Bank Account Opening, KYC and Documentation

Overview
This guide covers the AFP CTP topic of Bank Account Opening, Know Your Customer (KYC) and Documentation, which sits within the Internal and External Relationships domain of the CTP Body of Knowledge. Opening, maintaining and closing bank accounts is one of the most fundamental treasury activities, yet it is also one of the most heavily regulated and control-sensitive. The CTP exam expects you to understand the regulatory drivers behind KYC, the documents a company must supply, the sequence of the account-opening process, the controls treasury must maintain over accounts and signatories, and the special considerations that arise with global accounts. This guide explains why the topic matters, what it is, how it works, and how to approach exam questions on it.

Part 1: Why This Topic Is Important

1. Regulatory compliance is non-negotiable. Banks are legally required to identify and verify every customer before opening an account. In the United States this flows from the Bank Secrecy Act (BSA), the USA PATRIOT Act (particularly Section 326, which mandates a Customer Identification Program), FinCEN's Customer Due Diligence (CDD) Rule including the beneficial ownership requirement, and sanctions screening against the Office of Foreign Assets Control (OFAC) lists. Similar anti-money laundering (AML) regimes exist in virtually every country. A treasury professional who does not understand these obligations will experience delays, rejected applications and frustrated banking partners.

2. Accounts are the gateway to all treasury services. Every collection, disbursement, liquidity, investment and FX service depends on a properly opened and documented account. If the account opening is incomplete, cash cannot move, payroll cannot run and acquisitions cannot close on schedule.

3. Fraud and control risk. Unauthorized or dormant accounts, outdated signatory lists and undocumented authority are classic sources of internal fraud and audit findings. Sarbanes-Oxley (SOX) controls over cash require that treasury can demonstrate exactly who may open, operate and close accounts.

4. Relationship management. Providing clean, complete KYC documentation quickly is a signal of a well-run treasury and builds credibility with relationship managers. Conversely, KYC refresh requests that go unanswered can lead to account restrictions or forced closures.

5. It is a recurring exam theme. Questions on resolutions, signature cards, beneficial ownership, CIP versus CDD, eBAM and account closure appear regularly because they test practical knowledge that every treasury professional must have.

Part 2: What It Is

Know Your Customer (KYC)
KYC is the umbrella term for the processes a financial institution uses to identify a customer, verify that identity, understand the nature and purpose of the relationship, and assess the risk that the customer poses for money laundering, terrorist financing, sanctions violations or fraud. KYC is not a single event; it begins at onboarding and continues through the life of the relationship via ongoing monitoring and periodic refresh.

Customer Identification Program (CIP)
CIP is the minimum identity-verification component required under Section 326 of the USA PATRIOT Act. For a legal entity, a bank must collect at least the entity's legal name, physical address, taxpayer identification number (TIN or EIN in the US) and, for individuals, date of birth. The bank must verify this information through documentary methods (articles of incorporation, government-issued ID) or non-documentary methods (database checks, credit bureaus), keep records, check names against government lists and give customers notice that information is being collected.

Customer Due Diligence (CDD)
CDD goes beyond identification. Under FinCEN's CDD Rule (effective May 2018), covered financial institutions must: (1) identify and verify the customer, (2) identify and verify the beneficial owners of legal entity customers, (3) understand the nature and purpose of the customer relationship in order to develop a customer risk profile, and (4) conduct ongoing monitoring to report suspicious activity and update customer information.

Beneficial Ownership
Under the CDD Rule, a legal entity customer must certify its beneficial owners under two prongs: the ownership prong, meaning each individual who directly or indirectly owns 25 percent or more of the equity interests, and the control prong, meaning one individual with significant responsibility to control, manage or direct the entity (for example a CEO, CFO, treasurer or managing member). Even if no one meets the 25 percent threshold, at least one control-prong individual must be identified. Publicly traded companies and certain regulated entities are exempt, but their subsidiaries may still need to document the ownership chain back to the listed parent.

Enhanced Due Diligence (EDD)
EDD applies to higher-risk customers, such as those in high-risk jurisdictions, cash-intensive businesses, entities with complex ownership structures, or relationships involving politically exposed persons (PEPs). EDD may require source-of-funds explanations, senior management approval, more frequent reviews and additional documentation.

Sanctions Screening
Banks screen the entity, its owners, signers and directors against OFAC's Specially Designated Nationals (SDN) list and other sanctions lists (UN, EU, UK HMT). A positive or false-positive hit can delay opening until cleared.

Tax Documentation
US accounts require a Form W-9 for US persons; non-US entities provide a W-8BEN-E or other W-8 series form. Under FATCA (Foreign Account Tax Compliance Act) and the OECD Common Reporting Standard (CRS), banks must classify the account holder and may report balances to tax authorities. Treasury must also remember FBAR (FinCEN Form 114) reporting for US persons with signature authority over foreign accounts exceeding USD 10,000 in aggregate.

