September 24, 2026

Control Prong vs Ownership Prong: The Two Tests of Beneficial Ownership

Axle Team

Key takeaways

The control prong means one natural person with significant responsibility to control, manage, or direct the legal entity customer. It is mandatory for every legal entity customer, even when the ownership prong returns nobody.
The ownership prong is a 25 percent equity test and returns zero to four individuals. FinCEN's 2018 CDD FAQs call the two prongs independent requirements.
Nonprofits, non-excluded pooled investment vehicles, and many trust-owned entities give you no natural person on the ownership side. The control prong is what you hold.
FinCEN's February 2026 exceptive relief ends mandatory re-verification at every new account, so the initial control-prong determination matters more, not less.
The CDD control prong is a single-person test. The Corporate Transparency Act's "substantial control" is a broader, multi-person test. Don't map one onto the other.

What the control prong means under the CDD Rule

Under FinCEN's Customer Due Diligence Rule, the control prong means a covered financial institution must identify one individual with significant responsibility to control, manage, or direct a legal entity customer, such as a CEO, CFO, managing member, or general partner. It applies to every legal entity customer, regardless of whether anyone meets the 25 percent ownership prong.

The regulatory text at 31 CFR 1010.230(d)(2) defines the second half of the beneficial owner definition this way:

A single individual with significant responsibility to control, manage, or direct a legal entity customer, including: (i) An executive officer or senior manager (e.g., a Chief Executive Officer, Chief Financial Officer, Chief Operating Officer, Managing Member, General Partner, President, Vice President, or Treasurer); or (ii) Any other individual who regularly performs similar functions.
— 31 CFR 1010.230(d)(2), Legal Information Institute

Two things in that sentence do the work. "Single individual" means the rule wants exactly one name, though your policy may collect more. "Regularly performs similar functions" means the title on the certification form is not dispositive. A person who runs the company without a C-suite title qualifies; a figurehead with the title may not.

Ownership prong vs control prong: side by side

The ownership prong, at 1010.230(d)(1), captures each individual who directly or indirectly owns 25 percent or more of the equity interests of the legal entity customer. The FFIEC BSA/AML Examination Manual states the arithmetic plainly:

Identification of a beneficial owner under the ownership prong is not required if no individual owns 25 percent or more of a legal entity customer. Therefore, all legal entity customers will have a total of between one and five beneficial owner(s) – one individual under the control prong and zero to four individuals under the ownership prong.
— FFIEC BSA/AML Examination Manual, Beneficial Ownership Requirements for Legal Entity Customers

Test — Ownership prong: 25% or more of equity interests, directly or indirectly. Control prong: Significant responsibility to control, manage, or direct.
How many people — Ownership prong: Zero to four. Control prong: One (institutions may identify more).
Can return nobody? — Ownership prong: Yes. Control prong: No.
Trust holds 25%+ — Ownership prong: The trustee is the beneficial owner, and may be a legal entity. Control prong: Still requires a natural person.
Nonprofits, non-excluded pooled vehicles — Ownership prong: Not applicable. Control prong: Applies.
Typical evasion — Ownership prong: Splitting equity below 25%. Control prong: Nominee officers and managers.

The FFIEC manual adds that staff who know, suspect, or have reason to suspect equity holders are structuring below the threshold may need to file a SAR. Five owners at 20 percent each is not automatically suspicious, but it deserves a second look.

Where the control prong does the real work

For a company with two 50 percent owners, the control prong is almost a formality. It earns its place in three other situations.

Entities with no 25 percent owner. Widely held private companies, employee-owned businesses, and family companies split six ways all return an empty ownership prong. The control person is the only natural person you will hold.

Trust-owned entities. When a trust owns 25 percent or more, the trustee is the beneficial owner under the ownership prong, and the trustee may itself be a law firm or bank trust department. FinCEN's 2018 FAQs then make the point that matters:

The ownership/equity and control prongs, although related, are independent requirements. Thus, satisfaction of, or exclusion from, regulatory obligations under one prong does not mean a covered financial institution's obligations under the other prong are also satisfied or excluded.
— FinCEN, Frequently Asked Questions Regarding Customer Due Diligence Requirements, Question 20

Pooled investment vehicles and nonprofits. FAQ 18 says institutions need not look through a non-excluded pooled investment vehicle for 25 percent owners, but must still collect a control person such as a portfolio manager or general partner. Where the manager is itself an entity, identify the individual who controls the manager. FAQ 23 applies the same control-only treatment to every state-filed nonprofit, tax-exempt or not.

