Financial Services · Moraph software

Digital Member Onboarding (KYC/CIP)

Open accounts online with identity verified and your CIP evidence kept

Overview

What you are buying

Digital Member Onboarding lets new members and customers apply for an account online or on a phone, scanning their identity document and taking a selfie for a liveness check. It collects the information your Customer Identification Program requires, runs verification, sanctions screening and due-diligence questions, and routes anything that does not clear to your staff. Every application keeps its evidence and decision, ready for your BSA officer, auditors and examiners.

The problem it solves

Online account opening often grows from a form bolted onto the core system, with identity checks, sanctions screening and due-diligence questions handled by different vendors and reconciled by hand. Applicants abandon long forms, staff work exceptions from email and spreadsheets, and the evidence of how each customer was identified is split across systems. When examiners test the Customer Identification Program, assembling what was checked, what failed and who decided takes far longer than it should.

  • Identity, sanctions and due-diligence checks run in separate tools
  • Applicants abandon long forms and repeated requests for documents
  • Exceptions are worked by email without a consistent record
  • CIP evidence is hard to assemble for audits and examinations

Who uses it

  • Credit unions and community banks opening accounts online
  • Deposit operations and member services teams who work application exceptions
  • BSA officers responsible for the Customer Identification Program
  • Digital banking and product teams who own the account-opening experience
  • Internal audit and examiners testing CIP and due diligence

Requirements it supports

USA PATRIOT Act Section 326 and the Customer Identification Program rule (31 CFR 1020.220)FinCEN Customer Due Diligence Rule (31 CFR 1010.230)OFAC sanctions regulations (31 CFR Chapter V)Electronic Signatures in Global and National Commerce Act (E-SIGN, 15 U.S.C. 7001 et seq.)Gramm-Leach-Bliley Act and Regulation P (12 CFR Part 1016)State biometric privacy laws, such as the Illinois Biometric Information Privacy Act (740 ILCS 14)

The product supports these requirements; meeting them remains your organization’s responsibility.

See how it works

A short walkthrough

Illustrative screens with fictional sample data. They show the workflow, not any client’s data or configuration, and the layout of the product itself differs. A live demonstration uses the product with sample data.

  1. Step 1

    The applicant's view

    On a phone, the applicant sees one step at a time, with their progress and the option to save and return.

    Open a savings account · Example Credit Union (fictional)

    Step
    3 of 5: Verify your identity
    Document
    Driver's license, front and back
    Selfie
    Ready to take
    Saved
    Yes, you can return later

    What we need

    • A photo of the front of your ID
    • A photo of the back of your ID
    • A selfie, so we can confirm it is you
    On a phone, the applicant sees one step at a time, with their progress and the option to save and return.
  2. Step 2

    Check results

    Each application shows every check that ran, its result and the reason, in words staff and examiners can follow.

    Applicant 55107 · Share savings and checking

    Document authentication
    Passed
    Selfie to document match
    Passed
    Liveness
    Passed
    Address verification
    Mismatch
    Sanctions screening
    No match
    Risk rating
    Low

    Reason for review

    • Address on document differs from address entered
    • Address entered not found in configured data sources
    • Rule: address mismatch routes to review
    Each application shows every check that ran, its result and the reason, in words staff and examiners can follow.
  3. Step 3

    The exception queue

    Onboarding specialists work applications that did not clear, with the reason and age of each.

    ApplicationProductReasonRiskAgeStatus
    AP-55107Savings and checkingAddress mismatchLow1 hourAwaiting applicant
    AP-55098Business checkingPossible sanctions matchHigh3 hoursWith BSA officer
    AP-55091SavingsLiveness check not completedLow5 hoursNew
    AP-55084CheckingIdentification number not verifiedMedium1 dayIn review
    AP-55070CertificateDuplicate customer in coreLow1 dayIn review
    Onboarding specialists work applications that did not clear, with the reason and age of each.
  4. Step 4

    Resolving an exception

    The specialist's work on the application is recorded step by step, with the reason for the final decision.

    Application AP-55107 · Applicant 55107

    1. Application submittedApplicant
    2. Address mismatch routed to reviewDecision rules
    3. Proof of address requestedOnboarding specialist
    4. Utility statement uploadedApplicant
    5. Address verified from statement; discrepancy resolvedOnboarding specialist
    6. Account opened in coreSystem
    The specialist's work on the application is recorded step by step, with the reason for the final decision.
  5. Step 5

    A business account

    For business applications, each beneficial owner and the controlling person are identified, verified and screened.

