The short answer
KYB (Know Your Business) is the entity-level verification that acquirers and payment processors perform on a business before opening a merchant account. It answers: does this business legally exist, who owns it, what does it actually sell, and is it legitimate? KYB complements KYC (which verifies individuals). Both are required under BSA / AML / Patriot Act rules, and additionally under FinCEN's Corporate Transparency Act / Beneficial Ownership Information (BOI) reporting since 2024.
What KYB collects
- Articles of incorporation or formation. Filed with the state of incorporation.
- EIN letter. IRS confirmation of the employer identification number.
- Beneficial owner disclosure. Every individual owning 25%+ of the entity. Required per FinCEN BOI rule.
- Operating agreement / bylaws. For LLC / corp, the document governing internal operations.
- Bank statements. 3-6 months of business checking account, to verify operational activity and cash flow.
- Voided check or bank letter. Proof the settlement account is owned by the business.
- Website + marketing materials. Reviewed to confirm the actual business matches the application.
- Merchant processing history. Statements from prior processors, if any.
What the acquirer verifies
- Entity is in good standing with the state of incorporation (no delinquent filings, no dissolution).
- Website matches the business. Domain registration, content, refund policy, privacy policy, contact info all consistent with the application.
- No prior MATCH list placements for the entity or its principals.
- MCC code aligned with actual activity. If you claim "health & wellness" but the site is a SARMs store, the acquirer will see it.
- Beneficial ownership complete. All 25%+ owners disclosed, each of whom will be KYC'd.
- Bank statements show normal operating activity consistent with the business.
FinCEN BOI reporting (Corporate Transparency Act)
Since January 1, 2024, most US entities must file Beneficial Ownership Information with FinCEN. This is separate from what the acquirer collects — FinCEN is the federal reporting layer, the acquirer is the underwriting layer — but the data overlaps. Entities not in compliance with BOI reporting will have underwriting issues across the board.
Common KYB friction
- Website doesn't match application. Application says "nutraceuticals," site is selling SARMs. Immediate escalation.
- Missing refund policy or contact info on site. Required for consumer-facing e-commerce.
- Bank statements show minimal activity. Acquirer wants to see you're a real operating business, not a shell.
- Corporate structure involves offshore entities. Possible but adds weeks and documentation requirements (beneficial ownership down to the ultimate human).
- MCC mismatch. Claiming a low-risk MCC for a high-risk product is a fast-track to decline.
Why multi-brand operators care
Every sub-brand you operate is a separate legal entity that needs its own KYB. With multiflow, the parent operator entity is KYB'd once, and new sub-brands roll up via a streamlined entity disclosure rather than full re-underwriting. This cuts onboarding from 2-4 weeks per new brand to 2-4 days.