYB assesses a whole legal entity and the individuals who control it, which is essential for issuing a Merchant Identification Number (MID) to a corporate client.
How does automated KYB identify the Ultimate Beneficial Owner (UBO)?
The system queries official corporate databases and parses the ownership data to trace the chain of command. A UBO is typically defined as any individual who owns or controls more than 25% of the shares or voting rights in a company.
The logic identifies these individuals and then triggers a KYC process for each one, ensuring that all people with significant influence over the business's finances are fully vetted and screened against watchlists.
What happens if a merchant fails the initial KYC or KYB check?
A failure usually results in a 'soft decline' or a 'pending' status in the onboarding workflow. The merchant may be asked to provide further documentation, known as a retrieval request, such as clearer ID photos or additional proof of address.
If the failure is due to a match on a sanctions list or evidence of fraudulent documentation, it is considered a 'hard decline,' and the application is rejected to protect the acquirer from non-compliance risks.
Is ongoing monitoring necessary after the initial onboarding is complete?
Yes, regulatory authorities require continuous due diligence. A merchant who was compliant at the time of onboarding may later be added to a sanctions list or undergo a change in ownership that introduces new risks.
Automated systems perform periodic re-screening and look for triggers such as changes in business location, significant shifts in transaction volume, or updates to the corporate registry to ensure the merchant remains within the authorised risk profile.
How do KYC and KYB requirements change for high-risk merchants?
High-risk merchants, as defined by their Merchant Category Code (MCC), often face 'Enhanced Due Diligence' (EDD). This involves more frequent document refreshes, deeper investigation into the source of funds, and potentially onsite visits or audits.
The KYB process for these entities is more granular, focusing on the historical behaviour of the directors and the specific nature of the products sold to ensure they do not violate scheme rules or local laws.
Can KYC and KYB help in reducing chargeback rates for a PSP?
While these processes do not directly stop a consumer from disputing a charge, they significantly reduce the likelihood of 'merchant fraud,' where a business is set up purely to process fraudulent transactions.
By ensuring that only legitimate, verified businesses enter the network, a PSP can minimise the volume of total disputes and retrievals, contributing to a healthier ecosystem and better standing with the card schemes.
Do these systems support international document verification for cross-border merchants?
Advanced verification systems use Optical Character Recognition (OCR) and machine learning models trained on thousands of document types from hundreds of jurisdictions.
This allows the system to recognise and validate international passports, national ID cards, and local corporate filings in their original languages, ensuring that cross-border KYC and KYB are as efficient as domestic checks.
Related guides.
See how Cardflo compares.
From the blog
Opening a merchant account is essential for any eCommerce or retail business wanting to accept electronic payments. This guide explains how acquiring banks and providers process transactions from Visa and Mastercard. It details the necessary documentation and steps required to receive funds from customer card payments. Merchants must select the specific networks they wish to accept before applying.
Read articleHigh-risk industries require specialised merchant accounts to manage financial instability and fraud risks. These accounts enable secure credit and debit card processing for sectors like adult entertainment. Cardflo supports high-risk models by providing tailored accounts with advanced risk tools to ensure efficient business operations. This guide outlines the key considerations for researching these accounts.
Read articleReady to improve your payments setup?
Tell us about your business. We'll match you with the right acquiring partners and the right route, typically inside a week.