How to Verify a UBO (Ultimate Beneficial Owner) in Ireland in 2026

Last updated: 27 October 2026 · Reviewed against S.I. No. 110 of 2019 and S.I. No. 406 of 2026 (Irish Statute Book), the RBO Annual Report 2024, Revenue’s CRBOT guidance, the Central Bank’s register guidance, the CJEU judgment in C-37/20 and the FATF list of June 2026

Ireland has one of the most layered UBO frameworks in the EU, and the easiest one to get wrong.

There are three separate registers. Public access to the main one ended in November 2022. Designated persons can log in. For four years everyone else, including most foreign obliged entities, had to apply on paper and wait. In August 2026 Ireland rewrote the rules: a foreign obliged entity is now deemed to have a legitimate interest — but it still needs a certificate from the Registrar before it can look. And the entire framework is about to be replaced by the EU AML Package in July 2027.

This guide cuts through it. What each register actually contains, who can access what in 2026, the workaround obliged entities use when RBO access is denied, and what changes when the AMLR takes effect next year.

The Three Irish UBO Registers

Most jurisdictions have one beneficial ownership register. Ireland has three, each managed by a different authority and covering different entity types. Knowing which one applies is the first step.

If you are verifying an Irish private limited company, you need the RBO. If the structure includes a trust with Irish trustees or Irish-administered assets, you also need CRBOT. If the entity is an investment fund, the Central Bank's register applies. Cross-border structures often touch all three.

Where the Data Actually Comes From

Before going deeper into how each register works, it matters where the data originates. Not all UBO and shareholder data is equal — and the difference between a government source and a third-party aggregator is the difference between an audit-ready filing and a regulatory finding.

What "government source" means

A government source is a register operated by a state authority where filings are made directly by the entity (or its agent) under a legal obligation. The data is the legal record. Ireland operates three:

• The CRO (Companies Registration Office) — the source for registered shareholder data. Filings are made by the company itself under the Companies Act 2014. Operates the CORE portal at core.cro.ie.
• The RBO (Register of Beneficial Ownership) — the source for declared UBO data. Filings made directly by the company under Statutory Instrument 110 of 2019. Verified against Revenue's PPSN database.
• CRBOT (Central Register of Beneficial Ownership of Trusts) — the source for trust UBO data. Filings made by trustees under the European Union (Anti-Money Laundering: Beneficial Ownership of Trusts) Regulations 2021. Operated by the Revenue Commissioners through ROS.

Third-party aggregators repackage this data, sometimes with added intelligence layers, but the original source is always one of the three above. When a regulator audits your KYC file, they trace the data back to its origin. A clean audit trail starts with a known government source.

What you can pull, what's free, what's paid

Two practical points for cross-border obliged entities:

• The CRO is the realistic UBO data source for foreign obliged entities. It does not hold beneficial ownership declarations, but it does hold the registered shareholder data needed to calculate UBO. Per-document fees are nominal (€2.50–€15). Bulk licensing makes sense only at scale.
• The RBO and CRBOT are free to access — if you can get in. Filing fees are zero, access fees are zero. The bottleneck is qualification. Foreign obliged entities outside the EU rarely qualify directly and either work through Irish designated persons or rely on platforms that aggregate the underlying CRO shareholder data.

The RBO: What It Holds and Who Can Access It

The RBO is the main register and the one most foreign obliged entities are searching for. It was established by Statutory Instrument 110 of 2019, transposing Article 30 of the EU's 4th Anti-Money Laundering Directive, and last amended by S.I. No. 406 of 2026.

By the end of 2024, the RBO held filings for 276,891 companies (88.17% of registered entities) and 703 societies, according to the RBO’s Annual Report 2024. Each filing must include, for every beneficial owner:

• Forename and surname
• Date of birth
• Personal Public Service Number (PPSN) or Identified Person Number for non-residents
• Nationality
• Residential address
• A statement of the nature and extent of the interest held (ownership, voting rights, control)

A beneficial owner is any natural person who ultimately owns or controls more than 25% of shares, voting rights, or ownership interest, or who exercises control through other means. Where no natural person meets the threshold, the senior managing official is filed as the UBO.

