source:
  type: regulation
  id: bsa-31cfr-1020.220
  authority: 31 CFR §1020.220 — Customer identification program requirements for banks
  description: 'BSA Customer Identification Program (CIP) rule for banks under 31 CFR

    §1020.220.

    '
obligations:
- id: bsa-31cfr-1020.220-a
  canonical_id: bsa-31cfr-1020.220-a
  section: 31 CFR §1020.220(a)
  description: '(a): (a) Customer Identification Program: minimum requirements —(1) In general. A bank
    required to have an anti-money laundering compliance program under the regulations implementing 31
    U.S.C. 5318(h) , 12 U.S.C. 1818(s) , or 12 U.S.C. 1786(q)(1) must implement a written Customer Identification
    Program (…'
  type: do
  tags:
  - regulator-direct
  - section-complete
  - cfpb-regulation
  primary_source:
    tier: 1
    authority: 31 CFR §1020.220(a)(1)
    source_class: fincen
    source_url: https://www.law.cornell.edu/cfr/text/31/1020.220
    snapshot_id: da1ebfb053de3664
    fetched_at: '2026-05-22T11:34:24Z'
    content_hash: sha256:c107eef9127a1fbfee55e8407281f81ec781677acc70f38de3b89f4d5825e1bb
    paragraph_quote: '(a) Customer Identification Program: minimum requirements —(1) In general. A bank
      required to have an anti-money laundering compliance program under the regulations implementing
      31 U.S.C. 5318(h) , 12 U.S.C. 1818(s) , or 12 U.S.C. 1786(q)(1) must implement a written Customer
      Identification Program (CIP) appropriate for the bank''s size and type of business that, at a minimum,
      includes each of the requirements of paragraphs (a)(1) through (5) of this section. The CIP must
      be a part of the anti-money laundering compliance program. (2) Identity verification procedures.
      The CIP must include risk-based procedures for verifying the identity of each customer to the extent
      reasonable and practicable. The procedures must enable the bank to form a reasonable belief that
      it knows the true identity of each customer . These procedures must be based on the bank''s assessment
      of the relevant risks, including those presented by the various types of accounts maintained by
      the bank, the various methods of opening accounts provided by the bank, the various types of identifying
      information available, and the bank''s size, location, and customer base. At a minimum, these procedures
      must contain the elements described in this paragraph (a)(2).'
    drafter_attestation: Verbatim subsection of 31 CFR §1020.220 from Cornell LII snapshot da1ebfb053de3664;
      body isolated between nav and notes; substring-verified.
  judgment: false
- id: bsa-31cfr-1020.220-i
  canonical_id: bsa-31cfr-1020.220-i
  section: 31 CFR §1020.220(i)
  description: '(i): (i) Customer information required —(A) In general. The CIP must contain procedures
    for opening an account that specify the identifying information that will be obtained from each customer
    . Except as permitted by paragraphs (a)(2)(i)(B) and (C) of this section, the bank must obtain, at
    a minimum, th…'
  type: do
  tags:
  - regulator-direct
  - section-complete
  - cfpb-regulation
  primary_source:
    tier: 1
    authority: 31 CFR §1020.220(a)(1)
    source_class: fincen
    source_url: https://www.law.cornell.edu/cfr/text/31/1020.220
    snapshot_id: da1ebfb053de3664
    fetched_at: '2026-05-22T11:34:24Z'
    content_hash: sha256:c107eef9127a1fbfee55e8407281f81ec781677acc70f38de3b89f4d5825e1bb
    paragraph_quote: '(i) Customer information required —(A) In general. The CIP must contain procedures
      for opening an account that specify the identifying information that will be obtained from each
      customer . Except as permitted by paragraphs (a)(2)(i)(B) and (C) of this section, the bank must
      obtain, at a minimum, the following information from the customer prior to opening an account: (1)
      Name; (2) Date of birth, for an individual; (3) Address, which shall be:'
    drafter_attestation: Verbatim subsection of 31 CFR §1020.220 from Cornell LII snapshot da1ebfb053de3664;
      body isolated between nav and notes; substring-verified.
