Buyer verification onboarding guide for cross-border exporters

What does buyer verification actually require?

Buyer verification, sometimes called Know Your Business or KYB, is the process of confirming that a foreign buyer is a legitimate, creditworthy, non-sanctioned entity before you ship goods or extend open-account terms. For cross-border exporters, this is not optional due diligence. It is a regulatory requirement under anti-money laundering frameworks, a condition of trade credit insurance policies, and a practical safeguard against non-payment and reputational damage.

The core obligation comes from multiple sources. If you are a US exporter, the Export Administration Regulations require you to verify that your buyer is not on the Entity List or Denied Persons List. The Office of Foreign Assets Control mandates that all US persons, including companies, screen counterparties against the Specially Designated Nationals and Blocked Persons List before any transaction. In the EU, Regulation 2580/2001 and subsequent CFSP measures impose similar obligations. Beyond sanctions, trade credit insurers such as Allianz Trade and Coface require you to demonstrate buyer creditworthiness before they will approve a credit limit.

Verification is not a single check. It is a layered process that moves from identity confirmation through beneficial ownership, sanctions compliance, reputational review, and credit assessment. Each layer answers a distinct question: Is this entity real? Who controls it? Is it prohibited? Is it controversial? Will it pay?

How do you confirm corporate identity across jurisdictions?

Corporate identity verification starts with pulling official registration documents from the buyer's home jurisdiction. This is not a Google search. You need data from the government registry that incorporated the entity.

For UK buyers, Companies House provides free access to incorporation certificates, annual filings, and director lists at find-and-update.company-information.service.gov.uk. The registry includes real-time updates on company status, liquidation events, and registered address changes. For EU buyers, the European Business Registry Association operates a portal linking national registries across member states. Germany's Handelsregister, France's Infogreffe, and the Netherlands' KVK are all accessible through the European Business Register at ebr.org. In the US, corporate records sit with each state's Secretary of State office. Delaware's Division of Corporations, for example, provides online access to formation documents and good-standing certificates.

For Singapore, the Accounting and Corporate Regulatory Authority publishes company profiles through BizFile at bizfile.gov.sg. A standard profile costs SGD 5.50 and includes incorporation date, paid-up capital, directors, and shareholders.

When pulling registry data, capture the following at minimum: legal entity name, registration number, incorporation date, registered address, company status (active, dissolved, struck off), director names, and shareholder list. Cross-reference the registered address against the address the buyer provided in your correspondence. Mismatches are a red flag: shell entities often use formation agent addresses and operate from different locations.

Registry data has limits. It tells you who the registered directors are, not who actually controls the company. That is why UBO verification comes next.

Who actually controls the buyer and why does it matter?

Ultimate beneficial owner identification is the process of determining which natural persons own or control 25% or more of the buyer entity. This threshold comes from the Financial Action Task Force Recommendations, which set the international standard adopted by OFAC, EU AMLD, and UK MLR.

FATF Recommendation 24 requires countries to ensure that accurate and up-to-date beneficial ownership information is available to competent authorities. For exporters, this means you cannot rely solely on the corporate registry. Many jurisdictions do not require public disclosure of UBOs, and even those that do may have outdated records.

You need to request a UBO declaration from the buyer. This declaration should identify all natural persons holding 25% or more of shares or voting rights, as well as any person exercising control through other means such as shareholder agreements, financing arrangements, or nominee structures. The declaration should include full legal names, dates of birth, nationalities, and residential addresses for each UBO.

Once you have the declaration, verify it against available sources. If the buyer is in the UK, the Persons with Significant Control register at Companies House provides a public UBO list. If the buyer is in an EU jurisdiction, the Fifth Anti-Money Laundering Directive requires member states to maintain central beneficial ownership registers, though access varies by country. For jurisdictions without public registers, you may need to rely on the declaration plus corroborating documents such as shareholder certificates or group structure charts.

Why does this matter for exporters? Sanctions apply to entities owned or controlled by sanctioned persons. If your buyer's UBO is on the OFAC SDN list, the buyer itself is blocked even if its corporate name does not appear on any list. This is the 50% rule: OFAC treats any entity owned 50% or more by one or more blocked persons as itself blocked. Miss the UBO check, and you may ship goods to a sanctioned party without knowing it.

What sanctions lists must you screen against?

Sanctions screening is non-negotiable for any cross-border transaction. At minimum, you must screen the buyer entity, its directors, and its UBOs against the following lists:

OFAC Specially Designated Nationals and Blocked Persons List contains over 12,000 entries as of 2024. The list includes individuals, companies, vessels, and aircraft designated under more than 30 sanctions programs. OFAC publishes the SDN list in multiple formats at ofac.treasury.gov/specially-designated-nationals-and-blocked-persons-list-sdn-human-readable-lists.

EU Consolidated Financial Sanctions List implements CFSP designations and is updated by the European Commission. The list is available at webgate.ec.europa.eu/fsd/fsf and includes all persons and entities subject to asset freezes under EU sanctions programs.

UK Office of Financial Sanctions Implementation publishes the UK Sanctions List at gov.uk/government/publications/financial-sanctions-consolidated-list-of-targets. Post-Brexit, the UK list diverges from the EU list in some designations, so you must screen both if your transaction touches UK jurisdiction.

UN Security Council Consolidated List contains designations under UNSC resolutions and is available at scsanctions.un.org. Most national lists incorporate UN designations, but screening the source ensures you catch new additions before national lists update.