Who can access the RBO in 2026

This is where Ireland gets restrictive. After the Court of Justice of the European Union ruled in November 2022, in WM and Sovim (C-37/20 and C-601/20), that unrestricted public access to UBO registers breached the EU Charter rights to privacy and data protection, Ireland closed the public-facing portal. The restriction was passed into Irish law in June 2023.

Today, three categories of users can access RBO data:

The general public can confirm an entity exists on the register and see the number of beneficial owners filed, but no personal details are returned.

The legitimate interest route after S.I. 406 of 2026

If you are a foreign obliged entity, particularly one outside the EU, you are not a "designated person" under Irish law. Until August 2026 that left a narrow paper application under the 2023 rules, which required a link to a high-risk jurisdiction or to a person convicted of a money laundering or terrorist financing offence. Here is the pivot that surprises people: the August 2026 regulations turned that around. An entity subject to AML/CFT requirements in a third country is now deemed to have a legitimate interest, provided it shows it needs the data for customer due diligence on a customer or prospective customer.

Deemed is not automatic. You still make a submission to the Registrar, the Registrar weighs your function and your connection to the specific entity, and a certificate is issued or refused with written reasons and a right of appeal. Refusal grounds include missing documents, a reasonable concern that the data will be misused, and — for an applicant outside the EU — a transfer that would breach Chapter V of the GDPR. From 10 November 2026 the Registrar must decide within 12 working days. For a routine onboarding check, the route is now usable; for a check you need today, it is still slower than the CRO.

The Workaround: Using the CRO for UBO Verification

When the RBO is inaccessible, obliged entities fall back on the Companies Registration Office (CRO). The CRO is Ireland's company register, separate from the RBO, and most of its data is publicly accessible through the CORE portal at core.cro.ie.

The CRO holds 430,000+ entities. It does not hold beneficial ownership declarations, but it does hold the raw shareholder data you need to calculate UBO yourself.

What you can pull from the CRO

Every Irish company files a B1 Annual Return. The first is due six months after incorporation. The annual return contains the registered shareholder list with shareholding percentages, which is the core data you need to trace beneficial ownership.

The limits of the CRO route

The CRO route works for surface ownership but breaks down at the next layer. The B1 lists registered shareholders, who are often other companies, nominee structures, or trusts. To resolve the chain to a natural person, you have to repeat the process for every shareholder entity, in every jurisdiction. For a five-layer cross-border structure, that is dozens of registry searches in different jurisdictions, different languages, different systems, and different fee structures.

There is also a quality issue. The CRO does not verify shareholder data the way the RBO verifies UBO data against PPSN records. If a B1 contains errors, those errors stay in the public record until a court orders correction.

CRBOT: The Trust Register

If the structure being verified involves a trust, the CRO and RBO will not show it. Trusts are filed separately on the Central Register of Beneficial Ownership of Trusts (CRBOT), managed by the Revenue Commissioners.

A trust must register with CRBOT if any of the following apply:

• The trustees are resident in Ireland
• The trust is otherwise administered in Ireland
• A trustee enters into a business relationship in Ireland
• A trustee acquires real property in Ireland in the name of the trust

This catches more than purely Irish structures. UK trusts, EU trusts, and non-EU trusts that hold policies or property through Irish providers are all in scope. Revenue’s CRBOT guidance sets out which trusts must register, including non-resident trusts with an Irish nexus.

For each trust, CRBOT requires details on the settlor, trustees, beneficiaries (or class of beneficiaries), protector if any, and any other natural person exercising effective control. Trust changes must be filed within 14 days. Access mirrors the RBO model: competent authorities have full access, designated persons can access for CDD purposes, and others must demonstrate legitimate interest.

What This Means for Cross-Border UBO Verification

For a foreign obliged entity verifying an Irish counterparty in 2026, the practical position is:

1. The RBO is technically closed to you. Unless you qualify as an Irish designated person, you cannot log in and pull beneficial ownership data directly.
2. The CRO is open but incomplete. You can pull B1 annual returns and constitutions to see registered shareholders, but you have to resolve the chain yourself across multiple jurisdictions.
3. CRBOT is closed to you for the same reason as the RBO. If a trust is in the structure, you are working with a major data gap.
4. Designated persons can be partners. Some Irish banks, law firms, and corporate service providers will conduct RBO checks on your behalf as part of a wider due diligence engagement, but this is slow and expensive.

