Cross-Border Due Diligence: Identifying Hidden Risks Beyond Corporate Structures

International business has never been more accessible. Companies routinely acquire overseas
businesses, appoint foreign executives, engage international suppliers, and form strategic partnerships
across multiple jurisdictions. Yet every additional jurisdiction introduces new regulatory requirements,
different levels of corporate transparency, and greater complexity in understanding who ultimately
owns and controls a business.

At first glance, a company may appear entirely legitimate. It has a registered office, active directors,
corporate filings, and a professional online presence. Standard due diligence checks reveal nothing
unusual.

However, cross-border investigations often reveal a different picture. The company may be owned
through multiple holding entities, controlled by offshore trusts, or linked to individuals who are not
immediately visible through domestic corporate records. In other cases, the ownership structure itself
is lawful, but obscures the individuals exercising effective control.

These are the risks that conventional due diligence frequently fails to identify.

Key discussion

What is cross-border due diligence?

Cross-border due diligence is designed to bridge those gaps by examining information across
jurisdictions, enabling organisations to understand not only whether a company exists, but who
ultimately controls it, how it operates internationally, and whether hidden legal, regulatory, financial
or reputational risks exist beyond domestic records. This includes sanctions exposure, regulatory
action, litigation history, financial crime indicators and other issues that may not be visible through
domestic company searches alone.

Why is it important? 

In our investigations, international corporate structures are rarely problematic simply because they span over multiple jurisdictions. Most exist for entirely legitimate commercial reasons. The challenge arises when those structures prevent organisations from understanding who ultimately owns, controls or influences the business, or from assessing exposure to financial crime, sanctions, litigation or reputational risk. 

Many of the largest corporate frauds uncovered over the past two decades did not rely on forged documentation. Instead, they relied on sophisticated corporate structures spanning multiple jurisdictions that made it difficult for regulators, financial institutions and counterparties to connect seemingly unrelated entities. 

Modern financial crime often exploits fragmentation rather than secrecy. 

When should businesses conduct this type of due diligence? 

Cross-border due diligence should be undertaken whenever a business relationship extends beyond a single jurisdiction or where the ownership, management or operations of a counterparty involve multiple countries. 

While mergers and acquisitions (M&A) remain one of the most recognised applications, cross-border due diligence has become equally important in routine commercial relationships. 

Examples include: 

Pre-transaction and M&A activity

Before acquiring or investing in a business, organisations should understand the complete ownership chain, identify the ultimate beneficial owners (UBOs), assess the purpose of intermediate holding structures, and evaluate any regulatory, litigation or sanctions exposure across all relevant jurisdictions. 

Third-party supplier and vendor onboarding 

Many organisations now rely on global suppliers, distributors, consultants and strategic partners. Domestic company searches often reveal only the local operating entity, while the actual ownership and control may sit overseas. Cross-border due diligence provides visibility of the wider corporate group and any associated risks. 

Senior executive and board appointments 

Where candidates have worked internationally, domestic background checks rarely provide a complete picture. Cross-border due diligence assists in identifying regulatory action, directorship history, litigation, insolvency involvement, adverse media and other issues that may not be publicly available within one jurisdiction. 

Regulated industries 

Businesses operating within financial services, legal, accountancy, real estate and other regulated sectors frequently have enhanced due diligence obligations where higher-risk customers, politically exposed persons (PEPs), or international ownership structures are involved. 

High-risk jurisdictions 

Where counterparties operate within jurisdictions subject to sanctions, increased FATF monitoring, or heightened corruption risk, enhanced due diligence enables organisations to understand whether those risks extend throughout the ownership structure. 

Ongoing monitoring 

Cross-border due diligence is not limited to onboarding. Ownership structures, directors, sanctions exposure and regulatory environments can change over time. Periodic monitoring helps ensure risk assessments remain accurate throughout the business relationship. 

When does a corporate structure become a risk?

Corporate structures are essential for global business. They allow companies to scale, operate internationally, and manage tax exposure. But they can also be used to:

• hide beneficial ownership
• distance individuals from liability
• move funds across jurisdictions
• exploit gaps between regulatory systems

At a certain point, complexity stops being operational and starts becoming strategic. And that raises a critical question:

Who are you really doing business with?

Real-world examples of hidden structural risks

Cross-border due diligence is no longer limited to mergers and acquisitions. Today, organisations increasingly rely on international suppliers, distributors, service providers and strategic partners operating across multiple jurisdictions. The Organisation for Economic Co-operation and Development (OECD) notes that many of the most significant risks associated with business activity arise within a company’s supply chain and business relationships rather than within its own operations. As a result, understanding who you are doing business with has become an essential part of effective risk management. 

Take the Russian Laundromat, one of the largest money laundering schemes uncovered in Europe. What made it effective wasn’t secrecy. It was structure. Two offshore companies created a fake loan agreement. A default was staged. A court in Moldova approved repayment. Funds were then transferred through European banks as legitimate debt settlement. Everything looked legal:

• contracts were in place
• court rulings were issued
• banks processed standard transactions

But the structure itself was designed to create legitimacy. Only by connecting entities across multiple jurisdictions did the full picture emerge.

