Cyprus UBO Register 2026: Who Must Register, Deadlines, Penalties & How to Comply

What Is the Cyprus UBO Register?

The Cyprus UBO Register is a government-maintained database recording the identities of the natural persons who ultimately own or control Cyprus-registered legal entities. It was introduced as part of Cyprus's transposition of the EU Fourth and Fifth Anti-Money Laundering Directives (AMLD4 and AMLD5) into national law.

The legal basis in Cyprus is the Prevention and Suppression of Money Laundering Activities Law 188(I)/2007, as amended by Laws 13(I)/2018 and 41(I)/2021. The Register is operated and maintained by the Cyprus Registrar of Companies and Official Receiver (DRCOR), which sits within the Ministry of Energy, Commerce and Industry.

The purpose of the register is to enhance corporate transparency and assist competent authorities — including the Cyprus Tax Department, the Unit for Combating Money Laundering (MOKAS), the Police, and the Cyprus Securities and Exchange Commission (CySEC) — in identifying the true human beings behind legal entities. The register is specifically designed to look through corporate layers to identify the natural person(s) who ultimately benefit from or control the entity.

Entities required to maintain and file UBO information include: all Cyprus private limited liability companies (Ltd / EPE); all Cyprus public limited companies (PLC); European Companies (Societas Europaea — SE) registered in Cyprus; general partnerships and limited partnerships registered in the Cyprus partnership register; and branches of foreign companies registered in Cyprus (with some modifications).

Entities explicitly exempt from the UBO Register filing obligation include: companies listed on a regulated market in the EU (their ownership is already publicly available through stock exchange disclosure rules); certain collective investment vehicles regulated by CySEC; and entities where no UBO can be identified even after exhausting all reasonable means (in which case senior management is registered instead).

Who Is a UBO? The 25% Threshold

A UBO (Ultimate Beneficial Owner) is defined as any natural person who ultimately owns or controls a legal entity, directly or indirectly. The primary quantitative threshold is ownership of more than 25% of the shares or voting rights of the entity.

Control can also be exercised through means other than share ownership: for example, through the right to appoint or remove a majority of the board of directors, through contractual arrangements, through rights attached to bearer instruments, or through any other means that confer decisive influence over the entity.

Where no individual can be identified as holding more than 25% of shares or exercising equivalent control — for example, in a widely held company or one with many small shareholders — every natural person who exercises control through other means must be registered. If, after exhausting all possible identification methods, no natural person UBO can be identified, then the senior managing officials of the legal entity (typically the CEO and/or the chairman of the board of directors) are registered as the default UBO.

The look-through principle applies where a company is owned through a chain of corporate entities: the UBO is the natural person at the top of the ownership chain. Nominee shareholders do not break the look-through — the underlying principal for whom the nominee holds shares is the UBO.

The following table illustrates common ownership scenarios and the resulting UBO determination:

Deadlines and Filing Requirements

The Cyprus UBO Register operates on a combination of event-triggered deadlines (for new companies and for changes) and a mandatory annual confirmation cycle (for all companies, regardless of whether anything has changed).

For each UBO that is registered, the following information must be provided: full legal name; date of birth; nationality; country of residence; nature of the beneficial interest held (direct or indirect); and extent of the beneficial interest (percentage of shares, percentage of voting rights, or description of other control mechanism).

Supporting documentation — typically a copy of a valid passport or national identity card for each UBO — may be required at the time of filing or may be requested by DRCOR at any time. Companies should maintain certified copies of UBO identity documents on file at the registered office.

Penalties for Non-Compliance

The UBO penalty regime was substantially reformed by Law 141(I)/2024, which came into effect in February 2025. The new regime replaced the previous single maximum fine of €20,000 with a graduated daily penalty structure designed to create ongoing incentives for prompt compliance.

Under the current regime: on the first day following the missed deadline, a penalty of €100 is imposed on the company; for each subsequent day of continued non-compliance, a further €50 per day is added to the outstanding penalty; the cumulative maximum penalty is capped at €5,000 per company.

While the maximum of €5,000 is lower than the previous €20,000 ceiling, the graduated structure means that non-compliance is detected and penalised sooner, and the ongoing daily accrual creates pressure to resolve issues quickly.

Penalties are imposed on the company as a legal entity, not on individual directors personally (although directors may face reputational and legal consequences in extreme cases). The Registrar of Companies has the power to strike a company off the register for persistent and repeated non-compliance with UBO filing obligations.