    Example Bakery LLC (fictional) · Business checking

    Entity type
    Limited liability company
    Beneficial owners
    2
    Controlling person
    1
    Certification
    Signed electronically
    Owner 1 screening
    No match
    Owner 2 screening
    Possible match

    Due-diligence answers

    • Business type: food service
    • Expected monthly deposits: card receipts and some cash
    • No international wires expected
    For business applications, each beneficial owner and the controlling person are identified, verified and screened.
  6. Step 6

    Decision rules

    The BSA officer sees the rules that route each result, with every change versioned and approved.

    CheckResultActionVersionApproved by
    Sanctions screeningPossible matchRoute to BSA officerv4BSA officer
    Address verificationMismatchRoute to reviewv4BSA officer
    LivenessNot completedOffer another way to verifyv4BSA officer
    Risk ratingHighRoute to BSA officerv4BSA officer
    Document authenticationFailedProposed: declinev5 draftPending
    The BSA officer sees the rules that route each result, with every change versioned and approved.

Workflows

The principal workflows

  1. Apply

    The applicant chooses a product and enters the information your CIP requires, on a phone or computer. Fields are kept to what the product and your policy need, and the applicant can save and return.

    • Applicant chooses an account product and confirms eligibility
    • Name, date of birth, address and identification number collected
    • Disclosures presented and electronic consent captured under E-SIGN
    • Due-diligence questions asked based on product and answers
    • Application saved so the applicant can return to finish
  2. Verify

    The applicant scans the front and back of an identity document and takes a selfie. Document details are read by OCR, the liveness check confirms a live person is present, and the information is checked against the identity verification sources configured for your institution.

    • Document captured and its data read by OCR
    • Document checked for signs of tampering or expiry
    • Selfie taken and compared with the document photo, with a liveness check
    • Identity information checked against configured verification sources
    • Results recorded with each check's outcome and reasons
  3. Screen and decide

    The applicant is screened against OFAC and other lists you choose, and a customer risk rating is calculated from your methodology. Applications that pass every check proceed under your rules; anything that does not goes to a person.

    • Sanctions and watchlist screening run
    • Customer risk rating calculated from your methodology
    • Applications that pass all checks proceed under your configured rules
    • Mismatches, possible matches and high-risk ratings routed to staff
    • Decision recorded with the checks behind it
  4. Resolve and open

    Staff work exceptions from a queue, ask the applicant for more documents where needed, and record the resolution. Approved applications are opened in your core system and the CIP record is kept under your retention schedule.

    • Exception reviewed against your CIP procedures
    • Additional documents requested from the applicant through the same session
    • Resolution recorded with reason, or application declined
    • Account opened in your core system and funded through your own channels
    • CIP record retained, including the methods used to verify identity

Roles and permissions

Who does what in the product

Each role below is a starting point. During implementation we set them up to match your teams, and every action anyone takes is recorded in the audit trail.

Applicant

Prospective member or customer, business owner applying for a business account (external)

Applies for an account and supplies the information and documents the institution needs to identify them.

Sees

  • Their own application and its progress
  • Disclosures and agreements for the product they chose
  • Requests for more information from staff

Does

  • Chooses a product and enters their information
  • Scans their identity document and takes a selfie
  • Answers due-diligence questions and, for businesses, identifies beneficial owners
  • Accepts disclosures and gives electronic consent
  • Uploads additional documents when asked

Cannot

  • See check results, risk ratings or internal notes
  • Change their information after submitting without staff
  • Open an account that has not cleared your rules
Approvals
Their application proceeds under your decision rules or is reviewed by staff.
Notified about
Requests for more information, and the outcome of their application.

Onboarding specialist

New accounts representative, member services specialist, deposit operations analyst

Works applications that did not clear automatically and resolves them under your CIP procedures.

