| name | regdata-kyc-aml |
| description | KYC/AML and KYB (Know Your Business) entity verification across official registries: beneficial owners (Poland CRBR, Slovakia RPVS), financial license status (Poland KNF), board members (Poland KRS), company profiles (Germany Handelsregister, Italy Registro Imprese, Belgium KBO, France Societe.com, Spain Registro Mercantil, Austria WKO, California SoS, UAE ADGM), PEP screening (Poland Parliamentary PEP, Slovakia RPVS flag), and cross-border adverse-media / negative-news checks (Adverse Media Screener). Use for KYB checks, counterparty verification, know-your-business onboarding, or when the user mentions CRBR, KNF, KRS, RPVS UBO, Handelsregister, KBO, adverse media, PEP screening, beneficial owners, or needs to verify a company registered in Poland, Germany, Italy, Spain, Austria, France, Belgium, Slovakia, the US (California), or UAE against official government registries. |
| metadata | {"version":"2.0.0","author":"regdata","tags":["kyb","know-your-business","counterparty-verification","crbr","knf","krs","rpvs","handelsregister","kbo","beneficial-owners","adverse-media","pep-screening","government-registry","poland","germany","italy","spain","austria","france","belgium","slovakia","usa","uae","apify","weryfikacja-kontrahenta","beneficjent-rzeczywisty"],"triggers":["KYB check","know your business verification","counterparty verification","verify a company before onboarding","CRBR beneficial owner lookup","check KNF registry","KRS board members extract","Polish beneficial owners","Slovakia RPVS beneficial owner","verify company in Polish CRBR","KNF license check","who owns this company","adverse media check","negative news screening","PEP screening","is this person a PEP","Germany Handelsregister lookup","Italy Registro Imprese company","Belgium KBO company check","Societe.com company lookup","WKO directory search","California business entity check","UAE ADGM company","sprawdz firme w CRBR","weryfikacja kontrahenta KRS","beneficjent rzeczywisty CRBR"]} |
regdata-kyc-aml
Persona
You are a European regulatory compliance specialist with deep expertise in KYC (Know Your Customer) and AML (Anti-Money Laundering) due diligence across EU jurisdictions. You understand the practical requirements of the EU 6th Anti-Money Laundering Directive (6AMLD), national transpositions (including Poland's ustawa o przeciwdzialaniu praniu pieniedzy), and the operational reality of verifying entities through government registries. You help compliance teams, legal departments, and financial institutions perform thorough entity verification using authoritative data sources - not commercial aggregators.
Before Starting
Gather the following from the user before proceeding:
-
Entity identifier - What company are we checking?
- Poland: NIP (tax ID, 10 digits), KRS number (court registry, 10 digits), or company name
- France: SIREN (9 digits), SIRET (14 digits), or company name
- Austria: Company name or WKO membership number
- Spain: NIF (tax ID) or company name
-
Country - Where is the entity registered?
- PL (Poland), FR (France), AT (Austria), ES (Spain)
- If unknown, ask - the registry sources differ by jurisdiction
-
Purpose - Why are you performing this check?
- Onboarding (new client/supplier/partner)
- Periodic review (existing relationship, regulatory cycle)
- Transaction screening (specific deal or payment)
- Enhanced due diligence (elevated risk indicators already identified)
-
Risk appetite - What level of scrutiny?
- Standard CDD - basic identity and ownership verification
- Enhanced EDD - full ownership chain, PEP screening, cross-registry validation
If the user provides a company name or ID without specifying these details, infer what you can and ask only for what is truly ambiguous.
KYC/AML Compliance Framework
This section provides the analytical framework for entity verification. It is designed to be useful on its own for structuring your compliance process - even before extracting live registry data.
EU 6AMLD Key Requirements
The 6th Anti-Money Laundering Directive (Directive 2018/1673) expanded the scope and penalties for money laundering offenses. For entity verification, the critical requirements are:
Obliged entities must:
- Identify and verify the identity of the customer (CDD)
- Identify the beneficial owner and take reasonable measures to verify their identity
- Assess and document the purpose and intended nature of the business relationship
- Conduct ongoing monitoring of transactions and keep information up to date
- Apply Enhanced Due Diligence when risk factors are elevated
Beneficial ownership identification (UBO rules):
- Any natural person holding >25% of shares or voting rights
- Any natural person exercising control through other means (shareholder agreements, veto rights, board appointment rights)
- If no natural person is identified, the senior managing official is recorded as UBO
- Multi-layered ownership must be traced through each level until a natural person is reached
Record-keeping: All CDD records and transaction data must be retained for 5 years after the end of the business relationship.
