Beneficial Ownership Reporting: How to Verify the Rules That Apply Now

Most guidance on beneficial ownership reporting is wrong within months of being written. Between 2024 and 2025 this regime moved through nationwide injunctions, stays, enforcement suspensions, and a rewritten rule — each change altering who had to file and by when.

So this brief does two things. It states the position as of mid-2026, dated and sourced. Then it gives a verification routine, because the position itself is the perishable part and the routine is not.

What the statute built

The Corporate Transparency Act, enacted at the start of 2021, created a federal duty for certain entities to report information about their beneficial owners to the Financial Crimes Enforcement Network. The statutory provision sits at 31 U.S.C. 5336; the implementing regulation is 31 CFR 1010.380. Reporting obligations first took effect at the start of 2024.

The architecture is worth understanding even in a period when the reporting duty is narrow, because it is the framework any future version will be built on. A reporting company files identifying information about itself and about each beneficial owner: an individual who exercises substantial control over the entity, or who owns or controls at least twenty-five percent of its ownership interests. Entities created on or after the start of 2024 also report company applicants. The rule carries a long list of exemptions — including banks, credit unions, registered securities issuers, insurance companies, tax-exempt entities, certain subsidiaries, and large operating companies meeting employee, revenue, and physical-presence tests.

Penalties under the statute are meaningful: a civil penalty accruing per day of continuing violation, adjusted for inflation, plus criminal exposure for willful violations. That is precisely why guessing is a poor strategy in either direction — over-filing discloses personal information unnecessarily, and under-filing carries a per-day meter.

The position as of mid-2026

Following litigation that suspended enforcement in late 2024 and early 2025, and Treasury announcements in early 2025 that penalties would not be enforced against domestic companies or U.S. citizens, FinCEN issued an interim final rule in March 2025. That rule narrowed the definition of reporting company to entities formed under the law of a foreign country that register to do business in a U.S. state or tribal jurisdiction. Domestic entities were removed from the reporting requirement, and foreign reporting companies were not required to report the information of beneficial owners who are U.S. persons.

FinCEN indicated at the time that a final rule would follow. Whether that final rule has since issued, and whether it preserved, narrowed, or expanded the interim scope, is exactly the kind of fact that should not be taken from any secondary source — including this one.

Do not rely on this paragraph alone: the statement above describes the position established by the March 2025 interim final rule. Confirm the operative rule, and any later final rule or court order, directly at fincen.gov/boi before acting.

The verification routine

Treat this as a standing procedure to be run whenever a filing decision arises — at formation, at a change in ownership, at financing, at diligence, and on a recurring calendar entry regardless. It takes under an hour and it produces a record of a reasoned decision.

1. Read the agency page first, not a summary

   Open FinCEN's beneficial ownership page. Read any alert banner at the top before anything else; that banner is where scope changes and enforcement pauses have consistently appeared first.

2. Identify the operative instrument

   Determine whether the page describes an interim final rule, a final rule, or a rule modified by court order, and note the citation and date it gives. "The rule" is not a stable referent in this area.

3. Check the dated compliance materials

   FinCEN publishes a small entity compliance guide and a FAQ set, each carrying a version or update date. A guide older than the operative rule is a warning sign, not an answer.

4. Confirm the filing system's behavior

   Check whether the electronic filing system is accepting, requiring, or declining reports for your entity type. System behavior sometimes clarifies scope faster than prose does.

5. Classify your entity precisely

   Was it formed under the law of a U.S. state or tribal jurisdiction, or formed abroad and registered to do business here? Under the current scope this single fact usually decides the answer.

6. Run the exemption analysis anyway

   If the entity is in scope, work the exemption list against real numbers — employees, gross receipts, physical office, regulated status — and record which exemption you claim and why.

7. Check the parallel regimes

   Federal reporting is not the only beneficial-ownership duty. State disclosure laws and financial institutions' own customer due diligence requests operate independently and never paused.

8. Write the memo and date it

   One page: what you checked, the URL, the date, the operative instrument named on the page, your entity classification, and the decision. Attach a capture of the page as read.

The final step is the one most often skipped and the one that carries the most value. A dated file memo showing what the government said on the day you decided is the difference between a defensible good-faith determination and a bare assertion that nobody thought filing was required. Companies with formal governance should approve the position the same way they approve other compliance positions — by board resolution or written consent, as covered in board minutes and written consents.

What did not change while the federal rule moved

Two of these deserve emphasis. Banks have had their own beneficial-ownership collection duty for legal entity customers for years, under a separate rule that was unaffected by CTA litigation. If a bank asks who owns twenty-five percent of your company, the answer is not "that requirement was struck down." And at least one state — New York — enacted its own limited liability company transparency statute with an effective date in 2026; check the state's filing agency directly, because state timelines have also been amended after enactment.

Companies that maintain beneficial-ownership data should also hold it under the same controls as other sensitive records. If the entity is a covered financial institution, that data belongs inside the program required by the Safeguards Rule, described in GLBA privacy notices and the Safeguards Rule.

Questions the desk gets

We filed a report in 2024. Should we withdraw it?

Withdrawal is not the usual question; the more useful questions are whether an update obligation still attaches to the entity under the current rule, and what happens to information already submitted. Both are answered by the operative rule and FinCEN's own guidance rather than by inference from the enforcement announcements. Run the verification routine, note what the agency says about previously filed reports and updates, and record the conclusion in the file memo.

Who exactly counts as a beneficial owner?

Under the regulation, an individual who directly or indirectly exercises substantial control over the entity, or who owns or controls at least twenty-five percent of its ownership interests. Substantial control is defined functionally and reaches senior officers, people with authority to appoint or remove them, and people who direct important decisions — so a person with no equity at all can be a beneficial owner. Convertible instruments, options, and trust arrangements complicate the ownership calculation.

Does this apply to a single-member LLC with no employees?

Entity size does not create an exemption; if anything, the large operating company exemption runs the other way, protecting bigger businesses rather than smaller ones. What matters under the current scope is where the entity was formed. A single-member LLC formed under U.S. state law sits outside the reporting definition established by the March 2025 interim final rule, and a foreign-formed entity registered to do business here does not.

How often should we re-verify?

Tie it to events rather than to a fixed interval alone: formation or registration, any change in ownership or control, any financing, any acquisition, and any diligence request. Add a standing calendar entry as well — quarterly is reasonable given how often this regime has moved. Each check should take minutes once the routine is established, and each should end with a dated line in the same file memo.

What to do next

Build the file before you need it. Assemble a current cap table, the operating agreement or bylaws, the officer and director list, and the formation and foreign-qualification certificates. That package answers the beneficial-owner question in whatever form the rule takes, and it is the same package a lender, an acquirer, or a bank onboarding team will ask for. Succession and transfer terms that change who controls the entity are addressed in buy-sell agreements and business succession.

Then run the verification routine once, today, and write the memo. Re-run it on the triggers above. The value of this brief is not the paragraph describing mid-2026 scope, which will age; it is the habit of checking FinCEN's beneficial ownership page and recording what it said. Adjacent compliance surfaces for financial products sit on the Financial Regulation & Digital Assets desk, including licensing structure questions in state lending licenses and bank-partner models.