KYC for Logistics Companies: What to Check and When

Table of Contents

KYC for logistics companies means identifying and verifying every party you move goods for, not only the one that pays your invoice. That covers the booking party, the shipper of record, the consignee, the notify party and the ultimate consignee. Most of those parties never sign anything with you. You still carry screening and record keeping duties for them.

A bank has one customer per account. A 3PL can have eight named parties on a single house bill, plus a co-loader, a trucker, a customs broker and a warehouse account holder. The contractual relationship and the risk relationship are rarely the same thing. What follows is what to collect, who to screen, when to reopen the file, and what to do when the box is already on a vessel.

What KYC means when your customer is a shipper, not a depositor

Financial KYC has a settled shape. Identify the customer, verify the identity against independent sources, find the beneficial owners, understand the purpose of the relationship, monitor it. The FATF 40 Recommendations set that baseline and national rules build on it. Recommendation 10 covers customer due diligence. Recommendation 11 covers records.

Logistics providers sit outside most of that perimeter. In many countries a freight forwarder is not a regulated AML obliged entity at all. That is not a free pass. Sanctions law binds everyone in the jurisdiction regardless of sector, export control rules on knowledge and diversion apply to carriers and forwarders in their own right, and customs law adds declaration accuracy duties on top. So the logistics KYC file has a different centre of gravity. Identity still matters, but the heaviest questions are about cargo, route, end use and control.

Who is behind this booking, and is that party listed or majority owned by a listed party?
What is actually in the container, and does it need a licence?
Where is it really going, as opposed to where the bill says it is going?
Who takes possession at the far end, and does the money route match the trade route?

The parties on a shipment, and which ones you actually know

Booking party versus shipper of record

The party that books space is often not the party that owns the goods. A trading company books, a manufacturer loads, an unrelated finance house pays. Each is a separate entity with a separate risk profile. Treat the shipper of record on the bill as a second screening subject, even if you never invoice them.

The practical test is simple. If the name goes on a transport document you issue or file, it goes through your denied party screening tool before the document is released.

Consolidation and the house bill problem

In a consolidation you issue house bills to your customers and the carrier issues one master bill to you. Your name sits in the shipper box of the master. That has two consequences.

First, the carrier screens you, not your customers. Their clean result tells you nothing about the parties inside the box. Second, if one house bill in that consolidation names a listed party, the whole container is contaminated and you are the party of record on the master. Nobody downstream is checking the underlying shippers and consignees for you.

Co-loading makes this worse. When you accept cargo from another NVOCC you inherit their customer without ever meeting them. Ask for the underlying house bill details as a condition of acceptance. If a co-loader refuses to disclose the ultimate consignee, that refusal is itself the answer. The same discipline applies when you hand cargo over, which is why screening your freight forwarder counterparties belongs in the onboarding file and not in an annual review.

Notify parties and the address that is not an address

Notify parties get skipped because they feel administrative. A notify party is often the only clue to who is really taking delivery. Screen the name and check the address. A serviced office, a residential flat receiving industrial goods, or a port agent standing in for an unnamed principal earns one more question before release.

What to collect, by role

Not every party needs a full onboarding pack. A contracted customer does. A notify party you see once does not. Adjust the split below to your risk appetite, but write it down so staff apply it the same way.

Party role	What you collect	What you screen	Refresh
Contracted customer (shipper or importer)	Registration certificate, registry extract, EORI or equivalent trader number, ownership above 25 percent, signatory ID, trade lanes, commodity list	Entity, owners, directors, signatories, addresses	Annual, or on trigger
Shipper of record (not your customer)	Legal name, full address, trader number if declared	Entity and address, per shipment	Every booking
Consignee and ultimate consignee	Legal name, delivery address, end use statement for controlled goods	Entity, address, end use red flags	Every booking
Notify party and agent	Legal name and address	Entity and address	Every booking
Co-loader or NVOCC counterparty	Licence or registration, underlying house bill parties, ownership	Entity, owners, and all disclosed underlying parties	Annual plus per consolidation
Warehouse account holder	Registration, ownership, goods description, title arrangements, release authority list	Entity, owners, named release authorities	Annual plus on title change
Third party payer	Legal name, country, relationship to the cargo, reason for paying	Entity, owners, jurisdiction	Every instance

Registry extracts are cheap and decisive. Companies House, ACRA in Singapore, the Handelsregister in Germany and their equivalents confirm that an entity exists, who directs it and whether it has been struck off. EU VAT numbers validate through VIES. An LEI gives you an identifier that survives name changes.

Screening ownership, not only the name

A name check catches the obvious cases. It misses the entity that is majority owned by a listed party but not itself named. Under US sanctions practice, an entity owned 50 percent or more, directly or indirectly, in the aggregate, by one or more blocked persons is treated as blocked itself. The EU applies an ownership test at the same level and adds a separate control test. Our note on the 50 percent rule in sanctions screening walks through how aggregation works when two listed parties each hold a minority stake.

For a forwarder this matters most with newly formed trading companies in transshipment hubs. Six months old, one director, buying goods a business of that size has no obvious use for. Nothing on a list. The ownership chain is where the answer sits.

Collect ownership above 25 percent for contracted customers. Where the chain runs through a jurisdiction with no public registry, ask for a signed ownership declaration and a structure chart, then note in the file that you could not verify it independently. A documented limitation is defensible. A silent gap is not.

Warehousing, bonded storage and the change of title problem

Storage introduces a risk that transport does not. Goods sit still while ownership moves. You onboarded the account holder in March. In September the cargo is sold to a party you have never heard of, and the first you know is a release instruction naming a new collector. Build three controls into the warehouse agreement.

A contractual duty on the account holder to notify you of any transfer of title in stored goods before collection.
A named release authority list, maintained in writing, with screening applied to every name added.
A block on release to any party not already on the file, until that party has been screened and approved.

