By Leah Price
A foreign company gets an EDRPOU code from a Ukrainian supplier, plugs it into the state registry, sees an active company with a registered address, and feels reassured enough to send a deposit. In peacetime that might be a reasonable first step. In wartime Ukraine, that same lookup can be reassuring and wrong — because the registry it relies on has been attacked, partially restricted, and gapped in ways the clean-looking result never tells you about.
This guide explains how to verify a Ukrainian counterparty through the country’s business registry, and why the wartime conditions make a quick self-check far less reliable than it appears. It’s written for any company about to pay, partner with, or contract a Ukrainian business. Verifying a counterparty in Ukraine is exactly the kind of work our business verification and intelligence service handles. This post is informational, not legal advice.
TL;DR
Ukraine’s company registry — the Unified State Register, often called the EDR — is publicly searchable by company name or the stable 8-digit EDRPOU code, and it’s a real starting point. But a December 2024 Russian cyberattack disrupted it, wartime law now restricts data on defense and occupied-territory entities, and the public beneficial-ownership data is officially flagged as incomplete and not always current. A clean registry result can hide gaps, stale occupied-region entries, and unverified ownership. Confirming a Ukrainian counterparty in wartime takes corroboration beyond the portal — which is where local capability matters.
Key Facts
- The registry is the EDR/USR: Ukraine’s Unified State Register, run by the Ministry of Justice, holds legal entities, sole proprietors, and ownership data, searchable by name or EDRPOU code.
- EDRPOU is the anchor: The 8-digit EDRPOU code stays fixed through name changes and restructurings, making it the reliable search key — and one you can legitimately request from a counterparty.
- Wartime disrupted it: A December 2024 cyberattack attributed to Russian intelligence suspended the registers; access returned in early 2025, but records from that window may have gaps.
- Access is now restricted in places: Wartime law limits data on defense-sector entities and occupied-territory addresses, and Ukraine’s overall open-data availability has narrowed.
What the Registry Genuinely Offers
Start with the good news, because Ukraine’s transparency is, by regional standards, fairly advanced. The Unified State Register covers companies, sole proprietors, and non-profits, and a basic lookup returns the registered name, the EDRPOU code, legal form, registered address, registration date, and current status — active, terminating, liquidated, or suspended. Ukraine even became, back in 2015, one of the first countries to publish a beneficial-ownership register, meaning ownership data is in principle available.
The EDRPOU code is the thing to anchor on. It’s an eight-digit identifier that stays constant even when a company changes its name or restructures, which matters because Ukrainian names transliterate into Latin script inconsistently and a name search alone can miss or confuse entities. The code is not secret; a legitimate counterparty can hand it over without hesitation, and reluctance to provide it is itself a small signal.
So far this sounds like a problem a careful buyer could handle alone. That impression is exactly where wartime changes the picture.
Why a Wartime Lookup Misleads
The registry that looks authoritative on screen has been through a great deal since 2022, and the clean result it returns doesn’t disclose any of it. Several wartime realities sit underneath that surface.
In December 2024, a large-scale cyberattack attributed to Russian military intelligence suspended the state registers entirely. Access was restored in the weeks after, but records filed or changed around that disruption — ownership changes, director changes — can carry gaps or delays that a current lookup won’t flag. Separately, wartime law has restricted access to data on defense-sector entities and has stripped exact addresses from some property and entity records for security reasons, so what you see may be deliberately incomplete. And entities registered in occupied or contested regions — parts of Donetsk, Luhansk, Zaporizhzhia, Kherson, and Crimea — often have outdated or inaccessible entries, because the registrars who maintained them were displaced. An address in one of those regions is not something to take at face value.
None of this appears as a warning on the record. The portal returns what it has, formatted the same whether the data is current and complete or stale and gapped. A buyer reading a clean result has no way to know which they’re looking at.
The Ownership Problem
Even the beneficial-ownership data — Ukraine’s genuine point of pride — comes with a caution that matters for anyone relying on it. International bodies including the OECD and the Open Government Partnership have documented that the public UBO data is incomplete, unevenly structured, and not always updated promptly. It exists, but it isn’t a finished compliance product.
