Anti-Money Laundering — Know Your Customer

A New High-Value Client Says Our Full KYC Verification Process Is Too Slow and Wants to Provide Documentation Later. The Sales Team Is Pushing Hard to Close. What Do We Do?

A real AML compliance scenario — with three decision options and the right answer.

The Situation

A relationship manager at a financial services firm is close to closing a significant new corporate account. The prospect — a holding company with operations in multiple countries — wants to move funds quickly. When the compliance team begins the standard KYC verification process, the prospect’s representative says the documentation requirements are “excessive” and that they can provide what’s needed “after the account is active.” The representative hints that another institution has already offered to proceed without the full verification.

The relationship manager asks the compliance team to proceed with a limited review and complete the full documentation within 30 days of onboarding. Quarter-end is in two weeks.

Choice AProceed with a limited review and set a 30-day deadline for the remaining documentation. The client seems legitimate and the business opportunity is significant. A short documentation window is a reasonable compromise.

Choice BHold the onboarding until required KYC verification is complete — and escalate the client’s resistance to providing documentation as a red flag to the BSA Officer or AML compliance team.

Choice CApprove the onboarding but flag the account for enhanced monitoring once active — so any suspicious activity will be caught quickly even without the full upfront documentation.

The Right Call

Choice B — Hold onboarding and escalate the resistance as a red flag.

Choice A is not appropriate because the relationship manager is proposing an exception based on commercial pressure rather than an approved, risk-based verification procedure. Although applicable regulations permit certain post-account-opening verification steps, any such arrangement must comply with the institution’s established AML requirements.

Choice C is also inappropriate. Enhanced transaction monitoring cannot replace required customer identification and due diligence procedures.

The client’s resistance to providing documentation, combined with the urgency to move funds and the complex international corporate structure, warrants further review by AML compliance.

The compliance team should determine whether onboarding can proceed under approved procedures, whether enhanced due diligence is necessary, and whether the circumstances warrant consideration of a Suspicious Activity Report (SAR).

Quarter-end pressure and revenue opportunity create real internal tension.

The relationship manager is not asking the compliance team to do something obviously wrong — they are asking for a 30-day accommodation that sounds like reasonable business flexibility. The compliance team member who holds the line faces internal pressure, a frustrated colleague, and the risk of losing a potentially lucrative account. Understanding that the legal obligation is non-negotiable — and that the client’s resistance is itself suspicious — is the recognition skill this scenario builds.

Resistance to KYC is a red flag — not just an inconvenience.

A prospective client’s reluctance to provide required identification or beneficial ownership information may have legitimate explanations. However, persistent resistance, inconsistent information, or pressure to bypass verification procedures can also indicate elevated money laundering risk.

Compliance professionals should evaluate these warning signs in context, particularly when combined with complex ownership structures, cross-border transactions, or unusual urgency. The appropriate response is to investigate and escalate concerns rather than assume either innocence or misconduct.

“Another institution will do it” is a pressure tactic — not a compliance argument.

Another institution’s willingness to proceed does not establish whether the proposed onboarding arrangement is legally permissible. Financial institutions may have different risk-based procedures, but each must comply with applicable regulatory requirements.

The compliance team must follow its approved procedures, assess the prospective client’s risk, and escalate exception requests through the appropriate channels. Competitive pressure does not override these obligations.

What does KYC require under US law?

Under US Bank Secrecy Act regulations, covered financial institutions must implement applicable customer identification and due diligence procedures. FinCEN’s Customer Due Diligence Rule, effective in 2018, requires covered institutions to identify and verify beneficial owners of legal entity customers, generally including individuals with 25% or more ownership and one individual with significant control; understand the nature and purpose of customer relationships; and conduct ongoing monitoring. FinCEN granted exceptive relief in February 2026 from identifying and verifying beneficial owners at every subsequent account opening, subject to specified conditions. These are regulatory requirements, not internal policies subject to business discretion.

What are the penalties for KYC violations?

Violations of applicable Bank Secrecy Act and KYC requirements can result in substantial civil monetary penalties, regulatory enforcement actions, and, for certain willful violations, criminal fines and imprisonment. Penalties depend on the specific statutory provision, the circumstances of the violation, and applicable inflation adjustments. Regulators including FinCEN, the OCC, and the Federal Reserve have imposed significant penalties on financial institutions for systemic anti-money laundering and customer due diligence failures. Responsible individuals may also face personal liability when the applicable legal standards are met.

Does KYC apply to non-bank financial institutions?

Yes. Bank Secrecy Act and anti-money laundering requirements extend beyond traditional banks to various financial institutions, including money services businesses, broker-dealers, mutual funds, insurance companies, casinos, and certain fintech businesses. The specific customer identification, verification, due diligence, reporting, and monitoring obligations vary by institution type and activity. Not every institution is subject to the same Customer Identification Program or Customer Due Diligence Rule requirements.

More AML Scenarios

Want AML Scenarios in Your Compliance Program?

Xcelus builds scenario-based AML training for financial services, fintech, and multinational organizations subject to BSA, FinCEN, and FATF requirements.

View the Compliance Reinforcement Kit →
Contact Xcelus