Bonded and free zone storage needs a tighter version of the same thing. Goods in a free zone have not entered the customs territory, which is why they attract diversion schemes. Duration is a signal. Cargo that sits for an unusually long period with no commercial explanation, then leaves in split consignments to a country other than the one declared on arrival, is worth a second look. Several indicators in our list of sanctions evasion red flags show up first in a warehouse record rather than a booking.

When to reopen the file

Annual refresh is the floor, not the control. A customer who was clean at onboarding can be designated the following week. Rescreen your customer master against updated lists on a regular cycle, and define events that force a fresh look regardless of the calendar.

A new trade lane, particularly one running through a known transshipment hub.
A first shipment of a commodity the customer has never moved before.
A change of consignee or delivery address after the booking is confirmed, or a request to reissue a bill of lading or change the discharge port in transit.
Payment from an entity or country unrelated to the customer or the cargo.
A change in directors, shareholders or registered address at the customer.
Adverse media naming the customer or its owners.

Name the owner of each trigger too. A change of delivery address is spotted by operations, a change of payer by finance, and neither department acts unless the policy says it must.

Handling a hit on cargo that is already moving

Most guidance stops at the onboarding gate. Freight does not. You will get hits on boxes that are gated in, loaded or at sea.

Confirm the match first, because most alerts in a well tuned system are false positives on common names and transliterations. Compare address, date of birth or incorporation, registration number and jurisdiction before you escalate. Our note on resolving false positives sets out the fields that actually discriminate.

If the match is real, stop movement and stop payment. Do not release the cargo, issue the delivery order, or remit freight collected on the shipment. Notify the carrier, because a blocked party in the chain affects them as principal. Then take legal advice on your reporting duty in every jurisdiction the shipment touches, since the duty to report and the ban on dealing can both bite in more than one place.

Be careful what you tell the customer. In several jurisdictions telling a party that a report has been made is itself an offence. Say the shipment is on hold pending compliance review. Say nothing about lists, reports or authorities.

Records and the audit trail

A screening you cannot evidence is a screening you did not do. That is how an inspector will treat it.

Each screening event should record the name string submitted, the lists and versions checked, the date and time, the user, the result, and the rationale for any alert cleared. Keep the underlying documents alongside it: registry extracts, ownership declarations, end use statements and transport documents. Five years from the transaction date is a common minimum across AML, customs and export control regimes, and several run longer. Store to the longest period that applies to you. Our guidance on record keeping for denied party screening covers the field level detail.

Keep evidence of screenings that returned nothing, not only the ones that produced a hit. The clean record proves the control was running on the day in question.

Making it work at freight volume

A forwarder handling a few hundred bookings a month cannot screen by hand at every touch point. Put automated screening where a name first enters your system and where it changes. Five control points cover it.

Customer creation in the TMS or CRM. Full onboarding pack, ownership, screening, approval recorded.
Booking confirmation. All named parties screened, including shipper, consignee, notify and any agent.
Document issue. Rescreen if any party or address changed since booking.
Release or delivery. Screen the collecting party against the release authority list.
Invoice and payment. Screen any third party payer before applying the receipt.

Name matching decides whether staff trust the system. Tune the thresholds, measure the false positive rate, review it quarterly. If staff clear alerts in bulk to hit a cutoff, the control has stopped working even though the log looks healthy.

Smaller operators can start without buying anything. Globalior’s free screening tool runs names against the major restricted party lists, enough to cover the per booking checks while you build the rest of the programme.

Key takeaways

The paying customer and the risk-bearing party are frequently different entities, so the KYC file must cover parties you never contract with.
In a consolidation the carrier screens you, not the underlying shippers and consignees on your house bills, so that burden sits entirely with you.
US sanctions treat an entity as blocked when listed persons own 50 percent or more of it in aggregate, even if the entity is named on no list.
Warehouse storage needs a contractual notification duty on title transfer plus a maintained release authority list, because ownership changes while goods sit still.
Defined trigger events, such as a changed consignee or a third party payer, should reopen a file regardless of when the annual review falls due.
Every screening event should log the name string, list versions, timestamp, user, result and clearance rationale, keeping clean results as well as hits.

Frequently asked questions

Are freight forwarders legally required to do KYC?

In most countries a forwarder is not an AML obliged entity, so the customer due diligence rules that bind banks do not apply directly. Sanctions and export control law binds everyone, and both turn on what you knew or should have known. KYC is how you build and evidence that knowledge.

Do I need to screen the consignee if I only handle the export leg?

Yes. The consignee and ultimate consignee are the parties most likely to carry a designation or an end use problem, and they appear on documents you issue. Handling one leg does not limit your exposure, because the prohibition attaches to facilitating a dealing with a blocked party anywhere in the chain.

What documents should I ask a new logistics customer for?

A registry extract, a current officers and shareholders listing, the trader identification number used for customs in their country, identification for the person signing your agreement, and a written description of the commodities and trade lanes they expect to move. For controlled goods, add an end use statement. Verify the registry data yourself.

How do I handle a co-loader who will not disclose the underlying parties?

Treat non-disclosure as a decline. You cannot screen a party you cannot see, and your name sits on the master bill covering that cargo. Make disclosure of house bill party details a written condition of accepting co-load freight. Reputable NVOCCs provide it as standard.

What is the difference between KYC and denied party screening here?

Screening is one check inside KYC. It compares a name against restricted party lists at a point in time. KYC is the wider file: who the entity is, who owns it, what it trades and where it ships. Screening answers a list question. KYC answers whether the relationship is what it appears to be.

If you want a second opinion on how your booking and release controls are structured, get in touch with the Globalior team. You can also run a denied party screening check on any name in your customer master right now.