KYC vs KYB: getting customer due diligence right

Verifying individuals and verifying businesses are different disciplines. Here’s what each requires — and where companies most often go wrong.

Know Your Customer (KYC) and Know Your Business (KYB) share a goal — understanding who you are dealing with — but they demand different evidence, different checks and different judgement.

KYC: verifying individuals

For individual customers, the core of KYC is establishing and verifying identity, understanding the purpose of the relationship and assessing risk. In practice that typically means:

• Collecting and verifying identity data against reliable, independent sources.
• Screening against sanctions lists and for politically exposed persons (PEPs).
• Understanding expected activity so that unusual behaviour can be spotted later.
• Assigning a risk rating that determines the depth of ongoing monitoring.

KYB: verifying businesses

Businesses introduce layers that individuals don’t. You need to verify the entity exists, understand what it does, and — critically — identify the natural persons who ultimately own or control it.

• Confirming incorporation, registration status and registered address.
• Understanding the nature of the business and its expected transaction profile.
• Identifying and verifying beneficial owners and controllers.
• Screening the entity, its directors and its beneficial owners.

The most common KYB failure isn’t missing documents — it’s stopping at the first layer of ownership.

Where companies go wrong

• Treating due diligence as a one-off onboarding event rather than an ongoing obligation.
• Applying the same checks to every customer regardless of risk.
• Failing to look through complex ownership structures to the ultimate beneficial owner.
• Collecting information but never using it to monitor activity.

Getting due diligence right isn’t about collecting more data. It’s about collecting the right data, verifying it properly and using it throughout the customer relationship.