Latest / VoraPrep Audio — Professional Licensure & Certification Exam Prep / [Series 6] S6F2: Customer Account Verification: CIP, OFAC, and Beneficial Ownership
Transcript
- Hey, and welcome to VoraPrep Audio. Glad you could tune in. So, let's talk about something that feels really simple on the surface, but the exam loves to twist into a knot: opening a new customer account. You get a question like, "Mr. John Smith walks in. He wants to open a mutual fund account. What do you do?" And your gut says, "Well, I get his name and address and open the account." But that's not even close to the full story. The exam is testing your knowledge of the very specific, legally-mandated steps you have to take. This isn't just about good customer service; it's about your role as a gatekeeper in the financial system, helping to prevent things like money laundering and terrorist financing. Getting this wrong on the exam is easy, and in the real world, it can lead to huge fines for you and your firm. Think of it like being the front-desk security at a very exclusive, very important office building. Your job isn't just to be friendly. You have three distinct tasks. First, you have to verify the person's identity. You look at their ID, make sure the picture matches the face, and that the name is spelled right. That’s the Customer Identification Program, or CIP. Second, you have to check their name against a list of people who are banned from the building. This is a special security list. That’s your OFAC check. And third, if a whole group of people shows up and says they're "Smith Corp," you can't just let them all in. You have to ask, "Okay, but who's actually in charge here? Who are the real decision-makers in this group?" That's identifying the beneficial owners. Three separate jobs: verify the ID, check the banned list, and for companies, find the real people in charge. Let's break down each one. The first job, verifying identity, falls under what's called the Customer Identification Program, or CIP. This was put in place by the USA PATRIOT Act. Its whole purpose is for your firm to be able to say, "We have a reasonable belief that we know the true identity of this customer." To do that, the law says you *must* obtain four specific pieces of information for every single new customer. First, their name. Simple enough. Second, their date of birth. This helps confirm they are who they say they are. Third, a physical address. And note that: a physical address. A PO box generally isn't going to work for their main residence. And fourth, you need their Taxpayer Identification Number. For most individuals in the U.S., that's just their Social Security Number. Name, date of birth, physical address, and Taxpayer ID. You need all four. Once you have that info, you have to actually *verify* it. You can do that by looking at documents, like a driver's license or a passport. Or you can use non-documentary methods, like cross-referencing their information with a credit bureau or other public databases. The rules are a little flexible on timing—you can do this verification within a reasonable time *before or after* the account is opened. But, and this is key, it's typically done before any real transactions happen. Okay, so you've collected the four pieces of info and you have a plan to verify them. That's CIP. Your second job is the security check. This is the OFAC check. OFAC stands for the Office of Foreign Assets Control. It's part of the U.S. Treasury Department, and it maintains a list of people and entities that are involved in things like terrorism, drug trafficking, or are from sanctioned countries. This is the Specially Designated Nationals and Blocked Persons List, or the SDN List. Before you open an account, you have to check your new customer’s name against this list. And if you get a match? Everything stops. You must immediately block or freeze any assets they're trying to move into the firm. You can't do any transactions for them. And you have to report it to OFAC right away. This is a big, big deal. And a huge point for the exam: don't confuse CIP and OFAC. CIP is about making sure John Smith is *really* John Smith. OFAC is about checking if this John Smith is on a government sanctions list. They're both part of your anti-money laundering duties, but they serve two very different functions. Now for that third job. What if your new customer isn't an individual like John Smith, but a legal entity? Like an LLC, a corporation, or a partnership. This is where the Beneficial Ownership rule comes in. It's also known as the Customer Due Diligence, or CDD, Final Rule. The whole point here is to prevent people from hiding behind a corporate name. The rule says you have to identify the *real people*, the 'natural persons', who ultimately own or control the company. It defines a 'beneficial owner' in two ways. First, there’s the 'ownership prong'. You have to identify every single individual who directly or indirectly owns 25 percent or more of the company. That 25 percent number is critical. The exam loves to test it. So, if four people each own 25 percent of an LLC, you need to get the identity information for all four of them. If one person owns 50 percent and everyone else owns a tiny piece, you just need to identify that one person under the ownership prong. Second, there's the 'control prong'. Regardless of who owns what, you must always identify one individual who has significant responsibility for managing the company. This is the person steering the ship—the CEO, the Chief Financial Officer, a Managing Member, a General Partner. You just need to identify one person for this prong. So, for any legal entity, you'll identify anywhere from zero to four people under the ownership prong, and you will always identify exactly one person under the control prong. And once you've identified these beneficial owners, you have to verify their identities using the same CIP standards we just talked about. Let's walk through the whole sequence, like a mental checklist. A new client comes in. Step one: You gather the core CIP information. Name, date of birth, physical address, and their Taxpayer ID Number. Step two: You verify their identity. You ask for a driver's license or use a non-documentary method. You're forming that 'reasonable belief' you know who they are. Step three: You screen their name against the OFAC SDN List. This has to happen *before* the account is really active. If there's a match, you stop, block, and report. Step four: You ask, is this customer a person or a company? If it's a legal entity, you now have to do your beneficial ownership work. Identify the 25-percent-plus owners and the one control person, and then run CIP on them, too. Step five: You document everything and keep those records. The Bank Secrecy Act requires you to hold onto these identity verification records for at least five years after the account is *closed*. See how it's a clear, logical flow? It's not just a pile of rules; it's a process. Getting this process down is all about reps. You run through the steps, you do the practice questions, and it becomes second nature. If you want more of that practice, that's what we built at VoraPrep. It’s a full exam-prep app with lessons, thousands of questions, and even an AI tutor to help you when you're stuck. You can get started for free at Vora Prep dot com. Now, a few common exam traps to watch out for. First, don't confuse CIP with suitability. CIP is about verifying someone's *identity* to prevent financial crime. Suitability is about making sure an investment recommendation is *appropriate* for that person. They're both done when opening an account, but they are totally different concepts. Another trap is the 25 percent threshold for beneficial ownership. Remember that number, and remember that it only applies to legal entities, not to individual accounts. Finally, don't assume the OFAC list only has foreign nationals on it. The SDN list can and does include U.S. citizens and U.S.-based companies if they're involved in sanctioned activities. So, to wrap it all up: when a new customer comes in, you are the gatekeeper. You have to run the Customer Identification Program—get the four key pieces of info and verify them. You have to check them against the OFAC sanctions list. And if it's a company, you have to dig deeper to find the beneficial owners—the 25 percent owners and the one control person. Get those three duties straight in your head, and you'll be set for any account-opening question the exam throws at you. Alright, that's it for today. Keep up the great work. You've got this.