How to Verify an Irish Company for KYC and AML Checks

An Irish company KYC check starts by proving that the customer is the legal entity it claims to be. For businesses subject to anti-money-laundering law, that is only the beginning: the review must also address beneficial ownership, control, purpose, risk and ongoing monitoring. This guide shows where CRO records fit—and where separate evidence is essential.

What an Irish company KYC check should establish

KYC means knowing the customer behind a proposed account, transaction or business relationship. For a company, the practical questions are: does this legal entity exist, who acts for it, who ultimately owns or controls it, why is it entering the relationship, and does the evidence make sense when viewed together?

The Central Bank of Ireland’s AML/CFT regulatory guidance explains that customer due diligence includes identifying customers and beneficial owners and, for a non-natural-person customer, taking measures to understand its ownership and control structure. The depth of work should reflect risk; one public register result cannot answer every question.

1. Match the exact legal entity

Obtain the company’s full legal name and CRO registration number directly from the customer. Match both against the company record and the proposed agreement, invoice details, website disclosures and payment instructions. A trading name is not necessarily the legal counterparty, and similar company names can belong to unrelated entities.

Record the company type, incorporation date, registered office and current CRO status. If the customer supplies a CRO number that belongs to another entity, stop and resolve the discrepancy before onboarding or sending funds.

2. Understand what CRO status does—and does not—prove

A status such as Normal is useful register information. It does not certify that the company is actively trading, solvent, tax-compliant, licensed, trustworthy or low risk. A status notice such as Strike-Off Listed, Liquidation, Receivership, Examinership, Struck Off or Dissolved needs careful investigation and current source verification.

Read what Normal status means and how to check whether an Irish company is still trading before translating a register label into a customer decision.

3. Verify the person acting for the company

A public officer record may identify directors and the company secretary. It does not automatically prove that the person contacting you is that officer, that an employee has signing authority, or that a director is authorised to make the particular commitment. Verify the individual through an independent contact route and collect evidence of authority proportionate to the transaction.

• Compare the signatory’s name and role with current company information.
• Independently verify business contact details rather than relying only on an inbound email.
• For material transactions, obtain a board resolution, mandate or other evidence of authority where appropriate.
• Use a director search as a research aid, not as proof of identity.

4. Identify beneficial owners and understand control

Directors, shareholders and beneficial owners are different concepts. A director manages the company; a registered shareholder holds legal title to shares; a beneficial owner is a natural person who ultimately owns or controls the entity under the applicable rules. Corporate shareholders, nominee arrangements or control through other means can make the chain more complex.

The Register of Beneficial Ownership says public access is limited, while designated persons have restricted access for due-diligence purposes. Its access guidance explains the current tiers. Do not promise your compliance team information that public users cannot lawfully retrieve.

Request an ownership chart and reliable evidence from the customer, trace corporate owners to natural persons, understand voting and other control rights, and reconcile the result with the RBO evidence available to your organisation. Our guide to Irish shareholders and beneficial owners explains the distinctions.

5. Read the filing history for changes and inconsistencies

Review the CRO record as a dated timeline. Annual returns, officer changes, registered-office changes, name changes, capital filings, charges and status notices can help test whether the customer’s account is internally consistent. Recent or frequent changes are not automatically suspicious, but they may require an explanation when combined with other risk factors.

Pay particular attention to the effective dates. A filed document is historical evidence, and the most recent annual return may not reflect a change made after its return date. Use the underlying CRO document when an exact fact matters.

6. Check the purpose and expected nature of the relationship

Entity verification answers “who”; KYC also needs “why”. Understand what the company does, the service it wants, anticipated transaction size and frequency, expected counterparties and geographies, source of funds where required, and whether the proposed activity fits the company’s apparent profile.

An Irish incorporation is not evidence that every activity is authorised. Where the customer offers regulated financial services, check the relevant Central Bank registers. Check other sector regulators, licences, sanctions and politically exposed person controls through the sources and systems appropriate to your obligations.

Evidence matrix for an Irish corporate customer

Red flags that should trigger clarification

• the legal name or CRO number differs across contracts, invoices and bank details;
• the person acting refuses to provide reasonable authority or ownership evidence;
• the ownership chain is unnecessarily opaque or changes without a credible explanation;
• the stated business activity does not fit the proposed transactions;
• the company uses urgency, secrecy or unexplained third-party payments;
• the public filing timeline conflicts with documents supplied by the customer;
• a regulated activity is claimed but cannot be matched to the appropriate register.

A red flag is not a verdict. It is a reason to pause, ask for evidence, escalate under your policy or decline the relationship if the risk cannot be resolved.

Ongoing monitoring matters

KYC is not completed forever on day one. Set a review frequency based on risk and define event-driven triggers: a change of directors or ownership, unusual activity, a status change, adverse information, changed bank details, a new jurisdiction or a major departure from the expected relationship. Keep a dated record of what was checked, the sources used, discrepancies found, decisions made and who approved them.

What a Businesses.ie company report contributes

A report can bring available identity, status, officer, filing, charge and financial information into one readable place. That makes it useful for an initial corporate file and for identifying follow-up questions. It does not identify every beneficial owner, run sanctions or PEP screening, establish source of wealth or funds, certify authorisation, or produce a legal AML decision.

Use current official sources

For regulated AML duties, use the current law, your regulator’s guidance and professional advice. CRO filings remain the official company source; the RBO controls access to beneficial-ownership information; and specialist regulatory status should be verified on the relevant regulator’s live register. A consolidated report is a practical starting point, not a compliance certificate.