Source: OJ L, 2024/1624, 19.6.2024

Current language: EN

Article 23 Timing of the verification of the customer and beneficial owner identity


Summary What does Article 23 of the Anti-money laundering regulation (AMLR) say?

This article governs the timing of identity verification within the customer due diligence process established under Article 20.

The general rule is straightforward: obliged entities must verify the identity of customers, beneficial owners, and other relevant persons before a business relationship is established or an occasional transaction is carried out.

However, the article carves out several practical exceptions and sector-specific rules, acknowledging that a rigid pre-verification requirement is not always workable in practice.

It also connects directly to the broader beneficial ownership transparency framework by requiring obliged entities to collect proof of register entries when onboarding legal entities or trustees.

Important points:

  • Complete identity verification before establishing a business relationship or carrying out an occasional transaction, with a limited exception permitting verification to be completed during onboarding where there is little risk of money laundering or terrorist financing and it is necessary not to interrupt the normal conduct of business.
  • Credit institutions and financial institutions may open accounts before full verification is complete, provided safeguards are in place to prevent any transactions until customer due diligence under Article 20(1) points (a) and (b) is obtained.
  • When entering into a new business relationship with a legal entity, express trust, or similar legal arrangement subject to beneficial ownership registration requirements, collect valid proof of registration or a recently issued register excerpt.

Springlex's summary of the article, a reading aid, not a substitute for the legal text.

    1. Verification of the identity of the customer, the beneficial owner, and of any persons pursuant to Article 20(1), points (h) and (i), shall take place before the establishment of a business relationship or the carrying out of an occasional transaction. Such obligation shall not apply to situations of lower risk under Section 3 of this Chapter, provided that the lower risk justifies postponement of such verification.

    2. For real estate agents, the verification referred to in the first subparagraph shall be carried out after an offer is accepted by the seller or lessor, and in all cases before any funds or property are transferred.

    1. By way of derogation from paragraph 1, verification of the identity of the customer and of the beneficial owner may be completed during the establishment of a business relationship if necessary so as not to interrupt the normal conduct of business and where there is little risk of money laundering or terrorist financing. In such situations, those procedures shall be completed as soon as practicable after initial contact.

    1. By way of derogation from paragraph 1 of this Article, a credit institution or financial institution may open an account, including accounts that permit transactions in transferable securities, as may be required by a customer provided that there are adequate safeguards in place to ensure that transactions are not carried out by the customer or on its behalf until full compliance with the customer due diligence measures laid down in Article 20(1), points (a) and (b), is obtained.

    1. Whenever entering into a new business relationship with a legal entity or the trustee of an express trust or the person holding an equivalent position in a similar legal arrangement referred to in Articles 51, 57, 58, 61 and 67 and subject to the registration of beneficial ownership information pursuant to Article 10 of Directive (EU) 2024/1640, obliged entities shall collect valid proof of registration or a recently issued excerpt of the register confirming validity of registration.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod