Beneficial Ownership at Account Opening in Kenya: CBK's 2025 Guidance and the BRS Register

Short answer: Kenyan banks must identify and verify the natural persons who ultimately own or control a business customer (POCAML Regulations reg 22). For the BRS company register, a beneficial owner holds at least 10% of the shares or votes, or has board or other control. CBK's 2025 guidance asks banks to match the owners against the BRS official search (CR12) and the BO form, and report differences to the FRC.

This guide is for compliance officers, MLROs and account-opening teams at Kenyan banks, microfinance banks and SACCOs who decide what a beneficial-ownership file must contain. This is a practical guide, not legal advice; confirm requirements with your supervisor (CBK, SASRA) or adviser. Checked against primary sources on 8 October 2026.

Who is a beneficial owner under Kenyan law?

Two sets of rules apply, and they use different tests.

For customer due diligence, POCAMLA and the 2023 Regulations define a beneficial owner as "a natural person who ultimately owns or controls a customer", including anyone who "ultimately exercises effective control over a legal person or arrangement" (reg 2). They set no percentage. For legal persons, reg 16(2) sets a three-step test: a controlling ownership interest, then control by other means, then the senior managing official. FRC Circular No. 5 of 2023 takes the same approach and says BO identification is required regardless of risk level (para 2.5.3).

For the BRS register, the Companies (Beneficial Ownership Information) Regulations (LN 12 of 2020, as amended) set the markers in reg 3(2). A natural person is a beneficial owner if they:

• hold at least 10% of the issued shares;
• exercise at least 10% of the voting rights;
• hold a right to appoint or remove a majority of the board; or
• exercise significant influence or significant control.

Companies limited by guarantee have parallel tests (reg 3(2A)). LLPs use 10% of capital or profits, or 10% of voting rights (LN 163 of 2023).

We found no 25% threshold in any Kenyan primary source. If a group policy or a foreign template says 25%, change it. CBK adds two points: only natural persons can be ultimate beneficial owners, and there can be several (BO para 1.4.2); a nominee director or nominee shareholder is never the beneficial owner (para 1.4.6).

How does CBK's cascading test work?

CBK's Guidance on Beneficial Ownership has been in force since 1 September 2025. It covers commercial banks, mortgage finance companies, microfinance banks, money remittance providers, forex bureaus, PSPs and non-deposit-taking credit providers. Para 4.2 applies three tests in order:

1. Ownership. Direct or indirect ownership through shares or votes. Indirect holdings are aggregated (para 4.2.1).
2. Control by other means. If Test 1 fails or is doubtful, look for control through appointing directors, a power of attorney, convertible debt, financing, or trusts and family ties.
3. Senior managing official. Only if Tests 1 and 2 both fail.

CBK's own wording drifts between "more than 10 percent", "10% or more" and "at least 10%". Write "at least 10%", which matches reg 3(2).

The test reaches beyond companies. Para 4.1 covers companies limited by shares or guarantee, unlimited and foreign companies, limited partnerships, LLPs, trusts, co-operative societies and other corporate bodies. For clubs, societies, foundations, charities, NGOs and cooperatives, para 4.4 points to the office bearers (president, secretary, treasurer and committee), senior management and other members with effective control. That is the angle our guide to chama account opening requirements takes for groups.

SACCOs follow SASRA instead. SASRA/GG/1/2024 §6.1.3 asks a SACCO to understand a non-natural member's ownership and control structure, including changes, and to take reasonable steps to verify the beneficial owners. See SACCO member onboarding under SASRA.

What must a bank collect and check against BRS?

CBK's para 4.6.1 sets three steps for a domestic entity.

1. Collect. For each beneficial owner: full name, ID or passport copy, date of birth and nationality. For the entity: a copy of the BO form filed with BRS, a copy of the CR12, the ownership and control structure, the certificate or extract, any trust deed or partnership agreement, board resolutions, structure charts, share certificates and the register of members.
2. Identify. Work out who meets the 10% share or vote test, controls the board, or exercises executive control.
3. Verify. Verify the IDs, match the beneficial owners' names against the CR12 and the BO form filed with BRS, and confirm the percentages.

