Privacy Rights Clearinghouse
- About Customer Identification Programs (CIPs)
- When Is Proof of Identity Required?
- Information Required to Open an Account: Proving You Are You
- Opening an Account without Documents 
Customer identification programs (CIPs) are required by federal law to prevent financing of terrorist operations and money laundering. The requirements go beyond just verifying your identity. Banks must keep records of identifying information and check customer names against terrorist lists.
The Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act, (USA PATRIOT Act), includes measures to undercut terrorist financing and combat money laundering. Customer identification programs for financial institutions are required by §326 of the PATRIOT Act, with the details spelled out in regulations published by multiple federal agencies. The regulations are referred to in this guide collectively as the CIP Rules.
This guide is intended to make you aware of the requirements for opening a financial account as well as the kinds of companies that must comply with the CIP Rules.
What companies must have CIPs?
The PATRIOT Act requires CIPs for a broad category of companies that fall under the definition of “financial institution,” a term defined by the Bank Secrecy Act. The list includes:
- Credit unions.
- Trust companies.
- Investment companies.
- Brokers and dealers in securities.
- Insurance companies.
- Travel agents.
- Dealers in precious metals.
- Check cashers.
Will I receive notice about identity requirements before I open an account?
The CIP Rule says you must receive notice about the identity requirements. The notice may come in a variety of ways. The financial institution may post the notice in its lobby or on its website. Or, the notice may be included in documents you receive when opening an account. The notice may be either written or oral. Here’s what the notice may look like:
Information about Procedures for
Opening a New Account
help the government fight the funding of terrorism and money laundering
activities, Federal law requires all financial institutions to obtain, verify,
and record information that identifies each person who opens an account.
What this means for you: When you open an account, we will ask for your name, address, date of birth, and other information that will allow us to identify you. We may also ask to see your driver’s license or other identifying documents.
What does the CIP Rule require financial institutions to do?
The CIP Rule requires banks and other financial institutions to adopt written procedures to ensure proper identification of new customers. The Rule allows great flexibility for each institution to adopt procedures appropriate to its own size and customer base. This means the procedures may vary significantly from one company to the next. You may be asked, for example, to submit only one item of identity at one company while another may ask for several pieces of identification.
Will CIPs stop identity theft?
CIPs will certainly not stop identity theft. CIPs are not intended as a consumer protection measure. Rather, they are required as part of the PATRIOT Act to combat terrorism and money laundering.
Under CIP requirements, if the bank or other financial institution is not satisfied that adequate or legitimate identification has been provided, it will simply refuse to open the account. You, as the consumer, may never know that someone attempted to open an account using your name and other identifying information. The thief could then simply go to another institution where he or she might be more successful.
Does the CIP Rule apply just to individuals who open accounts?
No. The Rule applies to “persons” who open an account. For purposes of the CIP Rules, “person” includes not only individuals but also
“…corporations, partnerships, trusts, estates, joint stock companies, associations, syndicates, joint ventures, other unincorporated organizations or groups, certain Indian Tribes, and all entities cognizable as legal personalities.” (31 C.F.R. 103.11(z))
This takes in almost every company, of any size, including sole proprietorships. It also includes accounts opened for recreational or civic groups like your bowling team or tenant association.
Does a child have to produce identification?
An individual who opens an account for a minor child has to produce his or her identifying information.
I want to open a bank account for my bowling league. What identification do I use?
In that case, your own identifying information will be required, and you will be the “customer.”
I have a checking account with my bank. Do I have to produce identifying information to open a loan account?
A bank need not prove the identity of an existing customer as long as the bank is “reasonably” satisfied that it knows who you are.
Does the CIP Rule apply when I purchase travelers checks?
No. To be subject to the CIP, you must have a formal banking relationship with the financial institution. Certain kinds of transactions such as check cashing, wire transfers, sale of a cashier’s check or money order do not mean you have an ongoing relationship. The bank may have a policy of checking identification for some transactions, but it is not required by the CIP Rule
However, if the transaction is over a certain dollar amount, other regulations may require the bank to report the transaction to the appropriate government agency. Some transactions need not be reported to the government, but must be noted by the bank for future review by auditors.
I am one of several people in my company authorized to sign checks on the company’s account. Is my personal identifying information required?