Sees

  • Exceptions assigned to them or their team, with the reason for each
  • Check results, document images and due-diligence answers
  • Duplicate customer matches from the core system
  • Their own open work, sorted by age

Does

  • Reviews exceptions and requests more documents from the applicant
  • Verifies identity by other methods your CIP allows and records them
  • Resolves discrepancies with a recorded reason
  • Approves or declines applications within their authority
  • Starts a branch-assisted application with the applicant present

Cannot

  • Clear a possible sanctions match
  • Approve a high-risk application without the BSA officer
  • Change decision rules or the risk-rating methodology
Approvals
Possible sanctions matches and high-risk applications go to the BSA officer; their other decisions can be sampled for quality review.
Notified about
New exceptions assigned to them, applicant responses, and exceptions approaching the age your procedures set.

BSA officer

BSA officer, BSA/AML officer, chief compliance officer

Owns the Customer Identification Program as it runs in the product: rules, risk ratings and the hardest decisions.

Sees

  • Every application, check result and decision
  • Decision rules and risk-rating methodology with their history
  • Program reporting and the audit trail

Does

  • Clears or confirms possible sanctions matches
  • Approves or declines high-risk applications
  • Approves changes to decision rules and the risk-rating methodology
  • Reviews samples of specialists' decisions
  • Prepares exam and board reporting on onboarding

Cannot

  • Approve a rule change they drafted without a second approver, where your policy requires one
  • Edit or delete entries in the audit trail
  • Change a check result returned by a verification service
Approvals
Approves decision rule and methodology changes, high-risk applications and sanctions dispositions.
Notified about
Possible sanctions matches, high-risk applications, proposed rule changes and verification service errors.

Digital product owner

Digital banking manager, deposit product manager, marketing

Owns the account-opening experience: products offered, wording, disclosures and branding.

Sees

  • Product and application configuration
  • Funnel reporting: applications started, completed and abandoned by step
  • Disclosure versions

Does

  • Adds and retires account products
  • Edits application wording and branding
  • Publishes new disclosure versions after compliance review
  • Reviews where applicants abandon the application

Cannot

  • See individual applicants' documents or check results
  • Change decision rules or due-diligence questions
  • Publish disclosures without compliance approval
Approvals
Disclosure and due-diligence question changes are approved by compliance or the BSA officer.
Notified about
Changes approved or returned, and verification service outages affecting applicants.

Quality reviewer

BSA QA reviewer, compliance testing analyst

Checks a sample of onboarding decisions so the institution can show its CIP is applied consistently.

Sees

  • Samples of approved, declined and resolved applications
  • The checks, documents and reasons behind each decision

Does

  • Draws samples by product, channel, specialist or exception reason
  • Records whether each decision was supported
  • Returns findings for follow-up

Cannot

  • Change the original decision
  • Review their own work
Approvals
Their findings go to the BSA officer, who decides on follow-up.
Notified about
New review samples and follow-up completed on their findings.

Auditor or examiner (read-only)

Internal auditor, external auditor, regulatory examiner (under temporary access)

Tests the Customer Identification Program without being able to change anything.

Sees

  • Applications and CIP records within the scope granted
  • Decision rules and their history
  • Program reports and the audit trail

Does

  • Searches and reads records within their scope
  • Exports records and reports they have been given access to, with each export logged

Cannot

  • Change, approve or delete anything
  • See records outside the scope and dates granted
  • Keep access after it expires
Approvals
Their access is approved by the BSA officer or an administrator, with a scope and an end date.
Notified about
Nothing by default; access granted and expiring is confirmed to the person who approved it.

Administrator

Application administrator, digital banking systems administrator

Manages staff users, roles and integrations, without access to applicant data.

Sees

  • Users, roles and teams
  • Integration status for core, verification and screening services
  • The record of permission changes

Does

  • Adds and removes users, or maps them from single sign-on groups
  • Assigns roles and teams
  • Monitors integration health and raises issues
  • Runs access review reports

Cannot

  • Open applications or document images
  • Change decision rules
  • Grant themselves a compliance role without the BSA officer
Approvals
Role changes that grant access to applicant data are approved by the BSA officer.
Notified about
Integration errors, access reviews coming due and accounts not used for a period your policy sets.

