KYC Questionnaire

KYC Questionnaire Builder Due diligence forms with the legal basis built in

Pick the customer type, the risk level and the rules you follow. Get a ready questionnaire with the source of every question. Edit it, then download it as PDF or Word. Or start from one of 37 ready-made templates.

108questions in the library
8customer types
4rulebooks: FATF, EU, UK, US
Private company · Standard due diligence

Customer due diligence questionnaire

54 of 54 questions included

Your editsNo changes yet
10 of 10 core requirements of EU AMLR covered
  • Identify and verify the customer Art 20(1)(a), 22
  • Verify identity from a document or eID Art 22(6)
  • Identify the beneficial owners Art 20(1)(b), 62
  • Purpose and intended nature Art 20(1)(c), 25
  • Targeted financial sanctions Art 20(1)(d)
  • Nature of the customer's business Art 20(1)(e)
  • Ongoing monitoring Art 20(1)(f), 26
  • Politically exposed persons Art 20(1)(g), 42
  • On behalf of someone else Art 20(1)(h)
  • Authority of the person acting Art 20(1)(i)
AMLR applies from 10 July 2027. Until then, the national laws that implement the EU directives apply. The data set in Article 22 is a good target to build towards now.

Organisation details

13 / 13
1
Registered legal name *
The name on the official register.
TextEU AMLR · Art 22(1)(b)(i)
2
Trading names or brands
Screen every name the organisation trades under.
TextGood practice
3
Legal form *
The legal form decides who counts as a beneficial owner and which documents prove existence.
Single choiceEU AMLR · Art 22(1)(b)(i)
4
Registration number and name of the register *
Lets you check the organisation in the official register.
TextEU AMLR · Art 22(1)(b)(iii)
5
Country of incorporation or registration *
Country of creation, used for country risk.
CountryEU AMLR · Art 22(1)(b)(ii)
6
Year of incorporation
Newly formed companies are a common risk indicator.
NumberGood practice
7
Registered office address *
The official address on the register.
Long textEU AMLR · Art 22(1)(b)(ii)
8
Principal place of business, if different
Where the business is really run. A registered office with no operations is a red flag.
Long textEU AMLR · Art 22(1)(b)(ii)
9
Legal Entity Identifier (LEI), if you have one
A global identifier that links to the parent company.
TextEU AMLR · Art 22(1)(b)(iii)
10
Website
Helps confirm the business is real and what it does.
TextGood practice
11
Countries where you operate
Country exposure is one of the main risk factors.
TextGood practice
12
Contact email *
Contact for updates and periodic reviews.
EmailGood practice
13
Contact phone
Contact for updates and periodic reviews.
PhoneGood practice

Management and authority

6 / 6
14
Directors, partners or board members: full names *
The legal representatives of the organisation. Screen them too.
Long textEU AMLR · Art 22(1)(b)(iii)
15
Senior managing official (CEO, managing director or equivalent) *
The person who runs the organisation day to day.
TextGood practice
16
Person completing this form for the customer: full name, role and date of birth *
Anyone acting for the customer must be identified, verified and shown to be authorised.
Long textEU AMLR · Art 20(1)(i)
17
Proof of authority (power of attorney or board resolution), if acting for someone else
Shows the person is authorised to act.
File uploadEU AMLR · Art 20(1)(i)
18
Are any shares or directorships held by a nominee? *
Nominees can hide who really controls the company. The EU rulebook asks for their names.
Single choiceEU AMLR · Art 22(1)(b)(iv)
19
Constitutional documents (articles of association or partnership agreement) *
Shows the powers that regulate and bind the organisation.
File uploadGood practice

