How do you ensure that all required personal data is collected and efficiently and automatically stored in a customer system?
How do you prevent data pollution or data omissions? Are all customer profiles complete?
Is the fraud protection still adequate considering the enhanced technological capabilities of fraudsters?
Does our KYC process still meet the tightened requirements of regulators?
Our KYC process is time-consuming and costly; how can we automate it in a customer-friendly manner?
• Customer and UBOs (Ultimate Beneficial Owners) identification and verification
• Determine the purpose and nature of the business relationship
• Risk-oriented client research (Customer Due Diligence)
• Ongoing monitoring and reassessment of customer relationships
• Identifying and reporting unusual transactions (to FIU-NL)
• Application: all financial institutions and service providers
• Mandatory real-time sanctions list checks during onboarding and monitoring.
• PEP checks (Politically Exposed Persons) are partly covered here.
• Personal data may only be processed if it is necessary and based on a legal basis (such as the Wwft).
• Requirements for data minimization, data security (privacy by design/default), and retention periods.
• Clear obligation to provide information and obtain consent where necessary (e.g., for data sharing outside the EEA).
• Rules for controlled and sound business operations (art. 3:10 Wft)
• Controlled customer acceptance processes are explicitly required.
• Supervision by AFM and DNB.
• 4th AMLD → foundation for risk-based CDD
• 5th AMLD → expansion of UBO registers, digital identification
• 6th AMLD → criminalization of aiding and abetting money laundering
Source/Service
Application in KYC
iDIN
Identification via banking details, Wwft-compliant ID
okID ID-verification
Verification of ID document authenticity (NFC/AI)
VIS-check
Check for reported stolen/lost ID (police/VIS)
IBAN Name Check
Identity verification via bank account
Address validation
Verification against BRP / official registers
2FA (SMS/email)
Additional security in authentication & customer access
Budget check (e.g., NIBUD)
Assessment of payment capacity, especially in credit lending
CCBR check
Central Credit Register (Belgian Register)
CIR-check
Central information register (e.g., non-life insurance)
BKR-check
Consumer Creditworthiness (NL)