The CIP Rule leaves it up to the bank to decide when additional steps are necessary to identify a customer that is not an individual. This may include gathering information about signatories. In other words, the CIP Rule does not require personal identifying information from people authorized to use business accounts, but the bank’s own procedures may require it.
My spouse and I plan to open a joint account. Do we both have to produce identifying information?
Yes. The CIP Rule applies to all those named on an account. The same is true if your name or someone else’s name is added as an account holder after the account is opened.
Do I have to produce ID to open a new account at a company where I previously had an account?
Yes. If you closed your account, you do not have an established relationship with the firm. You will have to follow the company’s procedure as if you never had an account.
Does the CIP Rule only pertain to accounts where money is deposited?
No. Under the CIP Rule, an account also includes:
- A transaction or asset account.
- A credit account or other extension of credit.
- A safety deposit box or other safekeeping services.
- A cash management account.
- Custodian and trust services.
In short, an account encompasses nearly any ongoing relationship that involves the exchange of money for financial products or services.
Do I have to produce identifying documents to inquire about opening an account?
No. The Rule only applies when you actually open an account and have an “ongoing” relationship. If you do not receive banking or other financial services, for example, where you applied for a loan but were turned down, the Rule does not apply.
The CIP Rules establish the minimum identification information a financial institution must collect from you before opening a new account. Beyond this, financial institutions have flexibility to adopt CIP procedures appropriate to the business operations of each.
Four data items are required for all new accounts. These are:
- Date of birth (for an individual).
- Identification number.
May I use a Post Office box number as my address?
The CIP Rule requires a physical address. Either a home or business address will do. The only exception is for Army Post Office boxes (APO) or Fleet Post Office (FPO). The home or business address of a next of kin or other contact individual is also acceptable.
Does the CIP Rule allow me to use a commercial mailbox?
A physical address is required. However, there is nothing that says your bank cannot collect a physical address, but mail your statements and other correspondence to a commercial mailbox.
What address must a business use when opening an account?
A business account may list its principal place of business, a local office, or other physical location.
The CIP Rule requires an identification number. What is my number?
For an individual, the tax identification number is the Social Security number (SSN). For businesses, the tax identification number is the employer identification number (EIN) or taxpayer identification number for the business (TIN).
I am not a U.S. Citizen. What can I use to open an account?
For non-U.S. citizens who do not have a SSN, one of the following numbers can be used:
- Passport number and country of issuance.
- Alien identification card number.
- Number and country of issuance of any other government-issued document bearing a photograph.
What documents should I take to the bank?
The CIP Rule requires financial institutions to verify your identity through documents. To do this, you will have to produce a current government-issued identification that shows:
- Your nationality or residence.
- A photograph.
For individuals, a driver’s license or passport are examples of acceptable documents.
For a business, documents verifying the business may include:
- Articles of incorporation.
- A government-issued business license.
- Partnership agreement.
- Trust instrument.
The Rule encourages, although does not require, more than one identifying document.
How does a sole proprietorship identify itself?
A sole proprietorship may use a state-issued “fictitious” or “assumed name” certificate as identifying information. Otherwise, the personal information of the sole proprietor and any other individual with control over the account will have to be produced.
Are copies of my identifying documents kept on file?
The financial institution must keep a description of the documents you provided as proof of identity when you opened your account. The description should include the name of the document, date of issuance, and expiration date. The financial institution must also record any measures it took to verify your identity.
Can I still open an account over the internet?
Yes. Many new accounts are opened over the internet, by mail, or by telephone. The CIP Rules recognize that many new accounts are opened when customers do not appear in person at the bank or other financial institution. Banks must still verify the customer’s identity, but procedures must be in place to verify identity without documents.
How does an elderly person with no current driver’s license or passport open an account?
The CIP Rules favor an identity procedure based on documents, but they realize that it is not always possible to have document verification. The Agencies say that financial institutions should incorporate such situations into written procedures.
How does the bank verify my identity without documents?
Suggested methods include:
- Contacting the customer after the account is opened.
- Obtaining a financial statement, for example from a corporate customer.
- Comparing the identifying information provided by the customer against fraud and bad-check databases.
- Comparing identifying information with a trusted third party source such as a consumer reporting agency.
- Checking references with other financial institutions.
- USA PATRIOT Act, Public Law 107-56 
- Federal Financial Institutions Examination Council, CIP Manual