What is a shell company?

The shell company meaning used by regulators comes from FinCEN's 2006 guidance on the money-laundering risks of shell companies: non-publicly traded corporations, LLCs and trusts that typically have no physical presence other than a mailing address and generate little to no independent economic value. Nothing in that definition is illegal. The concern is what a shell is good at — separating an asset or a payment from the name of the person behind it.

That separation is why shell companies appear in the layering stage of money laundering, in sanctions-evasion networks, in tax investigations and in nearly every large financial leak of the last decade. It is also why beneficial-ownership rules exist: the fix for an anonymous shell is a register of who owns it.

No. Forming a company with no operations is lawful in every major jurisdiction, and FinCEN's guidance lists ordinary reasons to do it: holding the stock or intangible assets of another business, moving currency and assets across borders, and structuring a merger. Start-ups are shells before they trade; special-purpose vehicles that hold a single ship, building or loan portfolio are shells by design; a family holding company is a shell.

Illegality comes from use. Concealing the proceeds of crime, hiding a sanctioned owner, evading tax, or misrepresenting who a counterparty is are offences whether or not a shell is involved — the shell is the instrument. Enforcement therefore targets the concealment (beneficial-ownership reporting, identity verification of directors) rather than the corporate form.

Three terms get mixed up. A holding company is a shell with a stated job: it owns controlling stakes in operating businesses and usually appears in a group's published structure. A shelf company is a shell that was formed and left dormant so that it can be sold later with an older incorporation date, which buyers value for credibility and for meeting tenure requirements. A shell company is the general case — any entity with no substance — and both of the others are kinds of shell.

Shells do the work of the layering stage. Criminal proceeds placed in one account are moved through a chain of companies in different jurisdictions — invoices for services never rendered, loans that are never repaid, shares bought and sold between related shells — until the origin of the money is several corporate steps away from wherever it lands. Nominee directors and shareholders put a stranger's name on the register; a registered-agent address replaces an office; a company in one jurisdiction owns a company in another that owns the bank account.

The scale became public with the Panama Papers. The 11.5 million records leaked from the law firm Mossack Fonseca, published by the International Consortium of Investigative Journalists on 3 April 2016, described more than 214,000 offshore entities connected to people in over 200 countries — many of them shells whose only function was to hold an account or a property in someone else's name.

A sanctioned party cannot transact under its own name, so it transacts under a company's. Treasury's action of 7 August 2026 against the Iranian regime's clandestine currency networks described exchange houses and their overseas payment agents settling millions of dollars of Iranian trade through shell and front companies in Hong Kong, Singapore and Dubai — companies whose only role was to hold the bank accounts the sanctioned parties could not. The designations, under Executive Orders 13902 and 13224, added those companies to the SDN list.

OFAC's 50 Percent Rule closes part of the gap in advance: an entity owned 50 percent or more, directly or indirectly, by one or more blocked persons is itself blocked even if it is never listed. But the rule only helps if the ownership is known, which is exactly what a shell is built to obscure. Screening the identifiers a shell does expose — its domain, its email addresses, the wallet addresses it pays from — against the lists catches the ones that have already been designated.

FinCEN's 2006 guidance lists the patterns that distinguish a suspicious shell from a legitimate one, and they are still the working checklist:

The answer is beneficial-ownership transparency, and it is moving in different directions on either side of the Atlantic. In the United States the Corporate Transparency Act required companies to report their beneficial owners to FinCEN — until an interim final rule of 26 March 2025 exempted all US-formed companies and US-person owners, a change FinCEN made permanent on 11 August 2026; only foreign companies registered to do business in a US state still file. In the United Kingdom the Economic Crime and Corporate Transparency Act 2023 went the other way: identity verification for company directors and persons with significant control became a legal requirement at Companies House on 18 November 2025.

For a business onboarding a counterparty, the practical consequence is that a public register may or may not tell you who owns a company. What you can always do is screen the identifiers the company presents against the sanctions and crime lists, and check the jurisdiction it operates from.