KYC Requirements in the U.S.
Deliver secure, seamless customer onboarding while supporting U.S. Know Your Customer (KYC) and anti-money laundering (AML) requirements with confidence. Entrust Identity Verification helps organizations verify identities, combat fraud, and satisfy Customer Identification Program (CIP), Customer Due Diligence (CDD), and risk-based compliance requirements.
EE. UU. KYC regulations require covered financial institutions to verify customer identities and assess risk as part of their broader anti-money laundering (AML) programs. Entrust helps financial institutions and digital businesses support their KYC requirements through document verification, biometric authentication, data validation, and fraud detection solutions that improve both security and customer experience.
Aspectos destacados de la solución
¿Cómo puede ayudar Entrust?
Navigate U.S. KYC and AML compliance
Meet evolving customer identification, due diligence, and anti-money laundering requirements through automated identity verification and risk-based workflows.
Build configurable workflows
Verify identities, support risk-based compliance programs, and create seamless onboarding experiences through configurable, automated workflows.
Stay ahead of emerging fraud threats
Protect your business from increasingly sophisticated fraud with document verification, biometric checks, and intelligence signals designed to identify high-risk users.
Deliver frictionless customer experiences
Balance security and convenience with identity verification experiences designed to reduce abandonment and improve conversion.
Simplify IDV at scale with efficiency
Automate identity verification, data validation, and decisioning processes to help reduce manual reviews and support business growth.
Digitize customer onboarding with confidence
Create secure onboarding journeys to acquire customers faster while maintaining compliance across digital channels.
Partnering with Entrust IDV, formerly Onfido, has helped us deliver a premium onboarding experience for new customers while enabling us to meet strict KYC requirements.
Hasan Luongo, vicepresidente de Marketing Global, Chipper Cash
¿Cuáles son las normas de KYC en Estados Unidos?
EE. UU. KYC regulations require covered financial institutions to verify customer identities, understand customer risk, and maintain controls that help prevent money laundering, fraud, terrorist financing, and other financial crimes. Financial institutions, fintechs, lenders, and other regulated businesses must implement risk-based identity verification and due diligence processes that support both compliance and customer trust.
Built on the Bank Secrecy Act and strengthened through subsequent AML legislation and FinCEN guidance, modern KYC programs increasingly rely on digital identity verification, biometric authentication, and fraud prevention technologies to support compliance efforts while delivering faster, more efficient customer onboarding experiences.
¿Qué es la Ley AML?
La Ley contra el Blanqueo de Capitales de 2020 (Ley AML) es la reforma más importante de la legislación estadounidense en materia de lucha contra el blanqueo de capitales en décadas. Se diferencia de la legislación anterior porque hace hincapié en la identificación y gestión de riesgos frente a la estricta notificación de actividades sospechosas.
La Ley contra el Blanqueo de Capitales ha dado lugar a una serie de normativas por parte de la Red de Control de Delitos Financieros (FinCEN), que forma parte del Departamento del Tesoro. La FinCEN publicó su primera lista de prioridades contra el blanqueo de capitales y la financiación del terrorismo (AML/CFT) en junio de 2021, destacando las tendencias clave de las amenazas y los recursos informativos. Se espera que la lista de prioridades se actualice cada tres o cuatro años y que las entidades financieras presten atención a estas prioridades, ya que alimentarán futuros cambios normativos.
Customer Due Diligence and Beneficial Ownership Verification
Effective KYC programs go beyond verifying identity at onboarding. U.S. financial institutions must confirm who their customers are, continuously assess risk, and maintain ongoing assurance and visibility into suspicious activity. A risk-based CDD approach helps organizations meet regulatory expectations while reducing financial crime risks and building trusted customer relationships.
Organizations should be able to:
- Confidently verify customer identities
- Establish risk-based customer profiles
- Identify beneficial owners and control structures
- Monitor customer activity over time
- Detect suspicious behavior and potential fraud
- Support ongoing AML compliance efforts
How Do Organizations Meet U.S. Identity Verification Requirements?
Meeting U.S. KYC requirements requires more than collecting customer information. Organizations must be able to verify identities, assess risk, and detect potential fraud while maintaining a seamless customer experience. Modern identity verification solutions combine document verification, biometric authentication, trusted data sources, and fraud detection technologies to help organizations establish trust in digital interactions.
