Cyprus Beneficial Ownership in 2026: Open Shareholders, Closed UBOs

Cyprus is the EU jurisdiction where the beneficial-ownership register's whole life cycle played out in fast-forward. Built in 2021, opened to the public in June 2022 for €3.50 a search, shut to the public within five months when the Court of Justice struck down open access, and re-tooled since with automatic fines, a senior-management fallback and a mandatory annual confirmation — the Cyprus UBO Register is now a serious compliance instrument that almost nobody outside the regulated sector can read. Layer on the Island's defining feature — a corporate-services industry built on nominee directors and shareholders who owe no duty to disclose that they are nominees — and Cyprus becomes one of the sharpest tests in Europe of the difference between a register that exists and data you can use. This guide sets out what the Register requires, who can reach it in 2026, where the public corporate layer actually helps, and how to verify a Cypriot UBO from outside the perimeter.

01Built, opened, closed: the fastest register story in the EU

Cyprus transposed the EU's Fourth and Fifth AML Directives through amendments to the Prevention and Suppression of Money Laundering and Terrorist Financing Law (Law 188(I)/2007), and the Department of the Registrar of Companies and Intellectual Property launched the Register of Beneficial Owners in March 2021, first as an interim system and then as the full electronic platform at ubo.meci.gov.cy. Existing entities were given twelve months to file. In June 2022 the Registrar opened access to obliged entities and the general public alike, for a fee of €3.50 per company. On 22 November 2022 the CJEU, in the joined Sovim and WM cases, held general public access to beneficial-ownership data invalid; the Registrar suspended public access from 23 November 2022 and announced it formally on 28 November. The public window had lasted five months.

What survived the shutdown is the register itself, its filing duties and its authority-and-obliged-entity access — and what has been added since is enforcement. For a verifier the timeline is the whole lesson: Cyprus is not a jurisdiction without beneficial-ownership data; it is one where the data exists, is confirmed annually under penalty, and is closed to you.

Interactive: the life of the Cyprus UBO Register

Click a milestone to see what changed and what it means for verification

02Who is a beneficial owner: the more-than-25% test

The Cypriot beneficial-owner test

Law 188(I)/2007 as amended — the EU cascade, Cypriot wording

1

Ownership — more than 25%A natural person who directly or indirectly holds more than 25% of the shares or voting rights of the entity.

2

Control by other meansA natural person who otherwise exercises control — veto rights, the power to appoint or remove directors, shareholder agreements — at any percentage.

3

Fallback — the senior management officialWhere no natural person is identified under the first two limbs, the entity records its senior management official instead — so every entry ends in a named person.

03The filing clocks: 90, 45, and every autumn

Three deadlines structure the regime. A newly incorporated entity must file its beneficial owners within 90 days. Any change — and the Registrar treats even a beneficial owner's passport renewal as a change — must be filed within 45 days. And every entity must submit an annual confirmation of its beneficial-ownership information between 1 October and 31 December, whether or not anything changed: silence is non-compliance. Each record carries the beneficial owner's full name, date of birth, nationality, country of residence, and the nature and extent of the interest — percentage of shares or votes, or a description of the control mechanism — with identity documents held at the registered office and producible to the Registrar on request.

The annual confirmation is the feature that distinguishes Cyprus from most EU registers: it converts a one-off filing into a yearly, penalised attestation. For a verifier it means a Cypriot record has a knowable freshness — confirmed within the last calendar year — and that a counterparty can be asked for its confirmation receipt as evidence the record is current.

04Penalties: reformed down, enforced up

The original penalty regime was severe on paper: €200 on the first day of default and €100 for each further day, up to €20,000, imposed on the entity and its officers. Law 141(I)/2024, in effect from February 2025, reset it: €100 on the first day and €50 for each further day, capped at €5,000 per entity — imposed on the entity alone, with directors and the secretary no longer fined separately but jointly and severally liable for the entity's fine unless they show due diligence. The Registrar's own confirmation notices state the new figures verbatim, and stress that the fines are automatic and apply irrespective of any criminal liability.