Five ways onboarding teams get the control prong wrong

Accepting whoever signed the form. The person completing the certification is often the controller or outside accountant. Signing is not directing.
Treating control as a fallback. Some procedures only ask for a control person when the ownership prong is empty. The rule requires one every time.
Rejecting a person who appears under both prongs. In the 2016 final rule's "Mom & Pop, LLC" example, each spouse holds 50 percent and one is President. FinCEN wrote that the control person "could be either Mr. or Mrs. Smith, or a third person who otherwise satisfies the definition." Overlap is expected.
Recording an entity or a title instead of a person. A corporate manager or "the Board" does not satisfy the prong. Keep going up until you reach a human.
Importing Corporate Transparency Act logic. Under 31 CFR 1010.380, "substantial control" reaches any senior officer, anyone who can appoint or remove senior officers, and anyone who directs important decisions. It is a different test, and after FinCEN's August 2026 final rule it applies only to foreign-formed entities registered in a U.S. state. There is no domestic BOI database to lean on.

Verification, and what changed in February 2026

Verification of the control person follows the same risk-based, CIP-equivalent procedures as any other beneficial owner, with the CDD Rule's explicit allowance for photocopied identity documents. What changed this year is the trigger. In Order FIN-2026-R001, FinCEN relieved covered institutions from re-identifying and re-verifying beneficial owners at each new account opening, limiting the obligation to three circumstances:

(1) when a legal entity customer first opens an account with a covered financial institution; (2) any time thereafter when the covered financial institution has knowledge of facts that would reasonably call into question the reliability of beneficial ownership information previously obtained about the legal entity customer; and (3) as needed based on a covered financial institution's risk-based procedures for conducting ongoing customer due diligence.
— FinCEN, Order FIN-2026-R001, Exceptive Relief from Requirement to Identify and Verify Beneficial Owners at Each Account Opening (February 13, 2026)

The practical consequence: the control person recorded at first onboarding may sit unrefreshed for years unless your ongoing due diligence defines what "facts that would reasonably call into question" looks like. Officer changes on the state registry, new authorized signers, and instructions from someone not on file are the obvious candidates. The relief is optional; institutions may keep per-account recertification.

A practitioner's view: the control prong is the cheaper prong to fake

Buying nominee ownership takes real equity paperwork and a counterparty willing to hold it. Buying a nominee manager is a state filing and a fee. So the control person is the field on the certification most likely to be a straw person, and the one most onboarding procedures scrutinize least.

The workflow that catches this is a three-way match: the control person on the certification, the officers on the Secretary of State record, and the human actually instructing the account (authorized signers, whoever calls the relationship manager, whoever logs into online banking). A mismatch is not a violation. It is the trigger for enhanced due diligence. The trade-off is minutes per file at onboarding versus catching a nominee at a periodic review that, under the new relief, may be years away.

Step by step: adjudicating the control prong at onboarding

Obtain the certification (Appendix A or equivalent) and confirm the named control person is a natural person.
Sanity-check the role against the entity type. A managing member of a member-managed LLC is plausible. A "consultant" is not.
Cross-check the name against formation documents, the operating agreement, or the state registry's officer list.
Verify identity under your CIP-equivalent beneficial ownership procedures.
Screen the control person for sanctions, PEP status, and adverse media. For trust-owned and widely held entities, this is often the only natural person you will screen.
Record why this person was chosen when several officers qualify, and define the events that reopen the determination.

Teams running this at volume automate steps 2, 3, and 5. Axle's KYB onboarding workflow and the Justin diligence agent pull registry officer data and screen the control person as part of the file, so analyst time goes to the mismatches. The AI readiness playbook covers what to have in place before making that change.

FAQ

Can the same person be identified under both the ownership prong and the control prong?

Yes. FinCEN's 2016 preamble example has a 50 percent owner who is also President satisfying both prongs. The prongs are independent tests, not mutually exclusive categories.

Does the control prong apply to nonprofits and charities?

Yes. Nonprofit corporations and similar entities that have filed organizational documents with a state are excluded from the ownership prong because they have no equity interests, but FinCEN's FAQ 23 confirms institutions must still collect a control person from every such entity.

Is the CDD control prong the same as "substantial control" under the Corporate Transparency Act?

No. The CDD control prong asks for one individual with significant responsibility to control, manage, or direct the customer. The CTA's substantial control test can capture several people, and since August 2026 it applies only to foreign-formed reporting companies.

If your onboarding team is still adjudicating control persons by reading PDFs against a registry tab, see how the Justin diligence agent handles the collection, cross-check, and screening in one pass.

Control Prong vs Ownership Prong: The Two Tests of Beneficial Ownership

More from the blog