Short Answer
Financial institutions must collect identifying information such as name, date of birth, address, and identification number to verify a customer's identity. This information forms the foundation for establishing and documenting the customer relationship.
Comprehensive Answer
The customer identification process serves as the cornerstone of a financial institution's ability to understand who it is doing business with and to detect potentially suspicious activity. Beyond the basic data points, institutions must design their collection procedures to capture information that enables meaningful verification and ongoing monitoring throughout the customer relationship.
At the individual customer level, the identification number typically means a social security number for U.S. citizens or an individual taxpayer identification number for those without social security numbers. For non-U.S. persons, institutions may collect passport numbers, alien identification card numbers, or other government-issued document numbers. The address requirement extends beyond a simple mailing address; institutions generally seek a principal place of residence or business location that can be independently verified. Post office boxes alone do not satisfy this requirement for individuals, though they may be collected as supplementary contact information.
When opening accounts for legal entities such as corporations, partnerships, or trusts, the information requirements expand considerably. Institutions must collect the legal name of the entity, its principal place of business, and its taxpayer identification number. Equally important, they must identify and verify the identity of individuals who have significant control or ownership of the entity. This means collecting the same core identifying information for beneficial owners who meet specified ownership thresholds or who exercise substantial control over the entity, even if they are not signatories on the account.
The nature of the customer relationship influences what additional information institutions collect. For accounts that will engage in wire transfers, the institution may gather more detailed information about expected transaction patterns and the sources of funds. For customers in certain industries or geographic locations, enhanced due diligence may require information about the nature of the business, its customer base, and its supply chain relationships. Private banking relationships and accounts for politically exposed persons typically trigger requirements for information about the source of wealth and the purpose of the account.
Documentation supporting the collected information forms an essential part of the identification process. Institutions must examine documents that provide reasonable assurance of identity. For individuals, this typically means reviewing government-issued identification that includes a photograph, such as a driver's license or passport. The institution must record the type of document reviewed, any identification number on the document, and the place of issuance and expiration date if applicable. For entities, this means examining formation documents such as articles of incorporation, partnership agreements, or trust instruments.
The timing of information collection matters significantly. Institutions must obtain the required identifying information at the time of account opening, before the account is opened. However, practical considerations sometimes require flexibility. When an account must be opened quickly to avoid interruption of normal business, institutions may complete verification within a reasonable period after opening, provided they implement appropriate risk-based measures during the interim period. These measures might include limiting transaction types or amounts until verification is complete.
Information accuracy and currency present ongoing challenges. Institutions must establish procedures not only for collecting information initially but also for updating it when circumstances change. A customer who moves, changes legal name, or undergoes a corporate restructuring triggers a need to refresh the identification information on file. The institution's policies should specify how frequently customer information is reviewed and under what circumstances updates are mandatory rather than optional.
The format and method of information collection have evolved with technology. While face-to-face account opening allows for direct examination of original documents, institutions increasingly open accounts through remote channels. These scenarios require alternative verification methods that may include database checks, documentary verification through digital uploads, or knowledge-based authentication procedures. Regardless of method, the underlying information requirements remain consistent.
Certain customer types present unique challenges. For accounts opened by one person on behalf of another, such as custodial accounts or accounts with powers of attorney, institutions must collect identifying information for both the account holder and the person authorized to transact on the account. For correspondent accounts with foreign financial institutions, the information requirements extend to understanding the nature of the correspondent's business and its own anti-money laundering controls.
Record retention obligations mean that collected information must be maintained in a format that allows for timely retrieval. Institutions must preserve records of the information used to verify identity for specified periods after account closure, ensuring that historical customer relationships can be reconstructed if questions arise during examinations or investigations.