What Are KYC and AML in Investing? Definition and Examples

In investing, KYC means that the firm handling your money must know who you are before it opens your account. The rules for broker-dealers show the baseline. A broker-dealer must keep a written Customer Identification Program. Before it opens an account, it must collect your name, your date of birth if you are an individual, your address and an identification number.

The firm then verifies that information within a reasonable time before or after it opens the account. It tells you in advance that it is asking. It keeps the records for five years after the account closes. Another part of KYC is sanctions screening. The Treasury’s sanctions office, OFAC, keeps a list of blocked persons. All U.S. persons must follow its sanctions, and an entity owned 50% or more by blocked persons is itself blocked.

KYC and AML Meaning: What Each Term Stands For

KYC is a customer-level task. It answers who the customer is and what the relationship is for. AML is the program around it. It adds monitoring of activity, reporting of suspicious activity, staff training and independent testing.

In banking, the same two ideas rest on one law, the Bank Secrecy Act. It grew out of the Currency and Foreign Transactions Reporting Act of 1970 and the laws that followed. FinCEN, the Treasury bureau that administers it, lists three main duties. Institutions keep certain records. They report daily cash activity above $10,000 on a currency transaction report. And they report activity that may point to money laundering or other crimes on a suspicious activity report.

The customer due diligence rule adds the KYC layer. It covers banks, securities brokers and dealers, mutual funds, and futures commission merchants and introducing brokers. FinCEN describes four core duties.

1. 01
   Identify customersIdentify and verify the identity of each customer.
2. 02
   Look through companiesIdentify and verify the beneficial owners of companies that open accounts.
3. 03
   Understand the purposeLearn the nature and purpose of each relationship, to build a customer risk profile.
4. 04
   MonitorWatch activity to report suspicious transactions, and keep customer information current.

1. 01
   CollectThe firm asks for your name, date of birth, address and an identification number. A company customer also supplies its owners’ details.
2. 02
   VerifyThe firm checks the data against documents or other reliable sources. The rule allows this within a reasonable time before or after the account opens.
3. 03
   ScreenThe firm checks the names against sanctions lists, including the OFAC list of blocked persons.
4. 04
   UnderstandThe firm records why you are opening the account. That builds a risk profile, a short view of how risky the relationship looks.
5. 05
   MonitorThe firm watches activity over time and updates your information on a risk basis. If it sees something suspicious, it reports it.
6. 06
   Keep recordsThe firm stores the identifying information for five years after the account closes.

The process runs once at the start and again whenever something changes. For the practical side in the app, see how the check works for investors. Axevil’s app opens an account in about two minutes, and accreditation takes about five minutes with one document and an e-signature.

When the customer is a company, the firm must also look through it. The rule defines a beneficial owner two ways. The first is each individual who owns 25% or more of the equity interests. The second is one individual with significant responsibility to control, manage or direct the company, such as an executive officer. The information collected is the person’s name, address, date of birth and Social Security number, or another permitted identification number for a non-U.S. person.

Since February 13, 2026, FinCEN does not require a firm to repeat this at every new account of the same customer. The firm identifies and verifies the owners when the customer first opens an account. It repeats the step when it learns facts that call earlier information into doubt, and when its own risk procedures call for it.

AML in finance is the program a firm builds so it can spot and report illegal money. In investments, the rules for broker-dealers are the clearest example. FINRA Rule 3310 requires a written AML program that a member of senior management approves in writing. Anti-money laundering rules also tell the firm to watch for suspicious transactions.

A suspicious activity report is confidential. The firm cannot tell you that it filed one.

The rules cover banks, broker-dealers, mutual funds and futures brokers today. A separate FinCEN rule extends AML program and suspicious activity reporting duties to registered investment advisers and exempt reporting advisers. Exempt reporting advisers include some advisers to venture capital funds and to small private funds. FinCEN moved the rule’s start date from January 1, 2026 to January 1, 2028 in a final rule dated December 31, 2025.

For you, the practical point is the same either way. A platform that handles your subscription for a private deal will ask for identity documents and ownership details. You will also sign a subscription agreement, the contract for the purchase. For how a deal vehicle works, see SPV investing.

• Names that do not matchA document, an account and an application that spell your name three ways slow the check.
• Missing owner detailsAn entity must supply name, address, date of birth and an identification number for each beneficial owner.
• Unclear ownershipAn entity with layers of owners takes longer, because the firm must trace the individuals behind it.
• Sanctions matchesA name that resembles an entry on a sanctions list can lead to a manual review. Entities owned 50% or more by blocked persons are blocked.
• Stale informationFirms update customer information on a risk basis. A change of address or ownership should reach the firm.
• Treating KYC as a one-time formMonitoring continues after the account opens. A later review is normal.

KYC

Know your customer. The process of confirming who a customer is and what the account is for.

AML

Anti-money laundering. The rules and the program a firm uses to detect and report illegal money.

Bank Secrecy Act

The U.S. law that requires financial institutions to keep records and report cash and suspicious activity.

FinCEN

The Financial Crimes Enforcement Network, the Treasury bureau that administers the Bank Secrecy Act.

Customer Identification Program

The written procedures a broker-dealer follows to collect and verify the identity of each customer.

Beneficial owner

An individual who owns 25% or more of a company customer, or who has significant control over it.

Suspicious activity report

A confidential report that a firm files when a transaction may point to illegal activity.

OFAC

The Treasury’s Office of Foreign Assets Control, which keeps the sanctions list of blocked persons.

Figures were last checked on October 13, 2026. The rules are United States federal rules. FinCEN and FINRA revise them from time to time, so check the current text before you rely on a detail. Requirements outside the United States differ.