# KYB Verification: What Payment Providers Check

> What KYB verification involves, which documents payment providers request, why beneficial ownership matters, and how to pass business verification first time.
- **Author**: Deepak Jangir
- **Published**: 2026-08-08
- **Category**: Compliance, Payments
- **URL**: https://dodopayments.com/blogs/kyb-verification

---

You signed up, connected a domain, and the dashboard says "verification pending." Two days later a request arrives for a certificate of incorporation, a register of directors, proof of address for a shareholder you barely think about, and an explanation of your ownership structure. That is KYB verification, and it is the reason your account is not live yet.

KYB stands for know your business. It is the process a regulated financial institution uses to confirm that a business entity is real, lawfully constituted, doing what it claims to do, and controlled by identifiable people who are not subject to sanctions or other prohibitions.

It is the corporate counterpart to KYC, which verifies individuals. Payment providers run both, because the obligation attaches to the entity and to the humans behind it.

## KYB vs KYC vs Underwriting

These three get used interchangeably and they are not the same thing. Confusing them is why founders misread what is being asked.

| Process | Question it answers | Driven by |
| --- | --- | --- |
| KYC | Is this person who they claim to be? | Anti-money-laundering regulation |
| KYB | Is this business real, lawful, and controlled by whom? | Anti-money-laundering regulation |
| Underwriting | How much money might we lose on this merchant? | Commercial risk appetite |

KYB and KYC are regulatory obligations. The provider cannot waive them, negotiate them, or make an exception because you are in a hurry. Underwriting is a commercial judgement about loss exposure, and it does have some flexibility.

That distinction matters when a request feels excessive. A demand for a beneficial owner's passport is a regulatory requirement with no discretion attached. A request for six months of processing history is an underwriting question, and there is usually room to discuss it. [Merchant underwriting explained](https://dodopayments.com/blogs/merchant-underwriting-explained) covers the second process in depth, including rolling reserves and post-approval reviews.

## What Providers Actually Verify

KYB resolves four questions, and every document request maps to one of them.

**Does the entity exist?** Verified against the official company registry in the jurisdiction of incorporation. The provider is checking the registration number, legal name, status, and address against the authoritative source rather than against your website.

**Who controls it?** This is the ownership chain. Providers need to identify the natural persons who ultimately own or control the business, usually expressed as beneficial owners above a percentage threshold, plus the directors or officers who can bind the company.

**Is anyone involved prohibited?** Sanctions lists, politically exposed person screening, and adverse media checks run against the entity and every identified individual.

**Is the stated business what actually happens?** A live website, a working product, a description that matches the checkout, and a plausible link between the entity and the domain.

The ownership chain is where most delays happen. If your company is owned by another company, the provider follows the chain upward until it reaches natural persons. A structure with a holding company in one jurisdiction and an operating company in another turns a two-day check into a two-week one, because each layer needs its own registry evidence.

On Dodo Payments, identity verification runs through Persona using a government-issued ID plus a liveness selfie, and registered entities must disclose every director and every beneficial owner holding 10% or more of shares, capital, or profits, as set out in the [account verification documentation](https://docs.dodopayments.com/miscellaneous/verification-process). The [merchant acceptance documentation](https://docs.dodopayments.com/miscellaneous/merchant-acceptance) lists which business categories are accepted, and the [accounts documentation](https://docs.dodopayments.com/miscellaneous/accounts) covers what changes once verification clears.

Which threshold applies to you depends on jurisdiction. Many regimes use 25% as the beneficial ownership trigger, while others set it at 10%, and providers frequently apply the stricter of the two across their whole book rather than varying it per customer. If your cap table has several holders clustered near a threshold, expect to document all of them.

