When Is KYC Required for Customers and Who Must Comply?

Know Your Customer verification is required any time you open a financial account, hand over or deposit more than $10,000 in cash, send a wire transfer of $3,000 or more, or set off an unusual-activity flag at a bank, broker, money transmitter, or other covered business. The rules come from the Bank Secrecy Act of 1970 and the USA PATRIOT Act of 2001, and they apply to far more than traditional banks: credit unions, brokerages, insurers, casinos, mortgage lenders, cryptocurrency exchanges operating as money transmitters, and even car dealers or jewelers taking large cash payments all have to collect and verify identity information in specific situations.

When You Open a New Account

This is the trigger most people encounter. Every bank and credit union has to run a Customer Identification Program before letting you use an account, and at a minimum they must collect four items from you before the account opens:1eCFR. 31 CFR 1020.220 – Customer Identification Program Requirements for Banks

  • Your full legal name
  • Your date of birth
  • A residential or business street address
  • Your taxpayer identification number (Social Security number for U.S. persons)

The institution then checks this data against government records and will usually ask to see a passport, driver’s license, or other government-issued photo ID. The same screening applies whether you’re opening a checking account, a brokerage account, a mortgage, or a credit card. Records of that verification stay on file for five years after the account is closed.1eCFR. 31 CFR 1020.220 – Customer Identification Program Requirements for Banks

You don’t need a Social Security number to open a U.S. bank account. Non-U.S. persons can provide an Individual Taxpayer Identification Number instead, and many banks accept a passport number and country of issuance, an alien identification card, or another government-issued document showing nationality or residence with a photograph.2Consumer Financial Protection Bureau. Can I Get a Checking Account Without a Social Security Number or Drivers License Accepted documents vary, so ask before you visit a branch.

Opening an Account for a Business or Trust

When a company, trust, or other legal entity opens an account, expect an extra layer. FinCEN’s Customer Due Diligence Rule requires the institution to identify and verify every individual who owns 25 percent or more of the entity, plus at least one person who controls it, even if that person holds no ownership stake.3Financial Crimes Enforcement Network. CDD Final Rule The bank will ask for the name, date of birth, address, and identification number of each of those beneficial owners.

When You Move More Than $10,000 in Cash

Even without an ongoing account, a single large cash transaction triggers identity collection. Any financial institution handling a cash exchange over $10,000 in one business day must file a Currency Transaction Report with FinCEN, and multiple cash transactions on the same day that add up to more than $10,000 count as one for reporting purposes.4Financial Crimes Enforcement Network. Notice to Customers – A CTR Reference Guide Expect to be asked for government-issued ID and a Social Security or taxpayer ID number so the report can be completed.

The $10,000 rule reaches well beyond banks. Any trade or business that receives more than $10,000 in cash, whether a car dealership, jeweler, attorney, or contractor, must file IRS/FinCEN Form 8300 within 15 days of the payment.5Internal Revenue Service. IRS Form 8300 Reference Guide “Cash” for this purpose includes coins, currency, and certain monetary instruments such as cashier’s checks and money orders with a face value of $10,000 or less when used in a retail transaction over $10,000. Installment payments that collectively exceed $10,000 within a year of the initial payment also count. The business has to send you a written notice by January 31 of the following year confirming that a report was filed.

When You Send a Wire of $3,000 or More

Electronic fund transfers have their own, lower threshold. Under the Travel Rule, any transmittal of funds of $3,000 or more requires the sending institution to include your name, address, and account number with the payment as it moves between institutions.6Financial Crimes Enforcement Network. Funds Travel Regulations – Questions and Answers It applies to wire transfers and similar fund transmittals. Everyday consumer transactions governed by the Electronic Funds Transfer Act, such as ATM withdrawals and point-of-sale purchases, are exempt.

When Your Account Activity Changes

Your bank doesn’t stop watching after onboarding. The CDD Rule requires ongoing monitoring: institutions must keep customer information current on a risk basis and flag suspicious transactions.3Financial Crimes Enforcement Network. CDD Final Rule A noticeable shift, such as a sudden run of international wires on an account whose history is all small local deposits, can prompt Enhanced Due Diligence. That’s when the bank asks for pay stubs, business contracts, or an explanation of where the money is coming from.

If a transaction has no apparent lawful purpose, seems designed to dodge reporting, or looks tied to criminal activity, the institution must file a Suspicious Activity Report with FinCEN.7Internal Revenue Service. Bank Secrecy Act Banks file SARs on activity involving $5,000 or more; money services businesses file at $2,000.

One common trap is “structuring,” which means splitting cash deposits into amounts just under $10,000 to avoid a CTR. The pattern itself is a federal offense and must be reported, even though each individual deposit falls below the reporting line.8Financial Crimes Enforcement Network. Suspicious Activity Reporting – Structuring

If your bank files a SAR about your account, no one will tell you. Federal regulations bar the institution and its employees from disclosing that a SAR exists or revealing any information that would suggest one does.9eCFR. 12 CFR 21.11 – Suspicious Activity Report In practice, the first sign that your activity has been flagged may be a request for updated documents, new restrictions on your account, or a closure notice with no specific reason attached.

When Documents on File Expire or Get Stale

KYC isn’t a one-time event. Institutions have to keep your identity records accurate and current for the life of the relationship. When a driver’s license or passport on file expires, they will ask for a renewed copy. Ignoring those requests can lead to restricted ATM access, blocked wires, or a frozen account.

How often a full review happens depends on your risk profile. Lower-risk accounts may only be revisited when an ID expires. Higher-risk accounts, including those with large international activity, connections to higher-risk jurisdictions, or complex ownership, can face reviews as often as once a year. The bank uses these reviews to confirm that your address, employment, and source of funds still match what’s on file.

If You Can’t or Won’t Verify

If you can’t provide verifiable identity documents, the institution has to deny your application. Federal law does not allow a bank to waive CIP requirements. If you’re already a customer and refuse requests for updated information, the bank can restrict services in stages, blocking wire transfers or lowering withdrawal limits, and eventually close the account.

A closure tied to compliance concerns can make opening an account elsewhere harder. There’s no public blacklist, but banks share risk indicators through internal compliance networks, and the next institution you approach may ask additional questions or decline you during its own onboarding review.