What the Corporate Transparency Act Requires
The CTA requires "reporting companies" — domestic and foreign entities formed or registered with a state secretary of state — to file Beneficial Ownership Information (BOI) reports with FinCEN. A BOI report must identify:
The reporting company: legal name, trade names (DBAs), address, state of formation, and EIN/TIN.
Beneficial owners: any individual who either (1) exercises substantial control over the company, or (2) owns or controls at least 25% of the ownership interests. Substantial control covers senior officers, board authority, and any other significant influence over major decisions.
Company applicants (new formations only): the individual who filed the formation documents and, if different, the individual who directed the filing.
Reports must be updated within 30 days of any change in beneficial ownership or company information. FinCEN maintains the BOI database under strict access controls — available only to law enforcement, national security agencies, and authorised financial institutions for customer due diligence.
Who Must Comply
The following entities are subject to BOI / CTA Compliance Hub obligations:
- →U.S. corporations, LLCs, and similar entities formed by filing with a state secretary of state
- →Foreign entities registered to do business in any U.S. state or territory
- →Companies formed or registered on or after 1 January 2024 (30-day filing deadline from formation)
- →Companies formed or registered before 1 January 2024 (deadline subject to enforcement reinstatement)
- →Any company with a change in beneficial ownership or company information (30-day update deadline)
- →DAO LLCs and Web3 structures registered under state law
- →Holding companies, shell companies, and single-member LLCs (subject to limited exemptions)
Penalties and Enforcement History
Wilful failure to file or update a BOI report, or wilful provision of false information, carries civil penalties of $591 per day (inflation-adjusted) up to $10,000, and criminal penalties of up to two years' imprisonment and a $10,000 fine. The "wilful" standard requires knowing or reckless non-compliance — good-faith reliance on FinCEN guidance may be a defence. 23 categories of entities are exempt, including: large operating companies (>20 full-time U.S. employees + >$5M U.S. gross receipts + U.S. physical office), SEC-reporting companies, banks, credit unions, insurance companies, registered investment advisers, registered broker-dealers, and tax-exempt entities. Subsidiaries of exempt entities may or may not qualify separately — subsidiary exemptions have specific qualification criteria.
Enforcement Timeline
Regulatory Comparison
| Dimension | FinCEN BOI (CTA) | EU UBO Registers | UK PSC Register |
|---|---|---|---|
| Applicability | U.S. + foreign entities registered in U.S. | EU member state companies | UK companies and LLPs |
| Public Access | Non-public (law enforcement + authorised FIs) | Public (varies by Member State) | Public (Companies House) |
| Max Civil Penalty | $591/day up to $10,000 | Varies (€5K–€50K) | Unlimited fine |
| Ownership Threshold | 25% OR substantial control | 25% (varies by state) | 25% ownership |
| Update Deadline | 30 days from change | 14 days (varies) | 14 days |
| Criminal Exposure | Yes — 2 years imprisonment | Varies | Yes — 2 years imprisonment |
Mitigation Strategy
Map every U.S. and foreign entity in your corporate group that was formed or registered by state filing. For each entity, identify: (1) all individuals with 25%+ direct or indirect ownership, (2) all senior officers (CEO, CFO, COO, president, general counsel), and (3) any individual with substantial control (board authority, veto rights, major decision authority). Document the analysis and maintain it as a living record — it must be updated within 30 days of any qualifying change.
Access FinCEN's Beneficial Ownership IT (BOIT) system at fincen.gov/boi to file initial reports. Each beneficial owner must provide: full legal name, date of birth, residential address, and a unique identifying number from an acceptable document (U.S. passport, state driver's license, or FinCEN identifier). Retain copies of all filed reports and identification documents for at least 5 years. Use FinCEN identifiers for owners appearing across multiple group entities to simplify future updates.
Beneficial owners change through M&A transactions, equity transfers, officer appointments or departures, reorganisations, and death or incapacity. Designate a responsible officer to monitor triggering events and file updated BOI reports within 30 days. Integrate BOI update obligations into M&A diligence checklists, employment agreements for senior officers, and equity capitalisation table governance procedures. The BOI-Tracker agent can automate monitoring and provide alerts when ownership events occur.
Frequently Asked Questions
A: Yes, in most cases. Single-member LLCs formed by filing with a state secretary of state are "reporting companies" under the CTA, regardless of size or revenue. The exception is if the LLC independently qualifies for one of the 23 statutory exemptions — for example, the large operating company exemption (>20 full-time U.S. employees, >$5M gross receipts, U.S. physical office). A disregarded entity owned by an exempt entity may qualify for the subsidiary exemption, but the owner must independently qualify as exempt — exemption does not automatically pass through.
A: A company must file an updated BOI report within 30 days of any change in: (1) a beneficial owner's legal name, address, or identifying document; (2) the reporting company's legal name, trade names, address, or EIN; (3) a previously reported beneficial owner no longer meeting the definition (ownership drops below 25% and substantial control is absent); or (4) a new individual acquiring 25%+ ownership or substantial control. M&A transactions, equity sales, officer appointments or departures, and relocation all commonly trigger update obligations.
A: A beneficial owner is any individual who, directly or indirectly, either: (1) exercises "substantial control" over the reporting company — serving as a senior officer, having authority over the board, or having significant influence over major business decisions; or (2) owns or controls 25% or more of the ownership interests through any combination of direct and indirect holdings. There is no minimum threshold for substantial control — a 1% owner who controls all major decisions is a beneficial owner. Options, warrants, and convertible instruments count if currently exercisable.
A: No. The FinCEN BOI database is strictly non-public. Access is limited to: (1) federal law enforcement agencies; (2) state and local law enforcement with a court order; (3) foreign law enforcement via applicable treaties; (4) Treasury Department personnel for tax administration and national security; and (5) federally regulated financial institutions with customer due diligence obligations, subject to customer consent. Unauthorised disclosure of BOI is itself a criminal violation — up to $500/day civil and 5 years' imprisonment.
A: DAO LLCs and other Web3 entities registered under state law (Wyoming DAO LLCs, Delaware LLCs) are generally reporting companies. Token holders are typically not beneficial owners unless they hold 25%+ of tokens representing ownership interests and those tokens confer economic rights, not merely governance rights. Smart-contract-based ownership structures require specific beneficial ownership analysis — indirect ownership through voting trust, proxy, or contract arrangements all count toward the 25% threshold. FinCEN has not issued specific guidance for DAOs, so analysis must proceed under the general rule with conservative assumptions.
BOI Filing Guide → Who must file, 23 exemption categories, step-by-step FinCEN BOIT system walkthrough, and 30-day update trigger checklist.
This hub was written and is maintained by an LLB, LLM-qualified international commercial lawyer, notary, and arbitrator with 20 years of active practice. The analysis draws on direct practitioner experience across UAE, EU, US, UK, and Singapore jurisdictions — not synthesis from secondary sources.