"CR12" here means the BRS official search, which BRS lists on eCitizen as "Official Search (formerly CR12)". The statutory Form CR 12 is an unrelated notice of a company secretary's address. Our guide to corporate account opening requirements in Kenya covers the rest of the company pack.

Where does the BRS beneficial-ownership data come from?

Every company keeps a register of its beneficial owners and lodges a copy with the Registrar (Companies Act s.93A(1), (3)). Amendments are lodged within 14 days, or 30 days for listed companies, and BO records are kept for at least ten years (s.93A(5) to (7)). The register is lodged on Form BOF1, and changes on BOF2, BOF4 and BOF5. BO information is not public (reg 15), but a bank has two routes to it:

• From the company. A company may disclose its BO information "to financial institutions for the purposes of entering into a relationship with the institution" (reg 13(2)(d)).
• From the Registrar. On Form BOF6 and payment of the fee, the Registrar may disclose a company's BO information to financial institutions in Form BOF7, without protected personal identifiable information (reg 14(1)(c)). BRS's November 2025 list of services on BRS version 2 includes a "B.O Official Search".

We found neither the BOF6 fee nor any sign that BRS answers BOF6 requests through an online API, so do not plan on instant lookups. The 2022 mutual evaluation found that institutions had no access to BO information at BRS (CBK PEP guidance para 2.5.1). Reg 14(1)(c), added by LN 162 of 2023, now provides that access.

What happens when the customer's data does not match BRS?

CBK is direct: if the customer's BO data differs from BRS, file a suspicious activity report with the FRC (BO para 4.8). Record what the customer declared, what the BRS official search and BO form showed, the decision and the report reference. CBK's CDD guidance also expects beneficial owners to be screened against targeted financial sanctions lists, PEP lists and adverse media, and checked against the BRS registry (Table 1); see our guide to CBK's 2025 customer due diligence guidance and sanctions and PEP screening in Kenya.

Timing follows reg 25. Banks verify the customer and the beneficial owner "before or during the course of establishing a business relationship" (reg 25(3)). They may complete it afterwards only as soon as reasonably practicable, where that is essential not to interrupt normal business, and with the risks effectively managed (reg 25(4)). CBK also asks for identification and verification at onboarding and whenever BO information changes (BO para 4.5).

Trusts and other legal arrangements

For a trust, reg 18(4)(a) requires verification of "the settlor, the trustee(s), the protector (if any), the beneficiaries or class of beneficiaries, and any other natural person exercising ultimate effective control". A trustee must disclose that status when forming the relationship (reg 18(3)).

The Trust Administration Act 2026, in force since 25 September 2026, adds a register:

• Registration. Written trusts must be registered or incorporated (s.5(2)), and the application includes a copy of the trust's register of beneficial owners (s.22(2)(c)).
• Updates. Trusts keep and lodge that register and update it within twenty-one days of a change (ss.65 to 67).
• Disclosure to banks. The Registrar of Trusts, an office within BRS (s.77(1)), may disclose register information to reporting institutions under POCAMLA (s.78(8)(d)).
• Transition. Existing trusts have twenty-four months to comply (s.99(2)(b)). The Trustees (Perpetual Succession) Act is repealed, so its certificates are transitional, not current.

We could not confirm whether a BRS trust search is live yet. Until it is, ask the trustees for the register they lodged.

Nominees, foreign owners and exhausted measures

Some structures are built to hide who owns them. Three situations need a record of their own.

• Nominees. A nominee is never the beneficial owner (BO para 1.4.6). Take a nominee disclosure naming the person the nominee acts for, and look for control through powers of attorney, financing, trusts or family ties (Test 2).
• Foreign entities. CBK's para 4.6.2 expects foreign registration documents and a BO declaration, certified passports, notarial or lawyer verification, and checks of foreign registries and commercial databases. Where no independent document exists, use open sources, record that all reasonable measures were exhausted, and raise the customer's risk rating.
• Owners you cannot verify. Record the measures you exhausted. A statutory declaration from the customer may be taken (para 4.4).

