If you open an account at a bank, credit union, or brokerage — or apply for a loan — you have to provide identifying information under the USA PATRIOT Act, and that is what people mean when they ask who has to sign a Patriot Act form. There is no single federal form with that name. Each institution uses its own paperwork to satisfy Section 326 of the Act, which requires financial institutions to run a Customer Identification Program (CIP) before doing business with you.1Office of the Law Revision Counsel. 31 U.S. Code 5318 – Compliance, Exemptions, and Summons Authority Business accounts add a second layer: the people who own or control the entity must also be identified.
Who Has to Sign
Federal CIP rules define a “customer” as any person who opens a new account, and that definition covers almost everyone who deals with a financial institution.2Board of Governors of the Federal Reserve System. Frequently Asked Questions – Final CIP Rule In practice, that means:
- Individuals opening a checking or savings account, a certificate of deposit, or an investment account.
- Anyone applying for a mortgage, auto loan, personal loan, or line of credit. If the bank denies your application, you never become a “customer” because you never received services.
- The person opening an account for a corporation, LLC, partnership, or trust. That individual provides identifying information for the entity and, separately, for its beneficial owners.
A few situations do not trigger the full process. If you already bank at the institution and it has a reasonable belief it knows who you are, opening an additional account there may not require running through CIP again. Accounts the bank picks up through a merger or asset purchase are also generally excluded.
The paperwork itself varies. Some banks ask you to sign a disclosure acknowledging you received a notice about why they are collecting your information; others just capture the information and keep it on file. Either way, you cannot proceed without providing it.
Beneficial Owners of Business Accounts
When a legal entity opens an account, the institution must also identify the entity’s beneficial owners under the Customer Due Diligence Rule. A beneficial owner is any individual who directly or indirectly owns 25 percent or more of the entity’s equity, plus one individual with significant management responsibility, such as a CEO, CFO, president, or managing member.3eCFR. 31 CFR 1010.230 – Beneficial Ownership Requirements for Legal Entity Customers The bank collects the same identifying details for each of those people that it would for an individual customer.
This is not the same thing as the Corporate Transparency Act reporting to FinCEN. As of March 2025, domestic companies are exempt from filing beneficial ownership reports directly with FinCEN.4Financial Crimes Enforcement Network (FinCEN). Beneficial Ownership Information Reporting The bank’s separate obligation to collect beneficial ownership information at account opening remains in place, though FinCEN has clarified that institutions only need to collect it when a legal entity first opens an account, not at every subsequent one.5FinCEN. FinCEN Exceptive Relief Order, FIN-2026-R001
Real Estate Closings
Many people run into a “Patriot Act form” for the first time at a real estate closing rather than at a bank branch. Title companies, escrow agents, and mortgage lenders involved in property transactions are subject to similar identity-verification requirements. A mortgage applicant goes through the same CIP process as any other loan customer.
Title insurers face an added layer. FinCEN uses Geographic Targeting Orders that require title insurers to identify the real people behind shell companies buying residential property without financing. In most covered metropolitan areas, the orders apply to purchases of $300,000 or more.6FinCEN. FinCEN Renews Residential Real Estate Geographic Targeting Orders Both buyers and sellers may be asked for government-issued identification at closing, and anyone purchasing through an LLC or trust should expect the title company to ask who actually owns the buying entity.
What Information You Have to Provide
Federal regulations set four minimum data points that every institution collects before opening an account:7eCFR. 31 CFR 1020.220 – Customer Identification Program Requirements for Banks
- Full legal name.
- Date of birth, for individuals.
- A residential or business street address. Military personnel or others without a street address can provide an APO or FPO box, or the street address of a next of kin or contact person.
- An identification number. For U.S. persons, this is a taxpayer identification number, usually a Social Security Number. For non-U.S. persons, the options are a taxpayer identification number, a passport number with country of issuance, an alien identification card number, or a number from another government-issued document showing nationality or residence and bearing a photograph.
A common misunderstanding is that P.O. boxes are always rejected. The rule requires a street address if you have one; the alternatives exist for people who genuinely do not. For business entities, the address on file is the principal place of business or another physical location, not a personal address.
What Happens If You Refuse or Provide False Information
You cannot opt out. Banks are required to have written procedures for cases where they cannot form a reasonable belief about a customer’s identity, and those procedures include declining to open the account or closing it after failed verification attempts.8FDIC. Customer Identification Program Refusing to provide the required information effectively ends the application. If you provide information the bank later cannot verify, the institution may restrict or close the account and may file a Suspicious Activity Report with FinCEN.
Providing false information carries heavier consequences. Knowingly using false information to obtain banking services can be prosecuted as bank fraud, which carries up to $1,000,000 in fines, up to 30 years in prison, or both.9Office of the Law Revision Counsel. 18 U.S. Code 1344 – Bank Fraud A separate statute makes it a crime to knowingly make false statements in any matter within federal jurisdiction, punishable by up to five years in prison, or up to eight years if the false statements involve domestic or international terrorism.10Office of the Law Revision Counsel. 18 U.S. Code 1001 – Statements or Entries Generally Banks must report suspicious activity involving $5,000 or more when they can identify a suspect, so detection is a real risk.
Honest paperwork mistakes, like a transposed digit in a Social Security Number or an outdated address, are not what these laws target. They can still delay an account opening or prompt extra verification, so it’s worth checking your information before you sign.