--- title: How well do you Know Your Customer (KYC)? description: KYC (know your customer) is a required process for all banking and financial institutions to stay compliant during an AML audit. Mitigate risk with proper customer identity verification. image: https://blog.verifirst.com/hubfs/Blog_Images/Identity_Verification_Know_Your_Customer.jpg --- [Customer Identity Verification](https://blog.verifirst.com/topic/customer-identity-verification) # How well do you Know Your Customer (KYC)? [![Ryan Howard](https://app.hubspot.com/settings/avatar/29a1d4bf57e0e03d00a52ef501083a92)](https://blog.verifirst.com/author/ryan-howard) by [Ryan Howard](https://blog.verifirst.com/author/ryan-howard) 2 min read Fri, Aug 14, 2015 ![Identity_Verification_Know_Your_Customer](https://blog.verifirst.com/hs-fs/hubfs/Blog_Images/Identity_Verification_Know_Your_Customer.jpg?width=874&name=Identity_Verification_Know_Your_Customer.jpg) Financial institutions and other regulated industries are fraught with high risk compliance challenges. Identity theft, money laundering, fraud and terrorism are concerns of these businesses and organizations. Compliance audits such as anti-money laundering (AML) are in place to ensure suspicious activities or customers can be identified quickly. Knowing your customer and identity verification is one way to lessen this risk. # KYC: Know Your Customer Knowing your customer is goes beyond knowing their name. Knowing your customer means *verifying* and *understanding* who they are and what transactions they will be conducting within your organization. KYC is an acronym for a policy that is used in the banking industry to manage risk. The policy typically includes: 1. How they will validate the identity of the customer 2. Monitoring of the customer activity 3. Assessment of risk and risk management ## Identity Verification A Customer Identification Program (CIP) is a process set up to collect and verify the identity of the customer. Verifying their identity ensures that the corresponding data - name, address, social security number and so on - is legitimate and correct. The documentation is typically run against a third party database to validate its authenticity. Fraud and [identity theft](https://blog.verifirst.com/prevent-identity-theft-with-customer-id-verification) can be prevented with this first step. [![Learn More About Services We Provide](https://no-cache.hubspot.com/cta/default/157703/4b3d40dc-91a5-4cc3-910e-337aed6ba238.png)](https://cta-redirect.hubspot.com/cta/redirect/157703/4b3d40dc-91a5-4cc3-910e-337aed6ba238) ## Activity Monitoring Creating an expectation of customer activity is another way to mitigate risk. When accepting a customer, they will already have a profile of expected activity from previous financial institutions. Their transaction activity will be monitored against their expected behavior and recorded profile. If any activity seems suspicious or outside the norm, a trigger will alert someone of potential risk with the associated customer.  ## Risk Management Another part to the Customer Identification Program is to determine the customer's risk with regards to money laundering, terrorist activity or identity theft. Organizations use [OFAC](https://blog.verifirst.com/blog/bid/310860/Know-Your-Customer-ID-Verification-OFAC-Compliance) and other databases to manage the customer risk. OFAC or Office of Foreign Assets Control checks to see if customer is knowingly or unknowingly contributing to terrorist, fraud or human trafficking activity. ## Due Diligence Doing due diligence on every customer is required by the USA Patriot Act of 2001. Every new customer will undergo a basic form of id verification and risk assessment. Enhanced Due Diligence (EDD) is required for larger customers and transactions.  **Enhance Due Diligence** is a similar but tiered and more involved process to KYC including: - Verification and validation of the customer's identity - Establishment of the customer's profile  - Identification of relevant adverse information and risk - Assessment of the potential for money laundering and/or financing of terrorist activity ## Best Practices The success of these customer identification processes is crucially dependent on the documentation of the process and the data obtained. Just as with any other process that is susceptible to non-compliance, documentation should be available if audited. The organization should also keep all records of approved or not approved customers so that a clear concise trail of decision making is available.  Obtaining data from third party databases can be burdensome as some searches, such as OFAC, only allow 5 searches at a time. Many banking institutions choose to work with vendors who have a portal or direct connection (API) to connect to databases with ease and security. Alleviating the manual process or entering one customer at a time can save both time and money. [![Red Flag Rules Customer ID Verification](https://no-cache.hubspot.com/cta/default/157703/42f88ab8-e2e6-4130-a551-bc0c0c461ee1.png)](https://cta-redirect.hubspot.com/cta/redirect/157703/42f88ab8-e2e6-4130-a551-bc0c0c461ee1) #### Share this [Share on X ](https://x.com/intent/post?url=https://blog.verifirst.com/do-you-know-your-customer&text=How+well+do+you+Know+Your+Customer+%28KYC%29%3F) [Share on Facebook ](https://www.facebook.com/sharer/sharer.php?u=https://blog.verifirst.com/do-you-know-your-customer&t=How+well+do+you+Know+Your+Customer+%28KYC%29%3F) [Share on LinkedIn ](https://www.linkedin.com/shareArticle?mini=true&url=https://blog.verifirst.com/do-you-know-your-customer&t=How+well+do+you+Know+Your+Customer+%28KYC%29%3F) Previous story [← What is "Negligent Hiring" - and how HR Managers can help prevent it](https://blog.verifirst.com/what-is-negligent-hiring-and-how-hr-managers-can-help-prevent-it) Next story [AML Audit Compliance Best Practices →](https://blog.verifirst.com/aml-audit-compliance-best-practices) ### You May Also Like These Related Stories [Know Your Customer: ID Verification + OFAC Compliance](https://blog.verifirst.com/blog/bid/310860/Know-Your-Customer-ID-Verification-OFAC-Compliance) ![](https://blog.verifirst.com/hs-fs/file-274277728-jpg/images/customer_identity_verification.jpg) [Customer Identity Verification](https://blog.verifirst.com/topic/customer-identity-verification) #### Know Your Customer: ID Verification + OFAC Compliance Thu, Aug 22, 2013 3 min read [AML Audit Compliance Best Practices](https://blog.verifirst.com/aml-audit-compliance-best-practices) ![](https://blog.verifirst.com/hubfs/Blog_Images/AML_Audit_Best_Practices.png) [Customer Identity Verification](https://blog.verifirst.com/topic/customer-identity-verification) #### AML Audit Compliance Best Practices Mon, Aug 24, 2015 2 min read [Has Your Driver Had a Background Check?](https://blog.verifirst.com/has-your-driver-had-a-background-check) ![Background Checks for Drivers](https://blog.verifirst.com/hubfs/Blog_Images/Background%20Checks%20for%20Drivers.png) [Types of Background Checks](https://blog.verifirst.com/topic/types-of-background-checks) #### Has Your Driver Had a Background Check? Fri, Jul 13, 2018 2 min read ### Get Email Notifications ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Ryan Howard", "url" : "https://blog.verifirst.com/author/ryan-howard" }, "datePublished" : "2015-08-14T20:53:37.000Z", "headline" : "How well do you Know Your Customer (KYC)?", "image" : [ "https://blog.verifirst.com/hubfs/Blog_Images/Identity_Verification_Know_Your_Customer.jpg" ], "mainEntityOfPage" : { "@id" : "https://blog.verifirst.com/do-you-know-your-customer", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.verifirst.com/hs-fs/hub/157703/file-1399347280.png" }, "name" : "VeriFirst" } } ```