Eric Ngu is a Team Leader, Due Diligence at Blue Umbrella. We encourage our team
members to share their insights and expertise by contributing to our content library.
In corporate due diligence, an investigation often begins with a straightforward question: Who are we dealing with?
For a corporate subject, answering that question requires more than confirming its registration details, directors, and immediate shareholders. Behind layers of holding companies, investment vehicles or related entities may sit an individual who ultimately controls the business and whose financial interests extend across the wider corporate group.
Identifying the ultimate beneficial owner (UBO) is an important step. But from an enhanced due diligence (EDD) perspective, identifying the name is only part of the exercise.
The more meaningful question is: What does the person behind the company tell us about the company’s risk?
From Beneficial Ownership to Actual Control
Beneficial ownership transparency has received increasing regulatory attention in recent years. The Financial Action Task Force (FATF), through its strengthened Recommendation 24, has emphasized the need for adequate, accurate, and up-to-date information on the true beneficial owners of legal persons.
For EDD practitioners, however, the practical question goes beyond identifying a name or calculating an ownership percentage. Consider a relatively small company with limited adverse information and a straightforward operating history. At the entity level, there may be little to suggest heightened risk.
Ownership research may tell a different story. The company could ultimately be controlled by an individual with extensive interests across multiple businesses and jurisdictions. That individual may provide significant financing to companies within the group, have exposure to higher-risk industries or jurisdictions, or be associated with regulatory, litigation, or integrity concerns.
At this point, understanding the controller becomes relevant to understanding the subject.
Where Source of Wealth Enters the Picture
This is where Source of Wealth (SoW) can add another layer to beneficial ownership analysis.
Identifying the UBO tells us who ultimately owns or controls the business. SoW analysis helps us understand how that individual accumulated the wealth supporting their ownership and broader business interests.
If a controller’s wealth is reportedly derived from business ownership, for example, EDD may consider their career history, corporate interests, significant investments or disposals, and other independently available information.
The objective is not simply to determine whether the individual is wealthy. It is to assess whether the available information presents a reasonably coherent financial narrative.
This can lead to several important questions:
- Does the controller’s apparent wealth align with their known career and business history?
- Can the businesses reportedly responsible for that wealth be identified?
- Is the wealth associated with higher-risk jurisdictions, industries, or counterparties?
- Are there regulatory, corruption, fraud, or other integrity concerns surrounding the activities through which the wealth was generated?
These questions turn beneficial ownership research from an identification exercise into a risk assessment.
When Controller Risk Becomes Corporate Risk
The connection becomes particularly important where the business group is heavily dependent on a dominant controller. The key question becomes: Could the controller’s financial or integrity risk have implications for the subject we are assessing?
In practice, connecting the UBO with their SoW can reveal risks that may not be visible from reviewing the subject company alone.
- Unexplained or inconsistent wealth: The scale of the controller’s business interests may be difficult to reconcile with their known professional or commercial history.
- Integrity and financial crime exposure: Wealth may be associated with businesses subject to fraud allegations, regulatory enforcement, corruption concerns, or other misconduct.
- Political exposure: Where a controller is a politically exposed person, understanding how wealth was accumulated may be particularly important in evaluating potential corruption or conflict-of-interest risks.
- Jurisdictional and industry exposure: An apparently low-risk subject may ultimately be connected to wealth generated in higher-risk markets or sectors.
- Financial dependency: Shareholder loans, capital injections, guarantees, or other funding from the controller may create a more direct connection between individual and corporate risk.
None of these factors automatically establishes wrongdoing. Instead, they provide context for determining whether additional diligence, escalation, monitoring, or other risk mitigation may be appropriate.
Corroboration, Not Assumption
There is an important limitation to this analysis: an information gap is not itself evidence of illicit wealth, just as a complex ownership structure is not automatically suspicious.
Public records may be incomplete, private companies may disclose limited financial information, and reliable estimates of personal wealth may simply not exist. SoW assessment should therefore remain proportionate to the identified risk.
The role of EDD is not to reconstruct every dollar of a controller’s net worth. Instead, practitioners can use corporate registries, regulatory filings, company disclosures, reputable media, and other reliable sources to determine whether available evidence reasonably corroborates the financial narrative.
Where information cannot be independently verified, that limitation itself should be clearly communicated rather than converted into an unsupported conclusion.
Connecting The Wider Risk Picture
Recent developments in AML regulation reinforce the growing importance of beneficial ownership transparency. For EDD teams, this creates an important distinction between identifying a controller and understanding a controller.
A due diligence review may begin with a small company. But where that company ultimately depends on a dominant individual for ownership, control, or funding, the relevant risk picture may extend beyond the legal entity named in the initial request.
Ultimately, effective EDD is about making those connections. Identifying the UBO tells us who sits behind the business. Understanding their SoW helps us assess the financial story behind that ownership and what it may mean for the wider corporate group.
