Know Your Customer (KYC) Fundamentals

Introduction

Know Your Customer (KYC) is the cornerstone of AML/CFT. Before you can spot unusual activity, you have to know who your customer is. This lesson covers what KYC involves, what information is collected, and why it's the foundation of everything else in compliance.

What KYC Really Means

KYC is more than collecting an ID. It means genuinely knowing who your customer is, what they do, and what they'll use your products for — well enough to recognize when something doesn't add up.

The goals are to:

• Verify real identity (fight impersonation and fake identities)
• Understand the customer's legitimate business
• Assess risk (including sanctions, PEP, and high-risk exposure)
• Detect when activity is inconsistent with the known profile

What Information Is Collected

During onboarding you typically gather and verify:

• Identity: full name, date of birth, and a valid ID document (passport, national ID, driving license)
• Address: proof of residential address (utility bill, bank statement)
• Contact details: phone, email
• Business purpose: what the customer intends to use the account for
• Source of funds/wealth: where the money comes from (especially for higher-risk customers)
• Beneficial ownership: who ultimately owns/controls the entity (for companies)

Verification vs Identification

• Identification — gathering the information about who the customer claims to be
• Verification — checking that the information is genuine (e.g., matching the ID photo, confirming documents are not forged)

KYC Is Ongoing, Not One-Time

KYC isn't a single snapshot. Regulations require you to keep customer information up to date throughout the relationship:

• Re-verify and refresh customer data periodically
• Reassess risk when things change
• Update CDD when there's a major change in the relationship or risky activity

The KYC Process Flow

   Collect customer info
        |
        v
   Verify identity/documents
        |
        v
   Screen against sanctions/PEP/watch lists
        |
        v
   Assess risk level
        |
        v
   Apply appropriate CDD (SDD/CDD/EDD)
        |
        v
   Ongoing transaction monitoring & periodic refresh

The "Know Your Customer" Philosophy

The point of the "know" in KYC is that compliance can't work if you only look at individual transactions without context. A transfer that looks odd for a retiree might be normal for an import business. Knowing the customer gives you the baseline to judge unusual activity.

Real-World Example

A customer opens an account saying they're a small retailer. During KYC, their ID is verified, they're screened (no hits), and they're assessed as standard risk. Six months later, that "retailer" starts receiving large transfers from multiple countries and immediately wiring them elsewhere. Because the bank knows their profile, the compliance team recognizes this as inconsistent and escalates.

Summary

• KYC = identifying, verifying, and understanding your customer
• Collect ID, address, purpose, source of funds, and beneficial ownership
• Verify documents, not just collect them
• KYC is ongoing — refresh and reassess over time
• It gives you the baseline to detect unusual activity later

Next Lesson

KYC feeds directly into Customer Due Diligence. Let's explore the CDD, EDD, and SDD tiers.