Is KYC mandatory in the USA?
KYC is mandatory for covered U.S. financial institutions under sector-specific BSA rules, but there is no identical federal KYC rule for every U.S. business.
Direct answer
U.S. KYC is mandatory by sector, not universally
Yes for covered U.S. financial institutions and activities, but not through one identical rule for every company. Banks use the Customer Identification Program rule in 31 CFR 1020.220. Broker-dealers, mutual funds, futures firms, money-service businesses, and other sectors have their own Bank Secrecy Act rules and definitions.
For a bank opening an account, the CIP baseline collects name, date of birth for an individual, address, and an identification number, then uses risk-based documentary or non-documentary procedures to form a reasonable belief that it knows the customer's true identity. That is one layer of the wider AML and CDD program.
What U.S. KYC rules do not mean
- A bank CIP rule does not automatically apply to an unregulated software company or marketplace.
- A successful individual identity check does not complete legal-entity beneficial-owner due diligence, sanctions controls, or ongoing monitoring.
- A business label such as fintech or crypto is not enough; identify the legal entity, registration, activity, account or transaction, and controlling rule.
The 2026 U.S. beneficial-owner change
FinCEN's February 2026 exceptive relief means covered financial institutions no longer have to identify and verify an existing legal-entity customer's beneficial owners at every additional account opening. They may limit it to the first account, facts that call earlier information into question, and risk-based ongoing CDD triggers. Other BSA obligations remain.
Continue the research
Related KYC answers and working guides
Evidence
Sources and scope
31 CFR 1020.220: minimum identifying information, verification procedures, and records for banks.
Official description of the U.S. CDD Rule and the covered financial institutions.
Current relief from repeating beneficial-owner identification at every new account opening for an existing legal-entity customer.