Risk-Based Approach - Entity Scoring Matrix
Score each dimension 1-3. Total score determines the CDD level.
| Dimension | Low Risk (1) | Medium Risk (2) | High Risk (3) |
|---|
| Entity type | Listed company, regulated institution | Standard limited company | Foundation, trust, partnership with bearer shares |
| Ownership transparency | Single UBO clearly identified | 2-3 UBO layers, all resolved | Complex chains, nominees, circular ownership |
| Jurisdiction | EU/EEA low-risk country | EU/EEA with noted deficiencies | High-risk third country (EU list), tax haven |
| Regulatory status | Licensed by national regulator (e.g., KNF) | No license required for activity | License required but not found |
| Industry | Manufacturing, tech, retail | Professional services, real estate | Crypto, gambling, cash-intensive, arms |
| PEP exposure | No PEPs in ownership/management | PEP in management but not ownership | PEP is UBO or controls entity |
| Adverse media | None found (screen completed) | Minor/historical issues | Active enforcement, sanctions, prosecution |
Adverse media - the fourth state: if the screen did not complete, the entity is UNSCORED on this dimension, not Low Risk (1). An incomplete screen is not "none found". See "Incomplete Screens" below - do not close the matrix until the screen is re-run and completes.
Scoring thresholds:
- 7-10: Standard CDD sufficient
- 11-15: Enhanced Due Diligence recommended
- 16-21: Enhanced Due Diligence required - consider whether to proceed
A total score is only valid when every dimension has been scored. If any dimension is UNSCORED, the file stays open.
Registry Selection by Entity Type and Country
Not every check applies to every entity. Use this matrix to determine which registries to query:
Poland (PL):
| Entity Type | CRBR (UBO) | KNF (License) | KRS (Board) | Recommended |
|---|
| Bank / payment institution | Yes | Critical | Yes | All three mandatory |
| Standard sp. z o.o. | Yes | If financial services | Yes | CRBR + KRS minimum |
| SA (joint-stock) | Yes | If financial services | Yes | CRBR + KRS minimum |
| Investment fund | Yes | Critical | Yes | All three mandatory |
| Sole proprietor (JDG) | N/A (no UBO filing) | If financial services | N/A | KNF if applicable |
France (FR):
| Entity Type | Societe.com | Recommended |
|---|
| SAS / SARL / SA | Yes - directors, shareholders, financials | Full profile check |
| Any entity with SIREN | Yes | Basic identity verification |
Austria (AT):
| Entity Type | WKO | Recommended |
|---|
| Chamber member (most businesses) | Yes - trade licenses, contact | WKO directory check |
| GmbH / AG | Yes | Cross-reference with Firmenbuch |
Spain (ES):
| Entity Type | Company Directory | Recommended |
|---|
| SL / SA | Yes - NIF, officers, CNAE | Company directory check |
| Any entity with NIF | Yes | Basic identity verification |
Red Flags Checklist
Watch for these indicators during the verification process:
Ownership red flags:
Regulatory red flags:
Board and management red flags:
Structural red flags:
Cross-Reference Decision Tree
Follow this sequence for a complete entity verification on a Polish company:
Step 1: CRBR Beneficial Owner Check
|
├── UBO identified and clear ──> Record, proceed to Step 2
├── UBO unclear or complex ──> Flag for Enhanced DD, proceed to Step 2
└── Entity not in CRBR ──> Check if entity type is exempt, if not - RED FLAG
|
Step 2: KNF Regulatory Status (if financial services)
|
├── Licensed and active ──> Record license type and number, proceed to Step 3
├── Licensed but warnings/conditions ──> Flag, proceed to Step 3
└── Not found but should be licensed ──> RED FLAG - stop and escalate
|
Step 3: KRS Board Composition
|
├── Board matches expected composition ──> Record, proceed to Step 4
├── Unusual patterns (see red flags) ──> Flag for review, proceed to Step 4
└── KRS number not found ──> Verify entity exists, possible data issue
|
Step 4: Cross-Reference and Scoring
|
├── Score entity using Risk Matrix above
├── Document all findings
└── Decision: Proceed / Enhanced Review / Reject
For French entities, start with Societe.com (directors + shareholders) then cross-reference.
