Privacy Rights Clearinghouse
- About Customer Identification Programs (CIPs)
- When Is Proof of Identity Required?
- Information Required to Open an Account: Proving You Are You
- Opening an Account without Documents
- Reportable Transactions
Customer identification programs (CIPs) are required by federal law to prevent financing of terrorist operations and money laundering. The requirements go beyond just verifying your identity. Banks must keep records of identifying information and check customer names against terrorist lists.
The Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act, (USA PATRIOT Act), includes measures to undercut terrorist financing and combat money laundering. Customer identification programs for financial institutions are required by §326 of the PATRIOT Act, with the details spelled out in regulations published by multiple federal agencies. The regulations are referred to in this guide collectively as the CIP Rules.
This guide is intended to make you aware of the requirements for opening a financial account as well as the kinds of companies that must comply with the CIP Rules.
What companies must have CIPs?
The PATRIOT Act requires CIPs for a broad category of companies that fall under the definition of “financial institution,” a term defined by the Bank Secrecy Act. The list includes:
- Credit unions.
- Trust companies.
- Investment companies.
- Brokers and dealers in securities.
- Insurance companies.
- Travel agents.
- Dealers in precious metals.
- Check cashers.
Will I receive notice about identity requirements before I open an account?
The CIP Rule says you must receive notice about the identity requirements. The notice may come in a variety of ways. The financial institution may post the notice in its lobby or on its website. Or, the notice may be included in documents you receive when opening an account. The notice may be either written or oral. Here’s what the notice may look like:
Important Information about Procedures for
Opening a New Account
To help the government fight the funding of terrorism and money laundering activities, Federal law requires all financial institutions to obtain, verify, and record information that identifies each person who opens an account.
What this means for you: When you open an account, we will ask for your name, address, date of birth, and other information that will allow us to identify you. We may also ask to see your driver’s license or other identifying documents.
What does the CIP Rule require financial institutions to do?
The CIP Rule requires banks and other financial institutions to adopt written procedures to ensure proper identification of new customers. The Rule allows great flexibility for each institution to adopt procedures appropriate to its own size and customer base. This means the procedures may vary significantly from one company to the next. You may be asked, for example, to submit only one item of identity at one company while another may ask for several pieces of identification.
Will CIPs stop identity theft?
CIPs will certainly not stop identity theft. CIPs are not intended as a consumer protection measure. Rather, they are required as part of the PATRIOT Act to combat terrorism and money laundering.
Under CIP requirements, if the bank or other financial institution is not satisfied that adequate or legitimate identification has been provided, it will simply refuse to open the account. You, as the consumer, may never know that someone attempted to open an account using your name and other identifying information. The thief could then simply go to another institution where he or she might be more successful.
Does the CIP Rule apply just to individuals who open accounts?
No. The Rule applies to “persons” who open an account. For purposes of the CIP Rules, “person” includes not only individuals but also
“…corporations, partnerships, trusts, estates, joint stock companies, associations, syndicates, joint ventures, other unincorporated organizations or groups, certain Indian Tribes, and all entities cognizable as legal personalities.” (31 C.F.R. 103.11(z))
This takes in almost every company, of any size, including sole proprietorships. It also includes accounts opened for recreational or civic groups like your bowling team or tenant association.
Does a child have to produce identification?
An individual who opens an account for a minor child has to produce his or her identifying information.
I want to open a bank account for my bowling league. What identification do I use?
In that case, your own identifying information will be required, and you will be the “customer.”
I have a checking account with my bank. Do I have to produce identifying information to open a loan account?
A bank need not prove the identity of an existing customer as long as the bank is “reasonably” satisfied that it knows who you are.
Does the CIP Rule apply when I purchase travelers checks?
No. To be subject to the CIP, you must have a formal banking relationship with the financial institution. Certain kinds of transactions such as check cashing, wire transfers, sale of a cashier’s check or money order do not mean you have an ongoing relationship. The bank may have a policy of checking identification for some transactions, but it is not required by the CIP Rule
However, if the transaction is over a certain dollar amount, other regulations may require the bank to report the transaction to the appropriate government agency. Some transactions need not be reported to the government, but must be noted by the bank for future review by auditors.
I am one of several people in my company authorized to sign checks on the company’s account. Is my personal identifying information required?
The CIP Rule leaves it up to the bank to decide when additional steps are necessary to identify a customer that is not an individual. This may include gathering information about signatories. In other words, the CIP Rule does not require personal identifying information from people authorized to use business accounts, but the bank’s own procedures may require it.
My spouse and I plan to open a joint account. Do we both have to produce identifying information?
Yes. The CIP Rule applies to all those named on an account. The same is true if your name or someone else’s name is added as an account holder after the account is opened.
Do I have to produce ID to open a new account at a company where I previously had an account?
Yes. If you closed your account, you do not have an established relationship with the firm. You will have to follow the company’s procedure as if you never had an account.
Does the CIP Rule only pertain to accounts where money is deposited?
No. Under the CIP Rule, an account also includes:
- A transaction or asset account.
- A credit account or other extension of credit.
- A safety deposit box or other safekeeping services.
- A cash management account.
- Custodian and trust services.
In short, an account encompasses nearly any ongoing relationship that involves the exchange of money for financial products or services.
Do I have to produce identifying documents to inquire about opening an account?
No. The Rule only applies when you actually open an account and have an “ongoing” relationship. If you do not receive banking or other financial services, for example, where you applied for a loan but were turned down, the Rule does not apply.