  judgment: false
- id: bsa-31cfr-1020.220-i
  canonical_id: bsa-31cfr-1020.220-i
  section: 31 CFR §1020.220(i)
  description: '(i): (i) For an individual, a residential or business street address; (ii) For an individual
    who does not have a residential or business street address, an Army Post Office (APO) or Fleet Post
    Office (FPO) box number, or the residential or business street address of next of kin or of another
    contact indi…'
  type: do
  tags:
  - regulator-direct
  - section-complete
  - cfpb-regulation
  primary_source:
    tier: 1
    authority: 31 CFR §1020.220(a)(1)
    source_class: fincen
    source_url: https://www.law.cornell.edu/cfr/text/31/1020.220
    snapshot_id: da1ebfb053de3664
    fetched_at: '2026-05-22T11:34:24Z'
    content_hash: sha256:c107eef9127a1fbfee55e8407281f81ec781677acc70f38de3b89f4d5825e1bb
    paragraph_quote: '(i) For an individual, a residential or business street address; (ii) For an individual
      who does not have a residential or business street address, an Army Post Office (APO) or Fleet Post
      Office (FPO) box number, or the residential or business street address of next of kin or of another
      contact individual; or (iii) For a person other than an individual (such as a corporation, partnership,
      or trust), a principal place of business, local office, or other physical location; and (4) Identification
      number, which shall be:'
    drafter_attestation: Verbatim subsection of 31 CFR §1020.220 from Cornell LII snapshot da1ebfb053de3664;
      body isolated between nav and notes; substring-verified.
  judgment: false
- id: bsa-31cfr-1020.220-i
  canonical_id: bsa-31cfr-1020.220-i
  section: 31 CFR §1020.220(i)
  description: '(i): (i) For a U.S. person, a taxpayer identification number; or (ii) For a non-U.S. person,
    one or more of the following: A taxpayer identification number; passport number and country of issuance;
    alien identification card number; or number and country of issuance of any other government-issued
    document…'
  type: do
  tags:
  - regulator-direct
  - section-complete
  - cfpb-regulation
  primary_source:
    tier: 1
    authority: 31 CFR §1020.220(a)(1)
    source_class: fincen
    source_url: https://www.law.cornell.edu/cfr/text/31/1020.220
    snapshot_id: da1ebfb053de3664
    fetched_at: '2026-05-22T11:34:24Z'
    content_hash: sha256:c107eef9127a1fbfee55e8407281f81ec781677acc70f38de3b89f4d5825e1bb
    paragraph_quote: '(i) For a U.S. person, a taxpayer identification number; or (ii) For a non-U.S.
      person, one or more of the following: A taxpayer identification number; passport number and country
      of issuance; alien identification card number; or number and country of issuance of any other government-issued
      document evidencing nationality or residence and bearing a photograph or similar safeguard. Note
      to paragraph ( a )(2)( i )(A)( 4 )( ii ): When opening an account for a foreign business or enterprise
      that does not have an identification number, the bank must request alternative government-issued
      documentation certifying the existence of the business or enterprise. (B) Exception for persons
      applying for a taxpayer identification number. Instead of obtaining a taxpayer identification number
      from a customer prior to opening the account , the CIP may include procedures for opening an account
      for a customer that has applied for, but has not received, a taxpayer identification number. In
      this case, the CIP must include procedures to confirm that the application was filed before the
      customer opens the account and to obtain the taxpayer identification number within a reasonable
      period of time after the account is opened. (C) Credit card accounts. In connection with a customer
      who opens a credit card account , a bank may obtain the identifying information about a customer
      required under paragraph (a)(2)(i)(A) by acquiring it from a third-party source prior to extending
      credit to the customer . (ii) Customer verification. The CIP must contain procedures for verifying
      the identity of the customer , using information obtained in accordance with paragraph (a)(2)(i)
      of this section, within a reasonable time after the account is opened. The procedures must describe
      when the bank will use documents, non-documentary methods, or a combination of both methods as described
      in this paragraph (a)(2)(ii). (A) Verification through documents. For a bank relying on documents,
      the CIP must contain procedures that set forth the documents that the bank will use. These documents
      may include: (1) For an individual, unexpired government-issued identification evidencing nationality
      or residence and bearing a photograph or similar safeguard, such as a driver''s license or passport;
      and (2) For a person other than an individual (such as a corporation, partnership, or trust), documents
      showing the existence of the entity, such as certified articles of incorporation, a government-issued
      business license, a partnership agreement, or trust instrument. (B) Verification through non-documentary
      methods. For a bank relying on non-documentary methods, the CIP must contain procedures that describe
      the non-documentary methods the bank will use. (1) These methods may include contacting a customer
      ; independently verifying the customer ''s identity through the comparison of information provided
      by the customer with information obtained from a consumer reporting agency, public database, or
      other source; checking references with other financial institutions; and obtaining a financial statement.
