Know Your Customer (KYC) verification is required any time you open a financial account, deposit or withdraw more than $10,000 in cash, send a wire transfer of $3,000 or more, or trigger a compliance flag at a bank, broker, money transmitter, casino, insurer, mortgage lender, or crypto exchange. The rules come from the Bank Secrecy Act of 1970 and the USA PATRIOT Act of 2001, which together require covered businesses to confirm who their customers are, watch how accounts get used, and report activity that looks suspicious. Below is when those checks actually happen in a customer’s life, and what each one asks of you.
When You Open a New Account
This is the most common trigger. Federal regulations require every bank and credit union to run a Customer Identification Program before granting account access, and the same screening applies whether you are opening a checking account, a brokerage account, a mortgage, or a credit card. At a minimum, the institution must collect four pieces of information before the account opens:1eCFR. 31 CFR 1020.220 – Customer Identification Program Requirements for Banks
- Full legal name
- Date of birth
- Residential or business street address
- Taxpayer identification number (Social Security number for U.S. persons)
The institution then checks that information against government records and will usually ask to see a passport, driver’s license, or other government-issued photo ID. Records of this verification are kept for five years after the account is closed.1eCFR. 31 CFR 1020.220 – Customer Identification Program Requirements for Banks Provide nothing verifiable and the application is denied; the bank has no discretion to waive the requirement.
If You Don’t Have a Social Security Number
You do not need an SSN to open a U.S. bank account. Non-U.S. persons can supply an Individual Taxpayer Identification Number (ITIN) instead. Some banks also accept a passport number and country of issuance, an alien identification card number, or another government-issued document showing nationality or residence with a photograph.2Consumer Financial Protection Bureau. Can I Get a Checking Account Without a Social Security Number or Drivers License Which documents an individual bank will accept varies, so ask before you go in.
If You’re Opening the Account for a Business or Trust
Entity accounts get an extra layer. FinCEN’s Customer Due Diligence Rule requires the institution to identify and verify every individual who owns 25 percent or more of the entity, plus at least one individual who controls it, even if that person holds no ownership stake.3Financial Crimes Enforcement Network. CDD Final Rule Expect the bank to collect names, dates of birth, addresses, and ID numbers for each beneficial owner. This bank-level obligation is separate from the Corporate Transparency Act’s direct reporting to FinCEN, which is currently suspended for U.S.-created entities as of March 2025.4Financial Crimes Enforcement Network. Beneficial Ownership Information Reporting Your bank will still ask.
When You Move More Than $10,000 in Cash
A single large cash transaction triggers KYC even without an ongoing account. Any financial institution that handles a cash exchange exceeding $10,000 in a single business day must file a Currency Transaction Report with FinCEN.5Financial Crimes Enforcement Network. Notice to Customers – A CTR Reference Guide Multiple cash transactions on the same day that add up to more than $10,000 are treated as one. Staff will ask for government-issued ID and a Social Security or taxpayer ID number to complete the report.
The threshold applies well beyond banks. Any trade or business that receives more than $10,000 in cash, including car dealerships, jewelers, attorneys, and contractors, must file IRS/FinCEN Form 8300 within 15 days of the payment.6Internal Revenue Service. IRS Form 8300 Reference Guide “Cash” for this purpose covers coins, currency, and certain monetary instruments such as cashier’s checks and money orders with a face value of $10,000 or less used in a retail transaction exceeding $10,000. Installment payments that add up to more than $10,000 within a year of the initial payment also trigger a filing, and the business must notify you in writing by January 31 of the following year that a report was filed.
When You Send a Wire of $3,000 or More
Electronic transfers have their own, lower threshold. Under the Travel Rule, any transmittal of funds of $3,000 or more requires the sending institution to include your name, address, and account number with the payment as it moves between institutions.7Financial Crimes Enforcement Network. Funds Travel Regulations – Questions and Answers This covers wire transfers and similar transmittals. Everyday consumer transactions governed by the Electronic Funds Transfer Act, such as ATM withdrawals and point-of-sale purchases, are exempt.
When Your Activity Changes
Your bank does not stop watching after onboarding. Ongoing monitoring is a core part of the CDD Rule, which requires institutions to keep customer information current on a risk basis and to flag suspicious transactions.3Financial Crimes Enforcement Network. CDD Final Rule A noticeable shift in how you use your account, such as a sudden run of international wires when your history shows only small local deposits, can trigger Enhanced Due Diligence. The bank may ask for proof of income, business contracts, or an explanation for the change in volume.
When a transaction has no clear lawful purpose, looks designed to dodge reporting, or involves funds tied to criminal activity, the institution must file a Suspicious Activity Report with FinCEN.8Internal Revenue Service. Bank Secrecy Act Banks file SARs for suspicious activity involving $5,000 or more; money services businesses face a lower threshold of $2,000. One common red flag is “structuring”: breaking cash deposits into amounts just under $10,000 to avoid a Currency Transaction Report. The pattern itself is a federal offense and must be reported, even though each individual deposit is below the reporting line.9Financial Crimes Enforcement Network. Suspicious Activity Reporting – Structuring
You will not be told a SAR was filed. Federal regulations prohibit the institution and its employees from disclosing a SAR’s existence or anything that would reveal it, and the institution must decline even a subpoena for one.10eCFR. 12 CFR 21.11 – Suspicious Activity Report The first sign that your activity has been flagged is often a request for updated documentation, tighter limits, or an unexplained account closure.
When Your ID or Documents Expire
KYC is not one-and-done. Institutions must keep identity records accurate throughout the relationship, and when a driver’s license or passport on file expires, they will ask for a renewed version. Ignoring the request can restrict your ATM access, block wire transfers, or freeze the account.
Review frequency tracks risk. Lower-risk accounts may only get revisited when an ID document expires. Higher-risk accounts, including those with large international activity, links to higher-risk jurisdictions, or complex ownership, can be reviewed as often as once a year, with the bank confirming that your address, employment, and source of funds still match what is on file.
What Happens if You Can’t or Won’t Verify
If you cannot provide verifiable identity documents at account opening, the application must be denied. If you are an existing customer who refuses to respond to update requests, the institution can restrict services in stages, blocking wire transfers, lowering withdrawal limits, and eventually closing the account.
Closures tied to compliance concerns can make opening an account elsewhere harder. There is no public blacklist, but banks share certain risk indicators through internal compliance networks. If your account was closed after a SAR filing or unresolved KYC issues, the next institution may ask more questions during onboarding or decline the application. Keeping your ID current and answering documentation requests promptly is the practical way to keep access to your accounts intact.