KYC (Know Your Customer)

What Is KYC?

KYC is the regulated process of verifying who a customer is before providing financial services, and keeping that picture current afterward. Short for Know Your Customer, KYC sits inside a firm's anti money laundering program and covers identity verification, beneficial ownership checks, sanctions screening, and an ongoing risk rating for every account.

How KYC Works

KYC runs in four stages. First comes the customer identification program: collecting legal name, date of birth, physical address, and a government issued identification number, then verifying those against authoritative sources rather than simply recording them. Second comes customer due diligence, which establishes the nature and expected purpose of the relationship so that later activity can be judged against a baseline. Third comes screening against sanctions lists, politically exposed person databases, and adverse media. Fourth comes ongoing monitoring, because the file goes stale the moment it is filed.

Modern KYC is mostly automated. Identity verification providers check documents, match data against credit bureau and government records, run device and biometric signals, and return a decision in seconds. What cannot be automated is the exception path. Every program has a queue of cases that fail automated checks, and the quality of a KYC program is largely determined by how fast and how consistently that queue clears.

KYC in Plain English

Before a regulated business takes your money or lends you money, it has to prove you are a real person or a real company, that you are not on a prohibited list, and that what you say you will do with the account is plausible. Then it has to keep watching. KYC is the cost the financial system pays for not knowing its counterparties, spread across every account opened.

KYC vs KYB: Verifying People vs Verifying Businesses

KYC verifies an individual. KYB, or Know Your Business, verifies a legal entity, and it is materially harder. A business file requires the registered legal name and formation documents, the registration or tax identification number, the operating address, the officers and control persons, and the individuals who ultimately own the entity.

The difficulty is structural. A person has one identity document. A company can sit under a holding company, under a trust, under a fund, across three jurisdictions, and each layer must be unwound to reach a human being. For any B2B financial product, from a corporate card to embedded lending, KYB is the real work and KYC on the signing officer is the easy half.

Beneficial Ownership and Sanctions Screening

Beneficial ownership rules exist because shell structures were the standard method for hiding control. In the United States, the customer due diligence rule requires covered institutions to identify each individual owning 25 percent or more of a legal entity customer plus one person with significant management control. The EU anti money laundering directives set a comparable 25 percent threshold with registers in member states. Thresholds and registry access differ by jurisdiction, and any global program has to handle that variation rather than assume one standard.

Sanctions screening runs in parallel and is unforgiving. Names are checked against lists such as the OFAC specially designated nationals list, plus EU, UN, and local equivalents, using fuzzy matching that must catch transliteration variants without drowning the review team in false positives. Sanctions exposure is strict liability in most regimes, so a screening gap is not a paperwork issue.

Risk Rating and Ongoing Monitoring in KYC

Every customer receives a risk rating built from geography, industry, product, ownership structure, and expected transaction behavior. Low risk accounts get standard onboarding and periodic refresh. High risk accounts get enhanced due diligence, source of funds evidence, and tighter monitoring thresholds.

That rating is the control that makes everything downstream affordable. Without it, a firm either over screens and loses good customers to onboarding friction, or under screens and misses the accounts that actually matter. Monitoring then compares live behavior against the expected profile, escalating anomalies for review and, where warranted, a suspicious activity report.

KYC and the Closing Motion

KYC is plumbing, and plumbing determines whether a close is fast or slow. In the Closing Motion, the moment a buyer accepts terms that involve paying over time, someone has to establish that the buying entity is real, identify its beneficial owners, clear sanctions screening, and rate the credit before money can move. Done badly, that check lands after signature and stalls Collect for weeks. Ratio runs KYC, KYB, and underwriting on the buyer as part of Ratio Trade, inside the proposal rather than after it, so the seller collects the full total contract value upfront while the buyer pays monthly or quarterly. The compliance work stays invisible to the sales team and the deal keeps its momentum.

Common Questions About KYC

What is the difference between KYC and AML?

AML is the whole program for preventing money laundering, including policies, monitoring, reporting, training, and audit. KYC is the identification and due diligence component inside it. KYC produces the customer risk rating that the rest of the AML program depends on.

Does a B2B software company need to perform KYC?

Not for ordinary subscription sales. The obligation attaches when the company handles funds, extends credit, or offers embedded financial products, at which point it either becomes a regulated party itself or inherits diligence duties through its sponsor bank or financing partner.

How long should KYC onboarding take?

Automated consumer identity verification typically resolves in seconds to minutes. Business onboarding with a layered ownership structure realistically takes one to five business days, and complex cross border entities take longer. Onboarding time is a conversion metric, so most firms measure it as closely as they measure pass rates.

Key Takeaways

• KYC verifies customer identity, screens for sanctions exposure, and assigns a risk rating before a financial relationship starts.
• KYB extends KYC to legal entities and is harder, because ownership layers must be unwound to reach real people.
• Beneficial ownership thresholds commonly sit at 25 percent, with the exact rules varying by jurisdiction.
• KYC is continuous: risk ratings, monitoring, and periodic refresh keep the file accurate after onboarding.
• Fast, automated KYC is a conversion advantage, because onboarding friction costs real customers.