Business Registry Verification in Africa: How to Conduct KYB Across CAC, CIPC, and African Company Registries in 2026

Introduction

Business registry verification is the first step in KYB  not the last. Confirming that a company holds a valid CAC registration number in Nigeria, a CIPC registration in South Africa, or a BRS number in Kenya tells you the company legally exists. It does not tell you who actually controls it, where its funds originate, or whether its beneficial owners are sanctioned persons or politically exposed individuals using corporate structures to obscure their involvement.

In 2026, African regulators have closed the gap between what institutions once accepted as sufficient KYB and what the law now requires. The CBN's March 2026 Circular BSD/DIR/PUB/LAB/019/002 explicitly mandates automated beneficial owner verification for all business customers of deposit money banks and fintechs. FATF Recommendation 24 on the transparency of legal persons has been cited in examination findings across Nigeria and South Africa. Registry verification is where KYB starts, not where it ends.

Why Registry Verification Alone Creates Regulatory Exposure

A shell company registered in Lagos with a CAC number, a registered office address on an accountant's premises, and two nominee directors on its filing provides no meaningful transparency into the person who ultimately controls the funds moving through that entity. The CAC number is real. The company legally exists. And the institution that onboards it without verifying beneficial ownership has failed its KYB obligation regardless.

FATF Recommendation 24 requires countries to ensure adequate, accurate, and up-to-date beneficial ownership information is available to competent authorities. The obligation cascades to financial institutions: banks and fintechs must identify UBOs above applicable ownership thresholds, verify their identities, and subject them to PEP and sanctions screening.

Registry verification is therefore the foundation of KYB, not the structure built on top of it.

Nigeria: Corporate Affairs Commission (CAC)

1. Registry Overview

The Corporate Affairs Commission (CAC) is Nigeria's sole authority for registering companies, business names, incorporated trustees, and limited liability partnerships. It maintains the Integrated Registry Management System (IRMS), which provides online search and verification of registered entities. Company registration numbers follow the format RC 1234567 for incorporated companies and BN 1234567 for business names.

2. What a CAC Verification Check Confirms

A CAC verification confirms the company name and registration number, date of incorporation, registered office address, authorized and paid-up share capital, current status (active, dormant, or struck off), and the names and addresses of registered directors. This is the starting point of KYB, not its completion.

3. What CAC Verification Does Not Reveal

CAC filings do not reveal the ultimate beneficial owner where shareholding is held through intermediate holding structures, nominee arrangements, or foreign parent entities. Beneficial ownership information is improving following the Companies and Allied Matters Act (CAMA) 2020, which requires companies to maintain Registers of Beneficial Owners, but enforcement and filing consistency with the CAC remain uneven.

Director and shareholder data in CAC filings may not reflect current positions if annual returns are in arrears. This is a common gap in practice: a director change executed three years ago may not appear in the online registry if the company has not filed annual returns.

4. CBN KYB Requirements for Business Customers

Under CBN customer due diligence regulations and the 2026 AML baseline standards, Nigerian banks and fintechs must:

1. Obtain and verify the CAC registration certificate and registration number for all business customers.

2. Identify and verify all directors and signatories using government-issued IDs with BVN/NIN cross-referencing.

3. Identify UBOs holding 5% or more of shares or voting rights, a threshold stricter than FATF's standard 25%, and verify their identities using government ID and biometric checks.

4. Conduct PEP and sanctions screening on all directors and UBOs at onboarding and on an ongoing basis.

5. Apply enhanced due diligence for business customers assessed as high-risk, including those in cash-intensive sectors or with complex ownership structures.

South Africa: Companies and Intellectual Property Commission (CIPC)

1. Registry Overview

The CIPC administers the Companies Act 71 of 2008 and registers South African companies, close corporations, and non-profit companies. Registration numbers follow the format YYYY/NNNNNN/XX, where YYYY is the year, NNNNNN is a sequential number, and XX is the company type code (07 for private companies, 06 for public companies, and 21 for non-profit companies).

2. South Africa's Beneficial Ownership Register

South Africa's beneficial ownership transparency infrastructure is the most advanced in Sub-Saharan Africa. Since April 2023, all private and public companies must file beneficial ownership declarations with CIPC under the General Laws Amendment Act 2022, identifying natural persons holding 5% or more of shares or voting rights or who exercise control through other means.

The CIPC register is accessible to competent authorities. Public access is restricted, which means compliance teams at banks and fintechs must still obtain beneficial ownership declarations directly from business customers during KYB; they cannot rely on public register access alone.

3. FIC Act KYB Requirements for South African Institutions

FICA Section 21A requires accountable institutions to verify business customers' registration status with the CIPC, identify and verify all directors and beneficial owners, and apply a risk-based approach to ongoing customer monitoring. FIC Guidance Notes PCC 49A and 49B (2020) provide specific guidance on beneficial owner identification for legal persons and legal arrangements.

Institutions must screen all directors and beneficial owners against OFAC, UN, EU, HMT, and FIC South Africa watchlists at onboarding and when lists are updated.

 READ ALSO: KYB Compliance for NGOs and Non-Profit Organisations in Africa: FATF Recommendation 8 Requirements in 2026

Kenya: Business Registration Service (BRS)

1. Registry Overview

The Business Registration Service (BRS) is Kenya's custodian of company information for entities registered under the Companies Act 2015. The BRS operates an online portal with search and verification functionality for companies, business names, LLPs, and foreign companies registered in Kenya.

