KYC, KYB and AML Rules for FINRA Regulated Dealers

by May 7, 2025

As a FINRA-regulated broker-dealer, maintaining robust Know Your Customer (KYC), Know Your Business (KYB), and Anti-Money Laundering (AML) workflows is essential to comply with regulatory requirements and safeguard your firm against financial crimes.

Below is a checklist to help ensure your compliance programs align with FINRA rules:

1. Know Your Customer (KYC)

  • Customer Identification Program (CIP):
    • Collect and verify essential customer information:
      • Full name
      • Date of birth
      • Address
      • Identification number
    • Maintain records of the identification information and verification methods used.
  • Customer Due Diligence (CDD):
    • Understand the nature and purpose of customer relationships to develop a risk profile.
    • Conduct ongoing monitoring to identify and report suspicious activities.
  • Enhanced Due Diligence (EDD):
    • Apply additional scrutiny to high-risk customers, such as politically exposed persons (PEPs) or those from high-risk jurisdictions.
    • Gather information on the source of funds and wealth.

Relevant FINRA Rule:

  • FINRA Rule 2090 – Know Your Customer: Requires firms to use reasonable diligence to know and retain essential facts concerning every customer. FINRA

2. Know Your Business (KYB)

  • Business Entity Verification:
    • Verify the legal status and ownership structure of corporate clients.
    • Identify and verify beneficial owners with a 25% or more ownership stake.
  • Risk Assessment:
    • Assess the nature of the business, its products, services, and customer base to determine risk levels.
  • Ongoing Monitoring:
    • Continuously monitor business accounts for unusual or suspicious activities.

Relevant FINRA Guidance:

  • While FINRA does not have a specific rule titled “KYB,” the principles of customer due diligence and AML compliance extend to business entities.

3. Anti-Money Laundering (AML) Compliance

  • Written AML Program:
    • Develop and implement a written AML program approved by senior management.
    • Ensure the program is reasonably designed to achieve compliance with the Bank Secrecy Act (BSA) and its implementing regulations.
  • Independent Testing:
    • Conduct independent testing of the AML program at least annually to assess its effectiveness.
  • Designated AML Compliance Officer:
    • Appoint a qualified individual responsible for overseeing AML compliance.
  • Ongoing Training:
    • Provide ongoing training for appropriate personnel to ensure awareness of AML responsibilities.
  • Suspicious Activity Reporting (SAR):
    • Establish procedures for detecting and reporting suspicious transactions to the Financial Crimes Enforcement Network (FinCEN).

Relevant FINRA Rule:

  • FINRA Rule 3310 – Anti-Money Laundering Compliance Program: Sets forth minimum standards for AML compliance programs, including the requirements mentioned above. FINRA

Additional Considerations

  • Recordkeeping:
    • Maintain comprehensive records of all customer information, transaction reports, and compliance efforts as required by FINRA and the BSA.
  • Risk-Based Approach:
    • Implement a risk-based approach to AML compliance, allocating resources commensurate with the level of risk identified.
  • Regulatory Updates:
    • Stay informed about updates to FINRA rules and federal regulations to ensure ongoing compliance.

By adhering to this checklist and the associated FINRA rules, your firm can establish robust KYC, KYB, and AML workflows that not only comply with regulatory requirements but also protect against financial crimes and enhance overall operational integrity.

Start your free trial of iComply

Cancel Anytime. No Questions Asked.

Vaidyanathan Chandrashekhar

Vaidyanathan Chandrashekhar

Advisors

“Chandy,” is a technology and risk expert with executive experience at Boston Consulting Group, Citi, and PwC. With over two decades in financial services, digital transformation, and enterprise risk, he advises iComply on scalable compliance infrastructure for global markets.
Thomas Linder

Thomas Linder

Advisors

Thomas is a global tax and compliance expert with deep specialization in digital assets, blockchain, and tokenization. As a partner at MME Legal | Tax | Compliance, he advises iComply on regulatory strategy, cross-border compliance, and digital finance innovation.
Thomas Hardjono

Thomas Hardjono

Advisors

Thomas is a renowned identity and cybersecurity expert, serving as CTO of Connection Science at MIT. With deep expertise in decentralized identity, zero trust, and secure data exchange, he advises iComply on cutting-edge technology and privacy-first compliance architecture.
Rodney Dobson

Rodney Dobson

Advisors

Rodney is the former President of ADP Canada and international executive with over two decades of leadership in global HR and enterprise technology. He advises iComply with deep expertise in international service delivery, M&A, and scaling high-growth operations across regulated markets.
Praveen Mandal

Praveen Mandal

Advisors

Praveen is a serial entrepreneur and technology innovator, known for leadership roles at Lucent Bell Labs, ChargePoint, and the Stanford Linear Accelerator. He advises iComply on advanced computing, scalable infrastructure, and the intersection of AI, energy, and compliance tech.
Paul Childerhose

Paul Childerhose

Advisors

Paul is a Canadian RegTech leader and founder of Maple Peak Group, with extensive experience in financial services compliance, AML, and digital transformation. He advises iComply on regulatory alignment, operational strategy, and scaling compliance programs in complex markets.
John Engle

John Engle

Advisors

John is a seasoned business executive with senior leadership experience at CIBC, UBS, and Accenture. With deep expertise in investment banking, private equity, and digital transformation, he advises iComply on strategic growth, partnerships, and global market expansion.
Jeff Bandman

Jeff Bandman

Advisors

Jeff is a former CFTC official and globally recognized expert in financial regulation, fintech, and digital assets. As founder of Bandman Advisors, he brings deep insight into regulatory policy, market infrastructure, and innovation to guide iComply’s global compliance strategy.
Greg Pearlman

Greg Pearlman

Advisors

Greg is a seasoned investment banker with over 35 years of experience, including leadership roles at BMO Capital Markets, Morgan Stanley, and Citigroup. Greg brings deep expertise in financial strategy and growth to support iComply's expansion in the RegTech sector.
Deven Sharma

Deven Sharma

Advisors

Deven is the former President of S&P and a globally respected authority in risk, data, and capital markets. With decades of leadership across financial services and tech, he advises iComply on strategic growth, governance, and the future of trusted data in AML compliance.