KYC & AML in Commodity Trading: Direct-Origin Buyers

KYC in commodity trading is not a bank ritual. It is the buyer's only way to answer three questions before money moves: Who are we actually paying? Does that person or company appear on any restricted list? And is the documented trade the same trade that will ship? Every intermediary layer multiplies the difficulty of answering those questions.

This brief lays out the KYC file a commodity supplier should be able to produce, the red flags that appear in real offer documents, sanctions and beneficial-ownership screening, AML controls around letters of credit and payment, and how to run the process fast enough to stay competitive.

Why KYC matters more in commodity trade

Trading houses, banks, and regulators treat commodity trade as a distinct money-laundering vector for three reasons. First, the goods are high-value and fungible: a cargo of palm oil or diesel is easily over-invoiced, under-invoiced, or re-sold several times between origin and destination. Second, the documentation is voluminous and negotiable — bills of lading, COAs, and invoices move between hands faster than verification does. Third, the chain is typically multinational and layered, so no single jurisdiction sees the whole transaction.

The FATF's body of work on trade-based money laundering describes the pattern precisely: fictitious trade, over- and under-invoicing, phantom ownership, and transactions where the commodity never really moves as documented. For the buyer, the exposure is double: you may be financing a scheme, and your own name may become the anchor of a chain regulators reverse-engineer.

What a complete commodity KYC file contains

A commodity supplier that is real, solvent, and clean can produce this file without delay. It should contain:

• Legal identity — certificate of incorporation, registration number, registered address, and the entity's own KYC on its shareholders if it is a holding structure.
• Beneficial ownership — the natural persons ultimately owning or controlling the entity, with enough documentation to connect the person to the company (registry extracts, constitutional documents, shareholder registers).
• Operating substance — evidence the entity actually does what it claims: trade references, bank confirmation of the trading account, warehouse or terminal relationships, and export history for the named commodity.
• Compliance posture — sanctions screening results, AML policy documentation where the entity is an obliged institution, and any regulator correspondence.
• Banking — instructions that match the registered entity name exactly, and confirmation the account is held in the entity's name at a verifiable bank.

Every document in the file is only as good as its source. Registry extracts from the official register, not scans; bank references from a real relationship, not a PDF; and, where the chain includes brokers, the same file applied to each broker as a counterparty.

Red flags in supplier and broker documentation

Compliance teams in physical commodity trading learn to read documents as evidence of a crime or as evidence of sloppiness — and to flag both. The patterns that repeat:

• Over-perfect paperwork — a supplier whose every document looks freshly templated, with no history of amendments, is often fabricating a clean record.
• Name drift — invoices, bank instructions, and correspondence using slightly different legal names, or addresses that differ between the registry and the offer documents.
• Missing substance — free-email domains for the head office, no physical address that matches, trade history told in screenshots rather than contracts.
• Layered pass-throughs — chains where a broker cannot name its supplier, or where the seller's seller is "confidential," which exists to prevent the buyer from ever conducting KYC on the actual source.
• Payment routing oddities — requests to pay a different entity than the contract party, or to split payment across jurisdictions.

None of these alone proves wrongdoing. Any of them combined with a great price should end the conversation.

Sanctions screening and beneficial ownership

Sanctions screening fails when it stops at the contract party — in commodity chains, the entity that matters is the one behind the one you trade with, because OFAC and EU designations routinely reach through front companies to the beneficial owner. The screening burden in practice:

• Beneficial ownership to the natural person — corporate registries and shareholder registers traced to every individual holding 25% or more, the beneficial-ownership identification threshold used in FATF-based customer due diligence rules such as the US FinCEN CDD Rule; a supplier that resists disclosing ownership is a supplier to decline, full stop.
• Ownership-based blocking — a separate test from the 25% identification threshold: under OFAC's 50 Percent Rule, any entity owned 50% or more, directly or indirectly and in aggregate, by one or more SDN-listed persons is itself blocked even if it appears on no list; the EU applies its own ownership test (50% or more of the proprietary rights, per the Council's 2024 Best Practices, previously read as more than 50%) plus a separate control test.
• Sanctions list screening — OFAC SDN, EU consolidated lists, UK OFSI; screened not once at onboarding but continuously, because listings change weekly and a counterparty can be designated mid-contract.
• Vessel and flag screening — the vessel, operator, and flag on the bill of lading carry their own designation exposure; a compliant seller can be rendered non-compliant by an unvetted ship.
• Jurisdiction and transit screening — which ports, transshipment hubs, and territorial waters the cargo touches, including indirect exposure through U-turn payments and correspondent banks.

Disputes about sanctions liability are won or lost on the audit trail: who screened whom, when, and against which list — the file that a bank or regulator will ask for the first time there is any doubt.

