What is Know Your Customer (KYC)?

Last updated: 26 October 2026

What is Know Your Customer (KYC)?

Know Your Customer (KYC) is the process by which financial institutions verify the identity of their customers and assess the financial crime risk they present. It helps prevent money laundering, payment fraud, terrorist financing and corruption, and it is a legal requirement in most jurisdictions.

KYC is not a one-off check. It begins at onboarding and continues for the life of the relationship, and it includes customer due diligence (CDD), enhanced due diligence (EDD) for higher risk customers and ongoing due diligence.

Why do banks do KYC checks?

KYC protects institutions and the financial system from being used for crime. Governments have strengthened KYC rules because financial crime is rising and money moves across borders faster than ever. Strong KYC also avoids heavy fines and reputational damage, and it underpins every other control, since screening, monitoring and reporting all depend on knowing who the customer is. The key international standard is FATF Recommendation 10 on customer due diligence, which national laws build on.

What are the main components of KYC?

There are seven key components of KYC compliance:

What is KYC verification?

KYC verification is the stage in which a customer’s identity is confirmed. Institutions typically collect information through a KYC questionnaire, identity documents, and sometimes a selfie or video check. They then enrich it with public records, such as company registries like Companies House in the UK, to check company directors and business addresses, and screen names against sanctions lists and other watchlists through name screening.

Typical information collected includes:

• Individuals: full name, date of birth, address, nationality, government ID and source of funds.
• Businesses: legal name, registration details, address, directors, beneficial owners, nature of business and ownership structure.

Verifying a business is often called Know Your Business (KYB). It is harder than verifying an individual, because ownership can be layered across jurisdictions.

How does someone pass a KYC check?

Each customer is assigned a risk level, often a numerical score, based on the information collected. Institutions set their own risk tolerance, so one bank may decline an applicant that another accepts. A customer passes when their identity is verified, no prohibited matches are found and their risk falls within the institution’s appetite. If risk thresholds are exceeded, the institution may apply enhanced due diligence, request more information or decline the relationship.

What risk factors are involved in the KYC process?

• Companies doing business in high-corruption countries
• Individuals who often send money abroad
• Politically exposed persons (PEPs) and executives of PEP-linked businesses
• Clients based mainly outside the country of registration
• Businesses in countries with weak AML controls
• Complex or opaque ownership structures
• High-risk industries, such as cash-intensive businesses, crypto and money services
• Unusual products, delivery channels or transaction patterns

What is the difference between KYC and CDD?

The two terms are closely related and often used interchangeably, but KYC is the broader concept. CDD is a core part of KYC, covering the checks used to understand a customer and assess their risk. KYC also includes identity verification at the start of a relationship and the ongoing processes that keep it up to date. For more on the distinction, see KYC software vs CDD.

What are the main KYC regulations?

KYC requirements vary by jurisdiction, but key examples include:

• FATF Recommendations: the global standard for customer due diligence.
• United States: the Customer Identification Program rules under the USA PATRIOT Act, and FinCEN’s CDD Rule covering beneficial ownership.
• European Union: the new AML Regulation (AMLR) and the Anti-Money Laundering Authority (AMLA). See our EU AMLA technology readiness hub, or read how AMLA’s CDD requirements change KYC
• United Kingdom: the Money Laundering Regulations 2017.

How is KYC changing?

KYC is moving from periodic reviews to continuous monitoring. Customer profiles are increasingly refreshed when events occur, such as a change in ownership or a sanctions list update, instead of every one to three years. This is the idea behind perpetual KYC (pKYC) and Always-on Compliance.

In the FinCrime Frontier 2026-27 report, 50.4% of respondents saw KYC/CDD and perpetual due diligence as an area of greatest potential for agentic AI, and 42.5% expected KYC, CDD and onboarding automation to deliver cost efficiencies. The findings are indicators from 202 respondents, not statistically representative.

What are the challenges of KYC?

• Fragmented data, held across systems and business lines.
• Slow, manual onboarding, which frustrates customers and increases drop-off.
• Complex ownership structures, which make beneficial ownership hard to establish.
• Rising regulatory expectations, which vary across jurisdictions.
• Stale information, because periodic reviews leave gaps between refreshes.
• High review costs, driven by manual data gathering and rework.

KYC best practices

• Apply a risk-based approach, with deeper checks for higher risk customers.
• Consolidate customer data and use entity resolution to create a single view.
• Screen at onboarding and on an ongoing basis, not just at the start.
• Verify beneficial owners, not only the named customer.
• Trigger reviews from events, in addition to scheduled cycles.
• Document decisions and keep a clear audit trail.
• Make the process simple for the customer by collecting information once and reusing it.

How is AI used in KYC?

AI speeds up onboarding and improves quality. It can extract and verify data from documents, resolve entities across sources, score customer risk and refresh profiles as circumstances change. Agentic AI goes further, by gathering evidence, completing due diligence checks and drafting a documented recommendation for a human reviewer. Human oversight and explainability remain essential. Read why regulators love agentic AI.

SymphonyAI offers the latest KYC software

SymphonyAI’s KYC software is part of our financial crime compliance software and gives you a single, dynamic view of customer risk. It supports real-time onboarding, integrated name screening and beneficial ownership requirements, with fast processing that minimizes customer impact. It is built on Symphony Risk Intelligence, which supports continuous KYC and due diligence. To see how anti-financial crime software can help, get a demo.

Frequently asked questions

What does KYC stand for?
KYC stands for Know Your Customer. It is the process of verifying customers’ identities and assessing the financial crime risk they pose.

What is the difference between KYC and CDD?
CDD is a core part of KYC, covering the checks used to understand a customer and assess their risk. KYC is the broader process, which also includes identity verification and ongoing updates.

Why is KYC important in banking?
It helps banks prevent money laundering, fraud and terrorist financing, meet legal obligations and avoid fines. It is also the foundation for screening and monitoring.

What documents are needed for KYC?
Individuals usually provide government ID and proof of address. Businesses provide registration documents, details of directors and beneficial owners, and information about their activities.

How often should KYC be refreshed?
It depends on the customer’s risk. Higher risk customers are reviewed more often, and many institutions now supplement scheduled reviews with event-driven updates or perpetual KYC.

Can KYC be automated?
Much of it can, including document verification, screening and risk scoring. Human oversight is still needed for complex or high-risk cases.