Permissions at a glance

ActionApplicantSpecialistBSA officerProduct ownerQA reviewerAuditorAdmin
Submit an applicationOwn work onlyFullNo accessNo accessNo accessNo accessNo access
View check results and documentsNo accessOwn work onlyFullNo accessView onlyView onlyNo access
Request more informationNo accessOwn work onlyFullNo accessNo accessNo accessNo access
Resolve an exceptionNo accessOwn work onlyFullNo accessNo accessNo accessNo access
Clear a possible sanctions matchNo accessNo accessApprovesNo accessNo accessNo accessNo access
Approve a high-risk applicationNo accessNo accessApprovesNo accessNo accessNo accessNo access
Change decision rulesNo accessNo accessApprovesNo accessNo accessView onlyNo access
Edit products and wordingNo accessNo accessView onlyFullNo accessNo accessNo access
Publish disclosuresNo accessNo accessApprovesFullNo accessView onlyNo access
Record quality review findingsNo accessNo accessView onlyNo accessFullView onlyNo access
View audit trailNo accessNo accessView onlyNo accessView onlyView onlyView only
Manage users and rolesNo accessNo accessApprovesNo accessNo accessNo accessFull
  • Full
  • Own work only
  • Approves
  • View only
  • No access

How access is controlled

  • Applicants see only their own application. Check results, risk ratings and staff notes are never shown to them.
  • Roles are configured with you during implementation. You can rename them, create custom roles, and limit staff by team, branch or product.
  • Decision rules are changed only with the BSA officer's approval, and every version is kept, so you can show which rules applied to any application on the day it was decided.
  • Staff sign in through your identity provider, and roles can follow its groups. Auditors and examiners get temporary read-only access with a scope and an end date, rather than shared accounts.

Features

What it does

Mobile-first application

An application designed for phones as well as computers, with save-and-return and only the fields your product and policy need.

Document capture and OCR

Identity documents scanned with the device camera, with name, address, date of birth and document number read into the application for the applicant to confirm.

Selfie and liveness check

A selfie compared with the document photo, with a liveness check to detect photos of photos, screens and masks.

Identity verification

Applicant information checked against the documentary and non-documentary verification sources configured for your institution.

Sanctions screening

Applicants and, for businesses, beneficial owners screened against OFAC lists and other lists you choose before an account opens.

Due-diligence questions

Questions about expected activity, occupation and source of funds asked according to product and answers, and stored with the application.

Beneficial ownership

For business accounts, beneficial owners and a controlling person identified and verified, with the certification captured.

Customer risk rating

A starting risk rating calculated from your methodology and passed to your AML monitoring.

Exception queue

Applications that do not clear routed to staff with the reasons, and worked to a recorded resolution.

Configurable decision rules

Your institution decides which results proceed, which go to review and which are declined; the rules are versioned and every change is recorded.

Electronic disclosures and consent

Account agreements and disclosures presented with E-SIGN consent, and the version each applicant accepted kept.

CIP record

For each customer, the information collected, the verification methods used, results, discrepancies and how they were resolved, retained under your schedule.

Integrations

How it connects to your systems

Connects toHowWhat flows
Core bankingApproved applications opened in your core system, and existing member or customer records checked to avoid duplicates, mapped during implementation.Out: new customer and account records. In: existing customer matches and account numbers.
Identity verification servicesDocument authentication, OCR, liveness and data-source checks performed through the identity verification services configured for your institution.Out: document images, selfie and applicant data. In: check results and reasons.
Sanctions screeningApplicants screened through your existing screening system or the screening service configured for the product.Out: names and identifying details. In: screening results and dispositions.
AML monitoringCustomer risk ratings, due-diligence answers and beneficial ownership passed to Moraph's AML & SAR Automation Hub or your own monitoring system.Out: risk ratings, CIP and due-diligence data.
Account fundingAfter opening, the applicant is handed to the funding method your institution already uses; Moraph does not hold or move funds.Out: account details for funding hand-off.
Website and digital bankingThe application starts from your website or digital banking, with your branding, and can hand the new customer to digital banking enrollment.In: product selection and source. Out: enrollment hand-off.
Single sign-onStaff sign in through your identity provider (SAML or OpenID Connect).In: user identity and group membership for role assignment.

Each integration is confirmed in discovery and specified in the design. See how an engagement progresses.

Security and privacy

How your data is protected

Single sign-on

Staff sign in through your identity provider, so your password and multi-factor policies apply.

Role-based access

What each person can see and do follows their role; changing decision rules is separate from working exceptions.

Biometric data handling

Selfies and liveness data are used only for verification, with notice and consent captured, and retained or deleted under the schedule you set to meet applicable biometric privacy laws.