AML controls around payment and letters of credit

Payment is where money laundering announces itself, and commodity trade has an unusual concentration of the mechanics criminals need: high invoice values, multiple jurisdictions, and third-party payment routing. The controls that work:

• Pay the contract party — a payment instruction to any entity other than the signed counterparty, or to a different bank account, is the single highest-signal red flag in the trade; confirm instruction letters and re-confirm by voice.
• Letters of credit hygiene — LCs do not launder money by themselves, but discrepancies, silent confirmations, and back-to-back structures can conceal it; the issuing, confirming, and advising bank structure should be documented at contract stage.
• Source of funds — where the payment is coming from matters as much as where it goes; a buyer paying from an unexpected jurisdiction or through layered accounts shifts the burden toward enhanced due diligence.
• Trade-based laundering detection — over- and under-invoicing, phantom cargoes with reused documents, and round-tripping are the classic trade-finance techniques; specimen documents on file and value-versus-realization checks catch them.

The banking relationship is the third party in the chain: most commodity trades clear through a handful of trade-finance banks, and their own compliance bar becomes a de facto ceiling on what structures any legitimate cargo can use.

A KYC process that does not stall trade

KYC is often implemented as friction, but it can be built as a pipeline: the goal is a counterparty cleared once correctly, with a file good enough to defend, and no cargo held at the port because compliance took four weeks. The process that achieves both:

1. A standard document pack — registry extract, beneficial-ownership declaration, financial standing evidence, sanctions screening, and specimen signatures — collected before any counterparty gets an offer, so the clearance is infrastructure, not an exception.
2. Risk-tiered intensity — a listed, banked OECD counterparty with a long history gets standard due diligence; a new trading company in a high-risk jurisdiction with layering in its chain gets enhanced scrutiny; the tiering makes the pipeline fast where speed is safe.
3. Pre-contract completion — every requirement listed in the contract as a condition precedent, so a counterparty that fails screening fails the contract, not the shipment.
4. Annual re-verification plus continuous screening — ownership and registration re-checked yearly, sanctions lists watched daily, and any designation event triggering a contract-level review.

A KYC file built this way is simultaneously a compliance defense and a speed advantage: the counterparties who clear fast are the ones worth trading with, and the ones who stall on the pack would have stalled at the port.

Frequently Asked Questions

What documents make a complete commodity KYC pack?

The core pack is: corporate registry extract, beneficial-ownership declaration to the natural person, financial standing evidence, sanctions screening results, specimen signatures and bank instruction letters, and trade history references — completed before any offer is issued.

How deep does beneficial ownership screening go in commodity trade?

To the natural person. Identify every individual who owns 25% or more — the beneficial-ownership threshold in FATF-based due diligence rules — and then screen the whole ownership chain against sanctions lists. Blocking is a different test: under OFAC's 50 Percent Rule, an entity owned 50% or more in aggregate by SDN-listed persons is blocked, and the EU applies its own ownership and control tests. A corporate registry printout meets neither standard.

What is the single biggest AML red flag in commodity trade?

A payment instruction to a different entity or a different bank account than the signed contract party. Combined with any other anomaly (name drift, layered pass-throughs, an exceptional price), it usually ends the transaction in practice.

Are letters of credit a compliance protection?

They are a payment instrument, not a compliance shield. The LC structure needs its own due diligence — issuing and confirming bank, silent confirmations, and back-to-back structures can all hide the trade they claim to secure.

How do banks enforce KYC in commodity trade?

Indirectly but firmly: most trades clear through a small set of trade-finance banks whose own compliance bars become a de facto ceiling on acceptable structures. A chain that a major trade bank will not clear is effectively unsellable.

Summary

Three takeaways for KYC/AML in physical commodity sourcing:

• KYC must reach the natural person and the vessel: entity, beneficial owners, flag, and transit jurisdictions are all part of the screening surface, and listings change continuously.
• Payment is where laundering announces itself: pay the contract party, document the LC structure, and treat any routing anomaly plus an exceptional price as a conversation-ender.
• Build KYC as a pipeline, not friction: a standard pack, risk-tiered intensity, and pre-contract completion make compliance a speed advantage instead of a four-week stall.

Strengthen the rest of the buying process with the commodity RFP structure and the guide to the real cost of intermediaries, or talk to the XRT compliance team.

References

1. FATF — Trade-Based Money Laundering: the international standard setting out the typologies (over/under-invoicing, phantom cargoes, round-tripping) referenced in the AML controls section.
2. OFAC — Sanctions Programs and Country Information: the sanctions framework that defines the list screening and jurisdictional exposure described above.
3. OFAC — FAQ 401 on the 50 Percent Rule: entities owned 50% or more in the aggregate by one or more blocked persons are themselves blocked.
4. Council of the EU — Best Practices for the effective implementation of restrictive measures (2024): the EU ownership criterion (50% or more of proprietary rights, aggregated) and the separate control criterion.
5. FinCEN — Customer Due Diligence Final Rule: the requirement to identify and verify each individual owning 25% or more of a legal entity customer.