Core Documentation Package
A typical corporate account-opening package includes:
- Formation documents: articles or certificate of incorporation, bylaws or operating agreement, partnership agreement or trust instrument.
- Certificate of good standing (or certificate of existence) from the state or jurisdiction of formation, usually dated within a recent window such as 30 to 90 days.
- Board resolution or corporate resolution authorizing the opening of the account, naming the bank, and designating who may sign and what authority they hold. Many banks supply their own resolution form.
- Incumbency certificate (secretary's certificate) attesting that the named officers hold their positions and that signatures are genuine.
- Signature cards or authorized signer forms, often with government ID for each signer.
- Beneficial ownership certification form for each legal entity customer.
- Tax forms: W-9, W-8BEN-E, FATCA and CRS self-certifications.
- Deposit account agreement and treasury management services agreement (master services agreement with service schedules for ACH, wires, positive pay, lockbox, information reporting, etc.).
- Account structure documentation such as zero-balance account (ZBA) or sweep agreements, and notional pooling or intercompany agreements where relevant.
- Financial statements and ownership charts for CDD and credit purposes.
- Account opening checklist and internal approval evidence required by the company's own treasury policy.

Bank Account Management (BAM) and eBAM
Bank account management refers to the internal treasury process of maintaining a complete inventory of all accounts, their purpose, legal entity, bank, signatories, services, balances and documentation. Electronic Bank Account Management (eBAM) uses standardized electronic messages (ISO 20022 acmt messages, often transmitted via SWIFT) to open, maintain and close accounts and to update signatory information without paper. eBAM improves speed, auditability and control but requires both bank and corporate readiness, and KYC still must be completed; eBAM automates the workflow, not the regulatory requirement.

Part 3: How It Works

Step 1: Identify the business need and approval. A new account may be needed for a new subsidiary, a new country, an acquisition, a new business line, a lockbox, a controlled disbursement structure or a segregated escrow. The treasury policy should require written justification and approval by designated officers before any account is requested. Many companies require that only treasury, not operating units, may open accounts.

Step 2: Select the bank and account type. Treasury chooses the bank based on relationship strategy, service capability, credit exposure, geographic reach and cost. The account type (demand deposit, ZBA, controlled disbursement, interest-bearing, foreign currency) and its position in the account structure are determined at this stage.

Step 3: Internal authorization. The board or an authorized committee passes a resolution (or acts under a standing general resolution delegating authority to the treasurer). The corporate secretary issues an incumbency certificate. Authorized signers and their limits (single, dual, dollar thresholds) are defined.

Step 4: Assemble and submit documentation. Treasury compiles the package described above. For foreign subsidiaries, documents may need notarization, apostille (under the Hague Convention), consular legalization or certified translation. Local directors or local-language forms may be required.

Step 5: Bank performs CIP, CDD and screening. The bank verifies identity, collects beneficial ownership certification, screens all parties against sanctions lists, assigns a risk rating, and determines whether EDD is needed. Questions about expected transaction volume, countries of activity and source of funds are common.

Step 6: Account activation and service setup. Once KYC is cleared, the account is opened and treasury services are implemented: online banking entitlements, security tokens, ACH origination, wire templates, positive pay, information reporting (BAI2, MT940, camt.053) and connectivity to the treasury management system (TMS).

Step 7: Record in the account inventory. The new account is added to the BAM database with all documentation, signers, services and account purpose, and linked to the general ledger.

Step 8: Ongoing maintenance. Signatory changes require updated resolutions and signature cards and prompt removal of departed employees. Banks conduct periodic KYC refresh (often annually for high risk, every three to five years for low risk) and may request updated ownership, financials or certifications. Treasury should perform at least annual reviews of all accounts and signers, confirm with banks, and identify dormant or redundant accounts for rationalization.

Step 9: Account closure. Closing requires approval under the same policy, a closing resolution if the bank requires it, transfer of residual balances, cancellation of services and standing instructions, final reconciliation, confirmation letter from the bank and update of the inventory. Closed accounts and their records must be retained per record retention policy.

Global Considerations
- Documentation requirements differ by country; some jurisdictions require in-person signing, local director identification, or central bank approval or registration (for example for non-resident accounts).
- Currency controls can restrict account types available to foreign-owned entities.
- Time to open an account in some markets can be weeks or months, so planning is critical for M&A and market entry.
- Global banks may apply group-wide KYC but local branches often still run their own process.
- FBAR, FATCA and CRS create reporting duties for both the company and its signers.

Internal Controls Over Account Opening
- Centralize authority to open and close accounts in treasury.
- Segregate duties so that the person who opens an account cannot also be a sole signer and reconciler.
- Use dual control for signatory changes and high-value payments.
- Maintain a current, complete account and signatory inventory reviewed at least annually.
- Reconcile bank-confirmed account lists to internal records and the general ledger.
- Document everything; auditors will ask for the resolution, signer list and bank confirmation for every account.

Part 4: How to Answer Exam Questions on This Topic

The CTP exam tests application as much as recall. Questions typically present a scenario and ask what is required, who is responsible, what is the best practice, or what is the first or next step. Use the following approach.