## The Document Checklist

| Document | Purpose | Common failure |
| --- | --- | --- |
| Certificate of incorporation | Proves the entity exists and when | Expired extract where a recent one is required |
| Registry extract or good standing | Confirms current status and officers | Pulled years ago, no longer current |
| Memorandum and articles | Establishes governance and share structure | Missing amendments after a funding round |
| Register of directors | Identifies who can bind the company | Not updated after a departure |
| Register of members or cap table | Establishes beneficial ownership | Option pool confused with issued shares |
| Government ID for each UBO and director | Individual identity verification | Expired, cropped, or glare on the photo page |
| Proof of address | Confirms residence | Document older than the accepted window |
| Proof of business address | Confirms operating location | Virtual office where a real address is required |
| Bank account proof | Confirms the settlement account | Account in a different name from the entity |
| Tax identification number | Links entity to tax registration | Wrong format for the jurisdiction |

The single most common rejection cause is trivial: a photograph of an ID with glare across the machine-readable zone, or with an edge cropped. Automated document checks fail on image quality far more often than on content.

The second most common is a name mismatch. The entity name on the registry extract, the bank account, the domain registration, and the application must all agree. A trading name that differs from the legal name is fine, but it must be disclosed rather than substituted.

## Why It Takes Longer for Some Businesses

Verification time is mostly a function of how legible your structure is to an automated check.

Fast cases share properties: a single operating company, incorporated in a jurisdiction with a good public registry, owned directly by one or two individuals, with a live site that clearly describes a product, and a bank account in the company's own name.

Slow cases have one or more of:

- **Layered ownership.** Each corporate layer needs its own registry evidence and its own screening.
- **Thin registry jurisdictions.** Where the public registry does not publish ownership, the provider relies on documents you supply, which are checked more carefully.
- **Nominee or trust arrangements.** These require the underlying beneficiaries to be identified and evidenced.
- **Recent incorporation with large projected volume.** Not a KYB failure as such, but it routes the file to manual review.
- **A product description that does not match the site.** An application saying "developer tools" against a site selling coaching packages gets read as a discrepancy.

Dodo Payments publishes a typical verification window of one to three business days, with most reviews completing inside 72 hours. Files that stall are almost always files where something did not match, not files where something was wrong.

```mermaid
flowchart TD
    A[Submit business details] --> B[Registry lookup on the entity]
    B --> C{Entity resolves and is active?}
    C -- No --> R[Manual review, documents requested]
    C -- Yes --> D[Map ownership chain to natural persons]
    D --> E{All UBOs identified?}
    E -- No --> R
    E -- Yes --> F[Screen entity and individuals]
    F --> G{Sanctions, PEP, adverse media clear?}
    G -- No --> H[Declined or escalated]
    G -- Yes --> I{Website matches stated business?}
    I -- No --> R
    I -- Yes --> J[Verified, account activated]
    R --> K{Documents satisfy the gap?}
    K -- Yes --> J
    K -- No --> H
```

## Passing First Time

The difference between a two-day approval and a three-week one is preparation rather than luck.

1. **Assemble documents before applying.** Recent registry extract, articles, registers of directors and members, IDs for every UBO above the threshold, and proof of address for each.
2. **Draw your ownership chain on one page.** If it takes you more than a minute to explain who ultimately owns the company, it will take a reviewer considerably longer.
3. **Make the entity name consistent everywhere.** Registry, bank account, domain WHOIS where visible, and the application itself.
4. **Publish the pages a reviewer looks for.** Terms of service, refund policy, pricing, and a contact route. Their absence is a documented driver of manual review.
5. **Photograph IDs properly.** Flat, no glare, all four corners visible, unexpired.
6. **Describe the product in the words your site uses.** Do not write an aspirational description of what you plan to sell next quarter.
7. **Disclose prior terminations rather than omitting them.** A previous account closure that surfaces later is treated far worse than one you declared.

For businesses in categories that attract extra scrutiny, [high risk merchant accounts](https://dodopayments.com/blogs/high-risk-merchant-account) covers what changes when the vertical itself is the issue, and [accepting credit cards without a merchant account](https://dodopayments.com/blogs/accept-credit-cards-without-merchant-account) covers the structural alternatives. If you are still choosing a structure, [accepting payments without a registered company](https://dodopayments.com/blogs/accept-payments-without-company) covers what verification looks like for individuals, and [merchant of record for individuals](https://dodopayments.com/blogs/merchant-of-record-for-individuals) covers the same ground for solo sellers.

Verification also intersects with tax documentation. A provider settling funds to a foreign business will usually collect a tax status form alongside the KYB pack, which our [W-8BEN form guide](https://dodopayments.com/blogs/w-8ben-form-guide) covers in detail. Treat the two as one onboarding workstream rather than as separate requests arriving weeks apart.