2. Beneficial Ownership in Kenya

Kenya's Companies Act 2015 requires companies to maintain beneficial ownership registers, with UBOs defined as natural persons holding 10% or more of shares or voting rights or exercising significant influence over the company. Public filing of beneficial ownership information with the BRS is not yet comprehensively enforced; compliance teams must request BO declarations directly from business customers.

The Financial Reporting Centre (FRC) supervises AML compliance for Kenya's financial institutions. Business customer KYB must include BRS verification, director identity verification against the Kenya Integrated Population Registration System (IPRS), and PEP and sanctions screening under the POCAMLA framework.

Ghana: Registrar General's Department (RGD)

1. Registry Overview

The Registrar General's Department (RGD) is Ghana's company registry under the Registrar General's Department Act. Companies can be searched through the Office of the Registrar of Companies (ORC) portal. Registration numbers are issued sequentially without a standardized public format.

2. Verification Challenges in Ghana

Ghana's registry has improved significantly with digitization, but several operational gaps remain in 2026. Companies registered prior to the digitization program may require manual archive searches. Beneficial ownership information is not yet filed with the RGD in a standardized format. Institutions must obtain direct beneficial owner declarations from business customers. The Bank of Ghana (BoG) KYC guidelines require supplementary document collection beyond registry verification for all business onboarding.

BCEAO Member States: OHADA Registry Framework

The BCEAO member states Ivory Coast, Senegal, Mali, Burkina Faso, Benin, Niger, Guinea-Bissau, and Togo operate under the OHADA commercial law framework. Business registration is handled by national RCCM (Registre du Commerce et du Crédit Mobilier) registries.

OHADA harmonizes business registration and corporate structure across member states, which provides useful consistency for cross-border KYB within the zone. However, beneficial ownership registries remain at early stages in most OHADA countries. Institutions conducting KYB for BCEAO-zone business customers must collect and verify beneficial ownership declarations directly from those customers; there is no centralized registry source that reliably captures this data.

The Complete KYB Workflow for African Business Customers in 2026

Real-World Scenario: When Registry Verification Fails

A Nigerian fintech onboarded a logistics company with a valid CAC registration number, a board resolution from its two listed directors, and clean sanctions screening results on both director names. Six months later, a CBN-initiated AML examination identified the company as a conduit for layering proceeds from a procurement fraud scheme.

The investigation revealed that the two registered directors were nominees with no operational role. The actual controller  a mid-level government official holding 80% beneficial interest through an intermediate holding company  had never been identified because the fintech had not requested a BO declaration or screened beyond the registered directors.

The fintech received a supervisory enforcement notice for failure to identify beneficial owners under the CBN AML/CFT Regulations. The cost: regulatory remediation, a compliance uplift programme, and reputational damage in the market.

The lesson is consistent with CBN examination findings across the sector: registry verification without UBO identification is a structural KYB failure, not a procedural gap.

The Four Most Common KYB Failures in African Markets

In regulatory examinations across Nigeria, South Africa, and Kenya, four KYB failures appear with consistent frequency:

1. Relying on registry verification alone without obtaining and verifying a beneficial ownership declaration is the most common and most consequential gap.

2. Failing to cross-reference director names against government identity databases, leaving open the risk that nominee directors with no connection to the actual business controller pass unchallenged.

3. Conducting KYB once at onboarding without periodic re-verification of business ownership structure changes and annual reviews with event-triggered reassessments are required under a risk-based approach.

4. Screening the registered company name against sanctions lists but not screening all UBOs and directors individually, PEPs, and sanctioned individuals regularly use corporate vehicles to obscure their participation in business relationships.

Learn how Youverify's KYB verification platform automates registry checks, UBO mapping, and director screening across Nigeria, South Africa, Kenya, and Ghana.

Conclusion

Business registry verification is indispensable in KYB, but treating it as the endpoint creates systemic regulatory exposure. In 2026, African regulators expect institutions to see through corporate structures, identify the natural persons who ultimately own and control every business customer, and screen those individuals against the full range of applicable watchlists.

The KYB workflow that satisfies the CBN, FIC, FRC, and FATF standards is multi-layered: registry verification, beneficial ownership declaration, director identity verification, UBO identity confirmation, PEP and sanctions screening, adverse media monitoring, and ongoing re-verification. Each layer catches what the previous layer misses.

Institutions that invest in automated, API-driven KYB infrastructure connecting directly to African company registries and government identity databases will onboard business customers faster, more accurately, and with demonstrably stronger compliance postures than those relying on manual document collection.

Youverify's KYB platform provides API-integrated access to the Nigerian CAC, South African CIPC, Kenyan BRS, and Ghanaian RGD, with automated UBO identification workflows, director identity verification against government databases, and comprehensive PEP and sanctions screening at onboarding and on an ongoing basis.

Book a free demo today.

About The Author: 

Victoria Okere is a compliance technology writer at Youverify with expertise in African KYB frameworks, corporate registry verification, and beneficial ownership transparency requirements across Sub-Saharan Africa. She covers FATF, CBN, FIC, and BCEAO regulatory developments with a focus on business verification at scale.