Spain AML and UBO Compliance: Why Deals Stall Over Beneficial Ownership and Source of Funds

A foreign company can negotiate an acquisition in Spain, arrange the financing, agree on the documents, and still miss its closing because its bank or notary cannot verify who ultimately owns the buyer or where the money came from.

This surprises many U.S. and other foreign companies. In Spain, identifying the ultimate beneficial owner, or UBO, is not a bank-account formality. Beneficial ownership and know-your-customer requirements affect company formations, acquisitions, real estate purchases, investments, bank accounts, share transfers, and other transactions involving Spanish banks, notaries, registrars, lawyers, accountants, and other regulated professionals. The rules are demanding, but much of the trouble they cause is avoidable. Companies get caught when they wait until shortly before signing or closing to find out what ownership and source-of-funds documents Spain will require.

For the broader legal issues involved in establishing or operating a Spanish business, see our Doing Business in Spain: A Legal Guide for Foreign Companies and U.S. Businesses.

Spain Wants to Know Who Actually Owns the Company

Spain's principal anti-money laundering statute is Law 10/2010 on the Prevention of Money Laundering and Terrorist Financing. It requires covered institutions and professionals to identify the beneficial owner and take appropriate measures to verify that person's identity before establishing a business relationship or carrying out a covered transaction. (BOE)

For most privately held companies, a beneficial owner is a natural person who ultimately owns or controls, directly or indirectly, more than 25 percent of the company's capital or voting rights. A person can also qualify through other means of control without crossing that ownership threshold. If no natural person satisfies either test, the company's administrator or administrators are treated as exercising control for beneficial-ownership purposes. (BOE)

The inquiry therefore does not stop with the immediate shareholder when that shareholder is another company. If a Spanish company is owned by a Dutch holding company, which is owned by a Delaware company, the review continues through the ownership structure until the relevant natural persons are identified. Spanish law generally prohibits obliged entities from establishing or maintaining a business relationship with a legal entity whose ownership and control structure cannot be determined. (BOE) Complicated international structures are where delays become common, although complexity by itself is not the problem. The problem is reaching closing with an ownership structure that nobody has documented well enough for the Spanish institution being asked to rely on it.

For U.S. Companies, the Corporate Transparency Act Is the Wrong Reference Point

American companies have good reason to think beneficial-ownership reporting is receding. FinCEN issued a final rule on August 11, 2026, effective August 14, that exempts companies created in the United States from federal beneficial-ownership reporting under the Corporate Transparency Act. Only certain foreign entities registered to do business in the United States remain reporting companies, and they do not report beneficial-ownership information for U.S. persons. (FinCEN)

Do not carry that assumption into Spain. Spain continues to require beneficial-owner identification in ordinary corporate and transactional settings, and its requirements do not sit in a single annual federal filing. They arise when a company needs a bank, notary, registrar, lawyer, accountant, or other regulated professional to do something necessary to the transaction.

Banks Are Only Part of the KYC Process

Companies sometimes treat Spanish AML compliance as something their bank will handle. The law reaches considerably further. Spain's sujetos obligados, or obliged entities, include banks and many other financial institutions, auditors, external accountants, tax advisers, notaries, property and commercial registrars, real estate professionals, and certain corporate and fiduciary service providers. Lawyers also fall within the regime when they participate in specified financial, corporate, real estate, company-formation, asset-management, and similar transactions.

The rules for lawyers require more care than a simple statement that lawyers must report anything suspicious. Law 10/2010 excludes specified information received while a lawyer is determining a client's legal position or defending or advising a client in connection with judicial proceedings from certain AML obligations, and it expressly preserves professional secrecy. (BOE)

For ordinary transactional work, however, a Spanish bank, notary, lawyer, accountant, or other obliged entity cannot disregard missing KYC information because the parties want to close. If the required due diligence cannot be completed, Law 10/2010 generally prohibits the obliged entity from establishing the relationship or carrying out the transaction. (BOE)

The compliance risk is real. Failure to satisfy beneficial-owner identification and information requirements is generally classified as a serious infringement under Law 10/2010. Serious infringements carry a mandatory fine starting at €60,000, with substantially higher statutory ceilings depending on the circumstances, though specified isolated or occasional failures can be treated differently. (BOE)

That helps explain why telling a Spanish bank that another bank accepted the same paperwork rarely gets very far.

