CDD is how banks verify who you really are and where your money comes from
CDD stands for Customer Due Diligence. It is the process a bank uses to confirm your identity, understand the nature of your relationship with the bank, and assess the risk you might pose. Banks are required by federal law to perform CDD on all customers, and they do this before opening an account or sometimes during the account relationship.
CDD is not the same as a background check or a credit report. It is a specific set of steps designed to prevent money laundering, terrorist financing, and fraud. When you open a bank account, the bank collects information about you — your name, address, date of birth, and sometimes your employment or source of funds — and verifies that information against government databases and their own records.
The reason banks do this is legal requirement, not choice. The Bank Secrecy Act and the USA PATRIOT Act require all financial institutions to know their customers and report suspicious activity. CDD is the foundation of that obligation.
Key Takeaways
- CDD requires banks to verify your identity and understand the source of your funds before or shortly after opening an account.
- Banks collect your name, address, date of birth, and sometimes employment information as part of standard CDD.
- CDD is a federal requirement, not optional, and applies to all banks and most financial institutions.
- If a bank cannot complete CDD on you, they may refuse to open an account or close an existing one.
- CDD is different from Enhanced Due Diligence (EDD), which applies to higher-risk customers or transactions.
What information banks collect during CDD
When you open an account, the bank will ask for your full legal name, date of birth, address, and a government-issued ID number — usually your Social Security number. This is the baseline. The bank then verifies this information against the Social Security Administration database and other government records to confirm you are who you say you are.
For business accounts, the bank collects similar information about the business owner or authorized representative, plus the business's tax ID number, articles of incorporation or formation, and sometimes information about the business's purpose and expected transaction volume.
Some banks also ask about your employment, occupation, or the source of funds you plan to deposit. This is part of understanding the nature of your account and whether the account activity matches what you told the bank to expect. If you said you are a retired teacher but then deposit $50,000 in cash weekly, the bank may ask follow-up questions.
How CDD differs from Enhanced Due Diligence
Enhanced Due Diligence (EDD) is a deeper level of investigation that banks perform on certain customers or transactions. While CDD is standard for everyone, EDD applies only when the bank identifies higher risk — for example, a customer from a country with weak anti-money-laundering controls, a business that handles large amounts of cash, or an account with unusual transaction patterns.
EDD requires the bank to gather more detailed information about the customer's business, beneficial owners, source of wealth, and the purpose of large transactions. It takes longer and may involve phone calls or in-person meetings. You might trigger EDD without doing anything wrong — it depends on your profile and the bank's risk assessment.
What happens if you do not pass CDD
If the bank cannot verify your identity or if the information you provide does not match government records, they may ask you to provide additional documents — a passport, utility bill, or letter from an employer. Most of the time, providing the right document resolves the issue and your account opens normally.
In rare cases, a bank may refuse to open an account if they cannot complete CDD. This can happen if you do not have a government-issued ID, if your address cannot be verified, or if your information triggers a match with a government watchlist. If this happens, the bank must tell you they are declining to open the account, though they do not have to explain their specific reason.
Banks can also close an existing account if they later discover that CDD information was false or if account activity becomes suspicious and they cannot resolve it through EDD. This is less common but does happen, particularly with business accounts.
CDD and international customers
If you are opening an account as a non-U.S. citizen or non-resident, CDD becomes more complex. The bank will verify your identity using your passport or national ID card instead of a Social Security number. They may also require proof of your address in your home country and may ask more detailed questions about the source of your funds.
Some banks have stricter policies for customers from certain countries or with certain visa statuses. This is not discrimination — it is part of CDD risk assessment. If a country is on the U.S. Treasury Department's list of high-risk jurisdictions, banks apply extra scrutiny to customers from that country.
How long CDD takes
Standard CDD usually takes a few minutes to a few hours. The bank verifies your information against databases in real time or within the same business day. Most accounts open immediately after CDD is complete.
If the bank needs additional documents or if your information does not match immediately, the process can take several business days. The bank will contact you and tell you what documents they need. Once you provide them, verification usually happens within 24 to 48 hours.
EDD can take much longer — sometimes one to two weeks — because it involves manual review and may require the bank to contact you for more information.
Why CDD matters to you
CDD protects you and the banking system. By verifying that you are who you say you are, banks prevent identity theft and fraud. By understanding where your money comes from, they can spot suspicious activity that might indicate you are a victim of fraud or that your account is being used for illegal purposes.
CDD also protects the bank from regulatory penalties. If a bank fails to perform adequate CDD, federal regulators can fine them millions of dollars or revoke their charter. This means banks take CDD seriously and will ask you questions that might feel intrusive — they are required to.
Understanding CDD also helps you prepare when opening an account. Bring your government-issued ID, know your address, and be ready to explain the source of large deposits. If you have an unusual financial situation — you receive money from overseas, you run a cash-heavy business, or you have recently moved — mention it upfront. This makes CDD faster and smoother.
Frequently Asked Questions
Can a bank refuse to open an account because of CDD?
Yes. If a bank cannot verify your identity or if your information matches a government watchlist, they can decline to open an account. They must tell you they are declining but do not have to explain why. If this happens, you can try another bank or contact the bank's compliance department to ask what information caused the issue.
Is CDD the same as a credit check?
No. CDD verifies your identity and checks for fraud or money-laundering risk. A credit check looks at your payment history and debt. Banks may do both, but they are separate processes. CDD does not affect your credit score.
What if I do not have a Social Security number?
You can still open a bank account using an Individual Taxpayer Identification Number (ITIN) or a passport. The bank will use whatever government ID you have to complete CDD. Some banks have specific processes for non-citizens, so call ahead to ask what documents you need.
Can CDD information be shared with other banks?
Banks share CDD information only when required by law or court order. They do not sell it or share it for marketing. However, if you apply for a loan or credit card, the lender may ask your bank for information as part of their own due diligence.
What should I do if the bank says my CDD failed?
Ask the bank what information did not match and what documents they need to resolve it. Provide the documents they request — usually a utility bill, lease, or employment letter. If the issue is a name mismatch or address change, bring proof of the change. Most CDD failures are resolved within a few days.