# KYB Verification for Lenders: Checking the Business

- Author: TrueBankFlow (https://truebankflow.com)
- Published: 2026-10-17
- Category: Lending compliance and borrower data
- Canonical: https://truebankflow.com/blog/kyb-verification-for-lenders

> How KYB verification for lenders confirms a business exists: filings, owners, EIN and address, and how bank statements match the business identity.
KYB verification for lenders confirms that a business applicant is real, legally formed, run by the people named on the application and operating where it says. The lender checks state filings, identifies the owners and controllers, confirms the EIN and address, and then reads the bank statements to see whether the money matches that identity.

## What does KYB verification for lenders check before a business loan?

KYB verification checks five facts about a business before a lender funds it: that the entity legally exists, who owns it, who controls it, which tax ID belongs to it and where it actually operates. Each comes from a different record, and all of them should describe the company on the application and the bank account.

KYB stands for know your business, the business counterpart to know your customer checks on individuals. For a business lender or merchant cash advance funder, it answers a basic question before any cash flow analysis starts: is the money in these statements the applicant's money?

The checklist below shows each fact, where it usually comes from and the bank statement check that confirms it. It is an example of common practice, not a regulatory list.

| Fact to confirm | Usual source | Matching bank statement check |
| --- | --- | --- |
| Legal name and entity type | Secretary of state record, formation documents | Account holder name matches the legal name or a registered DBA |
| Entity is active | Secretary of state status | Regular deposits and expenses through the review period |
| Formation date and time in business | State record, business license | Account history goes back as far as the stated time in business |
| Owners of 25% or more | Owner certification, operating agreement | Owner draws go to the people named as owners |
| Control person | Owner certification, officer list | Signer on the application matches someone with control |
| EIN | IRS confirmation letter, tax return, W-9 | Card processor and payroll entries show the same business |
| Operating address | Lease, utility bill, site visit or photo | Address on the statement header, local vendor payments |
| Industry | Application, website, license | Deposits and payees fit the stated industry |

## Secretary of state filings in a KYB verification file

A secretary of state filing proves that an entity was formed in a state and shows whether it is currently active. It gives the legal name, entity type, formation date, registered agent and often the officers or managers. It does not prove the business operates, earns revenue or is run by the person applying.

Pull the record directly from the state's business search rather than accepting a copy from the applicant. Check four fields:

- **Exact legal name.** "Harbor Tile LLC" and "Harbor Tile and Stone LLC" are different entities.
- **Status.** Active, good standing or the state's equivalent. A dissolved or forfeited status stops the file until the business is reinstated or explains it.
- **Formation date.** It should fit the time in business on the application. A company that claims five years in business but was formed eight months ago needs an explanation, such as a conversion from a sole proprietorship.
- **Registered agent and listed officers.** A commercial registered agent is normal. Officers who do not match the application are not.

A business that operates in a state other than where it formed should also be registered there as a foreign entity. Its absence is a question to ask, not an automatic decline.

## Who counts as a beneficial owner in KYB verification?

A beneficial owner, under the federal customer due diligence rule, is each person who owns 25% or more of a legal entity's equity, directly or indirectly, plus one person with significant responsibility to control, manage or direct it. It binds covered financial institutions, centered on banks and securities firms, and many nonbank lenders borrow the test.

The [Cornell LII text of 31 CFR 1010.230](https://www.law.cornell.edu/cfr/text/31/1010.230) sets out both prongs. The ownership prong can name up to four people. The control prong always names one, such as an executive officer, managing member or general partner, even if that person owns nothing. Where a trust holds the 25% stake, the trustee counts as the owner. The rule lets the institution rely on the information the customer certifies, unless it knows facts that reasonably call the information into question, and it keeps the records for five years after the account closes.

Lenders sometimes expected a federal ownership filing to back up the certification. That filing is no longer a dependable source. [FinCEN's beneficial ownership information page](https://www.fincen.gov/boi) now states that U.S. companies are exempt from BOI reporting and no longer have to file BOI reports. A lender that wants ownership proof has to get it from the business: the operating agreement, shareholder register or partnership agreement, matched against the certification.

Each person identified then gets individual checks. Identity verification, a credit report where the lender relies on a personal guarantee, and sanctions screening. The guide to [OFAC screening for loans](/blog/ofac-screening-for-loans) covers which parties to screen and when.

