Chapter 18 of 27
KYC, Suitability, and Opening Customer Accounts
Follow the lifecycle of opening a new account, from collecting customer information to applying know your customer and suitability standards to recommendations.
Big Picture: From New Customer to First Trade
The Lifecycle Overview
You will follow the lifecycle of opening a new account: from first contact, through profiling and approvals, to ongoing updates and supervision.
Five Key Stages
1) Initial contact and information gathering, 2) Customer profiling, 3) Account documentation and approvals, 4) Recommendations vs unsolicited orders, 5) Ongoing updates.
Regulatory Players
The SEC provides overall authority. FINRA, a self-regulatory organization, enforces detailed conduct rules like Rule 2090 (KYC) and Rule 2111 (Suitability).
Exam Mindset
For SIE questions, ask: Do I know enough about this customer to recommend? Is the account properly documented, approved, and updated over time?
Know Your Customer (KYC): What Firms Must Learn About You
KYC Core Idea
KYC means using reasonable diligence to know the essential facts about every customer and anyone acting on their behalf.
Three KYC Questions
1) Who is this customer? 2) What authority and restrictions apply? 3) What is their financial picture and constraints?
Essential Facts
Essential facts include legal name, date of birth, address, tax ID, employment, affiliations, and for entities, who is authorized to act.
KYC vs CIP
CIP verifies identity for anti-money laundering. KYC supports proper handling and suitability. They overlap but serve different regulatory goals.
Customer Identification Program (CIP) and AML Basics
What CIP Does
CIP is part of AML rules. It requires firms to collect and verify key identity data before or when a new account is opened.
Required Data
Firms must obtain name, date of birth (for individuals), address, and an identification number like SSN or passport.
Verification and Lists
Identity is verified using documents or databases, and customers are checked against government sanctions lists such as OFAC.
CIP vs Suitability
CIP answers "Who are you, really?" Suitability answers "Is this product appropriate for you?" They are related but distinct steps.
New Account Forms and Customer Profiling
Role of the New Account Form
The new account form captures all essential facts for KYC, CIP, and suitability and must be confirmed with the customer and updated periodically.
Individual Account Data
It includes personal info, employment, affiliations, and investment profile: income, net worth, objectives, experience, risk tolerance, and time horizon.
Entity Account Data
For entities, it records legal form, tax status, and who is authorized to act, along with their specific powers over the account.
Signature vs Approval
FINRA does not always require a customer signature on the form, but a registered principal must approve the account. Firm policies may be stricter.
Building a Customer Profile: Two Contrasting Cases
Customer A: Emma
Emma is 24, new to investing, with modest income and savings, a 3–4 year horizon, and low risk tolerance. She is nervous about losing money.
Emma’s Suitable Direction
Her profile points toward diversified, relatively conservative products and away from leverage, options, and highly speculative positions.
Customer B: Marcus
Marcus is 58, high income, high net worth, long experience (including options), and moderate to aggressive risk tolerance.
Different Customer, Different Suitability
Marcus’s profile can support more complex or volatile products. The same product that is unsuitable for Emma may be suitable for him.
Suitability: Reasonable-Basis, Customer-Specific, Quantitative
What Suitability Requires
FINRA Rule 2111 requires a reasonable basis to believe a recommendation is suitable based on the customer’s investment profile.
Reasonable-Basis Suitability
The RR must understand the product or strategy and believe it is suitable for at least some investors before recommending it to anyone.
Customer-Specific and Quantitative
Customer-specific suitability checks fit for that individual. Quantitative suitability looks at whether the pattern of trades is excessive.
Process, Not Guarantees
Suitability is about making reasonable, informed recommendations at the time, not guaranteeing positive outcomes or no losses.
Solicited vs Unsolicited Trades and Recommendation Focus
Solicited vs Unsolicited
Solicited trades are initiated or encouraged by the RR; unsolicited trades are initiated by the customer without a recommendation.
Suitability on Solicited Trades
For solicited trades, full suitability duties apply: the RR must have a reasonable basis that the recommendation fits the customer’s profile.
Unsolicited Orders
For unsolicited trades, suitability for that idea is reduced, but the firm must still follow the law and record the order accurately.
What Counts as a Recommendation
Tailored suggestions about specific securities are recommendations. Broad, non-tailored education generally is not.
Opening and Approving a New Account: Step-by-Step
Step 1–2: Start and Verify
First, the RR gathers KYC data and explains account types. Then the firm verifies identity under CIP and checks government lists.
Step 3: Profile the Investor
Next, the RR builds the investment profile: income, net worth, objectives, risk tolerance, time horizon, taxes, and experience.
Step 4–5: Document and Approve
The RR completes the new account form. A registered principal reviews it and approves the account, with extra steps for margin or options.
Step 6: Confirm and Update
The firm sends the record to the customer for confirmation and periodically updates it, typically at least every 36 months.
Thought Exercise: Spot the Red Flags in Account Opening
Work through this scenario and mentally note where rules are being followed or broken.
Scenario
Jordan, an RR, meets Sam, a 32-year-old software engineer. Sam wants to open an account quickly to buy a "hot" tech stock before earnings.
Jordan:
- Has Sam fill out only name and email on a slim "express" form.
- Does not ask for income, net worth, or investment experience.
- Opens a margin account by default so Sam "has more buying power", without explaining margin risks.
- Places a buy recommendation for 1,000 shares of the tech stock, marking the order as unsolicited because Sam mentioned the stock first.
- Tells Sam they can "deal with the rest of the paperwork later" once the trade is done.
Your tasks
- List at least three rule or best-practice violations you see.
- For each, decide which concept it violates: KYC, CIP/AML, suitability, books and records, or account approval.