The reduction was not leniency for its own sake — the Registrar acknowledged that many defaults were technical, notably passport-renewal changes missed within 45 days — and it came paired with stronger enforcement machinery and the annual-confirmation attestation. Read the pair together: smaller headline fines, more of them, applied automatically, on top of criminal exposure for deliberate breaches. Sources still quoting €20,000 are describing the pre-2025 regime.

Interactive: what a late filing costs

Drag to set the days of non-compliance — the old and current regimes side by side

Days late: 30

Since Feb 2025 (cap €5,000)

cap

€0

Pre-2025 (cap €20,000)

cap

€0

05Access in 2026: who can read the Register

Who can see the Cyprus UBO Register

The position after the November 2022 suspension

Who	Access	Basis
Competent & supervisory authorities, MOKAS	Full	Central Bank, CySEC, Tax Department, MOKAS (the FIU), law enforcement — under Directive R.A.A. 112/2021 as amended
Obliged entities	On request	Banks, CSPs, lawyers, accountants and other AML-obliged businesses: a request per entity, a solemn declaration that the search is for customer due diligence, and a €3.50 fee
Legitimate-interest applicants	Direction of travel	The AMLD6 model Cyprus must transpose; no general operating route confirmed by the Registrar as of writing — treat as pending
The general public	Suspended	Since 23 November 2022, following the CJEU judgment in C-37/20 and C-601/20

Interactive: what can you see?

Pick your role — the table shows which Cypriot sources open for you

Source	Directors	Legal shareholders	Beneficial owners

06The public layer: what the Registrar does show

Here Cyprus is better than its reputation. The Registrar of Companies runs a public e-search — free basic lookup of name, number, status, registered office and type — and an e-filing system through which company documents can be purchased and downloaded: certificates of directors and secretary, of registered office, of shareholders, the memorandum and articles, and filed annual returns and accounts. That shareholder disclosure is the key fact: unlike Korea, Mexico or the 2006-Act Isle of Man company, a Cypriot company's legal shareholders are on the public record for a fee. The catch is in the next section.

07The nominee problem

Cyprus's corporate-services sector is large, licensed and, historically, built on nominee directors, secretaries and shareholders holding for foreign clients — and Cypriot law imposes no obligation to disclose nominee status in company filings. The shareholder certificate you buy may show a licensed administrative-service provider, a fiduciary company or a professional's employee, with nothing on its face to say they hold for someone else. So the public shareholder layer answers "who is the registered holder" and, for a large slice of foreign-owned Cypriot companies, that answer is a nominee. Two facts sharpen the picture. First, the nominees are themselves regulated: fiduciary and corporate services are a licensed activity for Administrative Service Providers under the Fiduciaries Law (Law 196(I)/2012), supervised by CySEC, while lawyers and accountants providing the same services answer to their own bodies — and all of them are obliged entities with customer-due-diligence duties on the clients they front for. The nominee, in other words, is a regulated party who by law knows the beneficial owner. Second, obliged entities that find a mismatch between an entity's Register entry and their own CDD must report the discrepancy to the Registrar, so the closed register is policed from inside the perimeter by the very gatekeepers who populate it. The UBO Register was built precisely to see through nominee holdings — and it is the layer you cannot read. The verification craft is therefore pattern recognition on the public filings (recurring provider names, provider addresses as registered offices, provider staff as directors), then a request for the UBO filing and confirmation receipt through the counterparty, and the chain above resolved in its own jurisdictions.

08The second register: trusts at CySEC

Cyprus did not build one beneficial-ownership register but two. Alongside the company register at the Registrar sits the Register of Beneficial Owners of Express Trusts and Similar Legal Arrangements, created by Article 61C of the AML Law and operated by the Cyprus Securities and Exchange Commission under its Directive of 18 June 2021 (R.A.A. 257/2021). Any express trust whose trustee is resident in Cyprus — or whose non-EU trustee enters a business relationship or buys immovable property here on the trust's behalf — must be registered by the trustee: settlor, trustee, protector and beneficiaries (or classes of beneficiaries, with the rights of each class), the trust's governing law and, where relevant, Cypriot property titles. New trusts register within 15 days of the trustee's appointment; changes are notified within 15 days. Trusts arising by operation of law are outside it.

