A company's share register does not always reveal the people who ultimately exercise ownership or control. Under Pakistan's Companies Act, 2017, identifying ultimate beneficial owners is a distinct compliance exercise, even where the registered shareholder is another company. The Securities and Exchange Commission of Pakistan (SECP) now operates a centralised ultimate beneficial ownership reporting regime and has expressly directed companies to use Form 19 through eZfile.
The legal framework: section 123A and Regulation 48
Section 123A of the Companies Act, 2017 is the statutory foundation for ultimate beneficial ownership disclosure. Regulations 48 and 48A of the Companies Regulations, 2024, as amended, provide important procedural and recordkeeping requirements. The regulatory focus is on the natural person or persons ultimately owning or controlling the company, directly or indirectly. A company's immediate registered shareholder may be a legal entity, but the inquiry must ordinarily continue through the ownership chain.
SECP's centralised UBO registry was introduced through amendments announced in July 2025. The Commission later issued a specific enforcement announcement on 21 April 2026, directing companies to submit the prescribed Form 19 and maintain their internal UBO records. Companies should rely on the current regulatory text and the current statutory form, not older compliance checklists based on superseded filing procedures.
What does the 25% test mean?
The regulatory ownership test ordinarily examines whether an individual ultimately owns or controls at least 25 per cent of shares or voting rights. The test is not confined to direct shareholdings. If a holding company owns shares in a Pakistani subsidiary, the subsidiary may need to trace the persons who control the holding company and the resulting indirect interests.
A numerical threshold is not the entire legal inquiry. Effective control may also arise through other arrangements recognised by the regulatory framework. Contractual voting powers, corporate relationships or other rights may be relevant to the analysis. Conversely, a director, founder or family member must not automatically be listed as a UBO simply because of their title or relationship. The actual legal and factual basis for control must be established.
How indirect ownership is examined
Suppose a Pakistani company is 70 per cent owned by an overseas holding entity. Listing that overseas entity as the only owner would not complete the UBO exercise. The company must identify the relevant natural persons behind the holding structure and test their indirect interests and rights. If ownership is dispersed, the company should still consider whether any person meets the effective-control limb.
This can require reviewing incorporation records, registers, share transfers, shareholders' agreements, voting arrangements and group charts. A declared percentage should be capable of explanation and reconciliation with the supporting documents. An incomplete corporate chart or an assumption that all indirect holdings are equal is not an adequate substitute for examination.
Form 16, Form 17, Form 18 and Form 19
The Regulations distinguish steps taken by a company from declarations supplied by its members. Under Regulation 48, the company generally issues the prescribed Form 16 notice to obtain information. Members make the relevant declaration on Form 17 and notify qualifying changes using Form 18. The company maintains the prescribed register and makes the requisite declaration through Form 19.
Form 19 should not be treated merely as an annual box-ticking exercise. The prescribed form contains statements about obtaining declarations, recording particulars, and authorising an officer to provide information. Directors should ensure those statements are supportable. Where a member has not responded, the company must address that fact honestly under the form and regulatory procedure rather than implying a completed verification process that never occurred.
When is Form 19 due?
The applicable deadline depends on the relevant filing trigger. Regulation 48 provides for the company's declaration after receipt of the member declaration and thereafter with the annual return. The amended regulation separately addresses companies not required to submit an annual return, requiring Form 19 within thirty days from the last day of the calendar year. A change in UBO particulars gives rise to a separate event-driven filing requirement within the prescribed period after receipt of the declaration.
The centralised register provisions became applicable to financial years ending on or after 30 June 2025. SECP's April 2026 direction referred to a 30 April 2026 enforcement deadline for companies then in default. That one-off date should not be mistaken for a permanent annual deadline for every company. A company should maintain an entity-specific calendar that distinguishes the annual cycle, member declarations and subsequent changes.
Does a company without share capital have a UBO obligation?
A Section 42 not-for-profit company may be limited by guarantee and have no share capital. Its members may not be entitled to share profits or receive dividends. Those features do not necessarily end the beneficial-ownership inquiry. Voting rights, governance arrangements and effective control remain relevant under the statutory framework.
The company's articles, membership register, powers of appointment and removal, and relevant controlling relationships should be examined. The correct result cannot be obtained simply by naming all founding members as beneficial owners. Equally, stating that there is no UBO solely because the company has no shares may overlook control arising by other means. Any conclusion that the reporting position is different should be supported by the current form, legal criteria and documented facts.
Maintaining the internal register and verifying information
Regulation 48 requires a company to maintain prescribed particulars of its ultimate beneficial owners. The centralised register introduced by Regulation 48A places additional importance on the consistency of internal records and information provided to the registrar. Changes to the identity or particulars of a beneficial owner need to be captured and reviewed rather than left until a future investment transaction.
Verification matters. Where a corporate ownership structure has multiple layers, officers should obtain reliable source documents and identify the basis of a person's ownership or control. Identity details should be handled securely and used for the legitimate statutory purpose. Accuracy is particularly important when the company expects regulatory scrutiny, financial-sector onboarding, acquisitions or a change in ownership.
Penalties and enforcement exposure
In its announcement of 21 April 2026, SECP warned that failure to submit Form 19 may result in enforcement proceedings. It referred to potential monetary penalties of up to Rs 10 million for a company and up to Rs 1 million for directors, officers or other responsible persons. These are potential legal consequences, not automatic penalties imposed on every late filing. The statutory basis and procedure governing an individual case remain important.
Filing an inaccurate declaration may create a different risk from simply missing a deadline. A company should avoid asserting that all notices were issued, that every response was received or that relevant particulars were verified when it cannot demonstrate those facts.
Practical steps for companies and corporate groups
Start with the current membership and shareholding records. Trace any intermediate corporate entities to natural persons and examine any separate voting or contractual control rights. Issue the prescribed notices, record responses, make reasonable verification inquiries, and retain evidence supporting the analysis. The board should authorise the appropriate officer, maintain the internal register and submit Form 19 at the correct stage.
Revisit the assessment after any share transfer, restructuring, new investment, change in rights or material governance event. For an acquisition, seek disclosure of beneficial ownership and control early in due diligence, since unresolved UBO information may complicate subsequent filings and regulatory approvals.
Conclusion
Effective UBO compliance requires more than entering names into eZfile. A company should be able to show how it identified the relevant natural persons, what evidence supports the result, whether the internal register is accurate and when the prescribed declarations were made. A documented process protects the reliability of regulatory reporting and makes later changes easier to administer.
Primary sources: Companies Regulations, 2024 (current consolidated text); SECP announcement on the centralised UBO registry; SECP Form 19 enforcement direction, 21 April 2026; and SECP statutory forms.