KYB Compliance in France (2026): Guide for Regulated Businesses

France is one of the more demanding KYB environments in the EU — not because the rules are unusually complex, but because the infrastructure is specific, access to beneficial ownership data is restricted, and regulators expect defensible documentation at every step.

This guide covers the France-specific layer: registries, UBO rules, TRACFIN obligations, and where business verification breaks in practice. For the underlying KYB framework and process logic, see our KYB Requirements guide.

The Legal Framework

French KYB sits inside the broader AML/CFT framework rather than existing as a standalone registry exercise. The primary legislation is the Code Monétaire et Financier (CMF), regularly updated to align with EU AML directives. The most recent significant update implemented AMLD5 requirements including strengthened UBO disclosure and beneficial ownership register access rules.

France is currently preparing for full implementation of the EU AML Regulation (AMLR) and the establishment of the new EU AML Authority (AMLA), expected to directly supervise high-risk entities from 2026. This will add another layer of cross-border coordination on top of existing ACPR and AMF supervision.

ACPR supervises banks, payment institutions, e-money institutions, and other regulated actors. AMF covers investment firms, fund managers, and securities markets — and has published explicit guidance (DOC-2019-15) on risk-based KYB expectations. Whether a fintech falls under ACPR or AMF, the same KYB logic applies: identify, verify, understand ownership, document, and monitor throughout the relationship.

Who Must Comply

KYB obligations under the CMF apply to:

• Banks and credit institutions
• Payment service providers and e-money institutions
• Investment firms and financial advisors
• Insurance companies
• Virtual asset service providers (VASPs/DASPs) — registered under AMF
• Real estate agents and notaries — scope significantly expanded in 2025
• DNFBPs: lawyers, accountants, auditors

For most fintechs, ACPR is the primary regulator to align with.

The French Registry Infrastructure

Registre National des Entreprises (RNE)

Since January 1, 2023, all companies operating in France must be registered in the RNE, operated by INPI. This replaced the older RNCS and consolidated fragmented registry systems. The RNE is the authoritative source for legal existence, company identifiers, and registration status.

For commercial companies, the Kbis extract remains the key document — effectively the official identity card of the company. A current Kbis, combined with RNE data, gives you SIREN, SIRET, legal form, registered address, and current status.

A solid French KYB file starts here: entity verified against RNE, Kbis or equivalent extract obtained, core identifiers confirmed.

Beneficial Ownership Register

France maintains a beneficial ownership register operated by INPI. Since mid-2024, this register is no longer publicly accessible — access is restricted to regulatory authorities and AML-obliged entities with legitimate interest.

This is a critical operational constraint. KYB workflows that relied on open registry lookups need to be redesigned:

• Customer-provided UBO declarations become a primary input
• These must be reconciled against other available data
• The firm must document how it established UBO identity, not just that it collected a form

Registry data is one input, not the full picture.

UBO Requirements

A beneficial owner in France is the natural person who directly or indirectly holds more than 25% of capital or voting rights, or otherwise exercises control over the entity. If no such person is identified, the legal representative becomes the default.

The obligation is to identify the ultimate controlling individuals — not just declared stakeholders. This becomes complex with:

• Layered ownership structures (holding companies, SPVs)
• Cross-border shareholders requiring verification outside French registries
• Family-controlled structures where control is exercised informally

UBO data must be kept current. Initial onboarding capture is not sufficient — changes in ownership or control trigger re-verification obligations.

What a Complete French KYB File Looks Like

Beyond registry data and UBO identification, a defensible KYB file under ACPR and AMF expectations should cover:

• Legal representatives and directors
• Controlling shareholders
• Nature of business activity and expected use of service
• Sanctions and PEP screening on all relevant individuals
• Risk score based on ownership structure, jurisdiction exposure, and activity type

A company can be validly registered and still present unresolved risk. French regulators expect KYB to be analytical, not just clerical.

Key document thresholds:

• Records must be retained for 5 years after the relationship ends
• Suspicious activity reports must be available to TRACFIN within 30 days upon request
• TRACFIN reporting is made through the ERMES platform

Ongoing Monitoring

KYB in France does not stop at onboarding. The CMF explicitly extends obligations throughout the business relationship. In practice, monitoring should cover:

• Changes in ownership or control structure
• Sanctions screening hits on relevant individuals post-onboarding
• Transaction activity inconsistent with declared business model
• Patterns requiring escalation to TRACFIN

If monitoring is disconnected from onboarding, the KYB design is incomplete under French regulatory expectations. Platforms like VOVE ID connect onboarding and lifecycle monitoring into a single workflow — entity verification, UBO capture, sanctions screening, and monitoring triggers in one system, structured for ACPR and AMF scrutiny.

Where French KYB Breaks in Practice

Restricted UBO data. The shift to closed beneficial ownership register access in mid-2024 caught many compliance teams off-guard. Teams relying on open-data workflows need alternative verification logic and documented reconciliation processes.

Cross-border ownership. Foreign shareholders and holding structures require verification beyond French registries — often involving multiple jurisdictions with different data availability and language requirements. VOVE ID supports verification across 190+ countries, which matters when tracing ownership chains back through non-French entities.

Complex structures are common. France has a high proportion of businesses with multi-layer ownership, particularly in real estate and wealth management. KYB cannot stop at the first layer.

Real estate and legal sectors. Since 2025, enhanced supervision of real estate agents and legal professionals has increased compliance expectations in sectors that historically operated with lighter-touch KYB. Onboarding these as business clients now requires treating them as regulated counterparties.

Monitoring is often underbuilt. Many onboarding flows do not extend properly into lifecycle monitoring despite explicit CMF requirements. This is a frequent ACPR finding.

Getting KYB Right in France

France rewards firms that treat KYB as a continuous, evidence-based process rather than a one-time registry check. The combination of restricted UBO access, complex ownership structures, and active ACPR and AMF supervision means that documentation quality and monitoring coverage matter as much as initial verification.

VOVE ID is built for this environment — structured KYB workflows from entity verification to ongoing monitoring, with audit trails that hold up under regulatory scrutiny. If you're building or scaling KYB operations in France, talk to our team.

This article is intended for general informational purposes only and does not constitute legal, financial, or regulatory advice. KYC requirements may vary depending on jurisdiction, industry, and specific business circumstances. For up-to-date and binding compliance obligations, readers should refer to the relevant regulatory authorities or consult qualified professionals.