CIP Customer Identification Verification Checklist

This checklist covers the core controls used to verify a customer’s identity at account opening: legal name, date of birth when applicable, address, identification number, verification method, screening, and recordkeeping. It is designed to document whether the institution followed its CIP process for the specific account opening event under review. It does not replace the underlying CIP policy or the customer due diligence process. Use it as the inspection record for one account-opening decision or a sampled set of openings.

Use it during account opening reviews, periodic compliance testing, internal audits, or file sampling after a CIP exception. It is especially useful when a new product, channel, or onboarding workflow is introduced and you need to confirm the identity controls still work as intended. It can also be used after a suspected false match, missing document, or delayed verification event. If the review is about ongoing monitoring rather than onboarding, a different template is usually a better fit.

A compliance analyst, BSA/AML reviewer, internal auditor, or trained operations supervisor typically completes it. The reviewer should understand the institution’s CIP policy and be able to assess whether the evidence in the file supports the identity decision. If a deficiency is found, the checklist should route the issue to the appropriate owner for remediation. It is not meant to be completed by the customer or by an untrained frontline user without review.

Yes, it is structured around the Customer Identification Program requirements used by financial institutions, including the general expectations in the Bank Secrecy Act framework and related CIP rules. It also supports auditability by capturing what was collected, how it was verified, and whether exceptions were resolved before account opening. The checklist should be customized to your institution’s risk-based CIP procedures and product-specific rules. It is not legal advice, but it helps document compliance in a way examiners can follow.

Common issues include missing date of birth or address fields, weak or undocumented verification evidence, and accounts opened before discrepancies were resolved. Reviewers also find cases where the identification number was collected but not validated against the source document or data source. Another frequent gap is incomplete retention of the source document or verification record. This template makes those failures visible in one pass instead of leaving them buried in the account file.

That depends on your testing plan, but many institutions use it for every sampled account in a monthly or quarterly compliance review. It is also appropriate for ad hoc reviews when a control failure, complaint, or alert suggests a possible CIP breakdown. The key is consistency: use the same checklist criteria across the same product or channel so results are comparable. If your onboarding process changes, update the review cadence to include the new workflow early.

Yes, and it should be. You can add fields for consumer versus business accounts, branch versus digital onboarding, non-documentary verification methods, or special handling for foreign identification. You can also tailor the escalation section to your internal alerting and case management process. The core identity elements should stay intact, but the evidence expected may differ by product and risk level.

An ad hoc review often relies on memory and inconsistent notes, which makes it hard to prove what was checked or why a file passed. This checklist forces the reviewer to capture the required identity elements, the verification method, the timing, and the final disposition in a repeatable format. That makes trends easier to spot and remediation easier to assign. It also creates a cleaner audit trail for examiners and internal QA.