Ownership structure is one of CBK's customer risk factors (CDD para 3.6.3.1). Enhanced due diligence includes senior management approval before the relationship is established (reg 20(1)(c); CDD para 3.6.3.5).

What should the onboarding record hold?

A beneficial-ownership file that holds up in an inspection contains:

1. the BO declaration and ownership chart, with each owner's name, ID or passport copy, date of birth and nationality;
2. for each owner, the limb they meet (shares, votes, board appointment or other control) and the percentage, direct and indirect;
3. copies of the BRS official search (CR12) and the BO form or BOF7 disclosure, with the date each was obtained;
4. the match result, any discrepancy, and the FRC report reference (BO para 4.8);
5. nominee disclosures and, for trusts, the settlor, trustees, protector and beneficiaries or class;
6. where verification failed, the measures tried, any statutory declaration and the risk-rating change;
7. who decided, and when: CBK asks for auditable records of decisions (BO para 4.7).

Keep the file for at least seven years from the end of the relationship (POCAMLA s.46(4); reg 42). FRC Circular No. 5 of 2023 says the same for BO information (para 2.2.3).

Account opening versus ongoing AML work

At account opening, the job is to capture the declared structure, check it against BRS and record the decision. Tracing one person across several companies, resolving names across registers and watching ownership change over time is ongoing AML work. CBK gives a BO change as an example of an event that should trigger a review (CDD para 3.6.1). That side is covered in beneficial ownership and entity resolution and by Creodata's AML software for Kenya.

Where BAOS fits

BAOS, Creodata's Bank Account Opening System, is the account-opening workflow that sits beside your identity-verification provider and your core banking system. For beneficial ownership it does four things:

• Records the owners. For business applicants, each beneficial owner is recorded on the application with their name, ID and shareholding percentage.
• Holds the documents. The BRS official search (CR12), the BO form and each owner's ID go into checklist slots, with a slot per stakeholder. Staff verify them one at a time or a whole application at once.
• Lists who to screen. Each beneficial owner is listed once among the people who need screening, even when they are also a director or signatory. The screening runs in your screening tool.
• Fits your policy. Your team can add questions, such as a nominee disclosure or the basis of control, in the no-code form builder. Every workflow action is recorded with who, what role, when and from which address.

BAOS does not apply the 10% test or any other threshold, trace ownership through intermediate companies, query BRS or request a BOF6 disclosure, flag discrepancies, report to the FRC, screen or rate risk. Those judgements stay with your team and your other systems. See BAOS in Kenya, or compare vendors in the account opening software buyer's guide for Kenya.

Frequently asked questions

What is the beneficial ownership threshold in Kenya?

For the BRS company register it is at least 10% of the shares or voting rights, the right to appoint or remove a majority of the board, or significant influence or control (Companies BO Regulations reg 3(2)). For due diligence, POCAMLA and the 2023 Regulations set no percentage and look at ultimate ownership or control. We found no 25% threshold in Kenyan law.

Do Kenyan banks have to check beneficial owners against the BRS register?

CBK's 2025 Guidance on Beneficial Ownership asks banks to collect copies of the CR12 and the BO form filed with BRS, and to match the beneficial owners' names and percentages against both (para 4.6.1). The Regulations allow BO data to come from a public register, the customer or other reliable sources (reg 22(4)).

What is Form BOF6?

It is a request form under the Companies BO Regulations. On receipt of Form BOF6 and payment of the fee, the Registrar may disclose a company's beneficial-ownership information to financial institutions in Form BOF7, without protected personal identifiable information (reg 14(1)(c)). We found no published fee and no online API for it.

What should a bank do if the BRS data does not match the customer's declaration?

CBK's BO guidance says to file a suspicious activity report with the FRC (para 4.8). Record both versions, the decision and the report reference.

Can a nominee shareholder be the beneficial owner?

No. CBK's guidance says a nominee director or nominee shareholder is never the beneficial owner (para 1.4.6). Identify the person the nominee acts for, and look for control through other means.

To see beneficial owners recorded on the same application as the documents and the review, explore our account opening software for Kenyan banks or book a demo.