An AML questionnaire is the form a bank or other regulated business asks you to complete so it can assess whether your account carries money laundering or terrorist financing risk. It collects your identity, ownership structure, business activities, funding sources, and regulatory status, and it exists because federal law requires financial institutions to know who their customers are before opening an account and to keep knowing them afterward.1FinCEN. Information on Complying with the Customer Due Diligence (CDD) Final Rule Expect it at account opening, and expect follow-up versions later in the relationship.
What the Questionnaire Asks You to Provide
The questions fall into roughly six categories, each tied to a specific regulatory requirement. Knowing the category helps you understand why a particular question is on the form and what supporting document the bank will want with your answer.
Identity and Legal Structure
For an individual, the Customer Identification Program rule requires at minimum your name, date of birth, a residential or business address, and an identification number, typically a taxpayer identification number or, for non-U.S. persons, a passport or alien ID number. For an entity, the address must be a physical location rather than just a mailing address.2eCFR. 31 CFR 1020.220 – Customer Identification Program Requirements for Banks
For a U.S. entity, the identification number is a Taxpayer Identification Number, usually the Employer Identification Number.3Internal Revenue Service. U.S. Taxpayer Identification Number Requirement Foreign businesses without a U.S. taxpayer ID must supply alternative government-issued documentation proving the business exists.2eCFR. 31 CFR 1020.220 – Customer Identification Program Requirements for Banks The questionnaire will also ask for the entity’s full legal name, any trade names, the jurisdiction and date of formation, and the entity type.
Beneficial Owners and the Control Person
Under the CDD Rule, the institution must identify the beneficial owners of every legal entity customer at account opening.4eCFR. 31 CFR 1010.230 – Beneficial Ownership Requirements for Legal Entity Customers “Beneficial owner” has two prongs and both apply.
The ownership prong covers each individual who directly or indirectly holds 25 percent or more of the equity interests. Depending on how ownership is spread, as many as four individuals may qualify. The control prong covers one individual with significant responsibility to manage or direct the entity, with the regulation naming positions such as CEO, CFO, COO, managing member, general partner, president, or treasurer.4eCFR. 31 CFR 1010.230 – Beneficial Ownership Requirements for Legal Entity Customers The same person can satisfy both prongs.
For every beneficial owner named, the questionnaire asks for the same four data points the CIP requires for individuals: name, date of birth, address, and identification number. In practice you will also attach a copy of each owner’s government-issued photo ID.4eCFR. 31 CFR 1010.230 – Beneficial Ownership Requirements for Legal Entity Customers
Business Activities and Geographic Footprint
Expect questions about your primary industry, the products or services you offer, the customer base you serve, the currencies you handle, and the transaction volume you anticipate. A cash-intensive operation is treated as inherently riskier than one that runs on electronic payments.
Geography carries heavy weight. The form will ask where you operate, where your key accounts are held, and where senior management sits. Operating in jurisdictions that the Financial Action Task Force has flagged for strategic AML deficiencies raises your risk score; FinCEN advises institutions to factor FATF’s assessments into their risk-based policies.5Financial Crimes Enforcement Network. Financial Action Task Force Identifies Jurisdictions with Anti-Money Laundering, Combating the Financing of Terrorism, and Counter-Proliferation Finance Deficiencies Correspondent banking relationships and complex international trade draw closer scrutiny for the same reason.
Source of Funds and Source of Wealth
The form asks where the money comes from on two levels. First, the entity’s operating funds: revenue, capital contributions, investment income, or something else. Second, the personal wealth of beneficial owners, especially when the entity is newly formed and has no operating history to explain large opening deposits.
Your answers set a baseline the bank compares your actual activity against. If real transactions diverge sharply from what you described, that inconsistency can trigger a Suspicious Activity Report. A company that reports modest domestic revenue and then receives a large wire from an unrelated foreign counterparty is the textbook example.
Regulatory Status and Licensing
The form asks whether your entity has its own regulatory oversight. Certain types, such as banks, government agencies, and publicly traded companies, are exempt from the CDD Rule’s beneficial ownership identification requirement.4eCFR. 31 CFR 1010.230 – Beneficial Ownership Requirements for Legal Entity Customers
If you operate as a Money Services Business, you must register with the Treasury Department and file FinCEN Form 107 within 180 days of establishment, and the questionnaire will ask about that registration.6Financial Crimes Enforcement Network. Money Services Business (MSB) Registration You will also be asked to disclose any current or past regulatory enforcement actions, investigations, or compliance deficiencies.