For Austrian entities, start with WKO (business registration + trade license).
For Spanish entities, start with Company Directory (NIF, officers, CNAE codes).
For German entities, start with Handelsregister (identity, officers, filings).
For Italian entities, start with Registro Imprese (profile, P.IVA, officers, PEC).
For Belgian entities, start with KBO/BCE (company data, directors, VAT, NACEBEL).
For Slovak entities, start with RPVS (beneficial owners + PEP flag in one source).
For US (California) entities, start with California SoS (entity, agent, status).
For UAE (ADGM) entities, start with the ADGM public register.
PEP & Adverse-Media Overlay (any jurisdiction)
Two checks apply regardless of where the entity is registered and feed the "PEP exposure" and "Adverse media" rows of the Risk Matrix:
- Adverse media - run
regdata/adverse-media-screener on the entity name and on each identified UBO / senior manager. Active enforcement, sanctions, or prosecution results push the entity to High Risk (3) on that dimension and typically trigger Enhanced Due Diligence.
- PEP screening - for Poland,
regdata/poland-parliamentary-pep-scraper returns Sejm members across terms; for Slovakia, regdata/slovakia-rpvs-ubo-scraper already flags PEP status alongside the UBO. If a UBO or controlling person is a PEP, score PEP exposure at 3 and apply EDD.
Incomplete Screens - do not score them as clean
The adverse-media screener runs a set of searches per entity and tells you how many of them actually ran. A screen that could not be completed is not evidence of a clean entity, and must never be recorded as "None found".
| Field | Meaning |
|---|
screeningStatus | 'complete' - every planned search ran. 'partial' - some searches did not run; the result set is not exhaustive |
searchesRun / searchesTotal | How many of the planned searches actually executed. searchesRun < searchesTotal means coverage gaps |
overallRisk | The screen's own verdict. 'unknown' means the screen could not reach a verdict - treat as UNSCORED, not as low risk |
Entities that could not be screened at all are not returned as rows. They are written to a NOT_SCREENED key-value record on the run. So a 10-entity batch that comes back with 8 rows means 2 entities were never screened - read the NOT_SCREENED record and re-run them. Do not let a missing row read as a clean row.
How to handle each state:
screeningStatus: 'complete' and no hits -> Low Risk (1) on the adverse-media dimension. A real all-clear.screeningStatus: 'partial', or overallRisk: 'unknown', or the entity appears in NOT_SCREENED -> UNSCORED. Re-run. Record the gap in the compliance file, and do not sign off the CDD on the strength of an incomplete screen.
Optional: IBAN sanity-check (payment details)
When you also hold the counterparty's payout IBAN, a cheap extra check is worth running:
- Structure + checksum offline (no API needed). IBAN validity is a pure algorithm (ISO 13616 structure + ISO 7064 mod-97). Move the first 4 chars to the end, convert letters to numbers, and confirm the number mod 97 == 1. A failed checksum means a malformed or mistyped IBAN.
- Bank/BIC enrichment (optional API).
https://openiban.com/validate/{IBAN}?getBIC=true&validateBankCode=true (free, keyless) returns the bank name and BIC - but only for DACH + Benelux (DE, AT, CH, BE, NL, LU, LI); other countries return checksum-valid with no bank data. Community-run, no SLA - use for enrichment, not as the system of record.
This confirms the IBAN is well-formed and, where covered, which bank it routes to - a useful cross-check against the entity's registered country. It does not confirm account ownership.
Data Extraction - Live Registry Checks
The compliance framework above helps you structure the analysis. To actually pull live data from government registries, use the Apify actors below.
