Know Your Customer is the process financial institutions must follow to verify a customer's identity, understand the nature of their financial activity, and assess money-laundering or fraud risk before and during a business relationship — a core Bank Secrecy Act / USA PATRIOT Act requirement in the U.S.
Why It Matters
KYC is the front line of anti-money-laundering compliance — every downstream transaction monitoring and sanctions screening program depends on the identity and risk profile established at KYC, which is why regulators treat weak KYC programs as a primary enforcement target and why KYC failures show up repeatedly in the largest AML fines in banking history.
How It Works in Practice
- 1Customer Identification Program (CIP): collect and verify identifying information (name, address, date of birth, taxpayer ID) at account opening
- 2Customer Due Diligence (CDD): assess the customer's expected activity and risk profile, including beneficial ownership for legal entities
- 3Enhanced Due Diligence (EDD): deeper scrutiny for higher-risk customers (politically exposed persons, high-risk jurisdictions, cash-intensive businesses)
- 4Ongoing monitoring: KYC isn't a one-time event — risk profiles and customer information are refreshed periodically and after significant account activity changes
Common Pitfalls
Treating KYC as a one-time onboarding checkbox rather than an ongoing obligation is one of the most common findings in AML enforcement actions
Beneficial ownership verification for complex corporate structures (shell companies, trusts, layered ownership) is where genuine bad actors most often hide, and where KYC programs are most often found lacking
Overly friction-heavy KYC processes drive legitimate customer abandonment during onboarding, creating real tension between compliance rigor and conversion rates that firms have to actively manage, not ignore