Know Your Customer (KYC)
Know Your Customer, usually shortened to KYC, is a key part of financial-crime prevention.
In simple terms:
KYC means knowing who your customer is and understanding the relationship you have with them.
This can include checking:
- identity
- address
- source of funds
- ownership
- purpose of the transaction
Therefore, KYC helps firms understand who they are dealing with.
It also helps reduce the risk of:
- fraud
- money laundering
- identity theft
- other financial crime
Why Does KYC Matter?
Financial firms handle large amounts of money.
As a result, criminals may try to use them.
For example, someone may:
- use a false identity
- hide the real owner of money
- provide fake documents
- move criminal funds
Therefore, firms need to know more than just a customer’s name.
They also need enough information to understand whether the relationship makes sense.
KYC and Customer Due Diligence
KYC and Customer Due Diligence, or CDD, are closely linked.
However, they are not exactly the same phrase.
A simple way to think about them is:
KYC → Know who the customer is
Meanwhile:
CDD → Carry out the checks needed to understand and verify the customer
Therefore, KYC is the broad idea.
CDD is the practical process used to support it.
Start With Identity
The first question is usually simple:
Who is the customer?
Therefore, firms may need information such as:
- full name
- date of birth
- home address
However, simply writing down these details is not enough.
The information may also need to be verified.
Identify and Verify
These two words are important.
Identify
Find out who the customer says they are.
Verify
Check that the information is genuine.
Therefore:
Identify → Who are you?
Verify → Can we prove it?
This distinction is easy to remember.
A Simple Example
Imagine a customer says:
My name is Sarah Brown.
That identifies the customer.
However, the firm may then check suitable evidence.
For example:
- passport
- driving licence
- electronic identity check
Therefore, the second step verifies the identity.
Proof of Address
A firm may also need to check where the customer lives.
For example, suitable evidence may include:
- bank statement
- utility bill
- council tax document
- other acceptable records
However, exact evidence requirements can differ.
Therefore, advisers should follow their firm’s process.
Do Not Guess What Documents Are Acceptable
Different firms may accept different types of evidence.
Therefore, an adviser should not simply tell a customer:
Any bill will do.
Instead, the adviser should follow the current list of acceptable documents.
This helps avoid delays and mistakes.
Electronic Verification
Identity does not always need to be checked using paper documents.
Many firms use electronic verification.
For example, systems may compare information against:
- credit reference data
- electoral records
- public records
- other reliable sources
Therefore, KYC can be carried out digitally.
However, the process still needs to be reliable.
KYC Is More Than ID
A common mistake is to think:
KYC just means checking a passport.
It does not.
Identity is only one part.
A firm may also need to understand:
- why the customer wants the service
- where the money comes from
- who really owns a company
- whether the transaction makes sense
Therefore, KYC looks at the wider picture.
Understand the Purpose
A firm should understand why the customer is using the service.
For example, a mortgage customer may want to:
- buy a home
- remortgage
- raise capital
- buy an investment property
That purpose helps create a normal picture of the relationship.
Therefore:
Know what the customer is trying to do.
This can make unusual activity easier to spot.
Source of Funds
Source of funds means:
Where did this particular money come from?
For example, a deposit may come from:
- savings
- inheritance
- sale of another property
- gift from family
- sale of investments
Therefore, source of funds focuses on the money used in the transaction.
A Deposit Example
Imagine a buyer has a deposit of:
£50,000
They explain that it comes from:
£30,000 savings
and:
£20,000 gift from parents
That creates a clear starting point.
However, evidence may still be needed.
Therefore, the firm may ask for documents showing where the money came from.
Source of Wealth
Source of wealth is different.
It asks:
How did the customer build their wider wealth?
For example:
Source of funds
£100,000 from sale of shares.
Meanwhile:
Source of wealth
Twenty years of running a successful business.
Therefore:
Source of funds → This money
Source of wealth → Overall wealth
This distinction is important.
Why Do These Checks Matter?
Imagine a customer says their deposit comes from savings.
However, the full amount arrived yesterday from an unknown company.
That does not automatically mean something is wrong.
However, it creates a mismatch.
Therefore, the adviser may need to follow the firm’s process and ask further questions.
Keep Explanations Consistent
KYC helps firms notice when information does not match.
For example:
Customer says deposit came from salary savings
but:
Bank statement shows a large third-party transfer
This may be innocent.
However, it needs an explanation.
Therefore:
Consistency matters.
Beneficial Ownership
Sometimes the customer is a company rather than an individual.
In that case, the firm may need to identify the beneficial owner.