By taking a risk-based approach, businesses can strengthen compliance efforts, reduce manual review processes, and onboard customers with greater confidence.
How Does Entrust Support U.S. KYC Compliance?
By helping organizations verify identities at onboarding as well as supporting ongoing customer due diligence throughout the customer lifecycle, Entrust combines document verification, biometric authentication, trusted data sources, fraud detection signals, and workflow orchestration to help businesses meet compliance requirements while reducing operational complexity.
With configurable, risk-based workflows, organizations can adapt verification requirements to different customer types, risk levels, and regulatory obligations while maintaining a consistent customer experience.
Soluciones de verificación de la identidad para KYC en EE. UU.
Verificación biométrica y de documentos
Confíe en la identidad de sus clientes verificando documentos de identidad con fotografía emitidos en Estados Unidos, como la licencia de conducir. Gracias a la IA galardonada, nuestra verificación de documentos de Entrust utiliza técnicas avanzadas para evaluar la autenticidad de los documentos.
Entrust está creado en torno a la privacidad y la seguridad
Cumplimiento de SOC 2, Tipo II
Unos sólidos protocolos de protección mantienen a salvo los datos de los clientes.
Certificación para ISO 27001
Con el número de certificado IS 660122.
Cumplimiento de WCAG 2.1 AA
Nuestras soluciones están diseñadas para ser accesibles y acreditarse de forma independiente.
CCPA, BIPA y las nuevas leyes de privacidad
Trabajamos con las autoridades reguladoras para integrar controles de privacidad en nuestras soluciones.
Preguntas frecuentes
Who regulates KYC compliance in the United States?
There isn’t one single KYC regulator. In the United States, the core requirements come from the Bank Secrecy Act (BSA), expanded over time by the USA PATRIOT Act and the Anti-Money Laundering Act of 2020 (AMLA). FinCEN, part of the U.S. Treasury, writes the rules. Depending on the type of institution, oversight and enforcement then fall to the federal banking regulators, the SEC, CFTC, or state regulatory authorities.
What customer information must be collected for KYC in the U.S.?
Organizations typically collect and verify a customer's name, date of birth, residential address, and identification number through Customer Identification Program (CIP) requirements. Additional information may be required based on the organization's risk assessment and regulatory obligations.
What is the difference between CIP, CDD, and Enhanced Due Diligence (EDD)?
CIP verifies a customer's identity at account opening. Customer Due Diligence (CDD) builds on that by assessing customer risk, identifying beneficial owners, and monitoring the relationship over time. EDD applies additional scrutiny to higher-risk customers, transactions, or jurisdictions.
Do U.S. KYC regulations allow digital identity verification?
Sí. U.S. regulations are generally technology-neutral and allow organizations to use digital identity verification solutions, biometric verification, document verification, and risk-based controls, provided they meet compliance requirements and appropriately verify customer identities.
Why is biometric identity verification becoming important for U.S. KYC programs?
Biometric verification helps organizations combat identity fraud, synthetic identity attacks, account takeover attempts, and AI-generated impersonation while reducing customer friction during onboarding.
How does the Patriot Act affect KYC?
The PATRIOT Act was enacted on October 2001. Section 326 of the Act amended the Bank Secrecy Act by adding Customer Identification Program (CIP) requirements.
"These programs must enable institutions to form a reasonable belief that they know the true identity of each customer opening an account through identity verification, recordkeeping, and screening against government-provided terrorist lists."
KYC is a compliance framework that institutions use to satisfy regulatory requirements. It commonly incorporates requirements like AML, CDD, and CIP.
The following statutes cover these in more detail:
31 U.S.C. § 5318(l)
31 C.F.R. § 1020.220
31 U.S.C. §§ 5311-5336
Nuestros expertos en identidad están a su disposición para analizar sus requisitos, responder a sus preguntas y organizar una demostración de soluciones KYC.
Los requisitos legislativos y reglamentarios pueden variar según la jurisdicción, el sector, el producto y el caso de uso, y pueden cambiar con el tiempo. La información proporcionada en esta página tiene únicamente fines informativos generales y refleja nuestro entendimiento a la fecha de publicación. No constituye, ni debe considerarse como, asesoramiento legal, normativo o de cumplimiento. Debe consultar con sus propios asesores legales, de cumplimiento normativo o regulatorios sobre cualquier pregunta o requisito que pueda aplicarse a su negocio.