The CIP Rules establish the minimum identification information a financial institution must collect from you before opening a new account. Beyond this, financial institutions have flexibility to adopt CIP procedures appropriate to the business operations of each.
Four data items are required for all new accounts. These are:
- Date of birth (for an individual).
- Identification number.
May I use a Post Office box number as my address?
The CIP Rule requires a physical address. Either a home or business address will do. The only exception is for Army Post Office boxes (APO) or Fleet Post Office (FPO). The home or business address of a next of kin or other contact individual is also acceptable.
Does the CIP Rule allow me to use a commercial mailbox?
A physical address is required. However, there is nothing that says your bank cannot collect a physical address, but mail your statements and other correspondence to a commercial mailbox.
What address must a business use when opening an account?
A business account may list its principal place of business, a local office, or other physical location.
The CIP Rule requires an identification number. What is my number?
For an individual, the tax identification number is the Social Security number (SSN). For businesses, the tax identification number is the employer identification number (EIN) or taxpayer identification number for the business (TIN).
I am not a U.S. Citizen. What can I use to open an account?
For non-U.S. citizens who do not have a SSN, one of the following numbers can be used:
- Passport number and country of issuance.
- Alien identification card number.
- Number and country of issuance of any other government-issued document bearing a photograph.
What documents should I take to the bank?
The CIP Rule requires financial institutions to verify your identity through documents. To do this, you will have to produce a current government-issued identification that shows:
- Your nationality or residence.
- A photograph.
For individuals, a driver’s license or passport are examples of acceptable documents.
For a business, documents verifying the business may include:
- Articles of incorporation.
- A government-issued business license.
- Partnership agreement.
- Trust instrument.
The Rule encourages, although does not require, more than one identifying document.
How does a sole proprietorship identify itself?
A sole proprietorship may use a state-issued “fictitious” or “assumed name” certificate as identifying information. Otherwise, the personal information of the sole proprietor and any other individual with control over the account will have to be produced.
Are copies of my identifying documents kept on file?
The financial institution must keep a description of the documents you provided as proof of identity when you opened your account. The description should include the name of the document, date of issuance, and expiration date. The financial institution must also record any measures it took to verify your identity.
Can I still open an account over the internet?
Yes. Many new accounts are opened over the internet, by mail, or by telephone. The CIP Rules recognize that many new accounts are opened when customers do not appear in person at the bank or other financial institution. Banks must still verify the customer’s identity, but procedures must be in place to verify identity without documents.
How does an elderly person with no current driver’s license or passport open an account?
The CIP Rules favor an identity procedure based on documents, but they realize that it is not always possible to have document verification. The Agencies say that financial institutions should incorporate such situations into written procedures.
How does the bank verify my identity without documents?
Suggested methods include:
- Contacting the customer after the account is opened.
- Obtaining a financial statement, for example from a corporate customer.
- Comparing the identifying information provided by the customer against fraud and bad-check databases.
- Comparing identifying information with a trusted third party source such as a consumer reporting agency.
- Checking references with other financial institutions.
The CIP Rule does not require financial institutions to report your dealings to the government. However, sections of the Bank Secrecy Act do require transactions over a certain dollar amount to be either reported to the Financial Crimes Enforcement Network  (FinCEN), a branch of the U.S. Department of the Treasury, or documented by the bank. Reporting requirements may vary depending on the type of financial institution. FinCEN provides the following general examples of transactions that should be reported.
- Any transaction over $2,000 if the bank is suspicious. The company must file a Suspicious Activity Report (SAR).
- All cash-in or cash-out transactions over $10,000 with the same customer in the same day. The company must file a Cash Transaction Report (CTR).
- Money orders or travelers checks of $3,000 to $10,000 to the same customer in the same day. The bank will keep a record. Transactions over $10,000 would trigger a CTR.
- Money transfers of $3,000 or more to the same customer in the same day. The company must keep a record.
- Currency exchanges of more than $1,000 to the same customer in the same day.
National banks and other depository institutions are not the only "financial" companies required to file SAR Reports. SAR reporting requirements also apply to the following:
- Money services businesses (for example, money orders, money transmissions, check cashing, and currency exchange.)
- Precious metals/jewelry
- Mortgage company/broker
FinCEN provides information and guidance  for all financial industries subject to SAR reporting.
Cash payments of $10,000 or more must also be reported to the IRS on Form 8300 . The person or business that receives the cash is the one responsible for filing the form. However, if you are the purchaser, you will also have to supply some personal information.
If, for example, you purchase a car for over $10,000 in cash, you will be asked to provide certain information, either to a dealer or another individual such as the loan officer. The form requires that certain personal information be obtained from you. This includes:
- Date of birth
- Social Security number
The company reporting to the IRS must also verify your identity and report a description of the documents that were used.
Reporting on IRS Form 8300 is required for a number of different transactions, including:
- Personal or real property purchased.
- Personal services provided.
- Business services provide.
- Intangible property purchased.
- Debt obligations paid.
- Exchange of cash.
- Escrow or trust funds.
- Bail received by court clerks.
Cash means U.S. and foreign currency, a cashier’s check, money order, bank draft, or travelers checks. Cash does not include a check drawn on the payer’s own account such as a personal check, regardless of the amount.
- USA PATRIOT Act, Public Law 107-56 
- Bank Secrecy Act  (BSA)
- Fair Credit Reporting Act  (FCRA)