To verify a high-risk seller, you must confirm who owns and controls the business and check those individuals against sanctions and politically exposed person (PEP) lists. When something doesn't resolve cleanly, you'll have to use enhanced due diligence (EDD) to dig deeper. Platforms don't apply this level of scrutiny to every seller. Instead, they base it on industry, geography, ownership complexity, and transaction behaviour, then adjust as risk signals change after onboarding.

Below, we'll discuss how platforms decide which sellers count as higher risk, how EDD works, and what ongoing monitoring looks like once a seller is approved.

Key takeaways

• Platforms use a risk-based approach that applies lighter checks to low-risk sellers and places heavier scrutiny on those in higher-risk industries, jurisdictions, or ownership structures

• A sanctions or PEP match usually prompts a closer review to confirm identity or escalate the seller to EDD

• Risk management includes ongoing monitoring and periodic rescreening to catch changes in ownership, behaviour, or sanctions status after a seller has been approved

How do platforms determine which sellers are higher risk?

A high-risk seller is a vendor flagged for having an increased likelihood of chargebacks, fraud, or regulatory non-compliance. Platforms determine risk using a mix of factors:

• Industry classification: Additional required licensing checks or outright restrictions based on category

• Geographic exposure: Potential vulnerabilities inherent to the seller's registered location and where its customers or funds originate

• Ownership structure: How many layers sit between the business entity and the individuals who control it

• Transaction behaviour: Volume, speed, and order size relative to what's typical for the stated business type

How do platforms verify an ultimate beneficial owner (UBO)?

A UBO is any individual who owns 25% or more of a business or otherwise exercises substantial control over it (e.g., a majority voting stake). Regulators require this information because a business entity can obscure who profits from or directs an account.

During onboarding, these business owners get prompted for ownership percentages, government-issued IDs, and, where required, a tax ID number such as a Social Security number in the US. Platforms check that data against government and commercial databases to confirm the person exists, matches the stated identity, and isn't flagged elsewhere in the system.

When a business has only one or two owners and a clean ownership structure, this validation happens in the background without any manual review. More complicated structures take longer. For a business owned by a holding company, which is owned by a trust, that process traces ownership through each layer until it reaches actual individuals beyond the entity listed on the registration.

Platforms might request a cap table, trust agreement, or similar records when the automated flow can't resolve ownership on its own. Because some jurisdictions cap how deep this tracing must go, platforms still need a policy for what happens when ownership genuinely can't be resolved. When tracing hits a dead end, the business is typically declined or referred for manual review rather than approved with incomplete information.

How do sanctions and PEP screening work?

Sanctions screening checks a seller's owners and controlling individuals against government-maintained lists. PEP screening runs separately to flag anyone who holds or is closely connected to someone who holds a notable public position (e.g., government officials, military officers, judges).

Sanctions and PEP screening are standard components of customer due diligence and typically run as soon as UBO information is submitted. Screening systems use fuzzy matching to catch transliterations and common misspellings in customer identity verification. Because fuzzy matching can produce false positives, a business owner with a similar name to a PEP might generate a potential match to a similar but not identical name. This prompts an investigation.

During the investigation, analysts will compare supporting details (e.g., date of birth, nationality, address) to confirm whether a flagged match is the same person or someone with a common name. If a confirmed sanctions match occurs, the account can't be approved and, in some cases, requires an immediate report to a regulator. A confirmed PEP match, however, won't automatically block onboarding. Doing business with a PEP is legal in many cases and calls for closer monitoring. After a PEP match is confirmed, the seller is typically escalated to EDD rather than declined outright.

When is enhanced due diligence required for a seller?

Enhanced due diligence is necessary when standard verification can't fully resolve a risk signal. EDD asks for evidence of where a seller's money comes from.

Here are common scenarios that prompt EDD:

• Higher-risk industry classification: Categories such as money services and precious metals dealing carry regulatory scrutiny beyond standard checks

• Adverse media: Negative news that ties an owner to fraud, sanctions evasion, or other financial crimes can prompt review even without a formal sanctions listing

• Confirmed PEP status: A PEP who's identified during standard screening moves into this deeper review track

• Unresolved ownership structure: If standard UBO collection couldn't fully trace ownership to individuals, that gap must be closed with EDD

• Unusual transaction volume or pattern: Activity that exceeds the thresholds set for a seller's risk category flags the account for closer review

Platforms typically need bank statements, audited financials, or records that trace an owner's income to a specific business activity or inheritance. Automated tools can flag which sellers meet EDD criteria and reveal the specific reason, whether that's a PEP match, an adverse media hit, or an unresolved ownership question, but the review is led by the platform. This means the platform decides what documentation to request and whether to approve, restrict, or decline the account based on its own risk tolerance and regulatory obligations.

How do platforms manage high-risk sellers after onboarding?

Ongoing monitoring and periodic rescreening keep accounts under review long after onboarding closes. Risk profiles shift, and sanctions lists get updated on their own schedules.

Here are the main ways platforms manage high-risk sellers after onboarding:

• Ongoing transaction monitoring: This detects deviations from what the business disclosed during onboarding (e.g., a stated retail seller suddenly processes volume that looks like money transmission)

• Periodic rescreening: Platforms rerun sanctions and PEP checks on owners on a set schedule because someone can enter a sanctions list well after their account gets approved

• Ownership changes: A new controlling individual or a shift in ownership percentage warrants another look at UBO and screening data because the profile that got the seller approved might no longer hold up

• Business activity changes: Similar to an ownership change, a shift in what the business does can outdate the original risk assessment

Manually rechecking an entire seller base on a recurring basis isn't practical for a platform that manages thousands of accounts. That's why automated flagging concentrates on the sellers that have changed. Stripe Connect automates UBO collection and sanctions screening and identifies cases that might require additional platform-led EDD. Connect also reveals which accounts have been flagged by screening and when transaction behaviour falls outside expected parameters for a seller's risk category, and it routes those cases to the platform for review.

How Stripe Connect can help

Stripe Connect orchestrates money movement across multiple parties for software platforms and marketplaces. It offers quick onboarding, embedded components, global payouts and more.

Connect can help you:

• Launch in weeks: Use Stripe-hosted or embedded functionality to go live faster and avoid the up-front costs and development time usually required for payment facilitation.

• Manage payments at scale: Use tooling and services from Stripe so you don't have to dedicate extra resources to margin reporting, tax forms, risk, global payment methods or onboarding compliance.

• Grow globally: Help your users reach more customers worldwide with local payment methods and the ability to easily calculate sales tax, value-added tax (VAT) and goods and services tax (GST).

• Build new lines of revenue: Optimise payment revenue by collecting fees on each transaction. Monetise Stripe's capabilities by enabling in-person payments, instant payouts, sales tax collection, financing, expense cards and more on your platform.

Learn more about Stripe Connect or get started today.

FAQs about high-risk seller verification