A KYC form, short for Know Your Customer form, is the identity questionnaire a bank, credit union, brokerage, or other financial institution asks you to complete before it opens an account for you. At a minimum, you provide your full legal name, date of birth, residential address, and a taxpayer identification number, and you back those answers with an unexpired government-issued photo ID and a recent document confirming where you live. Federal rules under the Bank Secrecy Act and the USA PATRIOT Act require every covered institution to run this check, so refusing or failing to complete it means the institution cannot legally do business with you.
What a KYC Form Asks From Individuals
Federal regulation sets a floor on the personal data an institution has to collect before opening your account. Four items are mandatory:
- Full legal name, exactly as it appears on your government-issued ID.
- Date of birth.
- A residential street address. A P.O. Box does not qualify. If you don’t have a fixed address, an APO/FPO box or the address of a close relative or contact person can substitute.
- A taxpayer identification number. For U.S. persons, that’s usually your Social Security Number. For non-U.S. persons, it can be a passport number with country of issuance, an alien identification card number, or another government-issued ID number.
Those four data points come directly from the Customer Identification Program regulation.1eCFR. 31 CFR 1020.220 – Customer Identification Program Requirements for Banks Most institutions ask for more. Expect questions about your occupation, employer, the source of the funds you plan to deposit, and the general purpose of the account. That extra information lets the compliance team build a risk profile and set a baseline for what normal transaction activity should look like on your account.
The rule applies to banks, credit unions, broker-dealers, mutual funds, futures commission merchants, and introducing brokers in commodities.1eCFR. 31 CFR 1020.220 – Customer Identification Program Requirements for Banks Many fintech platforms and cryptocurrency exchanges run the same style of check, though the precise regulatory obligations for some of those businesses are still developing.
What a KYC Form Asks From Businesses and Entities
When a company, partnership, trust, or other legal entity opens an account, the institution has to verify the entity itself and the real people behind it. Entity verification typically requires articles of incorporation, a government-issued business license, a partnership agreement, or a trust instrument.1eCFR. 31 CFR 1020.220 – Customer Identification Program Requirements for Banks
Beyond the entity, the institution must identify each beneficial owner. Under the Customer Due Diligence Rule, a beneficial owner is anyone who owns 25 percent or more of the equity interests, plus at least one person with significant management responsibility, such as a CEO, CFO, or managing member.2eCFR. 31 CFR 1010.230 – Beneficial Ownership Requirements for Legal Entity Customers Each of those individuals goes through the same personal identification process any individual customer does. If a trust holds a 25 percent or larger stake in the entity, the trustee is treated as the beneficial owner for that interest.
Documents You’ll Need for Verification
Proof of Identity
Almost every institution starts with an unexpired government-issued photo ID. The regulation specifically names a driver’s license and a passport, though any government-issued ID showing your nationality or residence and bearing a photograph qualifies.1eCFR. 31 CFR 1020.220 – Customer Identification Program Requirements for Banks A state-issued ID card or military ID works at most institutions.
Some banks want a second form of ID, especially for accounts opened in a branch. Common secondary IDs include a debit or credit card, employee or student ID, Social Security card, or any ID from a recognized business, school, or government agency. The requirements vary, so check with the institution before you go.
Proof of Address
If your photo ID already shows your current address, that may be enough. When it doesn’t, you’ll need a separate document linking your name to your physical address. A recent utility bill, bank or credit card statement, current lease or rental agreement, or a government-issued letter usually works. These documents generally need to be no more than three months old. Blurry scans, cropped images, and screenshots are common reasons a digital upload gets kicked back.
Remote and Non-Documentary Verification
Not every situation lends itself to producing a stack of documents. The regulation requires banks to have procedures for verifying identity through non-documentary methods when a customer can’t present an unexpired photo ID, opens an account remotely, or presents documents the bank isn’t familiar with. Those methods include cross-referencing your information against consumer reporting agencies, public databases, or other financial institutions.1eCFR. 31 CFR 1020.220 – Customer Identification Program Requirements for Banks Most digital-only banks and fintech apps rely on this route. They pull data from credit bureaus and government databases behind the scenes, and they may ask you to confirm details from your credit history as an additional check.