This means the person who ultimately owns or controls the business.
Therefore, simply knowing the company name may not be enough.
A Simple Company Example
Imagine:
ABC Property Ltd
applies for finance.
The firm may need to understand:
- who owns the company
- who controls it
- who benefits from it
Therefore, KYC can involve looking behind the company structure.
Why Beneficial Ownership Matters
Criminals may try to hide behind companies or complex ownership structures.
For example:
Company A
↓
owned by:
Company B
↓
owned by:
Company C
The real person behind the structure may become hard to see.
Therefore, beneficial-ownership checks help identify who is really in control.
Complex Ownership Can Increase Risk
A complicated company structure is not automatically suspicious.
Some businesses are genuinely complex.
However, complexity may increase the need for explanation.
Therefore:
Complex does not mean criminal.
It simply means more understanding may be needed.
KYC and Risk
Not every customer presents the same level of risk.
Therefore, firms often use a risk-based approach.
For example, risk may be affected by:
- customer type
- country
- transaction
- source of funds
- ownership structure
As a result, some customers may need more checks than others.
A Lower-Risk Example
Imagine a salaried customer:
- lives in the UK
- uses their own savings
- provides clear documents
- has a simple mortgage application
The situation may be straightforward.
Therefore, normal checks may be enough.
A Higher-Risk Example
Now imagine a customer:
- uses a complex company
- receives funds from several countries
- gives changing explanations
- cannot explain the source of money
That creates more questions.
Therefore, further checks may be needed.
KYC Is Ongoing
KYC is not always finished once the customer passes the first identity check.
For some firms and relationships, information may need to be updated.
For example:
- address changes
- ownership changes
- business changes
- transaction pattern changes
Therefore:
Know the customer at the start and stay alert later.
KYC and Mortgage Advisers
Mortgage advisers may not always carry the same direct legal KYC duties as banks.
However, they still handle information that can reveal possible concerns.
For example:
- source of deposit
- identity
- employment
- income
- property details
Therefore, advisers should understand their firm’s process.
They should also follow it carefully.
A Mortgage Example
Imagine Daniel wants a mortgage.
He provides:
- passport
- payslips
- bank statements
- proof of deposit
However, the bank statements show a large transfer from another person.
Daniel says:
It’s from a friend. Don’t worry about it.
That may be innocent.
However, the source of the money still needs to be understood.
Therefore, the adviser should follow the firm’s process.
Third-Party Deposits
A deposit does not always come from the customer.
For example, it may come from:
- parents
- grandparents
- partner
- another family member
This may be acceptable.
However, the lender may need to know:
- who provided the money
- whether it is a gift
- whether repayment is expected
- whether the giver will have an interest in the property
Therefore, third-party funds need clear explanation.
Gifted Deposit Example
Imagine parents give:
£25,000
towards their daughter’s home purchase.
The lender may want confirmation that:
- the money is a genuine gift
- it does not need to be repaid
- the parents do not expect ownership rights
Therefore, KYC and mortgage requirements can overlap.
Identity Fraud
KYC also helps reduce identity fraud.
For example, a criminal may try to use:
- stolen passport
- false address
- another person’s financial details
Therefore, identity checks protect both the lender and the real person whose identity may be misused.
A Simple Fraud Example
Imagine someone applies for a mortgage using another person’s name.
If the fraud succeeds:
- the lender may lose money
- the real person may face serious problems
- the property transaction may be affected
Therefore, identity verification is not just paperwork.
It has a real protective purpose.
Do Not Ignore Document Problems
Sometimes documents do not look right.
For example:
- names do not match
- dates do not make sense
- figures change
- documents appear altered
Therefore, advisers should not simply accept them because the customer seems trustworthy.
Instead, follow the firm’s process.
Do Not Become an Investigator
However, an adviser should not try to become a detective.
For example, they should not:
- accuse the customer
- search private records without authority
- carry out their own investigation
Instead:
Notice concern
↓
Follow procedure
↓
Escalate where needed
This is the safer approach.
Politically Exposed Persons
KYC checks may also identify a Politically Exposed Person, or PEP.
A PEP is broadly someone who holds, or has held, an important public role.
This may affect the level of financial-crime risk.
However:
Being a PEP does not mean being dishonest.
Instead, additional checks may be needed where the rules require them.
Sanctions Checks
Financial firms may also need to consider financial sanctions.
For example, certain people or organisations may be subject to restrictions.
Therefore, firms may use screening systems to check names.
However, sanctions rules can change.
As a result:
Use current systems and current rules.
