Nonprofit KYB: How to verify 501(c)(3) status and stay compliant

If you operate a fundraising platform, process donations, or work with nonprofit organizations, you’re expected to verify that those organizations are legitimate before doing business with them. This process is known as nonprofit Know Your Business (KYB) or non-profit verification, which requires confirming 501(c)(3) status and ensuring the nonprofit is in good standing. 

But the verification process for nonprofit KYB isn’t as straightforward as it sounds. 

Nonprofits don’t show up in a single, unified registry. Their 501(c)(3) status depends on a mix of federal tax filings, state-level records, and ongoing compliance requirements. Nonprofits can also lose their tax-exempt status if they fail to file for three years, and that status change isn’t always reflected consistently across databases in real time. At the same time, regulators are closely monitoring nonprofit verification as fake charity scams (“shell charities") exploit tax-exempt status to misuse funds or commit financial crimes.

This article explains what makes nonprofit KYB unique from traditional business verification and how to build a verification process that meets compliance requirements without overwhelming your operations team.

Key definitions to understand for nonprofit KYB:

• Know Your Business (KYB): The process of verifying the legitimacy of a business entity and the individuals behind it.

• Tax-exempt status: An IRS classification that exempts an organization from federal income tax.

• “Good standing”: A status indicating an organization is current with all regulatory filings and compliance requirements.

• Employer Identification Number (EIN): A nine-digit identifier issued by the IRS to organizations.

• Publication 78: The IRS list of organizations eligible to receive tax-deductible contributions.

What is KYB for nonprofits?

Know Your Business (KYB) for nonprofits is the process of verifying that a nonprofit, or a 501(c)(3)-classified organization:

• Holds current federal tax-exempt status from the IRS

• Remains in good standing with state regulators

• Has not had tax-exempt status revoked

Fundraising platforms, donation processors, and any organization that partners with or serves charitable entities do nonprofit KYB. These organizations typically verify using federal tax-exempt databases, state compliance registries, and in some cases, records on key individuals like board members and officers to verify nonprofit tax-exempt status.

What is 501(c)(3) status?

501(c)(3) status is the most common federal tax-exempt classification granted by the IRS to charitable, educational, religious, scientific, or social welfare organizations. Because donations to eligible 501(c)(3) organizations are generally tax-deductible, 501(c)(3)s face stricter federal oversight than other tax-exempt types.

There are other tax-exempt classifications, like 501(c)(4) for social welfare organizations or 501(c)(5) for labor unions, but other tax-exempt types don't generate the same regulatory scrutiny or donor protection requirements. If you work with fundraising platforms and donation processors, the 501(c)(3) status is the key to verifying the legitimacy of nonprofit organizations.

Nonprofit KYB vs traditional KYB

Traditional KYB focuses on confirming that a business is legitimately registered, legally authorized to operate, and not flagged on sanctions or watchlists. The same principles apply to nonprofits, but the nonprofit verification process looks different in these three ways:

1. The data sources are different. 

For-profit businesses register with state-level authorities like a Secretary of State office. Nonprofits, however, must register with the IRS to obtain federal tax-exempt status. Many states also require nonprofits to register with state-level authorities, such as a state attorney general or state tax board, and maintain good standing with those agencies.

2. You're verifying tax-exempt status, not just an organization’s existence. 

A 501(c)(3) organization must actively maintain specific requirements to keep its tax-exempt status, like filing Form 990 annually, operating within its approved mission, and staying current with state registration. This status can be revoked, which means verification isn't a one-time check.

3. The ownership structure of nonprofits is different. 

For-profit businesses have ultimate beneficial owners (UBOs) who own 25% or more of the company. Nonprofits have board members and officers, but no equity owners in the traditional sense. This means a standard UBO check doesn't apply. Instead of looking for who owns the organization, you're identifying who has legal authority to act on its behalf.

Why nonprofit KYB matters

Nonprofit KYB protects your platform across three areas: regulatory compliance, fraud prevention, and donor trust.

• Compliance with regulations: Regulations vary by jurisdiction, but many states require verifying that nonprofits are current, registered, and not delinquent with all applicable authorities. You could face regulatory action, fines, or loss of operating licenses in key markets for noncompliance.

• Fraud prevention: There are many fake charity scams that exploit 501(c)(3) status and misuse funds. Nonprofit KYB helps you catch these risks before donations flow to ineligible organizations.

• Trust and safety: Proper verification helps protect donor contributions from going to a scammer or an organization that lost tax-exempt status months ago, making your platform the one that legitimate nonprofits want to work with. 

Related: Learn how to do charity verification for California AB 488 compliance

How to do nonprofit tax-exempt status verification

To verify nonprofit 501(c)(3) status, you’ll need to check three types of data sources:

1. Federal tax-exempt registries (IRS Business Master File, Publication 78)

2. State-level nonprofit databases and compliance registries

3. Key individual records (board members, officers)

Here’s how to approach each data source.