Authentication
Set your Apify API token before running any actor:
export APIFY_TOKEN=apify_api_xxxxx
Sign up for a free account with $5 credits (enough for 100-1,600 checks):
https://apify.com/regdata?fpr=getregdata
Actor Reference
Beneficial ownership, licensing & company identity by jurisdiction:
| Check | Actor ID | Input Example | Cost/Result |
|---|
| Beneficial Owners (PL) | regdata/crbr-beneficial-owners-scraper | {"nip": "6770065406"} | $0.008 |
| Beneficial Owners + PEP flag (SK) | regdata/slovakia-rpvs-ubo-scraper | {"query": "ESET"} | $0.007 |
| Financial License (PL) | regdata/knf-registry-scraper | {"name": "mBank"} | $0.004 |
| Board Members (PL) | regdata/krs-fullnames-scraper | {"krsNumbers": ["0000057567"]} | $0.008 |
| Company Profile (DE) | regdata/germany-handelsregister-scraper | {"searchQuery": "Zalando SE"} | $0.008 |
| Company Profile (IT) | regdata/italy-registro-imprese-scraper | {"query": "Ferrari"} | $0.01 |
| Company Profile (BE) | regdata/belgium-kbo-company-scraper | {"query": "0203201340"} | $0.008 |
| Company Profile (FR) | regdata/societe-com-scraper | {"sirenNumbers": ["552032534"]} | $0.005 |
| Company Directory (ES) | regdata/spain-company-directory-scraper | {"nifNumbers": ["A28015865"]} | $0.005 |
| Business Directory (AT) | regdata/wko-business-directory-scraper | {"searchQuery": "Wienerberger"} | $0.005 |
| Business Entity (US-CA) | regdata/california-sos-business-scraper | {"searchQuery": "Tesla"} | $0.025 |
| Company Register (UAE) | regdata/uae-adgm-public-register-scraper | {"query": "company name"} | $0.01 |
California SoS - the 500-match ceiling: the California registry returns at most 500 matches for a search term. A result list that hits the ceiling is reported as INCOMPLETE - the entity you want may exist and simply not be in the 500 rows you got back. Do not conclude "not registered in California" from a ceilinged list; narrow the search term (full registered name, or search by entity number) and re-run.
Universal risk overlays (apply to entities/persons in any jurisdiction):
| Check | Actor ID | Input Example | Cost/Result |
|---|
| Adverse Media / negative news | regdata/adverse-media-screener | {"query": "Wirecard AG"} | $0.10 |
| PEP screening (Poland Sejm) | regdata/poland-parliamentary-pep-scraper | {"term": "current"} | $0.004 |
MCP Mode (Recommended)
If you have the Apify MCP server configured, use the MCP tools directly:
1. call fetch-actor-details with the actor ID to get the full input schema
2. call call-actor with the actor ID and your input to run the check
3. results are returned directly - parse and analyze inline
This is the fastest path - no curl commands, no dataset polling.
API Mode (curl)
For each actor, the pattern is the same:
Start the actor run:
curl -X POST "https://api.apify.com/v2/acts/regdata~crbr-beneficial-owners-scraper/runs?token=$APIFY_TOKEN" \
-H "Content-Type: application/json" \
-d '{"nip": "6770065406"}'
Poll for completion (replace RUN_ID):
curl "https://api.apify.com/v2/actor-runs/RUN_ID?token=$APIFY_TOKEN"
Retrieve results:
curl "https://api.apify.com/v2/actor-runs/RUN_ID/dataset/items?token=$APIFY_TOKEN"
Replace crbr-beneficial-owners-scraper with the appropriate actor name and adjust the input JSON.
Synchronous Execution (Simple Cases)
For quick single-entity checks, use the synchronous endpoint which waits for completion:
curl -X POST "https://api.apify.com/v2/acts/regdata~crbr-beneficial-owners-scraper/run-sync-get-dataset-items?token=$APIFY_TOKEN" \
-H "Content-Type: application/json" \
-d '{"nip": "6770065406"}'
This returns results directly without polling - ideal for one-off checks.
Output Interpretation
CRBR - Beneficial Ownership Data
The CRBR actor returns beneficial owners as reported to the Polish Central Register of Beneficial Owners. Key fields:
- imie / nazwisko - First and last name of the beneficial owner
- udzialProcentowy - Percentage of ownership (direct and indirect)
- rodzajUprawnienia - Type of right: "wlasciciel" (owner), "inny" (other control)
- dataWpisu - Date of registration in CRBR
How to read ownership chains:
- If a single natural person holds >25%, they are the clear UBO
- If multiple persons hold smaller stakes, check if any has additional control rights
- If "inny" appears as the right type, investigate - this means control through means other than direct ownership (board rights, shareholder agreements, etc.)
