Know Your Customer policies (KYC) are a key aspect of any financial institution’s overall anti-money laundering (AML) compliance program. At its most fundamental level, KYC processes ensure that an organization knows who it is doing business with, whether it’s an individual or a business, and prevents the bank from inadvertently facilitating money laundering.
It sounds like common sense, but the US Patriot Act made due diligence of paramount importance within the financial industry, and federal regulators today hold organizations accountable for being able to verify the identities of their customers. In some cases where banks have inadvertently participated in funding terrorist activities, their abilities to prove that ongoing KYC due diligence has been the norm can mitigate the level and severity of punitive actions and fines.
Today, financial institutions collect and store all types of personal data on their customers as part of their KYC policies. But that also adds a level of risk to the bank. Take Barclays—it recently had a data security breach of disastrous proportions. More than 27,000 individuals had their information stolen, and the data went far beyond their financial accounts. Their profiles included medical conditions, passport numbers and more—all kept by Barclays through its KYC policy procedures. This data is currently being sold in the black market.
So today, we face an interesting dilemma: verify customers through more diligent profiling and store that data, or risk even more damage when that data is misused.
The answer is not to abandon KYC, which has proven more successful than not. And the answer is not strictly limited to more data security. Any process is only as strong as its weakest link—and with KYC policies, the weak link usually involves human resources. Financial institutions need to ensure the following:
- all personnel are well-trained in KYC and follow the processes to the letter, especially customer service and sales personnel that may face the pressure of sales quotas
- have adequate personnel available to conduct KYC implementation (this can be achieved through additional hires or by streamlining existing processes so that existing personnel have more time available)
- ensure the complete integration of processes (KYC and AML)
And, of course, financial organizations should regularly troubleshoot their data security systems.
Want to learn more? Alacer’s AML experts will be attending the 19th Annual AML & Financial Crimes Conference, being held March 16-19 at the Westin Diplomat in Hollywood, FL. Send an email to me at Richard@alacergroup.com to arrange a chat.