Step 1: Check federal tax-exempt registries

All nonprofit verification begins with checking federal databases. You’ll need to collect the organization's Employer Identification Number (EIN), a nine-digit number issued by the IRS that serves as a nonprofit’s primary identifier. 

Next, use the EIN to check the IRS Business Master File and IRS Publication 78.

Step 2: Check state-level compliance databases

Federal status alone doesn't confirm an organization is fully compliant. An organization listed in the IRS Business Master File could still be noncompliant at the state level.

To verify good standing, you should also check relevant state nonprofit registries and state revocation lists.

Use these state databases as a cross verification layer to your federal registry checks.

Related: Learn about charity verification for California AB 488 compliance

Step 3: Verify key individuals (if required)

Depending on your organization’s risk tolerance and regulatory requirements, you may need to verify board members, officers, or other key personnel who have legal authority to act on behalf of the organization. You can use traditional KYC verification methods like government ID verification, watchlist screening, and sanctions checks.

This step is important for high-value grant programs, platforms with elevated fraud risk, or any situation where the organization's leadership raises questions during earlier verification steps.

Three red flags to look for in nonprofit verification

Let’s say you’re verifying a nonprofit and it appears in the IRS Business Master File. That’s a positive signal that confirms the organization exists and has (or had) tax-exempt status, but it doesn’t tell you the complete story.

Your fraud and compliance teams should look beyond simple existence checks and identify subtle warning signs outside of formal registries that may indicate fraud, delinquency, or regulatory problems.

Here are three warning signs to look out for.

1. The organization is in the Business Master File but not Publication 78

This is one of the most important red flags, because it has a direct impact on donors. This scenario means the organization holds federal tax-exempt status (listed in the IRS Business Master File) but is not eligible to receive tax-deductible donations (absent from Publication 78).

A donor who contributes to an organization that’s in the Business Master File but not in Publication 78 may believe their donation is tax-deductible when it isn't. 

Recommended action: Flag for manual review. Contact the nonprofit to understand the discrepancy, or cross-reference other databases (like state registries) to assess risk.

2. Recent IRS Form 990 non-filing status

Form 990 (Annual Return of Organization Exempt from Income Tax) is a nonprofit's annual return to the IRS used to demonstrate the organization is still operating and financially accountable. Non-filing status means an organization has missed deadlines to file Form 990, failed to submit required documentation, or is marked as delinquent in the Business Master File.

This non-filing status matters because:

• Non-filing status can lead to automatic revocation of tax-exempt status.

• Repeated non-filing often signals organizational dysfunction or that the nonprofit is no longer actively operating at all.

• Donors may be misled about tax deductibility if the organization loses status.

Recommended action: Verify the current filing status through the IRS. If non-filing is recent, escalate to manual review. If it's over six months old and unresolved, consider rejecting the organization.

3. State-level delinquencies or compliance issues

State-level revocation usually takes precedence over federal revocation. You need to look out for organizations delinquent in its home state that may be operating illegally even if it hasn't yet lost federal status.

Recommended action: Cross-check all relevant state databases (attorney general, tax authority). If state-level issues exist, require manual review or a verification letter from the nonprofit.

Best practices for nonprofit verification: Ongoing monitoring

Most platforms verify a nonprofit once at onboarding and consider the job done. This approach isn’t enough to stay compliant and leaves gaps when tax-exempt status can change quickly.

If your platform has significant nonprofit volume, you should periodically reverify to catch nonprofit tax-exempt status changes and delinquencies before they create compliance gaps. This ongoing monitoring helps ensure you’re working with organizations that remain eligible and in good standing. 

Here’s a strong approach to help you start ongoing monitoring: 

• Schedule reverification (e.g. quarterly or semi-annually)

• Check against multiple data sources

• Maintain an audit trail that shows continuous due diligence

This approach can help you as your nonprofit base grows and your manual processes become harder to sustain over time.

How Persona can help

As nonprofit verification becomes more complex, many teams look for ways to reduce manual effort while maintaining consistent, audit-ready processes. That’s where automation can help, by consolidating checks across federal and state data sources, applying risk rules consistently, and making ongoing reverification more manageable.

Persona is an identity verification platform that helps businesses build and scale KYB processes, including for nonprofit organizations. With Persona's Business Nonprofit Report, you can verify nonprofits using an EIN to search across the IRS and state-level data sources, including:

• The IRS Business Master File

• IRS Publication 78 

• California Attorney General's Registry

• California Franchise Tax Board

…and get a unified view of an organization’s tax-exempt status and standing.

These checks can be built into automated workflows, allowing you to approve low-risk organizations, flag inconsistencies, and route higher-risk cases for review without manually gathering data. You can also combine nonprofit verification with broader KYB steps, like document verification and individual identity checks, to get a more complete picture of the organization.

Learn more about Persona's KYB solution and how the Business Nonprofit Report can help you streamline nonprofit verification while protecting donors from fraud.