Know Your Customer (KYC)

What KYC covers

Know Your Customer, usually shortened to KYC, is the set of checks a firm carries out to establish and verify who its customer is before, and during, a business relationship. It is the practical front end of a firm's anti-money-laundering obligations: knowing who you are dealing with is the precondition for spotting when something is wrong. For a lender, KYC runs alongside credit assessment but answers a different question, not can this person afford to repay, but who is this person and is it lawful to do business with them.

KYC is not a single gate at onboarding. It is an ongoing discipline that includes verifying identity, understanding the purpose of the relationship, and keeping that understanding current as the relationship continues. The distinction from affordability and credit assessment is worth holding onto: a customer can be entirely creditworthy and still fail KYC, for example if their identity cannot be confirmed or they are subject to sanctions, and a customer can pass KYC comfortably yet be a poor credit risk. The two assessments run in parallel and neither substitutes for the other.

KYC within the AML framework

KYC sits within the UK's anti-money-laundering regime, principally the Money Laundering Regulations, and is enforced for financial firms by the FCA. The regime requires firms to apply customer due diligence, a term that overlaps heavily with KYC, proportionate to the risk a given customer and product present.

That risk-based approach is central. A low-risk, straightforward retail customer warrants lighter checks than a complex corporate customer or one connected to a higher-risk jurisdiction. Firms are expected to assess risk and scale their due diligence accordingly rather than applying one rigid standard to everyone.

• Customer due diligence for standard relationships
• Enhanced due diligence where risk is higher, such as politically exposed persons or higher-risk jurisdictions
• Simplified due diligence where the risk is demonstrably low
• Ongoing monitoring of the relationship and transactions over time

KYC for businesses and beneficial owners

When the customer is a company rather than an individual, KYC extends to understanding the ownership and control structure. A firm must identify the beneficial owners, the people who ultimately own or control the business, and verify them, because criminals can hide behind layers of corporate structure. This is why onboarding an SME borrower can involve checking directors, shareholders and sometimes the wider group, not just the trading entity.

Understanding the nature and purpose of the business relationship is part of the same exercise. A lender should have a coherent picture of what the customer does and why they want the facility, so that later activity can be judged against an expected pattern. Without that baseline, ongoing monitoring has nothing to compare against, and genuinely suspicious activity becomes much harder to distinguish from the ordinary ebb and flow of a trading business.

KYC in practice and alongside the customer experience

Modern KYC leans heavily on electronic verification, drawing on credit reference agency data, document and biometric checks, and other data sources to confirm identity and screen against sanctions and adverse-media lists. Done well, this can be near-instant and largely invisible to a genuine customer; done poorly, it adds friction that drives good applicants away.

There is a balance to strike. The Consumer Duty expects firms not to create unreasonable barriers, including at onboarding, so a lender wants KYC that is rigorous enough to satisfy its AML obligations yet smooth enough not to penalise honest customers. Strong identity verification and good data are what let a firm hold both of those at once, keeping out financial crime while letting legitimate customers through quickly.