FinCEN's Customer Due Diligence Rule requires covered institutions to identify and verify customers and beneficial owners, understand account purpose and monitor activity. Updated risk information and certification or verification records link onboarding with review and SAR support.
TL;DR:
- Covered institutions identify customers and beneficial owners and understand relationship purpose.
- Risk-based monitoring supports suspicious-activity identification and information updates.
- February 2026 relief qualifies repeated account-opening collection without removing wider CDD duties.
Summary
Four connected elements of customer due diligence
FinCEN describes the CDD Rule as requiring covered institutions to identify and verify customers, identify and verify the beneficial owners of legal-entity customers, understand relationship purpose to develop risk profiles and conduct ongoing monitoring. The rule applies to specified institution categories rather than every commercial business handling a payment. Written policies and procedures connect those activities within the institution's overall BSA compliance framework.
The individuals behind a legal-entity customer
The beneficial-ownership framework distinguishes an ownership limb from a control limb and includes defined exclusions and exceptions. It seeks to identify the natural people behind a covered legal-entity customer rather than stopping at the company's name. The institution's verification concerns those people and the applicable risk-based process. The CDD Rule should also be distinguished from separate corporate beneficial-ownership reporting regimes, which serve a different legal function.
Monitoring and keeping the risk view current
Knowing the customer at onboarding is only part of the framework. The institution must understand the nature and purpose of the relationship, monitor for suspicious transactions and update customer information on a risk basis. A change in ownership, behaviour or other material information can therefore affect the assessment. The rule does not make every unusual payment automatically criminal; monitoring supports a reasoned review and the reporting obligations that apply to the institution.
The February 2026 account-opening relief
FinCEN's official CDD resource now lists FIN-2026-R 001, an order providing exceptive relief from identifying and verifying beneficial owners at every additional account opening. The relief must be applied within its terms and alongside continuing risk-based requirements. An older description requiring a completely repeated beneficial-owner process on every account can therefore overstate the current burden. The order does not abolish initial identification, the duty to respond to unreliable information or the wider CDD framework.
Keywords
- FinCEN CDD
- customer identification
- beneficial ownership
- relationship purpose
- suspicious activity
- risk-based updates
- covered institutions
- account opening
- exceptive relief
- 2026 order