The short answer
KYC (Know Your Customer) is the identity verification that acquiring banks, payment processors, and money service businesses (MSBs) are legally required to perform on the individuals who own or control a business account. It's grounded in the Bank Secrecy Act (BSA), Anti-Money-Laundering (AML) rules, and the Patriot Act. KYC is about identifying people; KYB is about verifying the business entity.
What KYC requires
For every beneficial owner with 25%+ ownership plus every controlling officer of the business, the acquirer must collect:
- Full legal name
- Date of birth
- Residential address (not PO Box)
- Social Security number or TIN
- Government-issued photo ID (driver's license, passport)
- In high-risk verticals: secondary ID, proof of address (utility bill / bank statement), and sometimes a selfie liveness check
What the acquirer does with it
The acquirer runs the individual against multiple databases:
- OFAC / SDN list (Office of Foreign Assets Control — sanctioned persons)
- PEP screening (Politically Exposed Persons — additional scrutiny for government officials)
- Adverse media (news, regulatory actions, criminal records)
- Credit report (for personal guarantee evaluation, if required)
- MATCH list (if the individual was previously associated with a terminated merchant account)
A hit on any of these triggers additional review. A confirmed OFAC match is an automatic decline.
How long KYC takes
Clean applicants with good IDs and domestic addresses: 1-3 business days. Applicants with prior MATCH list history, international addresses, or PEP flags: 1-3 weeks with additional documentation required. Applicants with a prior criminal record (especially financial crimes): usually declined regardless of time.
Common KYC friction points
- Out-of-date address on IDs. Acquirer requires address match across ID, application, and proof of address. Update your driver's license before applying.
- Multiple DBAs or aliases. If you've done business under multiple names, disclose all of them up front. Acquirer will find them and flag the undisclosed ones.
- Unusual ownership structures. Holding companies, trusts, partnerships. Each layer is another KYC chain.
- Previous business closures. If you had a merchant account terminated for cause, it will surface. Be ready to explain.
Why multi-brand operators care
KYC is per-principal, not per-brand. Once your ownership and control group is KYC-verified at the acquirer, adding new sub-brands generally doesn't require re-KYC (it requires re-KYB on the new entity). Consolidating with multiflow means you KYC once, stay verified, and add sub-brands via lightweight entity-level disclosures rather than full re-onboarding.
KYC at multiflow
Our onboarding collects all required KYC materials in a single secure portal. Materials are stored encrypted, transmitted over TLS 1.3, and accessible only to KYC-authorized underwriting staff. See our Privacy Policy for retention and our Security page for control details.