What the KYC journey is
A journey view matters because the friction, the cost and the regulatory risk sit in the hand-offs, not in any single check. A firm can hold excellent KYC verification technology and still lose customers at capture, or pass Know Your Customer checks and then fail an inspection because the decision trail is scattered across systems.
Under a risk-based approach, the journey is not identical for every customer: low-risk cases should pass straight through, while higher-risk cases branch into enhanced due diligence. Designing those branches deliberately is what keeps both drop-off and AML exposure down.
The six steps
1. Collect and pre-check
Capture name, date of birth, address, nationality and — for entities — registration and ownership data. Validate formats and de-duplicate against existing records before any paid check is called.
2. Verify the identity
Authenticate a government-issued document or query an authoritative data source, then extract the holder's details for matching.
3. Confirm the person
Biometric face match with liveness and anti-deepfake checks confirms the rightful holder is present, not a copied document.
4. Screen and risk-rate
Screen against sanctions, PEP, RCA and adverse-media data, resolve alerts, then assign a risk rating that decides simplified, standard or enhanced due diligence.
5. Decide and record
Approve, escalate or decline — with the evidence, alert dispositions and approver captured in an immutable audit trail a supervisor can reopen years later.
6. Keep it current
Rescreen daily and re-verify on trigger events (new director, address change, adverse hit) so records never go stale between review cycles.
Typical timelines
Indicative ranges for a well-configured programme. Your own figures will depend on document quality, screening tuning and how much work reaches an analyst.
| Case type | Typical time | Why |
|---|---|---|
| Individual, fully automated | Under a minute | Document authentication, biometric match and screening run in parallel; the customer stays in the flow. |
| Individual, manual review | Minutes to hours | Triggered by a poor document capture, a possible sanctions or PEP match, or a high-risk jurisdiction. |
| Enhanced due diligence | 1–5 business days | Source-of-funds and source-of-wealth evidence has to be requested from the customer and signed off internally. |
| Business (KYB) | Hours to several days | Register data has to be retrieved, ownership unwrapped to the UBOs, and each controlling person verified and screened. |
| Ongoing monitoring | Continuous | Daily list rescreening plus event-driven refresh under a perpetual KYC model. |
What drives the cost
Cost per verified customer is rarely explained by unit check pricing. These six factors move it most — and the largest is usually analyst time, not software.
Check volume and mix
Per-check pricing usually differs for document verification, biometric checks, database lookups, screening and KYB register retrievals. Your mix matters more than any single unit price.
Pass rate and retries
Every failed capture that has to be retried is paid for twice. Better capture guidance is one of the cheapest cost reductions available.
Manual review time
Analyst minutes per case are usually the largest line item. False-positive rates on screening drive this directly.
Coverage and jurisdictions
Extra document templates, languages and company registers each add data-supplier cost — but avoid the far larger cost of running separate vendors per market.
Periodic refresh
Fixed 1/3/5-year review cycles create large recurring re-verification batches. Event-driven perpetual KYC spreads and shrinks that work.
Integration and audit
Engineering time to connect systems, and the effort to evidence decisions to a supervisor, are real costs that rarely appear on a vendor quote.
We price ComplianceSuite against your actual volumes, check mix and jurisdictions rather than a list rate — book a meeting and we will model it with you.
Comparing the three models
| Model | Set-up | Decision speed | Cost profile | Audit trail | Best fit |
|---|---|---|---|---|---|
| In-house manual | Low software cost, high process build | Slowest — hours to days per case | Dominated by analyst time; scales linearly with volume | Depends on discipline; often spreadsheets and email trails | Very low volumes, or highly bespoke private-client onboarding |
| Outsourced / BPO | Fast to start, little internal build | Variable — depends on the provider's queue | Predictable per case, but margin sits on top of analyst time | Evidence held by the provider; extraction can be slow | Seasonal spikes or entry into a single new market |
| Integrated platform | Configuration and integration up front | Fastest — automated straight-through processing | Per-check plus platform; lowest cost per case at scale | Every decision, alert and document captured in one record | Regulated firms onboarding continuously across jurisdictions |
Running the journey on ComplianceSuite
ComplianceSuite runs every step of the journey in one record: KYC and KYB verification, sanctions and PEP screening, UBO verification, risk scoring, case management and perpetual KYC refresh — with the full evidence trail retained for supervisors in Europe, the United States and beyond.
FAQ
What is the KYC journey?
The KYC journey is the end-to-end path a customer takes from first data capture to an approved, monitored relationship: collect and pre-check data, verify the identity document or data source, confirm the person biometrically, screen and risk-rate, decide and record the evidence, then keep the record current through ongoing screening and event-driven refresh.
How long does the KYC journey take?
A fully automated individual check typically completes in under a minute. Cases routed to manual review clear in minutes to hours, enhanced due diligence usually takes one to five business days because source-of-funds evidence must be requested, and business (KYB) verification can take hours to several days while ownership is unwrapped to the ultimate beneficial owners.
How much does KYC cost per customer?
There is no single figure: cost depends on the mix of checks you run, your pass rate and retries, how many cases reach an analyst, how many jurisdictions and company registers you cover, and how often you refresh existing customers. Manual review time is usually the largest component, which is why reducing false positives and retries lowers cost faster than negotiating unit prices. We quote ComplianceSuite against your actual volumes and check mix.
How can we reduce KYC cost without weakening controls?
Pre-check and de-duplicate data before calling paid services, improve capture guidance to cut retries, tune screening to reduce false positives, apply risk-based due diligence so low-risk customers do not receive enhanced checks, and move from fixed periodic reviews to event-driven perpetual KYC.
Should we build KYC in-house, outsource it, or use a platform?
Very low volumes or bespoke private-client work can be handled in-house. Outsourcing suits short-term spikes or a single new market. Firms onboarding continuously across several jurisdictions generally reach the lowest cost per case, the fastest decisions and the strongest audit trail with an integrated platform that combines verification, screening, risk scoring and case management in one record.
How is the KYB journey different?
Business onboarding adds entity verification from company registers, unwrapping the ownership chain to the ultimate beneficial owners, and then running the full individual KYC journey on each controlling person — which is why it takes longer and costs more per customer than individual KYC.
Map your KYC journey with us
Bring your current onboarding flow, volumes and pain points. We will show where cases stall, where cost accumulates, and what the same journey looks like on ComplianceSuite.