KYC (know your customer)

KYC (know your customer) is the process of identifying a customer, verifying that identity against reliable independent sources and understanding the relationship, which regulated businesses such as banks, payment providers and e-money issuers must complete before and during the relationship.

Also called: KYC, know your customer, customer due diligence, CDD, identity verification

Updated

On this page4 sections

How does KYC work?

The UK Money Laundering Regulations, regulation 28, describe customer due diligence as identifying the customer, verifying that identity on the basis of documents or information from a reliable source independent of the customer, assessing the purpose and intended nature of the business relationship, identifying any beneficial owner, and monitoring the relationship on an ongoing basis. For an online business that usually means database checks on name, date of birth and address, an identity document with a liveness check, and for higher amounts a review of source of funds. For a business customer, such as a marketplace seller, it also means identifying the company and its owners.

Why does KYC matter for payments?

It decides who can move money, and how much. Many payment providers only accept verified customers, payout rails often require them, and providers pause payouts when checks are overdue. As an illustrative example: a marketplace that runs document checks only at the first payout holds 1,500 payouts a month for verification. Moving the document step to a cumulative sales trigger means most of those sellers are verified before they ask to be paid, and holds fall to a few hundred.

What is the trade-off?

Too much KYC too early loses genuine customers at sign-up; too little leaves fraud, chargebacks and money laundering exposure, and pushes the checks onto payouts. Tiered KYC levels are the usual compromise: light, fast checks first, deeper checks before larger amounts and payouts.

Where does Omno use it?

Omno does not run KYC. KYC status comes from the merchant’s own systems, often from a dedicated KYC provider, and Omno can take the token that provider issued and pass it to the payment providers that need it. The merchant sends it on each request as customer verification levels (customer.kyc.kycLevels in the API) and a kycVerified flag, which eligibility rules use to decide which PSPs and payout routes a customer can use.

Frequently asked questions

Is KYC the same as customer due diligence?

In practice, mostly. Customer due diligence is the legal term in anti-money laundering rules and covers identifying and verifying the customer, understanding the relationship and monitoring it over time. KYC is the industry name for the same work, and is often used for the identity-checking part alone.

When should a marketplace or fintech run KYC?

Before money moves in ways its rules or its providers restrict. European guidelines allow verification to be postponed in some low-risk cases until a low threshold is reached, but the identity must ultimately be verified. Payment providers set their own deadlines too, and Stripe, for example, typically disables payouts when required information is overdue. A tiered KYC design can follow both.

esc
↑↓ to move ↵ to open All results