In the modern digital economy, financial institutions are legally required to verify the identities of the individuals and organizations they serve. This requirement is part of national efforts to combat money laundering, fraud, and the financing of terrorism. To carry out these responsibilities, banks and other financial service providers follow two main regulatory frameworks: Know Your Customer (KYC) and the Customer Identification Program (CIP). In June 2025, the OCC, FDIC, and NCUA, with concurrence from FinCEN, issued an official order granting an exemption under the Customer Identification Program (CIP) rule related to Taxpayer Identification Number (TIN) collection. Under this exemption, financial institutions are allowed to obtain a customer’s TIN from approved third-party sources, rather than collecting it directly from the customer. This exemption is optional and applies only to TIN collection. Financial institutions must still follow all other CIP requirements, including verifying the customer’s identity through other required information such as name, date of birth, and address. In granting the exemption, the agencies emphasized that it does not reduce the obligation to maintain strong risk-based CIP procedures. Banks and credit unions that adopt this exemption are expected to ensure that any third-party sources used for TIN collection are reliable and that their overall identity verification process remains effective and compliant with regulatory expectations. The agencies stated that the exemption provides flexibility in customer onboarding, particularly for institutions that already rely on digital identity tools and other advanced verification methods. However, they cautioned that this exemption is not intended to replace due diligence or eliminate the need for careful risk assessment in customer identification procedures. Many credit card issuers and digital lenders have long used third-party sources to verify TINs after collecting them from applicants. However, this new exemption allows banks and credit unions to obtain the TIN entirely through third-party sources, eliminating the need to collect it directly from the customer during account opening, if they choose to adopt the exemption. What Is Know Your Customer (KYC)? Know Your Customer (KYC) is a process used by financial institutions to confirm the identities of their clients. It also helps institutions understand their customers’ financial behavior and identify potential risks. Various types of companies are required to follow KYC rules, including banks, credit unions, investment firms, insurance companies, cryptocurrency exchanges, and financial technology (fintech) companies. The KYC process generally includes several key components. The Customer Identification Program (CIP) involves collecting basic personal information such as name, date of birth, address, and government-issued identification. Customer Due Diligence (CDD) is used to evaluate risk based on a customer’s background and financial activity. For individuals who may present a higher level of risk, such as public officials or people located in high-risk countries, institutions apply Enhanced Due Diligence (EDD). Additionally, KYC involves ongoing monitoring, which entails regularly reviewing account activity and updating customer records over time. What Is the Customer Identification Program (CIP)? The Customer Identification Program (CIP) was established following the terrorist attacks on September 11, 2001, as part of the USA PATRIOT Act. It became a legal requirement in 2003 and is designed to identify individuals who open accounts at financial institutions. Under the CIP rule, institutions must collect and verify several pieces of information: the customer's name, date of birth (for individuals), residential or business address, and a Taxpayer Identification Number, such as a Social Security Number or Employer Identification Number. Financial institutions are required to verify this information using either documentary methods, such as a government-issued ID, or non-documentary methods, such as credit reports or government databases. Customers must also be informed that their identity will be verified, typically through a disclosure provided at the time the account is opened. CIP applies to all new customers who open accounts, including checking, savings, credit, and investment accounts. In most cases, it does not apply to existing customers unless they open a new type of account. What Is the New CIP TIN Exemption? The new exemption permits banks and other supervised institutions to utilize third-party sources to collect TINs, rather than requiring customers to provide the numbers themselves. The exemption was developed in response to feedback collected through a Request for Information (RFI) issued by FinCEN and the other agencies in early 2024. It is important to note that this exemption is not a requirement. Institutions can continue to collect TINs directly from customers if they prefer to do so. If they choose to use the exemption, they must have strong risk-based procedures in place to ensure they still know their customers’ identities. Why Is This Change Important? Digital tools can be utilized to streamline identity verification and minimize the need for direct customer interaction. The use of third-party data sources has been proposed as a way to simplify the onboarding process, particularly for digital-only financial institutions. However, institutions must ensure that their procedures are secure and comply with the rules. Challenges and Risks The exemption introduces alternative practices that may present both operational benefits and implementation challenges. For example, using third-party sources to collect identity information could increase the risk of fraud if the data is inaccurate or the provider is unreliable. As a result, financial institutions must carefully assess the third-party service providers they rely on for identity verification. Smaller banks and credit unions may need to review their existing infrastructure to determine whether adopting the exemption would require system upgrades or new relationships with data vendors. Each organization can evaluate the potential benefits, costs, and risks to decide whether the exemption is appropriate for their compliance and operational needs. To manage these considerations, institutions can use a risk-based approach. This involves analyzing the