For most of the last decade, the question “who really owns this company?” had a comfortable, paper-thin answer in Pakistan: whoever was named on the share register. Section 123A of the Companies Act, 2017 ended that comfort. It now requires every company to look through its shareholders — past holding companies, trusts, nominees and offshore vehicles — until it lands on the natural person at the end of the chain, and to declare that person to the regulator on Form-19.

That obligation has quietly become one of the SECP’s most enforced filings. Notices have gone out in waves, penalties run into the millions, and a growing number of submissions are bounced back because what the company declares doesn’t line up with its own records elsewhere. Somewhere in that gap is where most of our clients find themselves when they first call.

What a UBO actually is

A Ultimate Beneficial Owner (UBO) — حقیقی مالک — is always a natural person: an actual human being who ultimately owns or controls the company, whether or not their name appears on the share register. A company, a trust, or a partnership cannot be the UBO. The law is not interested in legal ownership; it wants the person behind it.

The indirect limb is where most companies get caught. If a corporate entity appears on your share register, you work back through it — multiplying ownership percentages at each level — until you find the human being who owns 25% or more of your company through that chain. Where nobody in any chain clears the 25% threshold, which does happen with widely dispersed or institutional shareholding, the senior managing official goes on the form instead. The field is never left blank.

The legal framework

The obligation doesn’t sit in one place in the statute book. It’s a handful of provisions that work together:

• Section 123A, Companies Act 2017 — the core obligation to identify, maintain and declare UBO information. It also carries the penalty for default.
• Regulation 19A, Companies (General Provisions & Forms) Regulations, 2018 — the operational detail: how UBOs are identified, the register to be kept, and the prescribed forms.
• Section 60A, Companies Act 2017 — a parallel reform that prohibits bearer shares and bearer share warrants, since anonymous bearer instruments are the classic way to hide ownership.
• Section 119, Companies Act 2017 — the older “register of members” obligation, which UBO rules sit on top of. The register of members shows legal owners; the UBO register shows the real ones.
• Section 8, Limited Liability Partnership Act 2017 (as amended) — extends the same beneficial-ownership discipline to LLPs.

How it started: the full history

UBO didn’t emerge from a domestic policy debate. Pakistan was placed on the FATF grey list in June 2018 over AML/CFT deficiencies and committed to a 27-point action plan. Transparency over who actually owns companies — FATF Recommendations 24 and 25 — was on that list. The legal changes that followed, including Section 123A, were how Pakistan showed it was doing the work.

Worth saying plainly: UBO didn’t end when Pakistan left the grey list in 2022. Exit was conditional on the reforms being permanent. The SECP has taken that seriously, and the annual filing requirement has not relaxed.

The UBO forms ecosystem

Most companies treat UBO compliance as “one form.” It’s actually a chain of three documents — two internal, one filed with SECP. Conflating them, or assuming the internal register is the SECP filing, is behind a surprising number of objections.

Three things. You send the notice to members, maintain the register internally, and file Form-19 with the SECP. If SECP ever questions what’s on Form-19, the internal documents are your supporting evidence.

Filing Form-19 on eZfile

Form-19 is filed online through SECP’s eZfile portal, ordinarily alongside the company’s annual return. The portal steps are straightforward. What trips people up is the accuracy of what goes in.

1. Log in to eZfile. Access your company’s account on the SECP eZfile portal.
2. Select the UBO declaration (Form-19). Choose the relevant filing process for ultimate beneficial ownership.
3. Enter ownership structure. Map the full chain — direct holders and the entities behind them — and identify each natural person crossing the 25% / effective-control threshold.
4. Enter UBO particulars. Name, CNIC or passport, nationality, residential address, tax residency, nature and extent of control, and the date control was acquired.
5. Attach identity documents where required, and confirm every detail matches official records.
6. Reconcile before you submit. Check Form-19 against your register of members, Form-29 (officers), Form-A/annual return and shareholding records.
7. Submit and pay the applicable fee, then retain the acknowledgement.

Why Form-19 objections surged

When SECP started enforcing, more companies filed — and SECP looked harder at what was filed. Objections went up sharply. In practice, nearly every rejected Form-19 we’ve seen comes down to the same problem: the declared UBO information doesn’t reconcile with something else in the company’s own records.

The most common objection grounds

• Shareholding mismatch. The percentages on Form-19 do not tie to the register of members, Form-A, or the latest annual return.
• Identity discrepancies. A name, CNIC, or passport number that does not exactly match NADRA / official records — a single transposed digit is enough.
• Failure to look through. A corporate or trust shareholder is left as the “owner” without resolving the natural person behind it.
• No UBO and no fallback. Where no individual hits 25%, the company omits the senior managing official instead of recording them.
• Inconsistency with Form-29. Directors/officers data and UBO data tell two different stories about who controls the company.
• Incomplete particulars. Missing address, nationality, tax residency, or the nature/date of control.
• Stale data. A post-filing share transfer or control change was never reported, so the record no longer matches reality.
• Not filed with the annual return, or filed late, triggering a procedural objection.

Penalties & the April 2026 notice

Non-filing of Form-19 is a direct contravention of Section 123A. The SECP has been explicit about what that means financially.

The Rs. 10M headline gets attention, but the day-to-day consequences are more immediate. A defective or missing UBO record stalls other SECP filings, becomes a liability during any M&A due diligence, and regularly trips up corporate bank account renewals. We’ve seen clients spend more management time responding to a single show-cause notice than six years of clean filings would ever have cost them.

You can read the SECP’s official communications on its press-releases page at secp.gov.pk/media-center/press-releases, and the SECP also publishes these notices on its official LinkedIn page. (Links to the specific coverage are listed in the References below.)

Who must comply & timelines

Every company registered under the Companies Act, 2017 is within scope — private limited, single-member, public, and (under parallel rules) limited liability partnerships. There is no size or turnover threshold. The obligation attaches at incorporation.

The recurring rhythm of UBO compliance

• At incorporation: identify UBOs and record them in the company’s register.
• Annually: file the UBO declaration (Form-19) with the annual return and confirm the register is current.
• On any change: update the register and report changes in beneficial ownership or control without delay.
• On request: be able to produce the register and supporting evidence if the SECP enquires.

Foreign-shareholder structures, holding-company arrangements, and entities with offshore or trust members carry the highest objection risk. These are also the structures where the look-through calculation is least obvious and mistakes are easiest to make. Review these with a corporate practitioner before filing.

Compliance checklist

Frequently asked questions