Building an ownership due diligence program
Ownership checks belong at every stage of the customer relationship, not just onboarding. Screen ownership structures at intake, refresh them periodically, re-screen after any corporate event such as a merger or share transfer, and trigger an ad hoc review whenever a payment pattern or counterparty relationship looks unusual.
Reliable ownership analysis draws on more than one data source:
SDN List and consolidated sanctions list searches for every named owner and intermediary.
Corporate registries and beneficial-ownership registers in the relevant jurisdictions.
Entity formation documents, shareholder agreements, and organizational charts.
Counterparty attestations and certifications where public records are incomplete.
Documentation should include the ownership chart itself, the calculation date, every assumption made about unverifiable stakes, a list of unresolved items, an escalation memo where risk teams or legal counsel were consulted, and a record of any licensing request filed with OFAC. The OFAC compliance framework describes this kind of risk-based program as resting on five components: management commitment, risk assessment, internal controls, testing and auditing, and training, and it explicitly discourages relying on list matching alone.
Pro Tip: Set a firm risk-based stopping rule: when an ownership chain cannot be resolved within a defined number of business days, escalate to legal counsel rather than defaulting to either approval or rejection.
Working through the ownership math step by step
Ownership calculations are easier to apply correctly when walked through with real numbers. The following examples use illustrative figures only, structured the way OFAC's guidance frames the aggregation and tracing tests.
Simple aggregation:
Blocked Person A owns 25% of Company X and Blocked Person B owns 25% of the same company. Their stakes sum to a 50% aggregate, so Company X is blocked even though neither owner alone reaches the threshold.
Indirect ownership chain: Blocked Person C owns 60% of Holding Company Y, and Holding Company Y owns 70% of Operating Company Z. Because Holding Company Y is itself blocked under the 50 Percent Rule, its 70% stake in Operating Company Z passes through, and Operating Company Z is blocked as well.
No aggregation trigger: Blocked Person D owns 30% of Intermediary Firm W, which falls short of the 50% threshold on its own. Intermediary Firm W is not itself blocked, so its 40% stake in Company V does not pass through as blocked ownership, and Company V remains outside the rule on that basis alone.
Each scenario should be documented with the ownership percentages used, the date of the calculation, and the source records that supported it.
Where automated screening supports ownership verification
Manual ownership tracing does not scale well against high transaction volumes or frequent corporate changes. Automated sanctions and PEP screening can flag named blocked persons at onboarding and on an ongoing basis, while automated KYB tools help capture and refresh beneficial-ownership data as corporate structures change.
Configurable rules allow monitoring logic to reflect a business's actual risk profile rather than a generic list-match approach, and scheduled refresh cycles reduce the risk that ownership data goes stale between reviews. For audit and licensing purposes, an automated platform should produce a clear log: what was checked, when, against which data sources, and what assumptions or unresolved items remain open.
What compliance leaders should prioritize now
The teams that get the 50 Percent Rule wrong are usually the ones treating it as a list-matching exercise instead of a documentation discipline. Ownership tracing involves genuine uncertainty, incomplete corporate registries, and judgment calls, and the strongest defense is a clear record of what was known, what was assumed, and why a decision was made—not a clean pass or fail flag.
Wires and trade finance transactions deserve deeper ownership scrutiny than routine retail payments, since they carry higher exposure per transaction. Compliance teams should also run scripted tests of their own screening and ownership-calculation logic on a regular schedule, the same way they would test any other control, rather than assuming a system configured once will stay accurate.
— Elvis
A practical path to automating ownership and sanctions checks
Tracing aggregate ownership across intermediary entities by hand, on every onboarding file and every periodic refresh, is the kind of work that consumes compliance staff time without necessarily improving accuracy. Finchecker's Screening service runs sanctions, PEP, and watchlist checks in real time, while Automated KYB captures and refreshes beneficial-ownership data as corporate structures shift.