      (2) The bank''s non-documentary procedures must address situations where an individual is unable
      to present an unexpired government-issued identification document that bears a photograph or similar
      safeguard; the bank is not familiar with the documents presented; the account is opened without
      obtaining documents; the customer opens the account without appearing in person at the bank; and
      where the bank is otherwise presented with circumstances that increase the risk that the bank will
      be unable to verify the true identity of a customer through documents. (C) Additional verification
      for certain customers. The CIP must address situations where, based on the bank''s risk assessment
      of a new account opened by a customer that is not an individual, the bank will obtain information
      about individuals with authority or control over such account , including signatories, in order
      to verify the customer ''s identity. This verification method applies only when the bank cannot
      verify the customer ''s true identity using the verification methods described in paragraphs (a)(2)(ii)(A)
      and (B) of this section. (iii) Lack of verification. The CIP must include procedures for responding
      to circumstances in which the bank cannot form a reasonable belief that it knows the true identity
      of a customer . These procedures should describe: (A) When the bank should not open an account ;
      (B) The terms under which a customer may use an account while the bank attempts to verify the customer
      ''s identity; (C) When the bank should close an account , after attempts to verify a customer ''s
      identity have failed; and (D) When the bank should file a Suspicious Activity Report in accordance
      with applicable law and regulation. (3) Recordkeeping. The CIP must include procedures for making
      and maintaining a record of all information obtained under the procedures implementing paragraph
      (a) of this section.'
    drafter_attestation: Verbatim subsection of 31 CFR §1020.220 from Cornell LII snapshot da1ebfb053de3664;
      body isolated between nav and notes; substring-verified.
  judgment: false
- id: bsa-31cfr-1020.220-i
  canonical_id: bsa-31cfr-1020.220-i
  section: 31 CFR §1020.220(i)
  description: '(i): (i) Required records. At a minimum, the record must include: (A) All identifying
    information about a customer obtained under paragraph (a)(2)(i) of this section; (B) A description
    of any document that was relied on under paragraph (a)(2)(ii)(A) of this section noting the type of
    document, any identi…'
  type: do
  tags:
  - regulator-direct
  - section-complete
  - cfpb-regulation
  primary_source:
    tier: 1
    authority: 31 CFR §1020.220(a)(1)
    source_class: fincen
    source_url: https://www.law.cornell.edu/cfr/text/31/1020.220
    snapshot_id: da1ebfb053de3664
    fetched_at: '2026-05-22T11:34:24Z'
    content_hash: sha256:c107eef9127a1fbfee55e8407281f81ec781677acc70f38de3b89f4d5825e1bb
    paragraph_quote: '(i) Required records. At a minimum, the record must include: (A) All identifying
      information about a customer obtained under paragraph (a)(2)(i) of this section; (B) A description
      of any document that was relied on under paragraph (a)(2)(ii)(A) of this section noting the type
      of document, any identification number contained in the document, the place of issuance and, if
      any, the date of issuance and expiration date; (C) A description of the methods and the results
      of any measures undertaken to verify the identity of the customer under paragraph (a)(2)(ii)(B)
      or (C) of this section; and (D) A description of the resolution of any substantive discrepancy discovered
      when verifying the identifying information obtained. (ii) Retention of records. The bank must retain
      the information in paragraph (a)(3)(i)(A) of this section for five years after the date the account
      is closed or, in the case of credit card accounts, five years after the account is closed or becomes
      dormant. The bank must retain the information in paragraphs (a)(3)(i)(B), (C), and (D) of this section
      for five years after the record is made. (4) Comparison with government lists. The CIP must include
      procedures for determining whether the customer appears on any list of known or suspected terrorists
      or terrorist organizations issued by any Federal government agency and designated as such by Treasury
      in consultation with the Federal functional regulators. The procedures must require the bank to
      make such a determination within a reasonable period of time after the account is opened, or earlier,
      if required by another Federal law or regulation or Federal directive issued in connection with
      the applicable list. The procedures must also require the bank to follow all Federal directives
      issued in connection with such lists. (5)'
    drafter_attestation: Verbatim subsection of 31 CFR §1020.220 from Cornell LII snapshot da1ebfb053de3664;
      body isolated between nav and notes; substring-verified.
