Pandora Papers - How to identify ultimate beneficial owners

Written by Teodora Harrop, FICA on Tuesday January 4, 2022

Ultimate beneficial owners (UBOs) have once again come under scrutiny following the release of the Pandora Papers. What better opportunity, then, to reflect on the European regulatory landscape and best practice examples for financial institutions to enhance their systems and controls for preventing financial crime. 

The Puppet Masters

Pandora Papers - How to identify ultimate beneficial owners

Perhaps the most influential publication regarding the misuse of complex corporate structures was The Puppet Masters.[1] Published in 2011, this paper from the World Bank’s and UNODC’s Stolen Asset Recovery (StAR) Initiative, highlights a key concern on UBOs and the potential challenges faced by financial institutions. It is worth quoting from at length:

How can a service provider whose only dealings with a corporate vehicle are to open a bank account, or to provide some other financial service, obtain sufficient information to be able to say with any degree of certainty who the beneficial owner is? The provider may be able to obtain documents showing the corporate structure (such as the register of shareholders and constitutional documents), and he or she may be able to see management board decisions and inspect identification and trust-related documents.

Such a service provider, however, generally will have access to less information than an investigator. Of necessity, the service provider will have to rely on representations by the client and cannot be expected to verify all the information presented. The provider can verify whether the information corresponds with the account activity of a corporate vehicle, but that is about the limit of what the provider can be expected to do.

This absence of information remains a perennial problem. And, since the report was published, its consequences have been repeatedly made manifest, with prominent politicians and other actors across a range of jurisdictions revealed to be using complex, often opaque structures and unorthodox (albeit often legal) tax planning strategies.


The Pandora Papers

Pandora Papers - How to identify ultimate beneficial owners

The Pandora Papers, released in October 2021 by the International Consortium of Investigative Journalists (ICIJ), coming in the wake of  the Paradise (2017) and Panama Papers (2016), unambiguously underlined this issue.  

But these publications also raised other concerns, for example in relation to a lack of transparency and suspicions surrounding the source of funds. Their findings were compounded by the FinCEN Files (released October 2020), which vividly illustrated weaknesses in the money laundering defence systems of financial institutions and financial intelligence units (FIUs), with a significant knock-on effect on their ability to deal timely with suspicious activity reports.

Collectively, these leaks have revealed significant deficiencies in financial institutions’ and regulatory bodies’ ability to effectively combat financial crime, and can make for bleak reading, despite the fact legislation exists that is intended to address these very deficiencies.


The legal and regulatory landscape in the EU

Pandora Papers - How to identify ultimate beneficial owners

The Fourth EU Anti Money Laundering Directive (4AMLD) was ratified by the European Parliament in 2015. In relation to UBOs specifically, 4MLD stipulated that all EU member states were required to keep up-to-date ownership information in central registries. These were to be made easily accessible to authorities, financial institutions and public persons with a legitimate interest, such as journalists.

The Fifth EU Anti Money Laundering Directive (5AMLD) enhanced some of these provisions, with the relevant requirements applying from 10 January 2020. Such additional measures included:

  • the requirement for member states to strengthen their UBO verification mechanisms to ensure the information they carry is accurate and reliable, and
  • the requirement for UBO national registers to be inter-connected at an EU level in order to facilitate cooperation and the exchange of information between member-state authorities.

The implementation of these provisions has been inconsistent across the member states, with the European Commission launching infringement procedures against Hungary, the Netherlands, Poland and Spain.[1]

6MLD intended to introduce a more harmonised definition of money laundering offences, with a corresponding expanded list of 22 predicate offences and more expansive criminal liability to also cover legal persons.

The UK has opted out of transposing the 6MLD, ‘primarily due to the fact that many of its requirements are already covered by existing UK law’.[2]

Such legislation has been welcome, but its effectiveness remains open to question.


Corporate ownership transparency and how to apply appropriate due diligence

Pandora Papers - How to identify ultimate beneficial owners

A common motif of the series of Paper leaks is the challenges faced by financial institutions when attempting to ascertain UBOs, and the potential misuse of complex corporate structures.

As financial institutions continue to face enhanced public scrutiny and potential regulatory attention, it is important that they allocate competent resources (both human and technological) to their anti money laundering (AML) programmes, evidencing the application of a robust risk-based approach to due diligence.

Whilst there is no shortage of guidance issued by various regulatory bodies, the requirements to which financial institutions and others should adhere is worth highlighting, as the non-exhaustive list below demonstrates.

  • Unwrap corporate structures and understand the often complex chain of ownership and differing legal requirements in a range of jurisdictions
  • Identify any political connections, including links to politically exposed persons (PEPs)
  • Ascertain whether there is any sanctions exposure or potential to circumvent sanctions
  • Determine whether the structures make economical or business sense
  • Have in place a clear escalation process
  • Document (and follow) a procedure for de-risking, which may sometime involve termination of client relationships
  • Provide training to staff at all levels, including the board of directors and senior management
  • Engage senior management at all relevant stages of the client relationship (including approving high-risk relationships)
  • Encourage staff at all levels to report any suspicions promptly

The approaches outlined above provide flexibility for financial institutions to tailor their overall AML/CFT programmes to specific risks, and design appropriate controls to mitigate the risks, with consideration given to the organisation’s risk appetite.

It’s also worth stressing that timely, quality data underpins a robust due diligence programme, enabling financial institutions to identify and respond to issues and risks without delay.

However, financial institutions often find inconsistent and dated information hampers their ability to undertake effective due diligence.

As an example, the UK’s Companies House has come in for criticism over the years regarding their lack of strong controls when verifying corporate entities. This is aptly illustrated in the case of the company ‘Weight A Minute Ltd’, where a former director is named as Jesus Christ, an ‘Angelic’ national residing in ‘Heaven’.[1]

No government department or financial services firm has the resources to comprehensively verify all information, but having open public registers will provide more efficient access to beneficial ownership data. Companies identifying discrepancies have an obligation to report them and, in time, this may improve data quality.

Whilst there is no ‘one-size-fits-all’ approach to identifying UBOs, the detrimental impact on society and the ramifications of the reputational damage of failing to do so can be profound. It is up to all of us to help change the narrative and contribute towards an ethical business environment.

You may also like to read:

This article has been republished with permission from Corporate Compliance Insight. To read more visit


[1] Companies House:   – accessed October 2021

[1] European Commission ‘Anti-money laundering directive V – transposition status’ – accessed October 2021

[2] The Law Society ‘Anti-money laundering after Brexit’ - – accessed October 2021

[1] StAR Initiative of the World Bank and the United Nations Office on Drugs and Crime, ‘The Puppet Masters: How the Corrupt Use Legal Structures to Hide Stolen Assets and What to Do About It’,  – accessed October 2021


Please leave a comment

You can leave the name empty should you wish to remain Anonymous.

You are replying to post:



Email *

Comment *

Search posts

View posts by Author