Even in fully online flows, the mechanics look similar to a paper application: you upload photos of your ID, enter your personal details, and the system runs an automated check within minutes. It compares your document against databases, checks that the ID hasn’t been reported stolen, and sometimes uses facial recognition to match a selfie to the photo on your ID. Common reasons a submission gets rejected are straightforward: a name spelled one way on the form and another way on the ID, an expired document, an address that doesn’t match, or an image too blurry to read. You’ll get a notification explaining the issue and a chance to resubmit.
If You’re Not a U.S. Citizen or Permanent Resident
You can still open an account, but the identification requirements shift. Instead of a Social Security Number, you can provide a passport number and country of issuance, an alien identification card number, or the number from any other government-issued document that shows nationality or residence and includes a photograph.1eCFR. 31 CFR 1020.220 – Customer Identification Program Requirements for Banks An Individual Taxpayer Identification Number (ITIN) is accepted but not always required if you haven’t been issued one.
Most banks ask non-U.S. persons for two forms of ID: a primary document such as a foreign passport or consular ID card, plus a secondary document like a foreign driver’s license or credit card. You’ll also need proof of both your home country address and your U.S. physical address. The specific mix of acceptable documents varies by institution, so contact the bank before your visit to avoid making the trip twice.
When Institutions Ask for More
Standard KYC is the baseline. When a customer or account presents elevated risk, the institution has to dig deeper through what’s called enhanced due diligence, and the level of scrutiny scales with the risk profile.3FFIEC BSA/AML InfoBase. FFIEC BSA/AML Manual – Introduction – Customers
Common triggers include politically exposed persons (senior government officials, their families, and close associates), accounts touching countries with weak anti-money-laundering controls, cash-intensive businesses, unusually complex ownership structures, and transactions with no obvious economic purpose. If any of those flags appear on your file, expect the institution to ask for significantly more paperwork: records showing the source of your wealth, explanations of how funds were accumulated, additional corporate filings, or audited financial statements. The process takes longer, and the compliance team will revisit the file more often afterward.
What Happens If You Fail or Refuse Verification
If the institution cannot verify your identity within a reasonable time after the account is opened, its procedures can include closing the account.1eCFR. 31 CFR 1020.220 – Customer Identification Program Requirements for Banks In most cases, though, the account never gets opened in the first place. You simply can’t move forward until verification is complete.
For existing customers, ignoring a request for updated documents during a periodic review leads to escalating consequences. The institution may restrict your transactions, block outgoing transfers, or freeze the account entirely while the review is pending. Banks are also required to file Suspicious Activity Reports when they spot red flags such as customers using falsified identification, changing a transaction after learning that ID is required, or structuring transactions just below reporting thresholds. Once a SAR is filed, the bank is legally prohibited from telling you about it.4Financial Crimes Enforcement Network (FinCEN). Suspicious Activity Reporting Requirements
Keeping Your KYC Information Current
Verification doesn’t end when the account opens. Institutions have to conduct ongoing monitoring and periodically refresh customer information so their records stay accurate.3FFIEC BSA/AML InfoBase. FFIEC BSA/AML Manual – Introduction – Customers How often depends on your risk rating. A typical policy reviews high-risk customers annually, medium-risk customers every two years, and low-risk customers every three years, though timelines vary.
Between scheduled reviews, update your profile whenever something significant changes: a new legal name after marriage, a new residential address, a different employer, or a major change in your financial situation. Ignoring a refresh request is one of the fastest ways to trigger account restrictions. The institution doesn’t know whether you’re just busy or hiding something, and regulators expect them to treat silence as a risk signal.