That gap is consequential because real ownership is the thing counterparty fraud most often hides. Ukrainian law, aligned with international standards, defines a beneficial owner as anyone exercising actual control — not merely a shareholder above some percentage, and explicitly not a nominee standing in for someone else. Identifying who truly controls a company therefore means tracing real influence, which the registry’s listed ownership may understate, omit, or mask behind a nominee. Taking the registered owner at face value is precisely the mistake a concealed structure is built to encourage.
What Verifying a Counterparty Actually Takes
Confirming a Ukrainian business in wartime means treating the registry as one input among several, not the answer. It means anchoring on the EDRPOU code rather than a transliterated name, then corroborating the registry’s picture against other sources — reconciling ownership against actual control, checking sanctions and Russian-asset connections that matter acutely in this conflict, treating occupied-territory and defense-sector data with heightened caution, and independently confirming changes that fall in the cyberattack window.
This is work that combines the open tools with local knowledge and access — the ability to read Ukrainian records, understand which gaps are wartime artifacts versus genuine red flags, and reach corroboration the public portal can’t provide. A foreign buyer running a single EDRPOU lookup from abroad gets a starting point dressed up as a conclusion. The honest framing is that wartime Ukraine is partly verifiable and partly not, and a credible check reports what it confirmed, what the conditions obscured, and where the real risk sits — rather than passing off a clean portal page as due diligence.
FAQ
Can I just check a Ukrainian company in the state registry myself?
You can run a basic lookup by EDRPOU code, and it’s a reasonable first step. But in wartime the result can hide gaps from the December 2024 cyberattack, restricted defense-sector data, and stale occupied-territory entries — none of which the clean record flags. A self-run check is a starting point, not verification.
What is an EDRPOU code and should I ask for it?
It’s the unique eight-digit identifier every Ukrainian legal entity has, fixed even through name changes, which makes it the reliable search key. It’s not confidential, so a legitimate counterparty will provide it readily — and reluctance to share it is a small warning in itself.
Is Ukraine’s ownership data reliable?
Partly. Ukraine publishes beneficial-ownership data and was an early leader in doing so, but international bodies have documented that the data is incomplete and not always current. Confirming who actually controls a company usually requires tracing real control beyond what the registry lists.
Why is wartime verification different?
Because the registry has been attacked, partially restricted by security law, and gapped for occupied regions where registrars were displaced — yet it returns results that look as authoritative as ever. Reading those results correctly takes knowing which gaps are wartime artifacts and corroborating beyond the portal.
Final Thoughts
Ukraine’s business registry is more open and more advanced than many, which is exactly what makes it deceptive in wartime: it looks reliable, and much of the time it’s partly so. The cyberattack gaps, the security restrictions, the displaced occupied-region data, and the flagged ownership records all sit invisibly beneath a clean result.
Verifying a Ukrainian counterparty now means using the registry as a starting anchor — the EDRPOU code above all — and then corroborating it through capability the portal doesn’t provide. The alternative is mistaking a lookup for due diligence, on a deal where the cost of being wrong is the whole transaction.
If you’re about to pay or partner with a Ukrainian company and want it verified properly given the conditions, that’s worth doing before the money moves. Get a confidential quote and we’ll scope what can realistically be confirmed about the counterparty and its ownership. Confidential, no obligation.
For context on the data limits, the OECD has documented gaps in Ukraine’s beneficial-ownership transparency, and analyses of Ukraine’s state registry data show how it’s used for sanctions and ownership screening.
About the Author: Leah Price is the author behind Teser Investigations’ international fraud and verification content. She writes about romance scams, background checks, identity verification, and cross-border investigative issues, with a focus on helping clients verify claims before travel, financial support, or major personal commitments. Her articles reflect the kinds of risks clients face in Russia, Ukraine, Colombia, West Africa, and other international jurisdictions where deception, hidden relationships, and fraud often intersect.