Now compare that with the Panama Papers. Instead of focusing on transactions, this case exposed ownership. Thousands of offshore entities were used globally to hold assets and obscure the ultimate beneficial owner (UBO).

On paper, everything was compliant. But in reality, layers of companies, nominee directors, and trusts made it extremely difficult to identify who actually controlled the assets. And that’s the key issue:

You don’t always need false information to hide risk, sometimes the structure does it for you.

Why is cross-border due diligence challenging?

From a third-party due diligence perspective, the difficulty isn’t just access to data, it’s how fragmented that data is. Ownership often spans multiple jurisdictions, each with different transparency rules. Some countries provide detailed corporate records. Others provide almost nothing. Even when information is available, it may be outdated, incomplete, or inconsistent across sources.

In 2026, FATF published two reports has warned that organised crime groups are actively exploiting regulatory gaps across jurisdictions to move billions in illicit proceeds. Fewer than half of jurisdictions have adopted activity-based regulations for offshore providers, allowing cross-border entities to evade oversight from any single regulator.

As structures become more complex, visibility decreases. This is why high-risk entities rarely stand out immediately. They often look like:

• standard international holding structures
• tax-efficient setups
• normal global operations

The risk only becomes visible when you connect the dots.

Why do corporate ownership structures hide risk?

In real-world corporate due diligence, the warning signs are rarely dramatic. More often, they appear as small inconsistencies. A supplier may offer competitive pricing and appear well-established. But further analysis shows:

• the ownership chain leads offshore
• the same director appears across multiple unrelated companies
• the registered address is shared by dozens of entities

Individually, these details may not seem significant. Together, they form a pattern.

Common red flags in cross-border due diligence

When conducting cross-border third-party due diligence, certain signals consistently appear in higher-risk structures:

• overly complex ownership chains with no clear purpose
• frequent changes in shareholders or directors
• use of offshore or high-risk jurisdictions
• shared addresses across multiple companies
• nominee directors with repeated appearances
• limited or no operational footprint
• inconsistencies between corporate records across jurisdictions
• unexplained links to sanctioned individuals or politically exposed persons (PEPs)

Note: These are not always proof of wrongdoing, but they are indicators that require deeper investigation.

Why is traditional due diligence insufficient?

Traditional due diligence generally confirms that a company exists, is properly registered, and has submitted the required corporate filings. 

Cross-border due diligence extends beyond verifying corporate existence. It seeks to understand whether the wider business relationship presents legal, regulatory, financial or reputational risk.  

1. Who ultimately controls the business? 
2. Where does decision-making occur? 
3. How do related entities interact? 
4. Have key individuals been involved in regulatory action elsewhere? 
5. Does the ownership structure itself create risk? 
6. Are there links to other higher-risk entities? 
7. Does the information remain consistent across jurisdictions? 
8. Has the organisation demonstrated a genuine operational presence? 

Answering these questions requires an investigative approach that extends beyond domestic records and considers information across every relevant jurisdiction. 

Best practices for effective cross-border due diligence

Strong due diligence today is built on a few key principles:

1. Follow the ownership chain fully: Don’t stop at the first or second layer, identify the true beneficial owner
2. Cross-check multiple sources: Never rely on a single dataset
3. Look for patterns, not just facts : Risk often appears through repetition and connections
4. Combine technology with human analysis: Tools can flag issues, but experience is needed to interpret them
5. Assess Jurisdictional Risk: Not all jurisdictions offer the same levels of corporate transparency or regulatory oversight.

In our experience, significant cross-border risks rarely arise from a single issue. More commonly, they emerge from a combination of factors that may appear insignificant in isolation but become meaningful when viewed together. A complex ownership structure, combined with regulatory action in another jurisdiction, adverse media concerning a director, and links to sanctioned entities presents a far different risk profile than any one factor alone. 

TenIntelligence thoughts

When due diligence fails, the consequences go beyond financial loss. Companies can face regulatory scrutiny, reputational damage, loss of investor trust, and exposure to criminal networks. In a global economy, your partners directly influence your risk profile. 

Cross-border due diligence is no longer limited to mergers and acquisitions but an essential part of supplier onboarding, investment decisions, executive appointments and third-party risk management. As international corporate structures become increasingly sophisticated, organisations require greater visibility into the people, entities and jurisdictions behind every significant business relationship. 

Protect Your Business

Third-party relationships are essential for growth, but they also extend your company’s risk perimeter. Don’t wait until a hidden risk becomes a crisis.

TenIntelligence provides comprehensive company and third-party due diligence reports, helping you identify high-risk partners, uncover hidden exposures, and safeguard your business across the UK, UAE and worldwide.

Schedule a consultation to ensure your business partnerships are secure, compliant, and transparent.

FAQs on Cross-Border Due Diligence