The Cyprus register of ultimate beneficial owners — commonly the UBO register — is the central database in which Cyprus-registered companies and other legal entities declare the natural persons who ultimately own or control them. It was established under the EU AML framework, which requires every member state to hold such a register.
For anyone doing KYB or customer due diligence on a Cyprus company, the UBO register is a key source — but one with important access rules and limitations that are worth understanding before you rely on it.
What information does the Cyprus UBO register contain?
A beneficial owner is the natural person who ultimately owns or controls more than 25% of shares or voting rights, or who otherwise exercises control. Where no such person can be identified after the required efforts, senior managing officials are recorded instead — a fallback the directives describe as a last resort, not a convenience.
- The natural person's name, date of birth, nationality and country of residence.
- The nature and extent of the beneficial interest held — ownership percentage or the basis of control.
- Identification details as required by the Registrar's specifications.
- The entity the declaration relates to, linked to its registration number at the Registrar of Companies.
Who must file in the Cyprus UBO register, and when?
Cyprus companies, partnerships and other in-scope legal entities must identify their beneficial owners and submit the information to the register, keep it current, and update it when ownership or control changes. Newly incorporated entities file within the statutory window after incorporation. Officers of the company carry personal responsibility for the accuracy of the filing, and late or false filings carry administrative sanctions.
Who can access or search the Cyprus UBO register?
Access changed significantly after the Court of Justice of the EU's November 2022 ruling, which invalidated unrestricted public access to beneficial-ownership registers on privacy grounds. General public access in Cyprus was suspended following that judgment. Obliged entities — banks, investment firms, lawyers, accountants and others subject to AML obligations — retain access for customer due diligence purposes, as do competent authorities and FIUs.
The practical effect: if you are an obliged entity performing CDD, you can consult the register as part of your file. If you are a private company vetting a counterparty, you cannot rely on self-service public access and need the ownership information from the counterparty, from official registry filings, or through a data provider with lawful access channels.
How to check a Cyprus company's beneficial owners
Start with the company's legal name and Registrar of Companies registration number so you are checking the correct entity. Register access and an independent ownership check are different tasks: an eligible register user can consult the declaration, while a business without access needs supporting ownership documents and other lawful sources.
- Confirm the entity's identity against its Registrar of Companies record.
- Establish whether you are eligible to access the UBO register for the purpose of your check; do not assume it is a public company-search service.
- Obtain the available beneficial ownership declaration and supporting shareholder or ownership documents.
- Trace corporate shareholders through the ownership chain to the natural persons who ultimately own or control the company, including control by means other than shares.
- Compare the declaration with the supporting records, investigate discrepancies and document the sources and your review decision in the KYB file.
Using the Cyprus UBO register for KYB: verification limits
The register is a declaration, not a verified fact. It records what the entity reported; accuracy depends on the filer. Sound due diligence therefore treats the UBO entry as one source among several: cross-check it against the Registrar of Companies extract, shareholder registers, audited accounts and independent credit and adverse media data. Discrepancies between the declaration and the corporate documents are themselves a red flag.
For foreign-owned structures, remember that the Cyprus register only covers Cyprus entities. Ownership chains that run through other jurisdictions require the equivalent sources there.
How Infocredit Group approaches it
Our KYB and credit reports on Cyprus companies combine Registrar of Companies data, ownership structures, insolvency and court records and screening into one verified report — so the UBO declaration is checked against the underlying corporate record rather than taken at face value. ComplianceSuite automates that workflow for regulated onboarding; API4ALL delivers the same reports by API.
Frequently asked questions
What is the UBO register in Cyprus?
It is the central register in which Cyprus-registered companies and other legal entities declare the natural persons who ultimately own or control more than 25% of them, or who otherwise exercise control. It was established under the EU AML framework.
Who must register in the Cyprus UBO register?
Cyprus companies and other in-scope legal entities must identify their beneficial owners and file the information with the register, keep it accurate, and update it when ownership or control changes.
Can the public access the Cyprus UBO register?
General public access was suspended after the CJEU's November 2022 ruling on privacy grounds. Obliged entities retain access for customer due diligence purposes, as do competent authorities.
What is the 25% threshold?
Under the EU AML framework, a beneficial owner is the natural person who ultimately owns or controls more than 25% of shares, voting rights or ownership interest — or who exercises control by other means. If no such person is identifiable, senior managing officials are recorded as a last resort.
Is the UBO register enough for KYB verification?
No. It is a self-declared source. Robust KYB cross-checks it against the Registrar of Companies record, shareholder documentation, accounts and independent data — discrepancies between the declaration and the record are a red flag in themselves.
Compliance insights, straight to your inbox
Monthly analysis on AML, screening and risk technology from the teams behind ComplianceSuite, RISQO and API4ALL. No spam — unsubscribe anytime.