A KYC refresh is different from opening a business account. The provider already has a file, but it needs to confirm that the file still describes the company. Treat the message as a deadline-driven reconciliation exercise. The fastest response is rarely a folder of every document the company owns. It is a short package that makes the old record and the current business match.
Start with the request, not a generic checklist
Save the message and confirm it came through a known bank or payment-provider channel. Note the reply deadline, the entity or account concerned, the documents requested and the secure upload route. If a link or caller is unexpected, use the provider's known contact details rather than the link in the message. Do not email passport copies or customer data unless the provider has specifically provided an approved secure route.
Reconcile what may have changed
Compare the provider's request with the current registry extract, constitutional documents and internal ownership chart. Record changes in directors, shareholders, ultimate beneficial owners, registered address, trading name, countries served, products, major counterparties and expected payment flows. If nothing has changed, say so plainly and provide current evidence. If something has changed, explain when it changed and attach the relevant filing or supporting record.
For EU-regulated relationships, Article 13 of Directive (EU) 2015/849 sets out customer identification, beneficial-owner identification, information on the purpose and intended nature of the relationship, and ongoing monitoring. The directive is not a universal document list for every provider. It explains why the refresh asks about both people and business activity.
Build one consistent response file
Use a current registry extract and an ownership chart that names the legal entities and people in the chain. Add director and beneficial-owner identity or address evidence only where requested. Then prepare a one-page business update: what the company sells, where it operates, who generally pays it, which currencies it uses, the normal monthly range and any unusual upcoming transaction. Use the same legal name, ownership percentages and activity description across every document.
Where a material payment or capital injection is the reason for extra questions, answer the question directly. A signed contract, invoice, purchase order, shareholder-loan agreement or source-of-funds evidence can be more useful than a long narrative. Redact customer details only if the provider permits it; do not alter evidence in a way that makes it misleading.
Do not create inconsistencies while trying to be helpful
Common delays come from old registry extracts, a website that describes a different business, missing beneficial-owner links in a holding chain, or transaction estimates that do not resemble the account activity. If the company has changed direction, explain the new model instead of trying to fit it into the old description. If a question is unclear, ask the provider what evidence it will accept before sending unrelated sensitive data.
The FCA describes customer due diligence as risk-based and includes ongoing monitoring in its financial-crime guidance. That does not mean every refresh signals a problem. It means the provider may ask for more detail where its risk assessment calls for it. A refresh request is not an approval guarantee or a legal finding about the company.
A practical response sequence
- Confirm the sender and deadline through a known channel.
- Assign one owner for the response and freeze a current document list.
- Reconcile ownership, control, address and activity against the existing account record.
- Prepare a concise payment-profile update and evidence for material changes.
- Submit only through the approved route and retain a submission record.
- Answer follow-up questions consistently; do not send a new version of the story each time.
When specialist review helps
Get jurisdiction-specific advice before responding where ownership has become complex, a sanctioned-country connection may be involved, source-of-funds evidence is difficult, or the provider has restricted the account. Corpenza can help organise a cross-border corporate file, but the bank or payment provider makes its own risk decision.
Sources: Directive (EU) 2015/849, Article 13 (in force; accessed 27 July 2026) and FCA financial-crime guidance (current official guidance; accessed 27 July 2026). This article is general information, not legal, tax or banking advice.