- Ask yourself: Would any of this be acceptable if Sam were a very wealthy, experienced trader? Why or why not?
Pause and think through your answers before you reveal the explanations in your notes or discuss with a peer.
Hint: Pay close attention to missing information, margin account handling, and how the order is marked.
Quiz 1: KYC and New Account Basics
Test your understanding of KYC and new account requirements.
Which of the following BEST describes information that must be obtained to satisfy KYC and support suitability at account opening?
- Customer’s name, address, and a copy of their most recent tax return
- Customer’s name, date of birth, address, tax ID, employment status, financial situation, investment objectives, risk tolerance, and investment experience
- Customer’s name, citizenship, and a notarized statement of net worth
- Customer’s name, address, and a written statement that they understand investments can lose value
Show Answer
Answer: B) Customer’s name, date of birth, address, tax ID, employment status, financial situation, investment objectives, risk tolerance, and investment experience
KYC and suitability require essential identifying information (name, DOB, address, tax ID, employment) plus a meaningful investment profile: financial situation, objectives, risk tolerance, and experience. A tax return or notarized statement is not specifically required by rule, and a generic risk acknowledgment alone is insufficient.
Quiz 2: Suitability and Solicited vs Unsolicited
Check how well you can apply suitability concepts.
An RR receives a call from a long-time conservative client who says, "I want to buy 2,000 shares of a highly leveraged biotech ETF I saw on TV. Place the order now." The RR explains the risks and the client insists. What is the MOST appropriate action?
- Refuse to place the order because the trade is clearly unsuitable for a conservative investor
- Place the order as solicited and document that the client insisted
- Place the order as unsolicited and document the discussion about risks according to firm policy
- Place the order as unsolicited and skip documentation since the client initiated it
Show Answer
Answer: C) Place the order as unsolicited and document the discussion about risks according to firm policy
Because the client initiated the trade, it is an unsolicited order. The RR should mark it as such and, under most firm policies, document the risk discussion. Refusing the order is not automatically required by rule, but mis-marking or skipping documentation would be improper.
Key Term Review: KYC, Suitability, and Accounts
Use these flashcards to reinforce core definitions and distinctions.
- Know Your Customer (KYC)
- A FINRA requirement (Rule 2090) that firms use reasonable diligence to know the essential facts about every customer and the authority of each person acting on the customer’s behalf, to effectively service the account and apply suitability and other obligations.
- Customer Identification Program (CIP)
- An anti-money laundering requirement under the USA PATRIOT Act that obligates broker-dealers to collect and verify specific identifying information (name, DOB, address, ID number) for each customer opening a new account.
- Reasonable-basis suitability
- The obligation for a firm or RR to understand a recommended product or strategy and have a reasonable basis to believe it is suitable for at least some investors before recommending it to any customer.
- Customer-specific suitability
- The obligation to have a reasonable basis to believe a particular recommendation is suitable for a specific customer based on that customer’s investment profile, including financial situation, objectives, risk tolerance, and experience.
- Quantitative suitability
- The obligation to ensure that the overall pattern of recommended transactions in an account is not excessive and is suitable in aggregate given the customer’s profile, guarding against churning.
- Solicited order
- A transaction that is initiated or encouraged by the RR or firm, typically as the result of a recommendation, and therefore fully subject to suitability obligations.
- Unsolicited order
- A transaction that the customer initiates without a recommendation from the RR or firm; it must be correctly marked as unsolicited, and while suitability for that idea is reduced, legal and recordkeeping duties still apply.
- New account form / customer account record
- The document or electronic record that captures essential customer information at account opening, including identifying data and investment profile, and must be sent to the customer for verification and periodically updated.
- Principal approval of accounts
- The requirement that a registered principal review and approve each new account, and certain types of accounts (e.g., options, margin) require additional principal approvals and disclosures before specific trading is permitted.
- Churning
- Excessive trading in a customer’s account by a broker or RR primarily to generate commissions, violating quantitative suitability and other conduct rules.
Key Terms
- Suitability
- The obligation under FINRA Rule 2111 that a broker-dealer or associated person have a reasonable basis to believe a recommendation is appropriate for a customer based on the customer’s investment profile and the nature of the product or strategy.
- Solicited order
- A transaction that is initiated or encouraged by the RR or firm, typically as the result of a recommendation, and therefore fully subject to suitability obligations.
- New account form
- The document or electronic record that captures essential customer information at account opening, including identifying data and investment profile, and must be sent to the customer for verification and periodically updated.
- Unsolicited order
- A transaction that the customer initiates without a recommendation from the RR or firm; it must be correctly marked as unsolicited, and while suitability for that idea is reduced, legal and recordkeeping duties still apply.
- Principal approval
- The required review and sign-off by a registered principal on new accounts and certain types of transactions or account features, such as options or margin trading.
- Know Your Customer (KYC)
- A FINRA requirement (Rule 2090) that firms use reasonable diligence to know the essential facts about every customer and the authority of each person acting on the customer’s behalf, to effectively service the account and apply suitability and other obligations.
- Quantitative suitability
- The obligation to ensure that the overall pattern of recommended transactions in an account is not excessive and is suitable in aggregate given the customer’s profile, guarding against churning.
- Reasonable-basis suitability
- The obligation for a firm or RR to understand a recommended product or strategy and have a reasonable basis to believe it is suitable for at least some investors before recommending it to any customer.
- Customer-specific suitability
- The obligation to have a reasonable basis to believe a particular recommendation is suitable for a specific customer based on that customer’s investment profile, including financial situation, objectives, risk tolerance, and experience.
- Customer Identification Program (CIP)
- An anti-money laundering requirement under the USA PATRIOT Act that obligates broker-dealers to collect and verify specific identifying information (name, date of birth, address, identification number) for each customer opening a new account.