Encryption and keys

Client data, including document images, is encrypted, with keys Moraph staff cannot use without explicit, time-bound authorization.

Complete audit trail

Every application, check result, decision, rule change and export is logged with the person or rule and time, and cannot be edited.

Data residency

Data stays in the hosting region you choose: the United States, the United Kingdom or Australia.

Company-wide controls, independent audits (SOC 2 Type II and ISO/IEC 27001) and data residency are described in our Trust Center, where you can request the evidence pack.

Reporting

What you can report on

11 standard reports, grouped by who uses them. Each shows who it is for, how it can be broken down, how it is delivered and what it is used for. The data behind them is also available to your own reporting tools.

Operational

Exceptions by age

For onboarding team leads and the BSA officer

Every open exception with its reason, age, assignee and status, oldest first.

Break down by
Reason, Specialist, Product, Age band
Delivered as
Live dashboard; CSV export
Used for
Keeping applicants from waiting and balancing work across the team.

Verification service status

For administrators and onboarding team leads

Calls to verification and screening services, errors and time-outs, and applications affected.

Break down by
Service, Error type, Period
Delivered as
Live dashboard; email alert
Used for
Spotting service problems before they hold up applicants.

Application funnel

For digital product owner and marketing

Applications started, completed and abandoned at each step, by channel and product, without personal data.

Break down by
Step, Product, Channel, Device type, Period
Delivered as
Live dashboard; CSV export
Used for
Finding where applicants give up and simplifying those steps.

Compliance

Verification results

For bSA officer

Results of each check across applications, with failure and mismatch reasons and how they were resolved.

Break down by
Check, Result, Reason, Product, Period
Delivered as
Live dashboard; PDF and CSV export
Used for
Understanding how the CIP performs and where exceptions come from.

Sanctions screening dispositions

For bSA officer

Possible matches raised at onboarding, who reviewed each, and whether it was cleared or confirmed.

Break down by
List, Disposition, Reviewer, Period
Delivered as
Live view; PDF and CSV export
Used for
Evidencing that every possible match was reviewed before an account opened.

Risk ratings at onboarding

For bSA officer and compliance committee

Customers opened by starting risk rating, with the factors behind high ratings.

Break down by
Risk rating, Product, Customer type, Channel, Period
Delivered as
Live dashboard; PDF for committee packs
Used for
Board and committee reporting on the risk profile of new customers.

Beneficial ownership

For bSA officer

Business accounts opened with the number of beneficial owners and controlling persons identified, verified and screened.

Break down by
Entity type, Verification result, Period
Delivered as
Live view; CSV export
Used for
Showing that beneficial ownership was collected and verified for every legal entity customer.

Audit and exam

CIP record

For bSA officer, internal audit and examiners

For a selected customer, the information collected, verification methods and results, discrepancies, their resolution and the rules that applied.

Break down by
Customer, Application, Date range
Delivered as
On request in the product; PDF export
Used for
Answering CIP testing requests without assembling records by hand.

Decision rule history

For bSA officer and examiners

Every version of the decision rules and risk-rating methodology, who proposed and approved each change, and when it took effect.

Break down by
Rule, Version, Approver, Change date
Delivered as
Live view; PDF and CSV export
Used for
Showing that the CIP's automated decisions were approved and controlled.

Quality review results

For quality reviewers, team leads and the BSA officer

Sampled applications, the reviewer's finding, and where reviewers disagreed with the original decision.

Break down by
Specialist, Exception reason, Finding type, Period
Delivered as
Live dashboard; CSV export
Used for
Targeting training and showing that decisions are checked.

Audit trail extract

For internal audit and examiners

Who or which rule did what, when and why for a selected application, customer or period.

Break down by
Record, User or rule, Action, Date range
Delivered as
On request in the product; CSV and PDF export
Used for
Answering examiner and auditor requests for evidence.

Exports, access and evidence

  • Every report can be exported to CSV, and summary and evidence reports to PDF. Reports can be scheduled to arrive by email for the people entitled to see them.
  • Funnel reporting for product and marketing teams uses counts only and never shows applicants' personal data or documents.
  • Application, CIP and risk-rating data is available through the Moraph Work API, and can be delivered to your data warehouse or AML system.
  • Reports respect each viewer's role: a specialist sees their team's work, the BSA officer sees the whole program, and examiners and auditors can be given read-only access to reports and the audit trail.
  • Compliance and audit reports can be run as of a past date and give the same result each time. Running and exporting a report is itself recorded in the audit trail.

