CIP is how banks verify you are who you say you are
CIP stands for Customer Identification Program. It is a set of rules that banks and other financial institutions must follow to confirm your identity before opening an account or processing certain transactions. The bank collects information about you—your name, address, date of birth, and identification number—and checks it against government records and watchlists to make sure you are a real person and not someone using a false identity.
CIP is required by federal law under the Bank Secrecy Act. Banks do not have a choice about whether to do it; they must complete CIP for every new customer. The process protects both you and the bank. It prevents criminals from opening accounts under fake names, stops money laundering, and keeps terrorist financing networks from using the banking system.
When you open a checking account, savings account, or credit card, you are going through CIP. Most of the time you will not notice it happening because the bank does it in the background while you fill out the process. But if something does not match up—if your address does not verify or your ID looks questionable—the bank will ask you for more information or may decline to open the account.
Key Takeaways
- CIP is a federal requirement that banks use to confirm your identity and prevent fraud, using your name, address, date of birth, and government ID.
- The process happens automatically for most new accounts and usually takes only a few minutes, though the bank may ask follow-up questions if information does not verify.
- Banks check your information against government databases and watchlists to may support you are not using a false identity or on a sanctions list.
- If you are opening an account in person, you will need to bring a government-issued ID; if you are opening one online, the bank will verify your information electronically.
What information banks collect during CIP
When you start the CIP process, the bank will ask for your full legal name, date of birth, address, and a government-issued identification number. In the United States, this is usually your Social Security number, but it can also be an Individual Taxpayer Identification Number (ITIN) if you do not have a Social Security number. The bank needs all four pieces of information to complete the identification check.
The address you provide must be a residential address where you actually receive mail. A post office box does not count. If you recently moved, use your current address, not your old one. The bank will verify this address against utility bills, lease agreements, or other documents that show you live there.
If you are opening an account in person at a branch, you will hand the bank a physical ID—a driver's license, passport, state ID card, or military ID. The bank employee will look at it to make sure the photo matches your face and the name matches what you wrote on the process. If you are opening an account online, the bank will verify your information electronically without seeing a physical ID, though some banks may ask you to upload a photo of your ID or answer security questions to confirm your identity.
How banks verify your information
Once the bank has your information, it runs it through verification systems. The most common tool is a database check against Social Security Administration records. The bank sends your name, date of birth, and Social Security number to a third-party verification service, which checks whether that combination of information matches government records. If it does, the verification passes and you move forward.
Banks also check your information against the Office of Foreign Assets Control (OFAC) list, which is a government watchlist of individuals and entities involved in terrorism, money laundering, or sanctions violations. If your name matches someone on the OFAC list, the bank will flag your process and may ask you to provide additional documentation to prove you are not that person. This happens more often than you might think if you have a common name.
Some banks use additional verification methods, such as checking your credit report or asking you to answer security questions based on your financial history. These extra steps are not required by law but help the bank reduce fraud risk. If you have recently moved, changed your name, or have a thin credit history, the verification process may take longer because the bank has fewer records to cross-check.
What happens if CIP verification fails
If the bank cannot verify your information, it will contact you and ask for additional documentation. This is the most common outcome when something does not match up. For example, if you recently moved and your address does not yet appear in government databases, the bank may ask you to send a copy of a utility bill or lease agreement to prove you live where you said you do. If your name is flagged on the OFAC list, the bank will ask you to provide a government ID and may ask you to explain why your name matches someone on the watchlist.
In some cases, the bank may decline to open your account if it cannot verify your identity after you provide additional information. This is rare, but it can happen if the bank believes the risk is too high or if you cannot provide the documents it needs. If this happens, the bank must tell you why it declined your process, though it may not give you all the details if the reason involves a government watchlist.
If your account is declined, you can try opening an account at a different bank. Different banks use different verification services and may have different risk tolerances, so one bank's decline does not mean all banks will decline you. You can also contact the bank that declined you and ask what specific information did not verify, then work to resolve that issue before trying again.
CIP for business accounts and wire transfers
CIP rules explore to business accounts as well as personal accounts. When you open a business checking account, the bank will verify the business's legal name, address, and tax identification number (EIN), and it will also verify the identity of the owner or authorized representative. If the business is a corporation, partnership, or LLC, the bank may ask to see formation documents like articles of incorporation or an operating agreement.
CIP also applies to certain wire transfers and other transactions, not just account opening. If you are sending a large wire transfer or receiving money from outside the United States, the bank may run additional identity checks on both you and the person sending or receiving the money. These checks are part of the bank's obligation to prevent money laundering and terrorist financing.
How long CIP takes
In most cases, CIP verification happens when ready or within a few minutes. If you are opening an account online, the bank's system will verify your information in real time, and you will know right away whether you passed the check. If you are opening an account in person, the verification happens while you are at the branch, and the account is usually opened the same day.
If the bank needs additional information from you, the process can take longer. You may have a few days to a week to send in documents like a utility bill or lease agreement. Once you send the documents, the bank will review them and contact you if it needs anything else. Most banks will complete the verification within 5 to 10 business days of receiving your additional documents.
In rare cases where your name matches someone on a government watchlist, the verification can take several weeks while the bank works with government agencies to confirm you are not that person. During this time, your account may be frozen or you may not be able to use certain features. The bank will keep you updated on the status.
Your rights during CIP
You have the right to know why the bank declined your account or why it is asking for additional information. The bank must provide this information in writing if you request it, though it may not disclose all details if the reason involves a government watchlist or law enforcement investigation.
You also have the right to dispute information that the bank used to verify your identity. If you believe the bank made an error—for example, if it checked your information against the wrong Social Security number—you can contact the bank and ask it to re-verify your information. You can also contact the third-party verification service directly and ask them to correct any errors in their records.
If you believe the bank violated CIP rules or treated you unfairly during the verification process, you can file a complaint with the Consumer Financial Protection Bureau (CFPB) or your state's banking regulator. These agencies investigate complaints and can take action against banks that do not follow the law.
Frequently Asked Questions
Do I have to provide my Social Security number to open a bank account?
Yes. Your Social Security number is one of the four pieces of information banks must collect for CIP. If you do not have a Social Security number, you can provide an Individual Taxpayer Identification Number (ITIN) instead. Without one of these numbers, the bank cannot complete the identification check and cannot open your account.
What if my name is similar to someone on the OFAC watchlist?
The bank will flag your process and ask you to provide additional documentation to prove you are not the person on the list. This usually means sending a copy of your government ID and sometimes a letter explaining your situation. The process can take a few weeks, but once you provide the documentation, the bank will clear you and open your account.
Can I open a bank account without a government ID?
If you are opening an account in person, most banks require a government-issued ID. If you are opening an account online, the bank may not require a physical ID but will verify your information electronically using your name, date of birth, Social Security number, and address. Some banks that serve immigrants or people without traditional IDs may accept alternative forms of identification.
What happens to my information after CIP is complete?
The bank keeps your information on file for as long as your account is open and for a period after you close it (usually five to seven years). The bank uses this information to verify your identity for future transactions and to comply with government reporting requirements. Your information is protected by federal privacy laws and the bank's security policies.
Can I use a PO box for my address during CIP?
No. Banks require a residential address where you actually receive mail. A PO box does not count because the bank cannot verify that you live there. If you do not have a permanent residential address, some banks may accept a shelter address or a trusted contact's address, but you will need to explain your situation to the bank.