Beneficial owners

4 / 4
20
Does any person own or control 25% or more of the organisation, directly or through other companies? *
25% is the threshold in the EU, the UK and the US. Indirect holdings count: multiply the percentages along each chain.
Single choiceEU AMLR · Art 51, 52
21
For each beneficial owner: full name, date and place of birth, nationality, residential address, percentage held and whether held directly or indirectly *
The data set the EU rulebook asks for, plus the size and nature of the interest.
Long textEU AMLR · Art 62(1)(a), (b)
22
People who control the organisation by other means (voting rights, right to appoint directors, agreements), or if no one meets the threshold, the senior managing official *
Control without shares also makes someone a beneficial owner. In the US one control person is always required.
Long textEU AMLR · Art 51, 52
23
Identity documents of the beneficial owners
Reasonable measures to verify who the owners are.
File uploadEU AMLR · Art 22(7)

Occupation and business

4 / 4
24
Describe the main business activities *
You cannot spot unusual activity without knowing what normal looks like.
Long textEU AMLR · Art 20(1)(e), 25(e)
25
Industry *
The industry is one of the main customer risk factors.
Single choiceGood practice
26
Number of employees and annual turnover
Shows whether expected volumes make sense for the size of the business.
TextGood practice
27
Is the business licensed or regulated? If yes, by whom, with licence number
Regulated businesses run their own controls.
TextGood practice

Purpose and expected activity

6 / 6
28
Why do you want to open this relationship, and what will you use it for? *
Purpose and economic rationale. The baseline for spotting activity that does not fit.
Long textEU AMLR · Art 20(1)(c), 25(a)
29
Which products or services will you use? *
Some products carry more risk than others.
Multiple choiceEU AMLR · Art 25(a)
30
Expected value of transactions per month (EUR or equivalent) *
The estimated amount of activity, compared later with what really happens.
Single choiceEU AMLR · Art 25(b)
31
Expected number of transactions per month
The estimated amount of activity.
Single choiceEU AMLR · Art 25(b)
32
Main countries you will send money to or receive it from *
Destination of funds and country exposure.
Long textEU AMLR · Art 25(d)
33
Will you carry out transactions on behalf of, or for the benefit of, anyone else? *
If someone else is behind the transactions, they have to be identified too.
Single choiceEU AMLR · Art 20(1)(h)

Source of funds and wealth

2 / 2
34
Where will the money for this relationship come from? *
Source of funds: the origin of the money used in this relationship.
Multiple choiceEU AMLR · Art 25(c)
35
Bank and country of the account the funds will come from
Funds from an account in another name or a high-risk country need a second look.
TextGood practice

Politically exposed persons

3 / 3
36
Do you, or does any beneficial owner, director or authorised signatory, hold a prominent public function now or in the last 12 months? *
Politically exposed persons need enhanced measures, and for at least 12 months after they leave office.
Single choiceEU AMLR · Art 20(1)(g), 42, 45
37
Is any of them a family member or known close associate of such a person? *
Family members and close associates are treated in the same way.
Single choiceEU AMLR · Art 46
38
If yes: name, position, country and dates in office
Needed to assess the level of risk.
Long textEU AMLR · Art 42

Sanctions and other declarations

3 / 3
39
Are you, or is any beneficial owner, director or related company, named on a sanctions list (UN, EU, UK or US)? *
Customers and beneficial owners must be checked against targeted financial sanctions. This answer does not replace screening.
Single choiceEU AMLR · Art 20(1)(d)
40
Is the organisation owned 50% or more, together, or otherwise controlled by sanctioned persons? *
A company owned or controlled by sanctioned persons is caught too. The EU test is more than 50% or control, the US test is 50% or more.
Single choiceEU AMLR · Art 20(1)(d)
41
Do you do business in, with, or through comprehensively sanctioned countries or regions? *
Sanctions evasion risk is part of the risk assessment.
Single choiceGood practice

Tax residency

3 / 3
42
Countries of tax residence
Asked with KYC under the OECD Common Reporting Standard. Not an AML rule.
TextGood practice
43
Tax identification number
Part of the EU identification data where available.
TextEU AMLR · Art 22(1)(a)(iv), (b)(iii)
44
Are you a US person for tax purposes?
Asked with KYC under FATCA. Not an AML rule.
Single choiceGood practice

