Lesson 01 of 9
Welcome: What a KYC Analyst Actually Does
4 min read · KYC Analyst
Meet the role behind every new account. You'll see exactly where KYC sits inside the AML program and learn the four-stage lifecycle — CIP, CDD, EDD, and ongoing monitoring — that the rest of this job-ready workshop is built around.
The analyst behind the account
- Every account a bank opens passes through a human review
- That reviewer is the KYC analyst
- Their job: know who the customer really is — and why it matters
Before a bank lets money flow through a new account, someone has to answer a deceptively simple question: who is this customer, really? Not the name on the form, but the actual person or company behind it, where their money comes from, and whether they are who they claim to be. The person who answers that question is the Know Your Customer analyst, or KYC analyst.
In the next hour, AMLReady is going to teach you to think like one. You'll learn the lifecycle, the rules, the red flags, and the judgment calls — the same things a hiring manager or a job assessment will test you on.
Where KYC fits inside AML
- AML = the whole anti-money-laundering program
- KYC = the customer-knowledge engine that feeds it
- Good KYC makes monitoring, screening and reporting work
- Weak KYC means the rest of the program is blind
Let's place KYC on the map. Anti-money laundering, or AML, is the entire program a financial institution runs to keep criminal money out. KYC is the part of that program focused on knowing the customer.
Think of KYC as the engine that feeds everything else. Transaction monitoring can only flag what's unusual if it knows what's normal for a customer. Sanctions screening only works if you've correctly captured who the customer and their owners are.
Suspicious activity reporting depends on the customer file you built. So when KYC is weak, the rest of the program goes blind. That's why the role matters, and why regulators write detailed rules about it.
The lifecycle: CIP, CDD, EDD, monitoring
- CIP — identify and verify who they are
- CDD — understand the relationship and rate the risk
- EDD — go deeper when risk is high
- Ongoing monitoring — keep the file true over time
Almost everything you'll do follows one lifecycle, and the whole course is built around it. Stage one is the Customer Identification Program, or CIP. Here you collect and verify identity — under U.
S. rules, that's 31 CFR 1010.220.
Stage two is Customer Due Diligence, or CDD, governed by FinCEN's CDD Rule at 31 CFR 1010.230. This is where you understand the nature of the relationship, identify the beneficial owners, and assign a risk rating.
Stage three is Enhanced Due Diligence, or EDD — the deeper dive you run when risk is high, which FATF Recommendation 10 expects on a risk-sensitive basis. And stage four is ongoing monitoring, keeping that file accurate over the life of the relationship. Identify, understand, deepen, maintain.
Hold those four words in your head. Master the lifecycle and you've got the skeleton of the whole role, because every later lecture slots into one of those four stages.
What you'll actually produce
- A complete, verified customer profile
- A documented risk rating with rationale
- Cleared screening alerts with clear notes
- Escalations and, when warranted, referrals to investigations
So what does the job look like day to day? You build case files. For each customer you produce a verified profile, a documented risk rating with the reasoning written down, and a clear record of how you dispositioned any sanctions or adverse-media alerts.
When something doesn't add up, you escalate — to a senior analyst, to the financial intelligence unit, or to compliance. You are, in a real sense, the institution's first line of defense and its memory. The FFIEC BSA/AML Examination Manual describes exactly this kind of documented, risk-based work, because examiners will later read what you wrote.
Good notes aren't bureaucracy; they're the job. And here's a mindset point worth absorbing early: the institution is trusting you to be skeptical on its behalf. Pleasant, professional, but never a rubber stamp.
An independent, public-source workshop
- Independent training — not affiliated with any certifying body
- Built only from public sources: CFR, FinCEN, FATF, OFAC, FFIEC, Wolfsberg
- No proprietary exam content reproduced
- Job-ready skills + interview prep — not a guaranteed credential
One thing to say plainly. This is an independent AMLReady workshop. There is no single official certifying body for the KYC analyst role, and this course is not affiliated with, authorized by, or endorsed by any certification organization.
Any framework or standard we name belongs to its respective owner. Everything here is built from public sources — the Code of Federal Regulations, FinCEN, the FATF Recommendations, OFAC, the FFIEC manual, and Wolfsberg Group guidance. We reproduce no proprietary exam questions.
And we won't promise you a job or a passing assessment score; no honest course can. What we promise is serious, structured, job-ready preparation.
Recap and what's next
- KYC is the customer-knowledge engine inside AML
- Lifecycle: CIP → CDD → EDD → ongoing monitoring
- You build verified, risk-rated, well-documented case files
- Next: the CIP — proving who the customer is
Here's where we are. You know that KYC is the customer-knowledge engine that powers the whole AML program, and you know the four-stage lifecycle: CIP, then CDD, then EDD when needed, then ongoing monitoring. You know your output is a verified, risk-rated, carefully documented file.
Next, we start at the front door of that lifecycle: the Customer Identification Program, where we prove who the customer actually is. Let's get into it. So take a breath, get comfortable, and let's begin building the analyst's mindset together — one stage of the lifecycle at a time.
Sources
- 31 CFR 1010.220 (CIP)
- 31 CFR 1010.230 (FinCEN CDD Rule)
- FATF Recommendation 10
- FFIEC BSA/AML Examination Manual
Test your knowledge
A few KYC Analyst questions on this material — pick an answer to see the explanation.
Q1. Under the CIP rule, which set represents the four minimum pieces of identifying information a bank must collect for an individual before opening an account?
Q2. A customer opens an account remotely and the submitted ID image cannot be authenticated by the document scanner. What is the most appropriate CIP next step?
Q3. Which statement best describes the relationship between documentary and non-documentary verification under a CIP program?
Q4. A legal-entity customer has a fragmented ownership structure where no single individual owns 25% or more. Under the CDD Rule, how many beneficial owners must the bank still identify?
Ready to practice?
Put this lesson to work on real KYC Analyst questions.
Drill the full KYC Analyst bank →