Verifying that a business exists is one thing. Establishing who ultimately owns it, who controls it and how its risk changes is another.