A company search is one part of KYC
Know-your-customer and anti-money-laundering work asks whether you understand who the customer or counterparty is, who controls it, what the relationship is for and whether the activity makes sense. A company search can confirm public identity, status, registered office and available filing or officer information. It cannot, by itself, verify every beneficial owner, source of funds, sanctions position or purpose.
The Central Bank’s AML guidance describes customer due diligence as a risk-sensitive process. That means the evidence and depth of review should be proportionate to the relationship and its risks. A small ordinary transaction may need a lighter process than a complex, high-value or cross-border arrangement.
Start with legal identity and authority
Ask for the exact legal name, company number, registered office, trading names, directors or equivalent officers, ownership information and contact details. Match those details to the incorporation or register information and to the contract, invoice and bank details. Confirm the person communicating with you has an appropriate connection to the counterparty, while remembering that authority may require separate documentation.
A mismatch should be classified rather than ignored. A different trading name may be harmless; a different company number or payment beneficiary can change the legal and risk analysis. Record what was explained, who confirmed it and whether the explanation is supported by independent evidence.
- Exact legal name and registration number
- Company type and current status
- Registered office and operating explanation
- Officers and ownership or control
- Contract, invoice and payment beneficiary
Understand purpose and expected activity
The reason for the relationship should be specific enough to test. Instead of 'general services', record the service, expected volume, countries, delivery route, payment pattern and expected counterparties where relevant. A clear purpose makes unusual activity easier to recognise later.
Compare the proposed activity with the company’s public profile and supplied information. A mismatch is not proof of wrongdoing: companies can diversify, use holding structures or work through related entities. It is a reason to ask for context, supporting documents and the correct contracting party.
Risk-based and enhanced checks
Risk may increase because of the customer’s business sector, geography, ownership complexity, unusual urgency, transaction size, cash exposure, opaque intermediaries or information that does not reconcile. Depending on your legal duties and policy, enhanced measures may include more ownership evidence, source-of-funds information, senior approval, independent references or closer monitoring.
Do not create a false sense of certainty by collecting documents without analysing them. A dated decision should explain what was checked, what remains unknown, why the risk rating was chosen and when the relationship must be refreshed. Regulated firms should follow the applicable Irish legislation, regulator guidance and internal procedures.
Keep a defensible company verification record
A good file allows another reviewer to understand the decision without repeating the entire investigation. Keep the company number, search date, report date, documents used, ownership information, risk assessment, approvals, questions raised and resolution. Limit access to personal data and retain it only according to the law and your policy.
CompanyReports.ie can support the public-company part of the file by bringing identity, status, address, available officers and filing history into a readable report. It should sit alongside your customer documents, screening, ownership evidence and professional or regulated guidance rather than replace them.