The trusts register is closed on the same lines as the company register: the Tax Department, Police and Customs read it without restriction; obliged entities on legitimate CDD grounds; the public not at all. For a verifier the point is structural — a Cyprus International Trust above a Cypriot holding company is not merely "invisible": its beneficial owners are on a state register you cannot see, held by a trustee who is regulated and knows. The request routes to the trustee, and the trustee's own registration is the document to ask about.

09The evaluation context

Cyprus is assessed by MONEYVAL, and its 2019 fifth-round evaluation placed it in enhanced follow-up with beneficial-ownership transparency among the areas for improvement — the pressure under which the Register was built in 2021 and its enforcement tightened since. Cyprus has never been on the FATF grey list. The next structural change is external: the EU's AMLR and AMLD6 package, applying from July 2027 with the register provisions earlier, will move the threshold wording to "25% or more," standardise the legitimate-interest access model, and connect the Cypriot register to the EU's interconnection platform — the point at which the "direction of travel" row in the access table becomes a rule.

10Where to look: sources, access and cost

The Cyprus source map

What each system gives you, and what it costs

Source	What it gives you	Access & cost
Registrar e-search (companies.gov.cy)	Name, number, status, type, registered office	Free — English and Greek
Registrar e-filing documents	Certificates of directors/secretary, registered office, shareholders; M&A; annual returns; accounts	Paid — per-certificate fees, instant download
UBO Register (ubo.meci.gov.cy)	Beneficial owners at >25% or by control; SMO fallback	Not public — authorities; obliged entities on declaration at €3.50/entity
The entity's own filing & confirmation	The declared UBOs and the annual confirmation receipt	Via counterparty
CySEC / Cyprus Stock Exchange	Listed issuers: major-holding and governance disclosures	Free

Zavia.ai vs the Cyprus Registrar of Companies and the UBO Register

A field-by-field comparison — what each official source returns, and what Zavia.ai returns on top of it

Dimension	Registrar of Companies (DRCIP) — company register	Register of Beneficial Owners (ubo.meci.gov.cy)	Zavia.ai
Operated by	Department of the Registrar of Companies and Intellectual Property	The same Department, as a separate electronic register under Law 188(I)/2007	Zavia.ai — sourced directly from the official registries, not third-party aggregation
Who can use it	Anyone	Authorities; obliged entities on declaration; public suspended since Nov 2022	Any compliance, data or product team, anywhere
Entity existence & status	Yes — free e-search	Not its purpose	Yes — the same official record, structured
Officers	Yes — certificate of directors and secretary (paid)	SMO recorded only where no UBO is identified	Yes — officers structured and linked across entities
Legal shareholders	Yes — certificate of shareholders (paid); nominee status not disclosed	Not its purpose	Yes — with nominee-pattern flags and chain resolution through corporate holders
Beneficial owners	No	Yes at >25% or by control — closed to non-obliged verifiers	Ownership chain mapped from official registry data through EU and offshore layers to the natural person; the entity's UBO filing is a benchmark, not replaced
Threshold applied	None	Fixed by law: more than 25%; moving to "25% or more" under the AMLR	Configurable to your policy across every jurisdiction
Cross-border chain resolution	Cypriot entities only	Cypriot entities only	100+ countries in one query — the UK, Luxembourg, Netherlands and offshore layers above a Cypriot company included
Freshness	Filings as last submitted	Annual confirmation each Oct–Dec; changes within 45 days	Real-time updates from official registries, with ownership-change monitoring
Screening	None	None	Sanctions and PEP overlays on resolved individuals
Cost	Free search; per-certificate fees	€3.50 per entity for obliged entities; unavailable to others	Subscription — self-serve plans from $49/month; enterprise licensing for API and bulk
Delivery	Manual portal, one entity at a time	Portal for permitted users	API, bulk data feeds, online platform, MCP integration for AI agents
Audit trail	Documents you assemble	N/A for non-users	Auditable, timestamped resolution path with source provenance