Spain's KYC Requirements Are Risk-Based, Not a Fixed Checklist

There is no single statutory package of documents that every foreign investor must hand over in every Spanish transaction. Law 10/2010 expressly takes a risk-based approach. The level of due diligence depends on factors including the customer, business relationship, product, and transaction, and the obliged entity must be able to justify that its procedures match the money-laundering and terrorist-financing risk it identified. (BOE) An operating company owned directly by two individuals is therefore a different compliance file from an investment vehicle sitting beneath several holding companies, trusts, family entities, or companies from multiple jurisdictions.

In practice, the documents usually need to establish four things. First comes identity: passports or other accepted identification for the relevant individuals and Spanish NIE or other tax-identification numbers where required. Second comes existence and authority: corporate registry records, organizational documents, powers of attorney, or other evidence showing that the foreign entities exist and that the people signing for them have authority to do so. Third comes ownership: a structure that can be traced through intermediate entities to the natural persons who ultimately own or control the company. Finally comes economic purpose and provenance: enough information about the business activity and, where the risk analysis requires it, the origin of the money.

Foreign public documents that are to take effect in Spain generally require legalization or a Hague Apostille unless an exemption applies. Documents not in Spanish can also require an official Spanish translation. Exactly what must be apostilled, translated, or produced in original form depends on the document, the country that issued it, and the Spanish institution receiving it. (Spanish Ministry of Foreign Affairs)

Risk can change the file quickly. If a client or beneficial owner is a politically exposed person, Spanish law requires enhanced due diligence and extends specified measures to family members and close associates. Connections to higher-risk jurisdictions can likewise increase the scrutiny applied to the transaction. (BOE) The fact that one Spanish bank or notary asked for less on another transaction does not establish what the next institution must accept. Risk-based compliance produces differences among institutions and among transactions.

Expect Questions About the Source of Funds

Identifying the UBO does not end the AML analysis. Spanish law requires obliged entities to understand the purpose and expected nature of the relationship, obtain information about the client's business or professional activity, and monitor transactions against the client's business and risk profile. That ongoing monitoring expressly includes the origin of funds. (BOE)

How much evidence is required depends on the circumstances. A salaried individual making a modest investment does not present the same compliance profile as a special-purpose company wiring several million euros through a chain of holding companies. For an individual buyer or investor, supporting evidence can include tax returns, employment income, investment records, documentation of a business sale, inheritance records, or bank statements. A corporate investor can instead be asked for financial statements, tax filings, loan agreements, dividend records, transaction documents, or evidence showing how the investing company acquired the money it is sending to Spain.

A bank statement establishes that money is in an account. It does not necessarily establish where the money came from. That distinction becomes important in substantial real estate acquisitions, investments, and other transactions where funds have passed through several people, entities, or accounts before reaching Spain. Foreign buyers considering Spanish real estate should also review our Buying Property in Spain: What Foreign Buyers Need to Know Before They Sign, because ownership structure, banking, tax, and AML issues often converge in property transactions.

Spain Has a Central UBO Register — and RETIR Is Not It

The terminology here is confusing enough to matter. Royal Decree 609/2023 created Spain's Registro Central de Titularidades Reales, or RCTIR, a nationwide central beneficial-ownership register managed by the Ministry of Justice. The RCTIR has operated since September 19, 2023 and consolidates information from official sources including the Mercantile Registries, the notarial beneficial-ownership database, and registers for foundations and associations. (Spanish Ministry of Justice)

That should not be confused with RETIR, the Registro de Titularidades Reales operated by Spain's College of Registrars. RETIR contains beneficial-ownership information drawn from the Mercantile Registries and is one of the sources feeding the central RCTIR. (Registradores de España) The distinction is not merely linguistic. Spanish mercantile companies must keep their beneficial-ownership information current. When beneficial ownership changes, administrators generally must file a new beneficial-ownership declaration with the appropriate Mercantile Registry within ten days beginning the day after they learn of the change. (BOE)

Failure to provide required beneficial-ownership information can also lead to cierre registral, or registry closure. Royal Decree 609/2023 expressly provides for closure when an entity required to report beneficial ownership fails to identify it on the required beneficial-ownership filing or omits that information when depositing its annual accounts. A registry closure can then prevent registration of later corporate acts until the problem is corrected, subject to limited statutory exceptions. (BOE) Beneficial-ownership reporting is therefore part of ordinary corporate maintenance. It is not something to think about only when a bank asks for a KYC form.

Who Can See the UBO Information?

