Skip to main content
U.S. flag
An official website of the United States government
Dot gov
The .gov means it’s official. 
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.
Https
The site is secure. 
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Customer Identification Program Rule Exemption from Collecting Taxpayer Identification Number Information from Customers

Summary:

The Office of the Comptroller of the Currency, the Federal Deposit Insurance Corporation (FDIC), and the National Credit Union Administration (each an “agency” and collectively the “agencies”), with the concurrence of the Financial Crimes Enforcement Network (FinCEN), grant an exemption from the requirements of the Customer Identification Program (CIP) Rule for the collection of taxpayer identification numbers (TIN) from customers for all accounts in the circumstances specified below.

The Order Granting Exemption can be found on the FDIC’s website

Statement of Applicability: The contents of, and material referenced in, this FIL apply to all FDIC-supervised financial institutions.

Highlights:

  • In 2003, the final CIP Rule was issued for banks, savings associations, credit unions, and certain non-federally regulated banks.
  • The appropriate agency, with the concurrence of FinCEN, may by order or regulation, exempt any bank or type of account from the requirements of the CIP Rule after consideration of whether the proposed exemption is consistent with the purposes of the Bank Secrecy Act (BSA) and with safe and sound banking practices.
  • This order permits banks subject to the jurisdiction of the agencies, including FDIC-supervised institutions, to use an alternative collection method to obtain TIN information from a third-party rather than from the customer, if the bank otherwise complies with the CIP Rule, which requires written procedures that: (1) enable the bank to obtain TIN information prior to opening an account; (2) are based on the bank’s assessment of the relevant risks; and (3) are risk-based for the purpose of verifying the identity of each customer to the extent reasonable and practicable, enabling the bank to form a reasonable belief that it knows the true identity of each customer.
  • FinCEN, the Administrator of the BSA, considers using this alternative collection method to obtain TIN information about a customer, when used appropriately, to be consistent with the purposes of the BSA.
  • The agencies find this exemption, when used appropriately, would be consistent with safe and sound banking practices.
  • Based on these determinations, the agencies have issued an order granting an exemption from the requirement that banks subject to the jurisdiction of the agencies, including FDIC-supervised institutions, collect TIN information from the customer for all accounts in the circumstances discussed above.
  • FinCEN and the FDIC emphasize there is no requirement to implement this exemptive relief, and banks may choose to continue collecting TIN information from the customer.
  • This exemption does not change the overall purpose of the CIP Rule, and banks are required to implement a CIP Program that includes risk-based verification procedures that enable the bank to form a reasonable belief that it knows the true identity of its customers. These requirements exist regardless of whether the bank establishes this relationship directly with the customer or through an intermediary. 
FIL-26-2025
Attachment(s)
Related Topics
Bank Secrecy Act
Contact(s)

Last Updated: June 27, 2025