Whether a lender must run a formal program around these checks depends on its charter and products. The post on [which nonbank lenders need a BSA AML program](/blog/bsa-aml-program-for-lenders) sets out who falls under those duties and what the program includes.

## Checking the business EIN and address during KYB

The business EIN is the federal tax ID the IRS assigns to an entity, and the address is where the business actually works. A lender confirms the EIN from an IRS-issued document or a filed tax return, and confirms the address with something that shows activity there, not just a mailing location.

### The EIN

Ask for the IRS confirmation letter the business received when the number was assigned, or a filed business tax return that shows it. A W-9 is the business's own statement of its tax ID, so it is weaker on its own. The EIN should match across every document in the file. A different EIN on the tax return than on the application usually means a second entity, and the lender needs to know which one is borrowing.

### The address

A registered agent's address, a mailbox store or a virtual office can be a legitimate mailing address, but none proves where the business operates. Stronger evidence includes a commercial lease, a utility bill in the business's name, a site photo or a visit. For a home-based business, the owner's residence is a normal operating address and should match the owner's identity documents.

## How do bank statements confirm a business identity in KYB?

Bank statements confirm a business identity when the account holder, the header address and the money moving through the account all fit the business on the application. The holder name should match the legal name or a DBA. The deposits should come from customers of that kind of business. The payments should go to that kind of business's vendors.

Start with the statement header. The account holder line on a business account usually shows the legal entity name. A DBA can appear instead, and the lender should tie the DBA to the entity through a state or county filing. An account held in an owner's personal name, used for the business, is common for sole proprietors and a question for anyone else.

Then read the deposits. A restaurant receives card processor settlements most days, often with the processor's merchant name in the description. A contractor receives large checks and transfers from a few clients. A trucking company receives broker and factoring payments. When the pattern fits the stated industry, the statements support the identity. When it does not, they undercut it.

Then read the payments. Payroll, rent, supplier invoices and insurance premiums should go to parties that make sense for the business and its location.

Reading twelve months of activity by eye takes time. TrueBankFlow sorts each transaction into income, payroll, rent, loan payments and other categories, and groups deposits from the same source with their cadence, so a reviewer can see the shape of the business before reading line by line. [Try TrueBankFlow on a business file](/get-started).

## KYB red flags hidden in business bank statements

KYB red flags in business bank statements are patterns that do not fit the business the application describes. Common ones are a different account holder, deposits from the wrong kind of customer, a brand new account, money that leaves as fast as it arrives, and heavy cash where little is expected.

- **Name mismatch.** The statement belongs to a different entity, or to a person who is not named as an owner.
- **Industry mismatch.** A software consulting firm whose deposits are all small cash amounts, or a retailer with no card settlements.
- **New account.** The account opened weeks before the application while the business claims years of operation. Ask for the prior account's statements.
- **Pass-through activity.** Large deposits followed by matching outgoing wires the same or next day. The account may be moving someone else's money.
- **Unexplained cash.** A cash-heavy business has a reason for cash. A business that should not handle cash needs one. The guide to [cash deposits on bank statements](/blog/cash-deposits-on-bank-statements) covers how underwriters source them.
- **Payments to other funders.** Regular fixed debits to lenders or funders that the application did not list.

Each flag is a question, not a verdict. Write the question down, get the answer in writing and keep both in the file.

## When KYB findings should stop a business loan file

KYB findings should stop a business loan file when the lender cannot establish who it would be lending to. A dissolved entity, an owner who will not be identified, a bank account that belongs to someone else, or documents that conflict with no explanation all mean the file cannot proceed, however strong the cash flow looks.

Some mismatches have clean answers and become conditions. A recent conversion from a sole proprietorship to an LLC explains a new formation date. A name change explains an older statement in the prior name. A new account explains itself once the old account's statements arrive.

Others do not. A borrower who refuses to name a control person, or who names one who is not on any company record, has failed the check. So has a business whose statements show it operating in an industry other than the one applied for, with no explanation. Strong deposits do not cure an identity problem. They make it more urgent, because the lender would be advancing money against cash flow it cannot attribute.

Record the decision and the reason. A short note that the file was stopped at KYB, with the finding that stopped it, protects the lender if the same business applies again under a new name.