Know Your Customer (KYC) compliance regulation has proved to be one of the biggest operational challenges banks, accountants, lawyers and similar financial service providers worldwide have had to overcome.
World-Check, the industry standard KYC compliance solution, provides an overview of KYC compliance and its origins, and outlines the compliance mandate as applicable to banks, accounting firms, lawyers and other regulated financial service providers – not just in the UK, Europe and the USA, but all around the world. Relied upon by more than 3,000 institutions worldwide, this KYC database solution provides effective legal and reputational risk reduction.
Why “Know Your Customer?”
The 9/11 terrorist attacks on the World Trade Centre revealed that there were sinister forces at work around the world, and that terrorists activities were being funded with laundered money, the proceeds of illicit activities such as narcotics and human trafficking, fraud and organised crime. Overnight, the
combating of terrorist financing became a priority on the international agenda.
For the financial services provider of the 21st century, “knowing your customers” was no longer a suggested course of action. Based on the requirements of legislative landmarks such as the USA PATRIOT Act 2002, modern Know Your Customer (KYC) compliance mandates were created to simultaneously combat money laundering and the funding of terrorist activities.
What is Know Your Customer (KYC)?
Know Your Customer, or KYC, refers to the regulatory compliance mandate imposed on financial service providers to implement a Customer Identification Programme and perform due diligence checks before doing business with a person or entity.
KYC fulfils a risk mitigation function, and one its key requirements is checking that a prospective customer is not listed on any government lists for wanted money launders, known fraudsters or terrorists.
If preliminary KYC checks reveal that the person is a Politically Exposed Person (PEP), for example, Advanced Due Diligence must be done in order to ensure that the person’s source of wealth is transparent, and that he or she does not pose a reputational or financial risk in terms of their finances, public positions or associations. Beyond customer identification checks, the ongoing monitoring of transfers and financial transactions against a range of risk variables forms an integral part of the KYC compliance mandate.
But to understand the importance of KYC compliance for financial service providers better, its origins need to be examined.
Origins of Know Your Customer (KYC) compliance
The arrival of the new millennium was marred by a spate of terrorist attacks and corporate scandals that unmasked the darker features of globalisation. These events highlighted the role of money laundering in cross-border crime and terrorism, and underlined the need to clamp down on the exploitation of financial systems worldwide.
Know Your Customer (KYC) legislation was principally not absent prior to 9/11. Regulated financial service providers for a long time have been required to conduct due diligence and customer identification checks in order to mitigate their own operation risks, and to ensure a consistent and acceptable level of service.
In essence, the USA PATRIOT Act was not so much a radical departure from prior legislation as it was a firmer and more extensive articulation of existing laws. The Act would lead to the more rigorous regulation of a greater range of financial services providers, and expanded the authority of American law enforcement agencies in the fighting of terrorism, both in the USA and abroad.
In October 2001, President George W. Bush signed off the USA PATRIOT Act, effectively providing federal regulators with a new range of tools and powers for fighting terror financing and money laundering. During July 2002, the US Treasury proceeded to introduce Section 326 of the PATRIOT Act, a clause that removed some key burdens for regulators and added significant enforcement muscle to the Act.
What 9/11 changed, in essence, was the extent to which existing legislation was being implemented. Using the provisions of the earlier anti-terrorism USA Act as a foundation, it included the Financial Anti-Terrorism Act, which allowed for federal jurisdiction over foreign money launders and money laundered through foreign banks. Significantly, it is this anti-terror law that would make the creation of an Anti Money Laundering (AML) programme compulsory for all financial institutions and service providers.
Section 326 of the USA PATRIOT Act dealt specifically with the identification of new customers (“CIP regulation”), and made extensive provisions in terms of KYC and the methods employed to verify client identities.
In accordance with this piece of updated KYC legislation, federal regulators would hold financial institutions accountable for the effectiveness of their initial customer identification and ongoing KYC screening. Institutions are required to keep detailed records of the steps that were taken to verify prospective clients’ identities.
Although current KYC legislation does not yet demand the exclusion of specific types of foreign-issued identification, it recommends the usage of machine-verifiable identity documents. The ability to notify financial institutions if concerns regarding specific types of identification were to arise, combined with a risk-based approach to KYC, proved to provide a robust mechanism for addressing security concerns.
Effectively, the risk-based approach to customer due diligence grants regulated institutions a certain degree of flexibility to determine the forms of identification they will accept, and under which conditions.
KYC compliance: Implications for banks, lawyers and accounting firms
The KYC compliance mandate, for all its positive outcomes, has burdened companies and organisations with a substantial administrative obligation. Additionally, KYC compliance increasingly entails the creation of auditable proof of due diligence activities, in addition to the need for customer identification.
In order to meet KYC compliance requirements, financial institutions must:
- Verify that customers are not or have not been involved in illegal activities such as fraud, money laundering or organised crime
- Verify a prospective client’s identity
- Maintain proof of the steps taken to identify their identity
- Establish whether a prospective customer is listed on any sanctions lists in connection with suspected terrorist activities, money laundering, fraud or other crimes.
World-Check: A one-stop risk intelligence solution for KYC compliance
World-Check, as the world’s leading provider of highly structured risk intelligence, offers financial services providers a comprehensive solution for meeting their KYC compliance requirements.
Featuring a downloadable
Data-File for the automated batch screening of entire client bases, and
Online Service, the web-based equivalent that allows for the individual screening of persons or entities from any PC or laptop worldwide, it is the KYC and AML intelligence solution of choice for more than 2,500 institutions worldwide. Boasting 47 of the world’s 50 largest banks as clients, with an annual client renewal rate of more than 97% for the last 7 years, the facts speak for themselves.
World-Check allows for the creation of electronically verifiable proof of due diligence, and also enables institutions to check machine-readable passports for authenticity using Passport-Check.
Find out more about this comprehensive KYC risk intelligence solution.
KYC Document Management - The definition, scanning, management and tracking of customer documentation, and reporting of any deviations.
*
KYC Account Monitoring -The tracking of movements over account(s) looking for deviations outside of a pre-determined profile.
*
Manual Watch List Checking. Enter a name and the system will check to see if the name, or like sounding names, appear on any of the watch lists (e.g. OFAC, Bank of England and others) that the system monitors
* Message Monitoring. MLTrac can be configured to check all inbound and outbound messages, irrespective of format, to see whether any field (normally the Ordering Customer and Beneficiary) appears on one of the supported checklists. The bank has control over the granularity of the name checking so as not to create too many false alerts. Messages that fail Watch List Checking are put to a quarantine queue for manual intervention. Full Audit Trails of all checks and actions taken is maintained by the system.
*
Cash Remittances. For the many institutions that originate from a country with a large overseas population the problems associated with accepting cash for remittance back home when taken against the potential ramifications of anti money laundering legislation means that the business is very risky and, often, not worth doing. The Cash Remittances module does away with this fear. Information concerning the remitter is maintained as part of the KYC Documentation Management module and is displayed and made available to the teller at the point of capturing data. A full record off all remitters and beneficiaries is maintained. Limits can be placed upon the individual remitter and upon the ultimate beneficiary (irrespective of source). The resulting SQL database can be interrogated for unusual payment patterns.
