KYC at Your Bank Explained — What Banks Check About You and Why

You've done it a dozen times. Submitted your passport, utility bill, bank statement, and source of funds declaration — just to open a bank account or make a large transfer. It feels bureaucratic. It is bureaucratic. But there's a clear framework behind it, and understanding it protects you.

What is KYC?

KYC — Know Your Customer — is the process banks and regulated financial institutions use to verify the identity of their customers and understand the nature of their financial activity. It is a legal requirement under anti-money laundering laws in virtually every country.

In the UAE, KYC is governed by the CBUAE AML guidelines and the UAE's Federal Decree-Law No. 20 of 2018. In India, by the Prevention of Money Laundering Act (PMLA) 2002 and RBI's Master Direction on KYC.

The three levels of due diligence

1. Simplified Due Diligence (SDD)

For low-risk customers and products — for example, basic savings accounts for low-income individuals or prepaid cards with limited functionality. Minimal verification required.

2. Customer Due Diligence (CDD)

The standard level applied to most customers. Banks collect and verify:

• Identity — Passport, national ID, or equivalent government-issued document
• Address — Utility bill, bank statement, or tenancy contract (usually under 3 months old)
• Source of funds — Salary slips, business accounts, investment statements
• Source of wealth — For larger accounts: how you accumulated your wealth (inheritance, business sale, salary over time)
• Business purpose — Why you need this account/product

3. Enhanced Due Diligence (EDD)

Applied to high-risk customers where the bank needs greater confidence. EDD is triggered by:

• PEP status — Politically Exposed Persons: politicians, senior government officials, judges, military officers, and their close associates and family members
• High-risk countries — Customers with connections to FATF-listed or high-risk jurisdictions
• Unusual transaction patterns — Activity inconsistent with the customer's stated profile
• Complex ownership structures — Companies with multiple layers of ownership or beneficial owners in secrecy jurisdictions
• High-risk industries — Cash-intensive businesses, arms dealers, cryptocurrency exchanges, precious metals traders

Under EDD, banks will request significantly more documentation, ask more detailed questions, apply more frequent reviews, and in some cases, involve senior management in approving the relationship.

What is Beneficial Ownership?

When a company opens a bank account, banks don't just verify the company — they look through it to identify the real human beings who ultimately own or control it (typically anyone with 25% or more ownership). This is called beneficial ownership verification, and it's one of the most important tools against financial crime.

Shell companies, nominee directors, and complex holding structures are commonly used to obscure beneficial ownership — which is exactly why banks scrutinise them so carefully.

Why does your bank re-verify you periodically?

KYC is not a one-time event. Banks conduct periodic reviews based on your risk rating. Low-risk customers might be reviewed every 5 years; high-risk customers annually or more frequently. Your risk rating can change if your transaction patterns change, you're flagged in adverse media, or you become a PEP.

What happens when you fail KYC?

Banks can and do exit customer relationships when they cannot satisfy their KYC obligations. This process — called de-risking — has become controversial, as it sometimes denies services to legitimate customers in sectors or geographies that banks consider too risky to serve profitably.

This article is for educational purposes only and does not constitute legal or compliance advice.

See how KYC fits into a full AML career: AML & Financial Crime Career Path →