Before a Bank Takes Your Money It Traces Who Ultimately Owns You
Before a bank can transact with you it has to establish who you are, who ultimately owns you, and whether your expected activity makes sense. Then it has to keep checking.
Two Halves of the Same Regime
Financial crime compliance splits into monitoring transactions and knowing customers. Know your customer is the second, and it happens before any transaction exists.
The logic is sequential. Transaction monitoring asks whether activity fits the customer. That question is unanswerable unless the bank first established who the customer is and what activity to expect.
What Onboarding Requires
The customer identification programme is the baseline: name, date of birth, address, and an identification number, verified against documents or reliable data sources.
For a business it is considerably heavier. The bank needs formation documents, evidence of who controls the entity, the nature of the business, expected transaction volumes and counterparties, and the source of funds.
| Requirement | Individual | Business |
|---|---|---|
| Identity verification | Documents or data match | Formation documents and registry checks |
| Beneficial ownership | Not applicable | Individuals owning above a threshold, plus a control person |
| Expected activity | Broad profile | Volumes, geographies, counterparties |
| Screening | Sanctions, politically exposed persons, adverse media | Same, applied to entity and each owner |
The Beneficial Ownership Problem
Corporate structures can hide their owners across several layers and jurisdictions. A company owned by a company owned by a trust in a third country defeats identity checks performed at the top level only.
United States rules from 2018 required banks to identify individuals owning twenty five percent or more of a legal entity customer, plus one person with significant control. Legislation passed in early 2021 went further by creating a federal beneficial ownership registry that companies report into directly, shifting part of the burden from banks to the entities themselves.
Every anonymity mechanism in finance eventually gets attacked at the same point: forcing someone to name a natural person who is accountable. Layered structures are only useful until a registry requires that name.
Risk Based, Not Uniform
The regime is deliberately proportionate. Banks assign each customer a risk rating from geography, industry, structure, product usage, and screening results, then apply due diligence to match.
Low risk customers get simplified checks. High risk ones, meaning cash intensive businesses, complex ownership, politically exposed persons, or high risk jurisdictions, get enhanced due diligence: source of wealth evidence, senior approval to onboard, and more frequent review.
A politically exposed person is anyone holding a prominent public function, plus close associates and family. The classification implies no wrongdoing. It reflects that public office creates a higher base rate of corruption risk.
Why It Takes So Long
Onboarding a mid sized corporate client can run weeks. The delay is rarely one hard question. It is the accumulation of document requests, ownership tracing, screening hits requiring manual clearance, and internal approvals, each with its own queue.
Refresh cycles repeat this. Customers are periodically re reviewed, higher risk ones annually, and the same documents get requested again. Banks have moved toward perpetual KYC, monitoring for triggering events continuously rather than re papering everyone on a calendar.
The Competitive Angle
KYC friction created a genuine opening for new entrants. Digital onboarding using document capture, biometric matching and instant data verification compressed account opening from weeks to minutes for straightforward customers.
That is a real improvement in execution and not a lighter obligation. The same rules apply, and firms that treated speed as an excuse for weak controls have consistently drawn enforcement. The defensible version of the pitch is a better process, not a smaller one.
The Bottom Line
KYC establishes identity, beneficial ownership and expected activity before an account opens, then re verifies it on a cycle, with the depth of checking scaled to assessed risk. Beneficial ownership is the hard part, which is why regulators moved toward direct registries. The friction is real and expensive, and the firms that compete on it win by automating the process rather than by having less of it to do.