## Verification Does Not Stop at Onboarding

Founders treat KYB as a gate to get through once. Providers treat it as a record that must stay accurate, and periodic re-verification is a regulatory expectation rather than a provider quirk.

What typically triggers a refresh:

- **Time.** Many providers re-verify on a cycle, with higher-risk profiles reviewed more often.
- **Ownership change.** A funding round that moves someone above or below the beneficial ownership threshold changes who must be identified.
- **Director changes.** New officers need verification, departed ones need removing from the record.
- **Entity changes.** Redomiciliation, a name change, or a new operating entity is effectively a new business to verify.
- **Material change in activity.** Launching a product in a different risk category invalidates the original assessment.
- **Screening hits.** Sanctions and adverse media lists are re-run continuously, and a new match on an existing owner triggers immediate review.

The practical failure mode is a stale record. A company completes verification, raises a round, adds two investors above the threshold, changes a director, and never updates the provider. Eighteen months later a routine refresh finds the registry no longer matches the file on record, and the account is restricted while it is resolved, usually at an inconvenient moment.

Treat it as a maintenance obligation: whenever you file a change with the company registry, file the same change with your payment provider. That single habit prevents most mid-life verification interruptions.

## How the Merchant of Record Model Changes This

A common misreading is that a [merchant of record](https://dodopayments.com/blogs/what-is-a-merchant-of-record) removes verification. It does not. Regulated financial institutions must verify the businesses they pay, and an MoR paying you is exactly that relationship.

What changes is the scope. Under a direct merchant account, you are onboarded as a merchant by an acquiring bank, which means acquirer-level underwriting, card network registration, and the ongoing monitoring that comes with holding your own merchant identification number. Under an MoR, the MoR holds that relationship with the acquirer, and it verifies you as a business partner it settles funds to.

Practically, that usually means one verification process instead of a separate one per market or per acquirer, and it means the MoR carries the card network relationship and the indirect tax liability. [Merchant of record vs PSP](https://dodopayments.com/blogs/merchant-of-record-vs-psp) covers the structural difference, and [MoR payouts and settlement](https://dodopayments.com/blogs/mor-payouts-settlement-explained) covers what happens after verification clears.

You still need to be a real, identifiable, lawfully constituted business with named humans behind it. No account model removes that.

## FAQ

### What is the difference between KYB and KYC?

KYC verifies an individual's identity. KYB verifies a business entity: that it legally exists, what it does, and which natural persons ultimately own or control it. Providers run KYB on the company and KYC on each director and beneficial owner, because the regulatory obligation attaches to both.

### How long does KYB verification take?

For a single-layer company in a jurisdiction with a good public registry, typically one to three business days. Layered ownership, nominee arrangements, or a mismatch between the application and the website push the file into manual review and can extend it to weeks.

### Why does a provider need my shareholders' passports?

Anti-money-laundering rules require the provider to identify the natural persons who ultimately own or control the business, commonly those above a 10% or 25% threshold depending on jurisdiction. This is a regulatory requirement rather than a commercial preference, so it cannot be waived.

### Can I get verified without a registered company?

Sole traders and individuals can often be onboarded through individual verification rather than KYB, though available products and limits may differ. If you sell through a registered entity, that entity is what gets verified, regardless of who owns it.

### Does a merchant of record remove the need for KYB?

No. An MoR still verifies the businesses it settles funds to. What changes is scope: the MoR holds the acquirer and card network relationships and the indirect tax liability, so you complete one verification rather than separate merchant onboarding per acquirer or market.

## The Takeaway

KYB is a regulatory checkpoint, not a negotiation. It resolves four questions: does the entity exist, who controls it, is anyone prohibited, and does the stated business match reality. Nearly every delay comes from an unreadable ownership chain, an inconsistent entity name, or a badly photographed passport. Assemble the documents before you apply, keep the legal name identical everywhere it appears, and the process usually closes in days rather than weeks.
---
- [More Compliance articles](https://dodopayments.com/blogs/category/compliance)
- [All articles](https://dodopayments.com/blogs)