KYC vs KYB: which does your business need?

Know Your Customer (KYC) and Know Your Business (KYB) are both due-diligence processes, but they apply to different subjects and serve different purposes. Confusing the two is a common compliance gap — one that can leave an organisation exposed under FICA or open to onboarding a fraudulent entity.

What KYC covers

KYC verifies the identity of an individual. It confirms that the person you are doing business with is who they claim to be, that they are not listed on any sanctions register, and — where relevant — whether they are a Politically Exposed Person (PEP) who may pose elevated risk.

In a standard employment or client-onboarding context, KYC means:

• Confirming the person’s identity document is genuine
• Checking their name against OFAC, UN, and EU sanctions lists
• Determining PEP status

What KYB covers

KYB applies to legal entities — companies, trusts, close corporations. It answers: is this business real, who controls it, and does that ownership structure present any compliance risk?

KYB typically includes:

• Confirming the entity is registered with CIPC and in good standing
• Identifying directors and beneficial owners
• Checking those individuals against KYC criteria (sanctions, PEP)
• Reviewing adverse media associated with the entity

When you need both

Most regulated entities — financial services providers, insurance companies, legal firms under FICA — need both. You run KYB to verify the business you are onboarding, and KYC on each of its controlling individuals. The two checks are complementary: KYB without KYC leaves you blind to who ultimately controls the entity; KYC without KYB tells you nothing about the entity itself.

The FICA angle

South Africa’s Financial Intelligence Centre Act requires “accountable institutions” to conduct customer due diligence before establishing a business relationship. For natural persons, that is KYC. For legal persons, that is KYB. Failing to run either is not a documentation oversight — it is a reportable compliance failure.

If you are unsure which package your organisation needs, contact PVB Group for a no-obligation assessment.