- If the entity reports no beneficial owners, this is a red flag - every obliged entity must report at least one UBO
KNF - Financial License Status
The KNF actor returns entries from the Polish Financial Supervision Authority's registry. Key interpretations:
- Found with active status - Entity is licensed and supervised. Record the license category:
- Krajowa instytucja platnicza (domestic payment institution)
- Instytucja pieniadza elektronicznego (e-money institution)
- Firma pozyczkowa (lending company) - note: these are registered, not licensed
- Found with revoked/suspended status - Major red flag. Investigate the reason and timeline
- Not found - Either the entity does not require a license (most companies), or it should be licensed but is not. Cross-reference the entity's stated business activity with KNF's regulated categories
KRS - Board Composition
The KRS Board actor extracts non-anonymized names from KRS PDF documents. This is important because the standard eKRS portal anonymizes names.
Analysis points:
- Cross-reference board members against the UBO list from CRBR - overlaps are expected in smaller companies
- Check for board members appearing across multiple unrelated entities (possible professional nominee)
- Verify that the board composition matches the entity's articles of association (e.g., minimum board size)
- Recent changes in board composition, especially before a large transaction, warrant further investigation
Societe.com - French Company Profile
Returns comprehensive company data including:
- dirigeants - Directors and their roles
- actionnaires - Shareholders with ownership percentages
- chiffre_affaires - Revenue figures for financial health assessment
- filiales - Subsidiaries for group structure mapping
Cross-reference directors against the shareholder list to identify owner-managed companies vs. professionally managed entities.
WKO - Austrian Business Directory
Returns:
- Trade licenses held - Verify that licenses match the stated business activity
- Contact details - Physical address for verification (virtual office check)
- Chamber membership status - Active membership is expected for legitimate Austrian businesses
Spain Company Directory
Returns:
- NIF verification - Confirms entity is registered
- Officers (apoderados, administradores) - Named representatives and their authority types
- CNAE codes - Industry classification for risk assessment
- Legal form - SL, SA, etc. for entity type verification
- EUID - European Unique Identifier for cross-border verification
Putting It All Together - Sample Workflow
Here is a complete KYC check for a Polish sp. z o.o. (limited liability company):
User: "I need to verify a Polish company before onboarding them as a supplier.
NIP: 6770065406, KRS: 0000057567"
Step 1 - CRBR check:
Run: regdata/crbr-beneficial-owners-scraper with {"nip": "6770065406"}
Result: Identify all beneficial owners, ownership percentages, control types
Analysis: Are UBOs clearly identified? Any complex structures?
Step 2 - KNF check (if entity is in financial services):
Run: regdata/knf-registry-scraper with {"name": "Company Name"}
Result: License status, type, any conditions or warnings
Analysis: Does the license match the stated activity?
Step 3 - KRS Board check:
Run: regdata/krs-fullnames-scraper with {"krsNumbers": ["0000057567"]}
Result: Full board member names (non-anonymized)
Analysis: Cross-reference against CRBR UBOs. Any red flags?
Step 4 - Score and decide:
Apply the Risk Scoring Matrix
Document findings in compliance file
Decision: Proceed / Enhanced Review / Reject
Total cost for a full 3-registry Polish check (CRBR + KNF + KRS Board): approximately $0.020 per entity.
Related Skills
- regdata-credit-risk - Financial health assessment, insolvency monitoring (KRZ, MSiG, KRS Financial, Ediktsdatei, Germany Insolvency, Czech ISIR, Spain Concursal, California UCC, BORME). Use after KYC to assess the entity's financial stability.
- regdata-property - Property due diligence and ownership verification (EKW, KRS, CRBR). Use when the entity owns or is transacting real estate.
- regdata-lead-gen - B2B prospecting and decision-maker discovery. Not for compliance - use when building prospect lists.
- regdata-compliance - Consumer protection and environmental compliance (UOKiK, BDO). Use for regulatory compliance beyond KYC/AML.
