AML ANALYST GUIDE: Top 16 Corporate KYC & AML Interview Questions – Detailed Answers

                    

Top 16 Corporate KYC & AML

 Interview Questions – Detailed

 Answers

 After more than six years in Corporate KYC, CDD, EDD, Periodic Reviews, Remediation and Risk Assessment, I’ve noticed many professionals know the terms but struggle to explain them clearly in interviews. Here is a complete guide.

1.What is KYC? 

Know Your Customer is the process by which a bank identifies and verifies its clients to assess risk and prevent financial crime. Under FCA and JMLSG guidance in the UK, KYC is mandatory at onboarding and throughout the relationship.

It has 3 pillars: Customer Identification, Customer Due Diligence, and Ongoing Monitoring. For corporates, it also includes understanding the nature of business, ownership structure, and purpose of the account.

2. What is the end-to-end Corporate KYC process?

Client Intake: Receive entity name, country of incorporation, entity type, business activity.Identification & Verification: Identify company via certificate of incorporation, Companies House (UK), LEI, and verify directors, UBOs, authorized signatories with ID + address proof.Screening: Sanctions (OFAC, UN, EU, HMT), PEP, and Adverse Media screening for company and related parties.Risk Assessment: Assign risk rating based on geography, industry, entity type, ownership complexity. E.g., a BVI holding company = high risk.CDD / EDD: Based on risk, perform due diligence and collect SoW/SoF, financials, corporate structure chart.Decision & Onboarding: Approve, reject, or escalate to Financial Crime Compliance.Ongoing Monitoring & Periodic Review: Annual review for high risk, 2-3 years for medium/low.

3. What is the difference between CDD and EDD?

CDD (Customer Due Diligence) is the standard level of due diligence for low-medium risk clients. It includes identification, verification, understanding business, and risk rating.EDD (Enhanced Due Diligence) is triggered for high-risk clients – e.g., complex structures, high-risk jurisdictions (as per FATF grey/black list), PEP-linked, cash-intensive businesses, or MSBs. EDD includes deeper SoW/SoF corroboration, source of wealth documentation, senior management approval, more frequent reviews, and detailed adverse media analysis.Interview Tip: Say – “CDD is for knowing WHO the customer is. EDD is for knowing WHY and HOW, with evidence.”

4. What is a UBO? 

Ultimate Beneficial Owner is the natural person who ultimately owns or controls a legal entity. Under 4AMLD/5AMLD and UK PSC regime, a UBO is any individual holding >25% shares or voting rights, or otherwise exercising significant control.

5. How do you identify a UBO in a complex ownership structure?

Obtain corporate org chart and shareholding breakdown.Trace ownership layer by layer – e.g., Company A is 100% owned by Company B, which is 60% owned by John (natural person). John owns 60% of A indirectly.Calculate direct + indirect ownership. Aggregate if same person holds via multiple entities.If no one crosses 25%, check for control via other means – board control, veto rights.Use registers – UK PSC register, Companies House, Orbis, Dun & Bradstreet.If no UBO identified, identify the natural person holding position of Senior Managing Official as fallback.

6. What is the difference between ownership and control?

Ownership is shareholding – e.g., owns 40% shares.

Control is ability to influence decisions without majority ownership – e.g., right to appoint/remove majority directors, veto rights, shareholders’ agreement, or being a settlor/protector of a trust.

A person can control without owning >25%.

7. What documents are required for Corporate KYC?

For UK Ltd:Certificate of Incorporation, Memorandum & Articles of AssociationLatest Companies House filing / business registry extractShare register & Corporate Structure ChartIDs + proof of address for Directors, UBOs (>25%), Authorized SignatoriesProof of business address, LEI (if applicable)Financial statements (last 2 years), Source of Funds/Wealth docs for high riskFor other structures: Trust Deed for trusts, Partnership Agreement for LLPs.

8. How do you verify a company? 

Registry check: Companies House UK for incorporation, status (Active), directors, PSCs.Independent sources: Bloomberg, Orbis, D&B, official regulator website.Documents: Verify incorporation doc is certified, check name, registration number, date matches registry.Website & business activity: Does website match stated business activity?Screening: Check if company itself is sanctioned.

9. How do you perform sanctions screening?

Use automated tools – World-Check, Dow Jones, LexisNexis, or bank’s internal Fircosoft.Screen legal entity name, trading names, directors, UBOs, authorized signatories.Use fuzzy logic – check close matches.

Review hits: Is it True Match, False Positive, or Potential? Check DOB, nationality, ID number, address.If true hit against HMT/OFAC/EU/UN list, escalate to Sanctions team and do not onboard. Freeze if existing client.

10. What is the difference between a PEP and a sanctioned individual or entity?

PEP (Politically Exposed Person): Someone entrusted with prominent public function – e.g., MP, minister, ambassador, senior judge, state-owned enterprise head. Being a PEP is NOT a crime. It means higher corruption/bribery risk, so EDD is required. Family members and close associates are also PEPs by association.Sanctioned individual/entity: Someone on a sanctions list issued by OFAC, UN, EU, HMT. Financial dealings are prohibited or restricted by law. You must block/reject.

11. What is adverse media?

Any negative news linking client to financial crime, fraud, money laundering, bribery, corruption, terrorism, tax evasion, regulatory fines. Sourced from credible news outlets.

We assess relevance, recency, credibility, and seriousness. 5-year-old minor civil dispute ≠ adverse. Recent fraud investigation = material. Document rationale clearly.

12. What is the difference between Source of Wealth (SoW) and Source of Funds (SoF)?

Source of Wealth (SoW): How did the person/company GENERATE their total wealth? Origin of net worth. E.g., inheritance, salary savings over 20 years, sale of business, property investment.

Source of Funds (SoF): Where is the MONEY for THIS transaction/account coming from? E.g., transfer from HSBC UK personal account, proceeds from property sale last month.EDD needs both. SoW explains wealth creation, SoF explains transactional flow. Both need corroboration – e.g., bank statements, sale agreement, audited financials.

13. What is a Periodic Review?

Ongoing re-assessment of client risk and KYC completeness after onboarding. Required by FCA SYSC rules.

Frequency: High Risk – annually, Medium – every 2 years, Low – every 3 years. Also triggered by event – change in directors, ownership, activity spike, adverse media.

We re-verify ID (if expired), re-screen, refresh financials, reassess risk.

14. What is KYC Remediation?

Fixing gaps in existing KYC files due to new regulation, poor historic onboarding, or bulk de-risking.

E.g., after 5AMLD lowered UBO threshold, banks had to remediate files that only had 50%+ owners. Or when bank discovers missing UBO verification or outdated screening.

Involves contacting client for missing docs, re-screening, rewriting risk assessment to current standard.

15. What are the key components of KYC?

Customer Identification Program (CIP)Customer Due Diligence (CDD/EDD)Beneficial Ownership IdentificationRisk Assessment & RatingSanctions, PEP, Adverse Media ScreeningOngoing Monitoring & Periodic Reviews16. What is the difference between a UBO and an IBO?UBO: Ultimate Beneficial Owner – the natural person at the end of the chain.

IBO: Intermediate Beneficial Owner – a legal entity in the middle of ownership chain that owns a stake in the client but is not the final natural person. E.g., Holding Company B that owns 100% of Client A is an IBO. John who owns 100% of Holding Company B is the UBO.