  judgment: false
- id: bsa-31cfr-1020.220-i
  canonical_id: bsa-31cfr-1020.220-i
  section: 31 CFR §1020.220(i)
  description: '(i): (i) Customer notice. The CIP must include procedures for providing bank customers
    with adequate notice that the bank is requesting information to verify their identities. (ii) Adequate
    notice. Notice is adequate if the bank generally describes the identification requirements of this
    section and prov…'
  type: do
  tags:
  - regulator-direct
  - section-complete
  - cfpb-regulation
  primary_source:
    tier: 1
    authority: 31 CFR §1020.220(a)(1)
    source_class: fincen
    source_url: https://www.law.cornell.edu/cfr/text/31/1020.220
    snapshot_id: da1ebfb053de3664
    fetched_at: '2026-05-22T11:34:24Z'
    content_hash: sha256:c107eef9127a1fbfee55e8407281f81ec781677acc70f38de3b89f4d5825e1bb
    paragraph_quote: '(i) Customer notice. The CIP must include procedures for providing bank customers
      with adequate notice that the bank is requesting information to verify their identities. (ii) Adequate
      notice. Notice is adequate if the bank generally describes the identification requirements of this
      section and provides the notice in a manner reasonably designed to ensure that a customer is able
      to view the notice, or is otherwise given notice, before opening an account . For example, depending
      upon the manner in which the account is opened, a bank may post a notice in the lobby or on its
      Web site, include the notice on its account applications, or use any other form of written or oral
      notice. (iii) Sample notice. If appropriate, a bank may use the following sample language to provide
      notice to its customers: Important Information About Procedures for Opening a New Account To help
      the government fight the funding of terrorism and money laundering activities, Federal law requires
      all financial institutions to obtain, verify, and record information that identifies each person
      who opens an account . What this means for you: When you open an account , we will ask for your
      name, address, date of birth, and other information that will allow us to identify you. We may also
      ask to see your driver''s license or other identifying documents. (6) Reliance on another financial
      institution. The CIP may include procedures specifying when a bank will rely on the performance
      by another financial institution (including an affiliate) of any procedures of the bank''s CIP,
      with respect to any customer of the bank that is opening, or has opened, an account or has established
      a similar formal banking or business relationship with the other financial institution to provide
      or engage in services, dealings, or other financial transactions, provided that:'
    drafter_attestation: Verbatim subsection of 31 CFR §1020.220 from Cornell LII snapshot da1ebfb053de3664;
      body isolated between nav and notes; substring-verified.
  judgment: false
- id: bsa-31cfr-1020.220-i
  canonical_id: bsa-31cfr-1020.220-i
  section: 31 CFR §1020.220(i)
  description: '(i): (i) Such reliance is reasonable under the circumstances; (ii) The other financial
    institution is subject to a rule implementing 31 U.S.C. 5318(h) and is regulated by a Federal functional
    regulator; and (iii) The other financial institution enters into a contract requiring it to certify
    annually to t…'
  type: do
  tags:
  - regulator-direct
  - section-complete
  - cfpb-regulation
  primary_source:
    tier: 1
    authority: 31 CFR §1020.220(a)(1)
    source_class: fincen
    source_url: https://www.law.cornell.edu/cfr/text/31/1020.220
    snapshot_id: da1ebfb053de3664
    fetched_at: '2026-05-22T11:34:24Z'
    content_hash: sha256:c107eef9127a1fbfee55e8407281f81ec781677acc70f38de3b89f4d5825e1bb
    paragraph_quote: (i) Such reliance is reasonable under the circumstances; (ii) The other financial
      institution is subject to a rule implementing 31 U.S.C. 5318(h) and is regulated by a Federal functional
      regulator; and (iii) The other financial institution enters into a contract requiring it to certify
      annually to the bank that it has implemented its anti-money laundering program, and that it will
      perform (or its agent will perform) the specified requirements of the bank's CIP.
