KYB (Know Your Business)

What KYB actually covers

KYB is the regulated process an acquirer, PSP, or fintech runs before onboarding a commercial merchant. It answers three core questions: is this business real, who actually controls it, and is it allowed to operate in the sector it claims? A complete KYB pass verifies the legal entity against the companies registry, maps the controlling persons (directors, significant shareholders, ultimate beneficial owners), and runs identity checks on each of them.

KYB is not a single checkbox. It is a bundle of checks that vary by jurisdiction and by the level of risk the merchant represents. In Malaysia, a typical KYB bundle includes a company registration lookup against SSM (Suruhanjaya Syarikat Malaysia), director identification against MyKad, face matching against live selfies, sanctions and adverse media screening, and a premises or video walkthrough for higher-risk cases.

KYB vs KYC: where the line actually sits

KYC verifies a natural person. KYB verifies a legal entity plus the natural persons connected to it. A KYB process typically contains multiple KYC flows inside it, one for each director or controlling person, and adds the layers that only make sense for businesses: company status, beneficial ownership, industry licensing, and sector-specific eligibility.

In practice, the way a team operationalizes KYB today is: run a structured company lookup, fan out an eKYC flow per controlling person, cross-check ownership disclosures, then lock down the operating status. Kenal AURA does all of this in a single onboarding flow backed by authoritative sources.

Why self-declared KYB fails

Traditional merchant onboarding asks the merchant to type in their company details and upload supporting documents. Every step in that chain can be faked, mistyped, or misunderstood. Self-declared KYB fails in three common ways:

• Identity drift. A merchant declares directors who are not actually on the company register. Without a registry lookup, the mismatch is invisible until a scheme audit catches it.
• Stale ownership. Shareholding changes that should have been captured are never re-submitted. The onboarding record ages badly.
• Status laundering. A dissolved or struck-off company is submitted under a slightly different name or number and slips through.

Source-based KYB in Kenal AURA

Kenal AURA inverts the flow. Instead of asking the merchant to declare everything and then hoping the documents are real, the platform starts from the authoritative sources themselves. The merchant enters their company number; the platform resolves it against SSM, pulls the real directors and shareholders, and then runs eKYC face-match on each declared controlling person. Anything the merchant types that contradicts the registry is flagged as a discrepancy on the case before an analyst even opens it.

This produces faster onboarding and a much stronger evidence trail. Every record is backed by a source hit, not a form field.