Guides

Compliance guides

KYC and AML compliance is how U.S. businesses confirm who their customers are and keep their services from being used to move criminal money. KYC (know your customer) covers identifying and verifying customers. AML (anti-money laundering) is the wider set of rules, mostly under the Bank Secrecy Act, that covers written programs, reports to FinCEN and recordkeeping.

Banks, credit unions, money services businesses, broker-dealers and other covered financial institutions must run a written AML program. Most other businesses don’t have to, but every U.S. person must comply with OFAC sanctions, and many businesses run KYC checks anyway to stop fraud or because a bank or payment partner requires it. These guides explain the rules in plain English and link to the official sources. They’re general information, not legal advice.

KYC and AML in order

  1. Know your customer checklist. The core steps of a KYC check, from collecting details to keeping records.
  2. Customer identification program (CIP). What 31 CFR 1020.220 requires before a bank opens an account, including online.
  3. Enhanced due diligence (EDD). When higher-risk customers need extra checks, and what those look like.
  4. Know your business (KYB). How to verify a business and the people behind it.
  5. Sanctions screening. How name screening against OFAC and other lists works.

KYC and AML terms in one line each

KYC (know your customer)
Confirming a customer is who they say they are, and understanding who you’re dealing with. KYC checklist.
CIP (customer identification program)
The U.S. rule setting the minimum identity details a bank must collect and verify before opening an account. CIP guide.
CDD (customer due diligence)
Understanding each customer relationship, its purpose and its risk, and monitoring it over time.
EDD (enhanced due diligence)
Extra checks for higher-risk customers. EDD guide.
UBO (ultimate beneficial owner)
A person who owns 25% or more of a company or has significant control over it. U.S. rules say “beneficial owner.”
KYB (know your business)
Verifying a business customer and the people who own and run it. What is KYB.
AML (anti-money laundering)
The rules and programs that stop criminals from moving money through legitimate businesses.
OFAC (Office of Foreign Assets Control)
The U.S. Treasury office that runs sanctions programs and publishes the SDN list. Sanctions screening guide.

All guides in this topic

Enhanced due diligence (EDD): what U.S. rules require

Enhanced due diligence (EDD): what U.S. rules require

Enhanced due diligence (EDD) is extra review for higher-risk customers. Here’s where U.S. rules require it, how it differs from CDD and CIP, and a practical checklist.
Proof of address: what documents count and how to verify them

Proof of address: what documents count and how to verify them

Utility bills, bank statements, leases and government mail usually count as proof of address. Here’s what’s accepted, how recent it must be, and how to check it.
Small business owners at their shop counter during merchant onboarding

Merchant onboarding: how to verify a merchant and its owners

How ISOs, payment facilitators and marketplaces verify a merchant and its owners: business checks, beneficial owners, OFAC and MATCH screening, underwriting.
Business team meeting to choose a KYC provider

How to choose a KYC provider: 10 questions to ask

Ten questions to put to any KYC provider, from liveness testing and sanctions screening to biometric privacy laws, security evidence, pricing and review tools.
Small team comparing identity verification providers on laptops

Persona and Socure alternatives: what smaller teams should compare

What Persona and Socure publish about their plans and pricing, the questions a smaller U.S. team should ask, and other vendors that list their prices.
World map with pins representing global sanctions screening

Sanctions screening and AML name screening: how matching works

How OFAC sanctions screening and AML name screening work — fuzzy matching, aliases, OFAC’s six steps for reviewing a hit, and what to do when a match is real.
Checking off a know your customer (KYC) checklist on a tablet

Know your customer checklist for small businesses and credit unions

What federal rules require of banks and credit unions, what small businesses should do anyway, and a before, at and after onboarding checklist.
Business handshake after completing know your business (KYB) checks

What is KYB? A plain-English guide to know your business checks

KYB means confirming a business customer is real and knowing who owns and controls it. Here’s what U.S. rules require and how a KYB check works.
IRS tax forms and calculator used to look up and verify a company EIN

How to look up and verify a company’s EIN (tax ID)

There’s no public IRS tax ID lookup for most companies. Here’s how to find and verify a business’s EIN anyway, and how to recover your own.
Woman opening a bank account online with her phone and a debit card

Customer identification program (CIP) for remote account opening

CIP stands for Customer Identification Program. Here’s what 31 CFR 1020.220 requires, how it applies to remote account opening, and how it relates to KYC and CDD.

Put the checks into practice

Verify customers with a government ID, a live selfie and sanctions screening on their own phone. Try it with 20 free verifications over 7 days. No card required.