RCTIR is not a database that anyone can freely search without restriction. Competent authorities receive broad access. Obliged entities can obtain current information for their AML compliance work. Other people and organizations generally must establish a legitimate interest, and the information available to them is more limited. The Ministry of Justice states that legitimate-interest access is restricted to specified information such as the beneficial owner's name, month and year of birth, country of residence and nationality, and the nature of the beneficial ownership. Media organizations and qualifying civil-society organizations involved in combating money laundering and terrorist financing receive special treatment in establishing legitimate interest. (Spanish Ministry of Justice)

This approach follows the Court of Justice of the European Union's November 2022 decision in Joined Cases C-37/20 and C-601/20. The court invalidated the EU rule that made beneficial-ownership information available in all cases to every member of the general public, holding that unrestricted access interfered disproportionately with privacy and data-protection rights. (Court of Justice of the European Union) Spain has therefore moved a long way from corporate anonymity without making every piece of beneficial-ownership information freely available to everyone.

The Rules Change Again in July 2027

Companies planning investments or maintaining long-term structures in Spain should also be looking ahead. Regulation (EU) 2024/1624, the European Union's new directly applicable Anti-Money Laundering Regulation, applies generally beginning July 10, 2027. It will harmonize important parts of beneficial-ownership analysis across the EU. (EUR-Lex)

One change is easy to miss because it consists of a single word. Current Spanish law uses more than 25 percent as the ordinary ownership threshold. The new EU regulation uses 25 percent or more. A natural person holding exactly 25 percent therefore falls on the other side of the line once the new rule applies. (BOE) The regulation also states expressly how indirect ownership is to be calculated: percentages are multiplied through an ownership chain, and the results from different chains are added together. All shareholdings at every level must be taken into account. (EUR-Lex)

Foreign groups with multi-layered structures should rerun their beneficial-ownership analysis before July 2027 rather than assume an old ownership chart still produces the right result. The important point is not that Spanish institutions necessarily ignore aggregated ownership today. The new regulation supplies an express, harmonized EU calculation rule, which makes the analysis harder to treat differently from one jurisdiction or institution to another.

The regulation also creates a mechanism for lower ownership thresholds for categories of companies presenting greater money-laundering or terrorist-financing risk. Those lower thresholds do not automatically arrive in July 2027. The Commission is to assess the relevant higher-risk categories by July 10, 2029 and can then adopt delegated acts establishing lower thresholds. The regulation contemplates a 15 percent threshold in that context, or a higher figure below 25 percent where the Commission concludes that is more proportionate to the risk. (EUR-Lex) For companies with structures intended to last, today's UBO analysis should not be treated as something that can be completed once and forgotten.

Do the AML Work Before It Starts Running the Deal

Most Spain AML problems are sequencing problems. The lawyers negotiate the acquisition agreement, the tax advisers approve the structure, the parties select a closing date, and only then does somebody send the ownership documents to the bank or notary. For a transaction involving foreign ownership, that sequence creates unnecessary risk.

At the beginning of the matter, identify the entity entering the transaction and the entity sending the money. Trace the ownership structure to the relevant natural persons. Work out which foreign corporate records will need legalization or apostilles, which documents will require Spanish translation, who needs an NIE or NIF, and what evidence is available to explain the source of significant investment funds.

The document mechanics can have their own timetable. NIE procedures, for example, vary depending on where and how the application is filed. The Spanish Embassy in Washington currently states that NIE applications there can be submitted without an appointment and are normally processed in 20–30 days, while also warning that the consulate cannot expedite the Spanish authorities' processing. Other consular procedures differ. The useful rule is therefore not to count on a universal NIE timetable, but to start the process early. (Spanish Embassy in Washington)

Powers of attorney require similar planning. For a U.S. power of attorney executed before a local notary and intended for use in Spain, Spanish consular guidance calls for a Hague Apostille after execution and a sworn Spanish translation when the document is in English. The precise route should be settled with Spanish counsel before someone signs a form that later proves unusable. (Spanish Consulate in Washington)

Banks warrant separate attention because their internal compliance standards and risk tolerances differ. Documents accepted by one Spanish bank, notary, or professional do not guarantee acceptance by the next one, and changing banks shortly before closing usually creates another compliance review rather than solving the first one.

For a foreign company entering or investing in Spain, beneficial-ownership and source-of-funds work belongs in the transaction plan at the beginning, alongside tax structure, financing, and the closing timetable. That is especially important where the ownership structure involves trusts, family offices, private investment vehicles, several jurisdictions, politically exposed persons, or money that has moved through multiple entities or accounts.

The cost of doing that work early is usually modest compared with the cost of watching an incorporation, acquisition, investment, bank transfer, or property closing stall while people in several countries search for corporate records, signatures, apostilles, translations, and evidence that should have been assembled before the closing date was set.