Opening a bank or investment account can require a legal name, date of birth, address, taxpayer identification number, identity document, or information about a business’s owners. The exact process depends on the institution, customer, account, and applicable regulation.
Key Takeaways
- Umbrella concept: U.S. compliance obligations are implemented through specific Bank Secrecy Act and related rules.
- CIP focuses on customer identity: Covered institutions use risk-based procedures to form a reasonable belief that they know the customer’s true identity.
- Legal entities can require ownership information: CDD rules address beneficial owners of covered legal-entity customers.
- Verification can continue after opening: Risk-based monitoring and updated information can be required when circumstances change.
How KYC Works
Financial institutions collect identifying information and apply procedures designed for the risks of the account and customer. Verification can use documentary methods, non-documentary methods, or a combination.
The institution also considers whether additional due diligence is needed. Simple consumer savings accounts and complex legal entities with international activity can present very different compliance risks.
What Information Can KYC Require?
| Information | Why it can be requested |
|---|---|
| Legal name | Identifies the customer or entity |
| Date of birth | Helps identify an individual customer |
| Address | Provides required identifying information |
| TIN or other identification number | Supports customer identification under applicable rules |
| Government-issued identification | Can support documentary verification |
| Beneficial-owner information | Identifies qualifying natural persons behind certain legal-entity customers |
What Is a Customer Identification Program?
Covered U.S. financial institutions maintain written CIP procedures designed to form a reasonable belief that they know the true identity of each customer. Those procedures are risk-based and reflect the types of accounts, opening methods, available identification, and customer base.
Documentary verification can use government-issued identification, while non-documentary methods can include independent data checks, references, or other verification procedures permitted by the institution’s program.
KYC and Beneficial Ownership
Legal-entity accounts can require information about the natural persons who own or control the customer under applicable CDD rules. This requirement helps prevent criminals from hiding behind companies or other entities.
FinCEN has also issued relief allowing covered institutions, in specified circumstances, not to re-identify and re-verify beneficial owners every time the same legal-entity customer opens another account. Institutions still must follow the conditions of the relief and their risk-based procedures.
KYC vs. AML
Anti-money laundering, or AML, is the broader framework for preventing, detecting, and reporting illicit financial activity. Customer identification and due diligence are components of that framework.
KYC therefore should not be treated as the entire AML program. Suspicious activity monitoring, reporting, sanctions controls, recordkeeping, and other obligations can exist alongside customer identification.
Why Banks Ask for Updated Information
Customer information can become stale. An address changes, business ownership shifts, transaction patterns evolve, or new facts can call earlier information into question.
Risk-based procedures can therefore require updated documents or explanations even for an existing customer. A request for refreshed information does not by itself mean the customer is suspected of wrongdoing.
Can Digital Identification Be Used?
Yes in appropriate circumstances. FinCEN and federal banking agencies have confirmed that qualifying state-issued mobile driver’s licenses and other government-issued verifiable digital credentials can be used within CIP identity-verification procedures.
The institution remains responsible for using verification methods that satisfy its regulatory obligations and risk-based program.
Why KYC Matters to Consumers
KYC can make account opening slower, but its purpose is to reduce identity fraud, money laundering, terrorist financing, and misuse of the financial system. Strong controls also help institutions distinguish real customers from impersonators.
Consumers should expect some variation across banks, brokers, fintech platforms, and account types because the rules are risk-based rather than one identical checklist for every relationship.
Frequently Asked Questions (FAQs)
Is KYC a single U.S. law?
No. KYC is a broad industry term. U.S. obligations come from specific statutes, regulations, and supervisory requirements including CIP and CDD rules.
Why does a bank need my Social Security number?
Customer identification rules generally require an identifying number for U.S. persons opening covered accounts, subject to applicable exceptions and procedures.
Can a bank ask for identity information again after the account is open?
Yes. Risk-based due diligence can require refreshed information when facts change or earlier information becomes unreliable.