types of accounts they offer, the customer profiles they serve, and their internal capacity for ongoing monitoring. For higher-risk customers, more detailed verification procedures may still be necessary. What Happens When Institutions Do Not Comply? There are serious consequences for financial institutions that fail to follow KYC and CIP rules. A well-known example is the cryptocurrency exchange BitMEX. The company was fined one hundred million dollars for not having a proper KYC program. Its founders also faced criminal charges. Prosecutors said that BitMEX allowed anonymous trading, which created a platform for money laundering. Other financial institutions, including Capital One, Bank of America, and Standard Chartered, have also faced fines for violations. These cases highlight the importance of having strong identity verification processes in place. Failure to comply with these rules can lead to financial penalties, legal action, and reputational damage. The Role of Technology in Modern Compliance The increasing use of digital services in the financial industry has led to updates in many compliance systems. To meet their Know Your Customer (KYC) and Customer Identification Program (CIP) obligations, many institutions now rely on advanced technologies. These technologies include digital identity verification tools, biometric scans such as facial recognition, automated document review, artificial intelligence to assess customer risk, and secure integration with government databases and sanctions lists. Financial institutions use these tools to support their identity verification processes. They help detect potential indicators of fraud, including invalid documents or unusual patterns of customer activity. Conclusion Know Your Customer (KYC) and the Customer Identification Program (CIP) are regulatory frameworks designed to help financial institutions verify customer identities and comply with anti-money laundering laws. The recent exemption, which allows third-party collection of Taxpayer Identification Numbers, permits financial institutions to adopt alternative verification methods while remaining subject to existing compliance standards. Although the use of the exemption is optional, institutions remain responsible for the accuracy and reliability of their identity verification processes. Risk-based strategies and digital tools can support compliance efforts while enhancing operational efficiency. Disputes involving CIP compliance, KYC procedures, and customer identification practices can lead to litigation or regulatory action. Jason D. Koontz serves as an expert witness in such matters, assisting attorneys with banking compliance, lending disputes, and deposit account cases. He has testified on these very issues, including a case where his expert work contributed to a $12,000,000 defense verdict for one of the largest banks in the country. *This blog post was developed with significant assistance from Julie K. Miller, Research Assistant at JD Koontz, LLC. Most people think foreclosure happens only when a borrower stops making their mortgage payments. However, in some cases, homeowners who pay on time still fall into default due to something unexpected: errors in their escrow account.
Escrow accounts are designed to protect both the borrower and the lender. They set aside funds to pay property taxes, insurance premiums, and sometimes other costs. When managed properly, escrow accounts help keep a mortgage in good standing. But when mistakes are made, by the loan servicer or due to system errors, borrowers can face unexpected charges, payment increases, and even foreclosure notices. This issue can go unnoticed until it causes real harm. Borrowers, attorneys, and mortgage experts should all understand how these accounts work and how they can cause problems. What Is an Escrow Account? An escrow account is a separate fund maintained by the mortgage servicer. Each month, the borrower typically sends one combined payment that includes:
To manage this process, servicers are required to perform an annual escrow analysis, estimating future costs and adjusting the borrower’s monthly payment if needed. Common Escrow Errors Servicers handle thousands of escrow accounts, and while many are managed properly, errors can occur and create issues for the borrower. Some of the most common issues include:
The Legal and Financial Impact Even if a borrower never misses a mortgage payment, a misapplication of the payment can cause errors then causing the loan to appear delinquent. This may lead to late fees, credit reporting issues, or even foreclosure. In some cases, homeowners do not realize there is a problem until they receive a notice of default—, or a much higher monthly bill. Federal regulations such as the Real Estate Settlement Procedures Act (RESPA) require servicers to follow specific rules when managing escrow accounts. These include providing annual statements, disclosing shortages or surpluses, and responding to written borrower inquiries within set timelines. When these rules are not followed, borrowers may have grounds to dispute charges, correct errors, or take legal action. The Role of Expert Witnesses In legal disputes involving escrow errors, expert witnesses can play a vital role. Mortgage servicing experts can help explain:
What Borrowers Can Do Escrow problems are often difficult to identify until they become serious. Borrowers can protect themselves by taking the following steps:
Final Thoughts Escrow accounts are often treated as automatic or “set-and-forget” systems, but they require close attention. Errors in these accounts can lead to missed payments, increased bills, and even foreclosure. For borrowers, staying alert to unexpected changes or unexplained charges is the first line of defense. Reviewing escrow history and documentation may reveal the source of a servicing dispute. If the issue escalates to litigation, a mortgage loan servicing expert may be engaged to bring clarity to the matter. In the world of mortgage lending, the numbers matter— and so does how they are handled. Contact Jason D. Koontz today to schedule your consultation. This blog post was developed with significant assistance from Julie K. Miller, Research Assistant at JD Koontz, LLC. |
Jason D KoontzJason Koontz is a former bank Senior VP. He now serves as an expert witness in banking & real estate matters across the United States.. Archives
January 2026
Categories |