    drafter_attestation: Verbatim subsection of 31 CFR §1020.220 from Cornell LII snapshot da1ebfb053de3664;
      body isolated between nav and notes; substring-verified.
  judgment: false
- id: bsa-31cfr-1020.220-b
  canonical_id: bsa-31cfr-1020.220-b
  section: 31 CFR §1020.220(b)
  description: '(b): (b) Exemptions. The appropriate Federal functional regulator, with the concurrence
    of the Secretary, may, by order or regulation, exempt any bank or type of account from the requirements
    of this section. The Federal functional regulator and the Secretary shall consider whether the exemption
    is consi…'
  type: do
  tags:
  - regulator-direct
  - section-complete
  - cfpb-regulation
  primary_source:
    tier: 1
    authority: 31 CFR §1020.220(a)(1)
    source_class: fincen
    source_url: https://www.law.cornell.edu/cfr/text/31/1020.220
    snapshot_id: da1ebfb053de3664
    fetched_at: '2026-05-22T11:34:24Z'
    content_hash: sha256:c107eef9127a1fbfee55e8407281f81ec781677acc70f38de3b89f4d5825e1bb
    paragraph_quote: (b) Exemptions. The appropriate Federal functional regulator, with the concurrence
      of the Secretary, may, by order or regulation, exempt any bank or type of account from the requirements
      of this section. The Federal functional regulator and the Secretary shall consider whether the exemption
      is consistent with the purposes of the Bank Secrecy Act and with safe and sound banking, and may
      consider other appropriate factors. The Secretary will make these determinations for any bank or
      type of account that is not subject to the authority of a Federal functional regulator.
    drafter_attestation: Verbatim subsection of 31 CFR §1020.220 from Cornell LII snapshot da1ebfb053de3664;
      body isolated between nav and notes; substring-verified.
  judgment: false
- id: bsa-31cfr-1020.220-c
  canonical_id: bsa-31cfr-1020.220-c
  section: 31 CFR §1020.220(c)
  description: '(c): (c) Other requirements unaffected. Nothing in this section relieves a bank of its
    obligation to comply with any other provision in this chapter, including provisions concerning information
    that must be obtained, verified, or maintained in connection with any account or transaction. [ 75
    FR 65812 , O…'
  type: do
  tags:
  - regulator-direct
  - section-complete
  - cfpb-regulation
  primary_source:
    tier: 1
    authority: 31 CFR §1020.220(a)(1)
    source_class: fincen
    source_url: https://www.law.cornell.edu/cfr/text/31/1020.220
    snapshot_id: da1ebfb053de3664
    fetched_at: '2026-05-22T11:34:24Z'
    content_hash: sha256:c107eef9127a1fbfee55e8407281f81ec781677acc70f38de3b89f4d5825e1bb
    paragraph_quote: (c) Other requirements unaffected. Nothing in this section relieves a bank of its
      obligation to comply with any other provision in this chapter, including provisions concerning information
      that must be obtained, verified, or maintained in connection with any account or transaction. [
      75 FR 65812 , Oct. 26, 2010, as amended at 85 FR 57138 , Sept. 16, 2020] Bank Secrecy Act CFR Toolbox
      Law about... Articles from Wex Table of Popular Names Parallel Table of Authorities Accessibility
      About LII Contact us Advertise here Help Terms of use Privacy
    drafter_attestation: Verbatim subsection of 31 CFR §1020.220 from Cornell LII snapshot da1ebfb053de3664;
      body isolated between nav and notes; substring-verified.
  judgment: false
