What is the first step in the Kyc Process?
The first step in the KYC (Know Your Customer) process is Customer Identification, often referred to as the Customer Identification Program (CIP) .
Before a financial institution allows you to open an account, transfer money, or engage in a relationship, they must answer one fundamental question: “Are you who you say you are?”
Here is a breakdown of what this critical first step entails and how it connects to the transaction monitoring patterns we discussed earlier.
The Core Components of the First Step (CIP)
The CIP is not just about taking a photo of a driver’s license; it’s a structured legal requirement. Depending on your jurisdiction (such as the USA PATRIOT Act in the US or AMLD in Europe), the institution must collect and verify four specific pieces of data:
1. Name
This establishes the legal identity. Aliases, maiden names, and “doing business as” (DBA) names must also be captured.
2. Date of Birth
This is a static, unchangeable identifier that distinguishes individuals with common names.
3. Address
A physical residential or business address is required. PO Box addresses are often red flags unless supplemented with a physical location.
4. Identification Number
- For Individuals: A government-issued ID number (e.g., Social Security Number, Passport Number, National ID).
- For Entities: The tax identification number (EIN) and proof of incorporation documents.
Beyond Data Collection: The Verification Layer
Collecting this data is pointless without verification. This is where the “first step” gets rigorous. Verification happens in two ways:
- Documentary Verification: The customer provides an unexpired, government-issued ID. Modern systems use AI to check for holographic seals, micro-printing, and edge tampering to ensure the document isn’t a forgery.
- Non-Documentary Verification: The institution cross-references the data against independent, trusted sources (credit bureaus, electoral rolls, utility databases) to ensure the person exists.
In short, if the first step is flawed, the entire monitoring system fights blind.