Sanctions and Politically Exposed Persons
The information you supply is screened against sanctions lists, most importantly OFAC’s Specially Designated Nationals and Blocked Persons list. U.S. businesses cannot transact with anyone on the SDN list, and institutions face enforcement if they miss a match.7U.S. Department of the Treasury. Starting an OFAC Compliance Program Screening covers the entity, its beneficial owners, its directors, and other associated individuals.
Some questionnaires ask whether a beneficial owner or senior officer is a Politically Exposed Person. Federal BSA regulations don’t formally define the term, but the industry uses it for foreign individuals who hold or have held prominent public functions, along with immediate family and close associates.8FFIEC BSA/AML InfoBase. Risks Associated with Money Laundering and Terrorist Financing – Politically Exposed Persons PEP status doesn’t disqualify you, but it will raise your risk tier and trigger more intensive due diligence.
The Bank’s Questionnaire Is Not the Same as the FinCEN BOI Report
People conflate these two. The Corporate Transparency Act originally required most companies to file beneficial ownership information directly with FinCEN. In March 2025, FinCEN issued an interim final rule exempting all domestic entities from that filing, so only foreign entities registered to do business in the United States now have to report to FinCEN under the CTA.9Financial Crimes Enforcement Network. FinCEN Removes Beneficial Ownership Reporting Requirements for U.S. Companies and U.S. Persons That change does not affect the bank. The CDD Rule requiring financial institutions to collect beneficial ownership at account opening is a separate obligation and is fully in force.1FinCEN. Information on Complying with the Customer Due Diligence (CDD) Final Rule Your bank will ask for ownership details whether or not you file anything with FinCEN.
How the Bank Uses Your Answers
The completed questionnaire feeds a risk-scoring model. A straightforward domestic business with one identifiable owner in a low-risk industry scores very differently from a multi-layered holding structure with owners in FATF-flagged jurisdictions. The model assigns you to a risk tier, typically low, medium, or high.
The tier drives how closely the account is watched. Low-risk clients get standard transaction monitoring. High-risk clients trigger Enhanced Due Diligence, which can mean requests for audited financials, a business plan, or proof of the source of specific large transactions. Cash-intensive businesses, PEP-connected clients, and entities operating in sanctioned or high-risk geographies almost always land in EDD.
The tier also sets alert thresholds inside the bank’s automated monitoring. A high-risk account has tighter thresholds, meaning smaller or less unusual transactions generate reviews. If monitoring turns up activity inconsistent with your stated profile, the institution must file a Suspicious Activity Report with FinCEN within 30 calendar days of initial detection. When no suspect can be identified, that deadline extends to 60 days, but reporting can never be delayed beyond 60 days from initial detection.10eCFR. 31 CFR 1020.320 – Reports by Banks of Suspicious Transactions
Why the Bank Keeps Coming Back
The CDD Rule requires ongoing monitoring and, on a risk basis, maintaining and updating customer information.1FinCEN. Information on Complying with the Customer Due Diligence (CDD) Final Rule Federal regulations don’t set a specific review interval, but institutions establish their own risk-based cycles.11FFIEC BSA/AML InfoBase. Assessing Compliance with BSA Regulatory Requirements Most institutions review high-risk clients annually and lower-risk clients every two to three years.
Certain events force an immediate refresh regardless of the schedule: a change in beneficial ownership, expansion into a new country, a significant shift in transaction patterns, or a hit against a sanctions or negative news screen. Records tied to the AML process, including completed questionnaires and beneficial ownership certifications, are retained for five years,12eCFR. 31 CFR 1010.430 – Nature of Records and Retention Period which is one reason a bank may ask you to resubmit documents you believe it already has.
What Happens If You Refuse or Answer Falsely
Refusing to complete the questionnaire has a simple consequence: the institution will not open the account, or it will close an existing one. Banks are not required to do business with anyone, and a client who resists basic due diligence is a risk no compliance department will accept. Delays or inconsistencies in follow-up updates can lead to account restrictions, frozen transactions, or termination of the relationship.
Submitting materially false information carries greater exposure. Depending on the facts, a customer can face liability for fraud or for aiding and abetting a BSA violation. Answer accurately, keep copies of what you submit, and update the bank promptly when the underlying facts change.