31 CFR §1020.220 — Customer identification program requirements for banks

bsa-31cfr-1020-220

BSA Customer Identification Program (CIP) rule for banks under 31 CFR §1020.220.

Get this register: .xlsx .csv More bundles →

source:
  type: regulation
  id: bsa-31cfr-1020.220
  authority: 31 CFR §1020.220 — Customer identification program requirements for banks
  description: |
    BSA Customer Identification Program (CIP) rule for banks under 31 CFR
    §1020.220.
obligations:
  - id: bsa-31cfr-1020.220-a1-written-cip
    canonical_id: bsa-31cfr-1020.220-a1-written-cip
    section: 31 CFR §1020.220(a)(1) — Written Customer Identification Program
    description: |
      [LENDER] (as a bank required to have an anti-money laundering compliance
      program under regulations implementing 31 U.S.C. 5318(h), 12 U.S.C.
      1818(s), or 12 U.S.C. 1786(q)(1)) shall implement a written Customer
      Identification Program (CIP) appropriate for [LENDER]'s size and type of
      business that, at a minimum, includes each of the requirements of
      §1020.220(a)(1) through (5). The CIP shall be a part of [LENDER]'s
      anti-money laundering compliance program.
    type: do
    audit_question: Can [LENDER] produce a written Customer Identification Program (CIP) that (a) is appropriate for [LENDER]'s size and type of business, (b) includes at a minimum each of the requirements of §1020.220(a)(1)-(5) (identity verification procedures, recordkeeping, comparison with government lists, customer notice, and optional reliance), and (c) is incorporated as part of [LENDER]'s AML compliance program?
    program_review: Does the program maintain a written CIP appropriate to [LENDER]'s size and type of business that includes each §1020.220(a)(1)-(5) element (identity-verification procedures, recordkeeping, government-list comparison, customer notice, optional reliance) and is incorporated into the AML program?
    file_review: Read the written CIP against the (a)(1)-(5) elements and confirm it is embedded in the AML program (primarily a program-level document review).
    judgment: false
    feeds: []
    workflow_phase: customer_onboarding
    owner_role: bsa_aml_officer
    secondary_owner_role: compliance_officer
    cadence: continuous
    consequence: ''
    tags:
      - round-b
      - regulator-direct
      - bsa
      - aml
      - cip
      - customer-identification
      - 31cfr-1020
      - promoted
    primary_source:
      tier: 1
      authority: 31 CFR §1020.220(a)(1)
      source_class: fincen
      source_url: https://www.law.cornell.edu/cfr/text/31/1020.220
      snapshot_id: da1ebfb053de3664
      fetched_at: '2026-05-22T11:34:24Z'
      content_hash: sha256:c107eef9127a1fbfee55e8407281f81ec781677acc70f38de3b89f4d5825e1bb
      paragraph_quote: A bank required to have an anti-money laundering compliance program under the regulations implementing 31 U.S.C. 5318(h) , 12 U.S.C. 1818(s) , or 12 U.S.C. 1786(q)(1) must implement a written Customer Identification Program (CIP) appropriate for the bank's size and type of business that, at a minimum, includes each of the requirements of paragraphs (a)(1) through (5) of this section. The CIP must be a part of the anti-money laundering compliance program.
      drafter_attestation: |
        Copied verbatim from snapshot da1ebfb053de3664 (content.txt) at
        2026-05-22T11:51Z. Substring corresponds to §1020.220(a)(1) operative
        "In general" written-CIP requirement. Cornell LII whitespace around
        §-marks (" § 1818(s) , ") preserved verbatim.
    promoted_at: '2026-05-22T11:52:12+00:00'
    promoted_from: bsa-31cfr-1020.220-roundb-v1.yaml
_promotion_history:
  - promoted_at: '2026-05-22T11:52:12+00:00'
    candidate_path: obligations\_remediation\_round_b_drafts\bsa-31cfr-1020.220-roundb-v1.yaml
    candidates_promoted: 1
    candidates_skipped_existing: 0

Verbatim regulatory text (1)

Verbatim provisions from 31 CFR §1020.220 — Customer identification program requirements for banks — each quote is a verified substring of the regulator-published source snapshot, not retyped. Quoted for reference; this is not legal advice. The operational layer (P&P updates, prompts) lives in the regulation update kits.

31 CFR §1020.220(a)(1) — Written Customer Identification Program

A bank required to have an anti-money laundering compliance program under the regulations implementing 31 U.S.C. 5318(h) , 12 U.S.C. 1818(s) , or 12 U.S.C. 1786(q)(1) must implement a written Customer Identification Program (CIP) appropriate for the bank's size and type of business that, at a minimum, includes each of the requirements of paragraphs (a)(1) through (5) of this section. The CIP must be a part of the anti-money laundering compliance program.

Source: 31 CFR §1020.220(a)(1) · source URL · snapshot da1ebfb053de3664