Beyond these core lists, consider screening the BIS Entity List and Denied Persons List if you export controlled goods, and the OFAC Sectoral Sanctions Identifications List if your buyer operates in Russia, Venezuela, or other sectorally sanctioned economies.

Screening frequency matters. OFAC updates the SDN list multiple times per week. A buyer who was clean at onboarding may be designated before you ship. Best practice is to re-screen at the point of shipment and, for open-account arrangements, at regular intervals during the credit period.

What happens if you miss a hit? OFAC civil monetary penalties can reach $330,947 per violation under the International Emergency Economic Powers Act, adjusted for inflation as of 2024. For willful violations or aggravating factors, penalties escalate to the greater of $1,000,000 or twice the transaction value.

How do you assess creditworthiness for trade terms?

Sanctions clearance confirms you can legally do business with the buyer. Credit underwriting determines whether you should extend open-account terms and, if so, how much exposure to accept.

Trade credit insurers provide standardized buyer ratings that translate credit risk into operational terms. Allianz Trade uses a letter-grade system from AA (lowest risk) to D (highest risk, including buyers in default or insolvency). Coface uses a similar scale with numerical modifiers. A buyer rated B or better by Allianz Trade generally qualifies for 60- to 90-day open account terms with credit insurance. A buyer rated C or below may require secured payment terms, confirmed letters of credit, or advance payment.

To obtain a rating, you submit a credit limit request to your insurer with the buyer's corporate details, requested limit, and payment terms. The insurer returns a decision within 24 to 72 hours for standard requests. For new buyers without trade history, the insurer may require financial statements, payment references, or a site visit before approving a limit.

If you do not have credit insurance, you can purchase standalone credit reports from bureaus such as Dun & Bradstreet, Creditsafe, or Experian Business. These reports include payment behavior scores, financial ratios, and recommended credit limits. A D&B PAYDEX score of 80 or higher indicates that the buyer pays invoices within terms. Scores below 50 suggest chronic late payment.

For first-time buyers, layer credit data with payment history from references. Ask the buyer for three trade references and contact them directly. Confirm open-account terms, average invoice size, and whether payments arrived on time. A buyer who pays suppliers in 90 days when terms are net 30 is signaling cash-flow stress.

What is the 6-step onboarding process end to end?

The following workflow compresses buyer verification into a structured sequence with clear owners and outputs at each stage.

1. Corporate identity pull (Day 1): Compliance or credit team requests official registry documents from the buyer's home jurisdiction. Output: incorporation certificate, director list, shareholder list, registered address, company status. Parallel action: send UBO declaration form to buyer.

2. UBO mapping (Days 1 to 2): Upon receiving the buyer's UBO declaration, verify against available registers or corporate documents. Output: validated list of natural persons owning or controlling 25% or more, with names, dates of birth, nationalities.

3. Sanctions screening (Day 2): Screen the buyer entity, all directors, and all UBOs against OFAC SDN, EU CFSP, UK OFSI, UN, and BIS lists. Output: screening log with timestamps, match/no-match results, and disposition of any partial matches.

4. Adverse media review (Day 2): Run the buyer name, trade name, and UBO names through news databases and public records for negative coverage: fraud allegations, bribery investigations, environmental violations, labor disputes. Output: media summary with source links and risk assessment.

5. Credit underwriting (Days 2 to 3): Submit credit limit request to trade credit insurer or pull credit report from bureau. Collect trade references and verify. Output: approved credit limit, insurer rating, recommended payment terms.

6. Contract and payment-rail setup (Day 3): Issue proforma invoice or sales contract reflecting approved terms. Confirm buyer bank details via callback or secure channel. If using Reevol Atlas Buyer Verification, the platform validates IBAN/SWIFT details and flags mismatches with registered address country. Output: signed contract, verified payment instructions, buyer record in your ERP or trade finance platform.

For repeat corridors where you already hold a portfolio of buyers in the same jurisdiction, you can compress Steps 1 and 3 by using cached registry data templates and batch screening. Reevol Atlas Buyer Verification pre-populates registry fields for UK, EU, US, and Singapore buyers and runs continuous sanctions monitoring, reducing manual effort on subsequent onboardings in the same corridor.

When does this process not apply?

Not every transaction requires full onboarding. If you are selling on advance payment terms with no credit exposure, the credit underwriting step is unnecessary. You still must complete sanctions screening because payment method does not affect sanctions law: shipping goods to a blocked party is prohibited regardless of when you receive funds.

For transactions below your de minimis threshold, typically defined by your compliance policy as a single-shipment value under $10,000 or $25,000, you may apply simplified due diligence. Simplified due diligence still requires sanctions screening and corporate identity confirmation but may skip the full UBO trace if the buyer is a publicly traded company or a government entity.

If your buyer is a subsidiary of a multinational you already have a credit facility with, you may rely on parent-level due diligence plus confirmation that the subsidiary is wholly owned and included in the parent guarantee. Document this in your credit file.

If your buyer is in a high-risk jurisdiction, the standard process is insufficient. FATF publishes a list of jurisdictions under increased monitoring (the "grey list") at fatf-gafi.org. For buyers in these jurisdictions, apply enhanced due diligence: deeper UBO tracing, source-of-funds documentation, and senior management approval before onboarding.

Sources

• OFAC Specially Designated Nationals and Blocked Persons List
• EU Consolidated Financial Sanctions List
• UK OFSI Consolidated List
• FATF Recommendations
• UK Companies House
• Singapore ACRA BizFile