KYC Requirements in the U.S.
Deliver secure, seamless customer onboarding while supporting U.S. Know Your Customer (KYC) and anti-money laundering (AML) requirements with confidence. Entrust Identity Verification helps organizations verify identities, combat fraud, and satisfy Customer Identification Program (CIP), Customer Due Diligence (CDD), and risk-based compliance requirements.
美国KYC regulations require covered financial institutions to verify customer identities and assess risk as part of their broader anti-money laundering (AML) programs. Entrust helps financial institutions and digital businesses support their KYC requirements through document verification, biometric authentication, data validation, and fraud detection solutions that improve both security and customer experience.
解决方案亮点
Entrust 能提供哪些帮助?
Navigate U.S. KYC and AML compliance
Meet evolving customer identification, due diligence, and anti-money laundering requirements through automated identity verification and risk-based workflows.
Build configurable workflows
Verify identities, support risk-based compliance programs, and create seamless onboarding experiences through configurable, automated workflows.
Stay ahead of emerging fraud threats
Protect your business from increasingly sophisticated fraud with document verification, biometric checks, and intelligence signals designed to identify high-risk users.
Deliver frictionless customer experiences
Balance security and convenience with identity verification experiences designed to reduce abandonment and improve conversion.
Simplify IDV at scale with efficiency
Automate identity verification, data validation, and decisioning processes to help reduce manual reviews and support business growth.
Digitize customer onboarding with confidence
Create secure onboarding journeys to acquire customers faster while maintaining compliance across digital channels.
Partnering with Entrust IDV, formerly Onfido, has helped us deliver a premium onboarding experience for new customers while enabling us to meet strict KYC requirements.
Chipper Cash 全球营销副总裁 Hasan Luongo
美国的 KYC 法规是什么?
美国KYC regulations require covered financial institutions to verify customer identities, understand customer risk, and maintain controls that help prevent money laundering, fraud, terrorist financing, and other financial crimes. Financial institutions, fintechs, lenders, and other regulated businesses must implement risk-based identity verification and due diligence processes that support both compliance and customer trust.
Built on the Bank Secrecy Act and strengthened through subsequent AML legislation and FinCEN guidance, modern KYC programs increasingly rely on digital identity verification, biometric authentication, and fraud prevention technologies to support compliance efforts while delivering faster, more efficient customer onboarding experiences.
什么是 AML 法案?
《2020 年反洗钱法》(AML 法案)是数十年来对美国 AML 法律最重大的改革。 该法案与先前立法的不同之处在于,其强调识别和管理风险,而不仅仅是报告可疑活动。
AML 法案促使财政部下属的金融犯罪执法网络 (FinCEN) 制定了各种规则。 FinCEN 于 2021 年 6 月公布了第一份反洗钱和打击恐怖主义融资 (AML/CFT) 优先事项清单,强调了关键威胁趋势和信息资源。 该优先事项清单预计将每三到四年更新一次,金融机构应密切关注这些优先事项,因为它们将影响未来的监管变化。
Customer Due Diligence and Beneficial Ownership Verification
Effective KYC programs go beyond verifying identity at onboarding. U.S. financial institutions must confirm who their customers are, continuously assess risk, and maintain ongoing assurance and visibility into suspicious activity. A risk-based CDD approach helps organizations meet regulatory expectations while reducing financial crime risks and building trusted customer relationships.
Organizations should be able to:
- Confidently verify customer identities
- Establish risk-based customer profiles
- Identify beneficial owners and control structures
- Monitor customer activity over time
- Detect suspicious behavior and potential fraud
- Support ongoing AML compliance efforts
How Do Organizations Meet U.S. Identity Verification Requirements?
Meeting U.S. KYC requirements requires more than collecting customer information. Organizations must be able to verify identities, assess risk, and detect potential fraud while maintaining a seamless customer experience. Modern identity verification solutions combine document verification, biometric authentication, trusted data sources, and fraud detection technologies to help organizations establish trust in digital interactions.
By taking a risk-based approach, businesses can strengthen compliance efforts, reduce manual review processes, and onboard customers with greater confidence.
How Does Entrust Support U.S. KYC Compliance?
By helping organizations verify identities at onboarding as well as supporting ongoing customer due diligence throughout the customer lifecycle, Entrust combines document verification, biometric authentication, trusted data sources, fraud detection signals, and workflow orchestration to help businesses meet compliance requirements while reducing operational complexity.
With configurable, risk-based workflows, organizations can adapt verification requirements to different customer types, risk levels, and regulatory obligations while maintaining a consistent customer experience.
Entrust 围绕隐私性和安全性而构建
SOC 2 类型 II 合规性
强大的保障协议可确保客户数据安全。
通过 ISO 27001 认证
证书编号为 IS 660122。
符合 WCAG 2.1 AA 标准
我们的解决方案设计符合无障碍标准,并通过独立认证。
CCPA、BIPA 和新兴隐私法律
我们与监管机构合作,将隐私控制嵌入到我们的解决方案中。
常见问题解答
Who regulates KYC compliance in the United States?
There isn’t one single KYC regulator. In the United States, the core requirements come from the Bank Secrecy Act (BSA), expanded over time by the USA PATRIOT Act and the Anti-Money Laundering Act of 2020 (AMLA). FinCEN, part of the U.S. Treasury, writes the rules. Depending on the type of institution, oversight and enforcement then fall to the federal banking regulators, the SEC, CFTC, or state regulatory authorities.
What customer information must be collected for KYC in the U.S.?
Organizations typically collect and verify a customer's name, date of birth, residential address, and identification number through Customer Identification Program (CIP) requirements. Additional information may be required based on the organization's risk assessment and regulatory obligations.
What is the difference between CIP, CDD, and Enhanced Due Diligence (EDD)?
CIP verifies a customer's identity at account opening. Customer Due Diligence (CDD) builds on that by assessing customer risk, identifying beneficial owners, and monitoring the relationship over time. EDD applies additional scrutiny to higher-risk customers, transactions, or jurisdictions.
Do U.S. KYC regulations allow digital identity verification?
是的。 U.S. regulations are generally technology-neutral and allow organizations to use digital identity verification solutions, biometric verification, document verification, and risk-based controls, provided they meet compliance requirements and appropriately verify customer identities.
Why is biometric identity verification becoming important for U.S. KYC programs?
Biometric verification helps organizations combat identity fraud, synthetic identity attacks, account takeover attempts, and AI-generated impersonation while reducing customer friction during onboarding.
How does the Patriot Act affect KYC?
The PATRIOT Act was enacted on October 2001. Section 326 of the Act amended the Bank Secrecy Act by adding Customer Identification Program (CIP) requirements.
"These programs must enable institutions to form a reasonable belief that they know the true identity of each customer opening an account through identity verification, recordkeeping, and screening against government-provided terrorist lists."
KYC is a compliance framework that institutions use to satisfy regulatory requirements. It commonly incorporates requirements like AML, CDD, and CIP.
The following statutes cover these in more detail:
31 U.S.C. § 5318(l)
31 C.F.R. § 1020.220
31 U.S.C. §§ 5311-5336
我们的身份专家可随时讨论您的需求、回答问题并安排 KYC 解决方案演示。
Legislative and regulatory requirements can vary by jurisdiction, industry, product, and use case and may change over time. The information provided on this page is for general informational purposes only and reflects our understanding as of the date of publication. It does not constitute, and should not be relied upon as, legal, regulatory, or compliance advice. You should consult your own legal, compliance, or regulatory advisors regarding any questions or requirements that may apply to your business.