The result is that UBO verification in Ireland is heavily dependent on either Irish licensed intermediaries or platforms that aggregate the underlying CRO data and resolve the ownership chain across borders automatically. The same pattern — a closed UBO register beside an open shareholder register — runs through Cyprus, while the Netherlands reopened access to its own institutions in 2026 but not yet to outsiders.

How to Approach UBO Verification in Ireland

Here is a practical workflow for verifying a UBO on an Irish entity from outside Ireland.

Step 1: Identify the entity type

Search CORE at core.cro.ie. Confirm the company name, CRO number, status (active, dissolved, in liquidation), and entity type. If the entity is a trust, ICAV, or credit union, redirect to CRBOT or the Central Bank's register.

Step 2: Pull the latest B1 Annual Return

For most private limited companies, the most recent B1 lists registered shareholders and their shareholding percentages. This is your primary ownership data. Cost is typically €2.50–€15 through CORE.

Step 3: Pull the constitution

The original Memorandum and Articles of Association show the initial shareholders at incorporation and any class structure that affects voting rights. A 50/50 ownership split on paper can mask a control imbalance through golden shares or veto rights.

Step 4: Resolve corporate shareholders

If any shareholder is itself a company, repeat steps 1–3 for that entity. Then for the shareholders of that entity. Continue until every owner in the chain is a natural person, a regulated public entity, or a structure that ends in a trust or opaque jurisdiction.

Step 5: Calculate effective ownership

Multiply percentages through each layer. A natural person owning 60% of a holding company that owns 50% of the Irish entity has 30% effective ownership of the Irish entity, above the UBO threshold.

Step 6: Check for control through other means

Voting agreements, board appointment rights, and shareholder agreements can establish control without breaching the 25% threshold. These are not always disclosed in CRO filings. Where the structure looks fragmented (for example, five shareholders each at exactly 19% or 24%), treat it as deliberate threshold avoidance and apply Enhanced Due Diligence.

Step 7: Screen the identified UBOs

Sanctions lists, PEP databases, and adverse media should run on every UBO identified. A cleanly resolved ownership chain is meaningless if the natural person at the end is sanctioned or under investigation.

The 2027 Reset: AMLR and AMLD6

Everything described above is about to change. The EU's new AML package was published in 2024 and takes effect across two key dates:

• 10 July 2026 — Member States must transpose Articles 11–13 and 15 of the 6th Anti-Money Laundering Directive (AMLD6), covering the further development of beneficial ownership registers
• 10 July 2027 — The Anti-Money Laundering Regulation (AMLR) becomes directly applicable in all EU member states, replacing the patchwork of national transpositions

For Ireland, the practical consequences are:

For UBO data providers, this is a structural shift. The current model, where each EU country runs a separate register on different rules, will give way to a connected EU-wide framework with consistent access standards. Obliged entities should plan for a transition period from late 2026 through 2027 where both regimes operate in parallel.

Common Failure Points in Irish UBO Filings

For internal compliance teams reviewing whether an Irish entity has filed correctly, these are the most common reasons RBO submissions are rejected. They are also useful red flags when reviewing third-party RBO outputs:

• Name mismatches with Revenue records. Middle names, accented characters, and maiden vs. married names cause rejection. Sean and Seán are accepted as the same; Sean and John are not.
• PPSN errors. A failed PPSN match triggers an automatic rejection. In 2024, the RBO issued 4,087 GDPR notification letters to data subjects whose details had been used in failed submissions.
• Late filing. New companies have five months from incorporation to file. Changes must be filed within 14 days. Beyond the legal penalty (up to €5,000 summary, €500,000 on indictment), late filing is now grounds for involuntary strike-off under the Companies Act 2024.
• Senior Managing Official used as default. When no natural person meets the threshold, the SMO is filed. This is legal but should trigger Enhanced Due Diligence on your end.
• Missing internal register. Every Irish company is required to maintain its own internal beneficial ownership register at its registered office. The internal register should mirror the RBO filing exactly.