Compliance Programs & Controls
What Is KYC?
A deeper plain-language guide to Know Your Customer, identity verification, customer due diligence, risk scoring, and how KYC connects to AML and sanctions controls.
Quick answer
KYC, or Know Your Customer, is the process organizations use to understand who they are dealing with before and during a business relationship. It often includes identity verification, beneficial-owner checks, risk assessment, and ongoing monitoring.
Where the term appears
- bank account opening
- fintech onboarding
- payment-platform verification
- business customer review
- crypto or digital asset controls
How this fits into a control system
Governance and control terms are easiest to understand as parts of a larger compliance system. A policy sets expectations, a procedure explains the steps, a record shows what happened, and review or audit activity checks whether the process works in practice.
Organizational relevance
Organizations use this concept within governance, customer or vendor due diligence, policy management, evidence collection, monitoring or assurance. The key question is how the term connects to a named obligation, operating process, control owner and retained record.
What it does not establish by itself
- It is not just collecting a passport image.
- It is not identical in every industry or country.
- It is not a guarantee that fraud or crime is impossible.
Key records and decision points
- Identity and address evidence
- Legal entity and beneficial-owner information
- Purpose and expected activity
- Risk rating, approval, refresh and exception records
Common confusion
KYC is not complete when documents are merely collected. Information must be evaluated, verified as required and kept current.
Official-source check
For current rules, forms, deadlines, eligibility, or filing instructions, always check official sources. This article is an educational overview, not a substitute for official guidance.