Name Matches Need Care
Sometimes a system may flag a customer’s name.
However, two people can have the same name.
Therefore, a match does not automatically mean the customer is sanctioned.
More checking may be needed.
As a result:
A warning is a reason to check, not a reason to assume guilt.
Record Keeping
KYC checks should be recorded where required.
For example, records may show:
- what was checked
- what documents were used
- what questions were asked
- what explanation was given
- what action was taken
Therefore, good records create a clear trail.
Why Records Matter
Imagine someone later asks:
Why did you accept this deposit?
The file should help explain the decision.
For example:
Source checked
↓
Evidence reviewed
↓
Explanation matched
↓
No further concern identified
Therefore, good records help show that the process was followed properly.
Keep Information Secure
KYC involves personal data.
Therefore, identity documents and financial information must be protected.
For example:
- passport copies
- bank statements
- addresses
- dates of birth
This links directly with Page 25 on data protection.
Therefore:
KYC checks must also respect confidentiality and data security.
KYC and Customer Experience
KYC checks can sometimes feel intrusive to customers.
Therefore, advisers should explain why information is needed.
For example:
We need to confirm where the deposit came from because lenders and financial firms have checks designed to prevent fraud and financial crime.
This makes the process easier to understand.
Therefore, clear explanation can improve the customer experience.
Do Not Ask for More Than You Need
KYC does not mean collecting every possible piece of information.
Instead, checks should be proportionate.
Therefore:
Ask for what is needed, not everything that might be available.
This also supports data minimisation.
A Full Mortgage Example
Imagine Priya wants to buy a home.
She provides:
Passport
↓
Confirms identity.
Then:
Bank statement
↓
Helps confirm address and deposit.
Next:
Gift letter from parents
↓
Explains part of the deposit.
Finally:
Supporting evidence
↓
Shows where the money came from.
Therefore, the firm can build a clear picture.
This is KYC in practice.
A Simple KYC Process
Use this sequence:
Identify
Who is the customer?
↓
Verify
Can the identity be confirmed?
↓
Understand
Why are they using the service?
↓
Check
Where does the money come from?
↓
Assess
Does the information make sense?
↓
Record
Keep a clear trail.
This is a useful memory aid.
What Should an Adviser Avoid?
Avoid:
- accepting unclear information without question
- making unfair assumptions
- ignoring document problems
- collecting unnecessary data
- trying to investigate crime personally
- sharing customer data carelessly
Therefore:
Be careful, fair and consistent.
Key Terms to Remember
KYC
Know Your Customer.
CDD
Customer Due Diligence.
Identify
Find out who the customer says they are.
Verify
Confirm the customer’s identity using suitable evidence.
Source of Funds
Where the money used in a transaction came from.
Source of Wealth
How the customer’s wider wealth was built.
Beneficial Owner
The person who ultimately owns or controls an organisation.
PEP
Politically Exposed Person.
Sanctions Screening
Checking whether a person or organisation is subject to financial restrictions.
Ongoing Monitoring
Keeping relevant customer information and activity under review.
Quick Knowledge Check
1. What does KYC stand for?
Know Your Customer.
2. What is the basic purpose of KYC?
To understand who the customer is and reduce financial-crime risk.
3. What is the difference between identifying and verifying?
Identifying means finding out who the customer says they are. Verifying means confirming it.
4. Is KYC only about checking a passport?
No. It can also involve understanding the purpose of the relationship, source of funds and ownership.
5. What is source of funds?
Where the particular money used in a transaction came from.
6. What is source of wealth?
How the customer’s wider wealth was built.
7. What is a beneficial owner?
The person who ultimately owns or controls a company or organisation.
8. Does a complex company structure automatically mean criminal activity?
No. However, it may require more understanding.
9. Should advisers investigate suspicious activity themselves?
No. They should follow firm procedures and escalate where needed.
10. Why are KYC records important?
They help show what was checked and why a decision was made.
Quick Summary
KYC means:
Know Your Customer
The aim is to build a clear picture of who the customer is and why they are using the service.
Therefore, firms may need to understand:
Identity
↓
Address
↓
Purpose
↓
Source of funds
↓
Ownership
↓
Risk
The process can be remembered as:
Identify → Verify → Understand → Check → Assess → Record
Most importantly, KYC is not about treating every customer as suspicious.
Instead, it is about using sensible checks to reduce fraud and financial crime.
For mortgage advisers, the key lesson is simple:
Know who you are dealing with, understand where the money comes from, and do not ignore information that does not make sense.
Next Page
Financial Crime, Fraud and Terrorist Financing