1. Identify the regulatory layer being tested. If the question mentions identifying and verifying name, address and TIN, the answer is CIP. If it mentions understanding purpose of the relationship, risk profiling or beneficial owners, the answer is CDD. If it mentions high-risk customers, PEPs or additional scrutiny, think EDD. If it mentions a list check or blocked persons, think OFAC and sanctions screening.

2. Know the thresholds and triggers. Beneficial ownership: 25 percent ownership plus one control person. FBAR: aggregate foreign account value exceeding USD 10,000 at any time during the year. Memorize these; they are easy points.

3. Distinguish the company's documents from the bank's documents. Resolutions, incumbency certificates, articles and good-standing certificates come from the company. Account agreements, service agreements and beneficial ownership certification forms are typically bank forms the company completes. Signature cards are bank forms signed by company officers.

4. Recognize the purpose of each document. A board resolution establishes authority to open the account and act on it. An incumbency certificate proves who the officers are. A signature card identifies who may sign and in what combination. A certificate of good standing proves the entity legally exists and is current. A W-9 or W-8 establishes tax status. If a question asks which document proves a person is authorized to sign, the answer is the resolution supported by the signature card, not the articles of incorporation.

5. Think like a controller. When asked for best practice, choose the answer that centralizes authority in treasury, requires formal written approval, enforces segregation of duties, maintains a complete inventory and performs periodic review. Answers that let business units open accounts independently or that rely on informal communication are almost always wrong.

6. Remember that KYC is ongoing. If a scenario describes a bank asking an existing customer for updated ownership information, this is a periodic KYC refresh required by the CDD Rule's ongoing monitoring pillar, not a sign of a problem.

7. Understand what eBAM does and does not do. eBAM automates and standardizes account opening, maintenance and closure messaging. It does not eliminate KYC, resolutions or regulatory obligations, and it requires bank support.

8. For global questions, favor planning and local expertise. Correct answers typically acknowledge that foreign account opening takes longer, requires local documentation such as apostilles or translations, may need regulatory approval, and should be started early.

Exam Tips: Answering Questions on Bank Account Opening, KYC and Documentation

Tip 1: Learn the acronym ladder: KYC is the umbrella, CIP is identification and verification, CDD adds beneficial ownership and risk profile, EDD adds extra scrutiny for high risk. Questions often hinge on which level is being described.

Tip 2: The beneficial ownership rule is a favorite: 25 percent equity under the ownership prong, and exactly one individual under the control prong. Publicly traded companies are exempt, but their non-public subsidiaries generally are not.

Tip 3: When a question asks who has responsibility for KYC, remember that the bank has the legal obligation to perform it, while the corporate customer is responsible for supplying accurate, complete and timely information.

Tip 4: If the question asks for the first step in opening an account, the answer is usually internal: confirm the business need and obtain authorization under treasury policy, before contacting the bank.

Tip 5: If the question asks what document a bank requires to confirm the individuals authorized to transact, look for board resolution, signature card or incumbency certificate in the options, and choose the one that best matches the exact wording (authority equals resolution; signature verification equals signature card; officer identity equals incumbency certificate).

Tip 6: Watch for the word periodic or refresh. Banks must update customer information on a risk-based schedule; failing to respond can lead to account restrictions, which is why treasury should maintain a documentation repository.

Tip 7: Account closure questions test control discipline: approval, residual balance transfer, cancellation of services, written bank confirmation, and inventory update. The best answer includes written confirmation and reconciliation.

Tip 8: Dormant or unauthorized accounts are a red flag. The correct remedy is a comprehensive account inventory, bank confirmations and account rationalization, not simply closing accounts without review.

Tip 9: Do not confuse FBAR (US person reports foreign accounts to FinCEN), FATCA (foreign institutions report US account holders) and CRS (multilateral tax information exchange). Each may appear as a distractor for the other.

Tip 10: For every scenario, ask what reduces fraud, improves auditability and satisfies regulators simultaneously. The CTP exam consistently rewards the answer that is formal, documented, centralized and reviewed.

Quick Reference Summary
- Legal drivers: BSA, USA PATRIOT Act Section 326 (CIP), FinCEN CDD Rule (beneficial ownership), OFAC sanctions, FATCA, CRS, FBAR.
- Core documents: formation documents, certificate of good standing, board resolution, incumbency certificate, signature cards, beneficial ownership certification, W-9 or W-8, account and services agreements.
- Process: need and approval, bank and account selection, internal authorization, document submission, bank KYC and screening, activation and service setup, inventory update, ongoing maintenance and refresh, controlled closure.
- Controls: centralized authority, segregation of duties, dual control, annual signer and account review, bank confirmations, documentation repository.
- Technology: BAM databases and eBAM (ISO 20022 acmt via SWIFT) streamline workflow but do not replace KYC.

Master these elements and you will be able to handle any CTP question on bank account opening, KYC and documentation with confidence.