11The entity landscape

Cypriot vehicles and where ownership sits

The structures a verifier will meet

Vehicle	Form	Where ownership sits
Private company limited by shares	Ltd (Cap. 113)	The workhorse — shareholders on paid certificates, often nominees; UBOs on the Register
Public company / listed	Plc / CSE-listed	Listed issuers exempt from the Register; major holdings disclosed under securities law
Partnership	General / limited	Partners registered with the Registrar; in scope of the UBO Register
Cyprus International Trust	CIT	Not a legal person; trustees regulated; beneficial interests traced through the cascade where a CIT holds a company
Foreign branch	Overseas company	Registered with the Registrar; UBO obligations governed by the home jurisdiction

Two further layers complete the map. Cyprus is a sizeable EU fund domicile — alternative investment funds, registered AIFs and UCITS under CySEC supervision, with investor identities held by licensed administrators and depositaries rather than any public register; a fund in a Cypriot chain resolves through its administrator, and its manager's own ownership through the company and UBO registers like any other entity. And the closed registers are not unshared: Cyprus exchanges under a FATCA intergovernmental agreement and the OECD Common Reporting Standard, and the AMLD6 interconnection will link its beneficial-ownership registers to those of the other member states — closed to you, open state to state.

12Chains: Cyprus in the structure

Where a Cypriot ownership chain resolves

A typical holding structure, entity to individual

1

The Cypriot LtdRegistrar shows existence, directors, registered shareholders — often a licensed nominee.

2

The nominee or fiduciary layerA Cypriot service provider holding on trust — undisclosed as such on the filing; the UBO Register looks through it.

3

The parent or trustAn EU holding company, a Cyprus International Trust, or an offshore vehicle — resolved in its own jurisdiction.

4

Natural-person UBOOn the Register at >25% or by control, confirmed annually — invisible to you, mandatory for them.

13A worked example

Take a Limassol holding Ltd. The Registrar's shareholder certificate shows a single corporate shareholder — a Cypriot fiduciary company — and two directors employed by the same provider. Behind the fiduciary, the customer says, sits a Cyprus International Trust; behind the trust, a family.

Run the regime. On the public layer you have the entity, its officers and its registered shareholder — and the pattern (provider as shareholder, provider staff as directors, provider address as registered office) tells you the shareholder is a nominee, even though nothing on the certificate says so. The UBO Register, which the entity had to populate within 90 days and confirm every autumn, holds the family members above 25% or the person controlling the trust's decisions — and it is closed to you. So: establish the entity at the Registrar; buy the certificates; read the nominee pattern; request the entity's UBO filing and its latest annual-confirmation receipt through the counterparty; route the trust question to the regulated trustee; and reconcile the names against the chain you built. A filing that names only the senior management official for a structure like this is a finding, not an answer.

14Common failure modes

15How to verify a Cypriot UBO: workflow

1. Establish the entity. Registrar e-search for existence, status, type and registered office.
2. Buy the certificates. Directors and secretary, registered office, shareholders, and the latest annual return.
3. Read for nominees. Provider names, provider staff, provider addresses — treat a fiduciary or service-provider shareholder as a nominee until shown otherwise.
4. Apply the Cypriot test. More than 25% of shares or votes, direct or indirect; control by other means; SMO fallback only where neither yields a person.
5. Request the UBO filing and confirmation. The entity's declared beneficial owners and its most recent annual-confirmation receipt, through the counterparty; check the 45-day change clock against known events.
6. Resolve the layers above. EU parents in their own registers, offshore layers under their own rules, trusts through the regulated trustee.
7. Screen and evidence. Sanctions, PEP and adverse-media checks on the resolved individuals, with an auditable trail.

16Practical takeaways

Cyprus rewards the verifier who reads its two layers for what they are. The open one is unusually generous — legal shareholders on the public record for a fee — and unusually deceptive, because the holder is so often a nominee with no duty to say so. The closed one is a real register, confirmed annually under automatic penalty, and it will open a little further under the EU's new framework — but not yet, and not to you. Build the workflow around the Registrar's certificates, the nominee pattern, the entity's own filing and confirmation, and the chain above — and treat a Cypriot counterparty that cannot produce its UBO filing as having answered the question a different way.

17Frequently asked questions