Documents to provide

2 / 2
45
Certificate of incorporation or recent extract from the official register *
Proof that the organisation exists, from an independent source.
File uploadEU AMLR · Art 22(6)
46
Register of shareholders or members
Supports the ownership information.
File uploadGood practice

Declaration and signature

4 / 4
47
I confirm the information in this form is true and complete, and I will tell you promptly if it changes. *
Customer information must be kept up to date.
CheckboxEU AMLR · Art 26
48
I understand my information will be used to meet anti-money laundering obligations and kept for at least 5 years after the relationship ends. *
Records are kept 5 years after the relationship ends.
CheckboxEU AMLR · Art 77
49
Name, position and signature *
TextGood practice
50
Date *
DateGood practice

For internal use not shown to the customer in the online form

4 / 4
51
Screening: sanctions, PEP and adverse media for the customer, beneficial owners and directors (date and result) *
The declaration is not enough. Screen and keep the result.
Long textEU AMLR · Art 20(1)(d), (g)
52
Customer risk rating and reason *
The rating decides the depth of checks and the review cycle.
Single choiceGood practice
53
Next review date *
EU: at least every year for higher-risk customers and every 5 years for others.
DateEU AMLR · Art 26(2)
54
Reviewed by (name and date) *
Audit trail of who approved onboarding.
TextGood practice

This questionnaire is general information, not legal advice. Adapt it to your own risk assessment and to the rules that apply to you. Last reviewed by our compliance team: 18 October 2026.

Screen the customer before you onboard. Run the name, the beneficial owners and the directors through the free Sanctions Check and PEP Check.

Run a sanctions check Run a PEP check

Send this questionnaire as a secure online form

With complead KYC Forms your customers fill in the questionnaire online, under your logo. Answers land in the customer record, ready to review.

  • One link per form, mobile friendly, with document and ID uploads
  • Sanctions and PEP screening runs automatically when the form is submitted
  • Risk score preview, then approve or reject in one place
Book a demo

What every KYC questionnaire must cover

The thresholds and time limits behind the questions.

25%

Beneficial ownership threshold in the EU, the UK and the US. Indirect holdings count.

AMLR Art 51 · MLR Reg 5 · 31 CFR 1010.230

1 + every 25%

The US asks for one person with control in every case, plus each owner at 25% or more.

31 CFR 1010.230(d)

5 headings

Purpose, expected amount, source of funds, destination of funds, business or occupation.

AMLR Art 25

12 months

Former PEPs keep enhanced measures for at least 12 months after leaving office.

AMLR Art 45 · MLR Reg 35(9)

1 and 5 years

EU maximum interval to update customer information: 1 year for higher risk, 5 years for everyone else.

AMLR Art 26(2)

5 years

Keep the questionnaire and the evidence for 5 years after the relationship ends.

AMLR Art 77 · MLR Reg 40

Frequently asked questions

What is a KYC questionnaire?

It is the form a regulated business asks a new customer to complete before opening a relationship. It collects identity details, ownership, the purpose of the relationship, the source of funds and declarations on PEP status and sanctions, together with supporting documents.

What is the difference between KYC and CDD?

KYC (know your customer) is the everyday name. CDD (customer due diligence) is the legal term. It covers identifying and verifying the customer, finding the beneficial owners, understanding the purpose of the relationship and monitoring it over time.

When do I need enhanced due diligence?

Whenever your risk assessment shows higher risk, and always for politically exposed persons and for business involving high-risk third countries. Enhanced measures include source of wealth, senior management approval and closer monitoring.

Who counts as a beneficial owner?

Any natural person who owns or controls 25% or more of a company, directly or through other companies, or controls it by other means. For trusts it is the settlor, trustees, protector, beneficiaries and anyone else with ultimate control.

If the customer says they are not sanctioned, do I still need to screen?

Yes. The declaration in the form does not replace screening the customer, the beneficial owners and the directors against sanctions lists. Keep the screening result with the questionnaire.

Is this legal advice?

No. The questionnaire is general information based on the published rules. Adapt it to your own risk assessment and to the requirements of your supervisor.