For holding structures comprising multiple Cyprus entities — which is common in international tax planning — the €5,000 maximum applies per entity. A structure with five Cyprus companies all failing to file annual confirmations could therefore face cumulative penalties of up to €25,000.

The Registrar has been active in issuing notices to non-compliant companies. Companies that have been dormant or inactive for several years are at particular risk if they have not maintained UBO filings, as the requirement applies regardless of trading status.

Who Has Access to UBO Information?

One of the most significant developments in Cyprus UBO law in recent years has been the restriction of public access to UBO register data. On 3 January 2023, the Cyprus Registrar of Companies suspended all public access to UBO information, in response to the European Court of Justice (ECJ) judgment of 22 November 2022 in Joined Cases C-37/20 and C-601/20 (WM and Sovim SA v Luxembourg Business Registers).

In that landmark ruling, the ECJ held that the provision of the Fifth Anti-Money Laundering Directive (AMLD5) requiring member states to make UBO information accessible to the general public was invalid as it constituted a disproportionate interference with the rights to privacy and protection of personal data enshrined in Articles 7 and 8 of the EU Charter of Fundamental Rights.

Following the ECJ ruling, public access to the Cyprus UBO register remains suspended indefinitely, pending legislative reform at EU level (expected as part of AMLD6 transposition). This has significant practical implications: beneficial owners of Cyprus companies now enjoy meaningful privacy protection, as their UBO details are not searchable by the general public.

Despite the suspension of public access, UBO information remains accessible to the following categories of persons and entities:

Obliged entities under the AML framework — including credit institutions (banks), financial institutions, law firms, accounting firms, auditing firms, trust and company service providers (TCSPs), real estate agents, and other AML-regulated professionals — may access UBO information when conducting customer due diligence (CDD) on their clients, as required under AML legislation.

Competent authorities — including the Cyprus Tax Department, MOKAS (the financial intelligence unit), the Cyprus Police, CySEC, and equivalent authorities in other EU member states — may access UBO information at any time for law enforcement, tax enforcement, or regulatory supervision purposes.

Individuals who can demonstrate a legitimate interest in accessing specific UBO information — for example, journalists investigating financial crime, or parties to legal proceedings — may apply to the court for access. The court will balance the public interest in disclosure against the UBO's privacy rights.

The practical effect is that genuine commercial counterparties (such as banks and lawyers) can still verify UBO information for due diligence purposes, but speculative searches by competitors, journalists, or members of the public are no longer permitted.

How to File and Update UBO Records

UBO filings are submitted electronically through the Cyprus Registrar of Companies e-filing portal, accessible at efiling.drcor.mcit.gov.cy. Access requires an AriThmos account (the government digital identity system) or credentials linked to the company's authorised representative.

The authorised representative for UBO purposes is typically the company's registered agent, company secretary, or a director. Law firms and accounting firms acting as registered agents routinely manage UBO filings for their client companies as part of annual compliance packages.

The step-by-step filing process is as follows:

1. Log in to the DRCOR e-filing portal using AriThmos credentials or the registered agent's professional login.
2. Select the relevant entity from the list of companies associated with the account. For registered agents managing multiple entities, the portal supports bulk management across a portfolio of companies.
3. Navigate to the UBO section of the company record. Review the currently registered UBO details for accuracy.
4. To register a new UBO: click 'Add UBO' and enter all required details — full name, date of birth, nationality, country of residence, nature of interest (direct or indirect), percentage of shares held, percentage of voting rights held. Upload a certified copy of the UBO's passport or national identity document.
5. To update existing UBO details: select the relevant UBO record and edit the fields that have changed. Document the effective date of the change.
6. To remove a UBO who no longer meets the threshold: select 'Remove UBO' and enter the date on which the person ceased to be a UBO, together with a brief explanation (e.g., 'share transfer — holding reduced to 15%').
7. For the annual confirmation: review all existing UBO records, confirm that all details remain accurate and up to date, and click 'Confirm Annual Return'. If no changes are required, this takes less than five minutes. If changes are required, make the updates before confirming.
8. Submit the filing. A digital confirmation receipt is generated. Retain this receipt for your compliance records.

Best practice is to appoint a registered agent or corporate services provider to manage the annual UBO confirmation cycle as part of a broader annual compliance programme. The October–December confirmation window is a busy period for Cyprus corporate services firms; companies that leave it until late December risk missing the deadline due to adviser capacity constraints.