Deployment

Where and how it runs

Moraph cloud

Hosted and operated by Moraph in the United States region. United Kingdom and Australia regions are available for institutions outside the US.

Dedicated environment

A single-tenant environment for institutions whose policies require isolation, scoped in the proposal.

Branch-assisted use

The same application can be used by staff in a branch or on a tablet with the applicant present, with the channel recorded.

Security controls, independent audits and data residency are set out in our Trust Center. Engagement models and what drives a quotation are on Working with Moraph.

Implementation

What a rollout involves

The general phases are on Working with Moraph. For this product, they involve the following.

CIP and policy review

We review your CIP procedures, risk-rating methodology and due-diligence requirements with your BSA officer and translate them into decision rules.

Products and content

Account products, eligibility questions, disclosures and branding are configured, and the application is reviewed by your compliance and product teams.

Verification services

Identity verification and screening services are connected and their results mapped to your decision rules.

Core integration

New customer and account creation and duplicate checks are connected to your core system. We need a contact from your core-system team and test access.

Testing

Test applications covering clean passes, mismatches, possible sanctions matches and business accounts are run and reviewed with your BSA officer before launch.

Training and go-live

Onboarding specialists are trained on the exception queue, and the launch is staged by product or channel as you choose.

Limitations

What it does not do

Worth knowing before you evaluate it.

  • Verification results depend on the identity verification services and data sources configured. No check is conclusive on its own, and your institution decides how results are used under its CIP.
  • Some applicants cannot complete document capture or a liveness check, for example because of their device, document type or a disability. Your procedures should provide another way to open an account, and the product supports routing them to staff.
  • It does not replace your BSA officer's judgment. Decision rules are set and approved by your institution, and the product applies them as configured.
  • It does not hold, move or fund accounts. Funding uses your existing methods, and accounts are opened in your core system.
  • It is not a transaction monitoring system; ongoing monitoring happens in your AML system, such as Moraph's AML & SAR Automation Hub.
  • It is designed for US CIP and due-diligence requirements. Onboarding in other countries may need different documents, checks and disclosures.
  • How long an application takes depends on the applicant and on any exception review; the product does not promise an account-opening time.
  • Lending applications and credit decisions are not included.

Evaluation checklist

What to test in a demonstration or pilot

Questions worth putting to us, and to any other vendor you are considering.

  1. Complete an application on a phone yourself, then try one where you stop and return later
  2. Run test applications with an address mismatch, a failed liveness check and a possible sanctions match
  3. Check that each check's result and reason would satisfy your examiners
  4. Open a business account with two beneficial owners and review the certification captured
  5. Change a decision rule and review the approval and version history
  6. Pull the CIP record for one test customer and compare it with what your procedures require

Questions

Frequently asked questions

How long does it take to open an account?

That depends on the applicant, the product and whether any check needs review. Applications that pass every check proceed under your rules without waiting for staff; exceptions take as long as your team needs to resolve them.

What happens if an applicant cannot complete the selfie or document scan?

They can choose another way to verify, and the application is routed to your staff, who can verify identity by other methods your CIP allows, online or in a branch.

Which identity verification services do you use?

Verification is performed through the services configured for your institution during implementation. If you already contract with a provider, we discuss connecting it.

How are selfies and biometric data handled?

They are used only to verify identity, with notice and consent captured in the application, and retained or deleted under the schedule you set. Review the requirements of states where you have applicants with your counsel.

How is it priced?

As a subscription, usually measured by application volume, with verification service charges and implementation priced separately. See Working with Moraph for what drives a quotation.

Is there an accessibility conformance report?

Ask for one through the procurement request form at /how-to-buy/request, naming the version you are evaluating.

Next steps

Evaluate Digital Member Onboarding (KYC/CIP)

Buying through a formal procurement? See How to buy for purchasing routes, accessibility conformance reports and company information. Documentation: Digital Member Onboarding (KYC/CIP) guides on docs.moraph.com (getting started and security guides are public; setup, administration and integration guides are for client accounts). Support: Digital Member Onboarding (KYC/CIP) support guide.