CIP stands for Customer Identification Program
CIP is a federal requirement that banks and other financial institutions must follow when you open an account or conduct certain transactions. It is not a product or service you buy — it is a verification process that your bank runs on you to confirm you are who you say you are.
The rule comes from the Bank Secrecy Act, a law passed in 1970 and updated after 2001. Banks must collect your name, address, date of birth, and identification number (usually your Social Security number or tax ID). They then cross-check this information against government databases and watchlists to make sure you are not on a list of known criminals, terrorists, or people subject to sanctions.
This happens behind the scenes. You will not see a separate "CIP" form or process — your bank simply asks for the standard information when you sign up, and the verification happens automatically. If something does not match, your bank will contact you to clarify or may decline to open the account.
Key Takeaways
- CIP is a mandatory federal verification process that banks must run on all new account holders to confirm identity and check against government watchlists.
- You provide your name, address, date of birth, and Social Security number or tax ID, which the bank verifies against government records.
- The process is automatic and happens during account opening — you will not see a separate CIP form or step.
- If your information does not match government records, your bank will contact you to resolve the discrepancy before opening your account.
- CIP applies to personal bank accounts, business accounts, and certain other financial products, but the basic information collected is the same.
Why banks are required to run CIP checks
The Bank Secrecy Act requires CIP to prevent money laundering, terrorist financing, and fraud. By confirming your identity upfront, banks create a record of who owns each account. This makes it harder for criminals to hide money or move it through the financial system without detection.
The Office of the Comptroller of the Currency (OCC), the Federal Reserve, and the Financial Crimes Enforcement Network (FinCEN) all oversee CIP compliance. Banks that fail to run proper CIP checks face fines, enforcement actions, and damage to their reputation. Because of this, banks take CIP seriously and will not open an account if they cannot verify your identity.
What information banks collect during CIP
At minimum, your bank will ask for:
- Your full legal name
- Your street address (not a PO box)
- Your date of birth
- Your Social Security number (for U.S. citizens and residents) or Individual Taxpayer Identification Number (ITIN)
For business accounts, the bank will also ask for the business name, business address, and the names and identification numbers of the owners or authorized signers. If you are opening an account on behalf of a trust or other legal entity, the bank may ask for additional documentation.
The bank uses this information to search government databases, including the Social Security Administration, the Treasury Department's Office of Foreign Assets Control (OFAC) watchlist, and law enforcement records. If your name matches someone on a watchlist or if your information cannot be verified, the bank will contact you to resolve the issue.
How long CIP verification takes
In most cases, CIP verification happens instantly or within a few minutes. Your bank's system checks your information against government databases in real time, and if everything matches, your account opens the same day.
If there is a mismatch or a potential match to a watchlist name, the bank may place a hold on your account and contact you by phone or email. This can add a few days to the process. You may be asked to provide additional documentation, such as a copy of your driver's license or passport, to confirm your identity.
In rare cases — such as if your name is very similar to someone on a sanctions list — the bank may need to contact FinCEN or OFAC for guidance. This can take one to two weeks. During this time, your account may remain frozen, and you will not be able to use it.
What happens if CIP verification fails
If the bank cannot verify your identity or if your information matches a watchlist, the bank has the right to refuse to open your account. The bank does not have to explain why, though it will usually contact you first to give you a chance to clarify or provide additional documents.
If you believe the bank made a mistake — for example, if your name is similar to someone on a sanctions list — you can ask the bank to escalate the issue or contact FinCEN directly to request a name delisting. This process can take several weeks.
If you are denied an account at one bank, you can try another. Different banks use different verification systems and databases, so a second bank may be able to open an account for you. However, if the issue is a genuine match to a government watchlist, you will likely be denied everywhere until the watchlist issue is resolved.
CIP for different types of accounts
CIP applies to checking accounts, savings accounts, money market accounts, and most other deposit products. It also applies to credit cards, investment accounts, and certain loan products. The basic information collected is the same across all account types.
For business accounts, the bank may ask for additional information, such as an Employer Identification Number (EIN), articles of incorporation, or a list of owners. For accounts opened on behalf of a minor, the bank will collect information on both the child and the parent or guardian.
If you are opening an account as a representative of a trust, estate, or nonprofit, the bank will ask for documentation proving your authority to act on behalf of that entity. This is part of CIP and helps the bank confirm that the account is being opened for a legitimate purpose.
How CIP differs from other bank verification processes
CIP is just one part of a bank's anti-money-laundering program. After your account is open, your bank also runs Continuous Monitoring — an ongoing check of your account activity to spot suspicious transactions. If you make an unusually large deposit or send money to a high-risk country, your bank may flag the transaction and file a Suspicious Activity Report (SAR) with FinCEN.
Banks also use Know Your Customer (KYC) procedures, which are similar to CIP but may include additional steps, such as asking about the source of your funds or the purpose of your account. KYC is often used for business accounts or accounts with high transaction volumes.
CIP is the initial identity check. KYC and Continuous Monitoring are what happens after your account is open. All three are required by federal law.
Frequently Asked Questions
Can I open a bank account without providing my Social Security number?
If you are a U.S. citizen or permanent resident, no — your bank will require your Social Security number to complete CIP. If you do not have a Social Security number, you can use an ITIN, which is issued by the IRS to non-citizens who need a tax ID. Some banks will open accounts for non-residents using a passport number instead, but this varies by bank.
What if my name is on a government watchlist by mistake?
Contact FinCEN's Office of Sanctions Compliance to request a name delisting. You can also ask your bank to submit a delisting request on your behalf. Provide documentation proving your identity and explaining why you believe you were added to the list by mistake. The process typically takes two to four weeks.
Do I have to provide CIP information every time I open a new account?
Yes. Each account is separate, and your bank must run CIP for each one. However, if you already have an account at the same bank, the process may be faster because the bank already has your verified information on file.
Can I use a PO box for my address during CIP?
No. Banks require a physical street address for CIP. A PO box is not acceptable. If you do not have a permanent address, some banks will accept a shelter address or a relative's address, but you will need to provide documentation showing that you have a legitimate connection to that location.
What if I moved and my address on file is outdated?
Update your address with your bank as soon as possible. Your bank may flag the mismatch during routine monitoring and contact you. If you do not respond, the bank may freeze your account or close it. You can update your address online, by phone, or in person at a branch.