Skip to content

Knowledge

What a lender is really asking when it runs KYB

A lender runs the same check twice over: once because the Bank Secrecy Act requires it, and once because almost everything it turns up is also a credit signal. Reading it as two jobs is what makes the cost bearable.

Source: Enigma knowledge base · industry module

01

Two jobs, one check

The compliance answer is also a credit answer.

Banks, credit unions and non-bank lenders alike carry Bank Secrecy Act obligations: a Customer Identification Program, customer due diligence, beneficial ownership at 25% or control, and ongoing monitoring across the life of the loan. Non-bank lenders often have lighter direct obligations and then inherit equivalent ones by contract, from funding sources, warehouse lenders or loan purchasers.

What is easy to miss is that the same file answers a second question. Whether a business is in good standing is eligibility; whether it is actually operating is underwriting. Years in business is a track record. Ownership stability is management continuity. The check is paid for once and can be read twice.

Legally exists, in good standing

Reads aseligibility

Credit relevanceWhether the applicant can be lent to at all

Operating status confirmed

Reads asactivity

Credit relevanceWhether the business is actually trading now

Years in business

Reads astenure

Credit relevanceTrack record, and the thinness of a new file

Ownership stability

Reads ascontinuity

Credit relevanceWhether the people who ran it still do

Shell company indicators

Reads asfraud risk

Credit relevanceRegistered somewhere, operating nowhere

Industry classification

Reads assector

Credit relevanceSector risk, and whether policy allows it

Multi-state registrations

Reads asscale

Credit relevanceComplexity, and where else to look

Mapping as published

02

Why it is hard

The largest lending market is the least documented one.

33 million U.S. businesses have fewer than 500 employees, and 27 million of those are non-employer businesses — solo operators. Many sole proprietors have no formal registration at all. There are no audited financials, no public filings, and often almost no online presence.

Traditional KYB was built for larger companies: check the Secretary of State record, verify the corporate officers, trace institutional ownership. None of that reaches a plumber operating as a sole proprietor under a DBA. The method is not weak, it is aimed somewhere else.

03

The framework

Four tiers, and most applications stop at the first.

Tier 1 is instant and decides basic eligibility in the application flow: the legal entity exists and is active, the name matches or resolves, a registered agent and address are on file, no sanctions hit on the business or its principals, the business type is inside policy. Failures stop here; passes continue.

Tier 2 confirms beneficial ownership and verifies principal identities. Tier 3 is the one lenders under-build: operating verification — evidence that the business is trading now, rather than merely registered. Tier 4 is enhanced due diligence, and it should be triggered rather than routine.

The discipline is in the ordering. Every tier costs more than the one before it, so anything that can decline at Tier 1 must decline at Tier 1, and anything that can approve on operating evidence should never reach Tier 4.

04

Segments

The same policy meets three different difficulties.

An established business with years of history, a formal structure and documentation is the easy case, and standard KYB works on it. A newly formed entity has a thin file by definition — the absence of history is not evidence of anything, and treating it as such declines real businesses.

Sole proprietors are the hard case, because they lack most of the anchors the process is built on. There is no incorporation record to check. What exists instead is operating evidence: a licence, a DBA registration, an address that resolves, transactions that happened. A programme that can only verify corporations will decline a large share of the market it is trying to serve.

05

What it costs to get wrong

Both errors are expensive, in opposite directions.

Verify too little and the loss is fraud and a regulatory finding. Verify too much and the loss is quieter but larger: borrowers abandon slow applications, and the ones with the most options abandon them first. A KYB programme that takes three days to clear a real business is a credit policy, whether or not anyone wrote it down as one.

Related

Decline at Tier 1. Approve on Tier 3.

Bring a sample of applications you declined for thin files and we will show you what independent evidence adds.