Auditors do not read every page of every KYC pack. They design a sample that stresses the products and customer types that carry the highest money-laundering risk for your book.
Identity and ownership
We look for a coherent story: who the customer is, who owns them, and whether evidence matches the claimed structure. Photocopied passports without a clear collection date, or ownership charts that stop one layer short of a natural person, are common findings in Taiwanese remittance and trade clients.
Purpose and expected activity
A CDD file that never states expected monthly volumes or corridors invites weak monitoring later. During anti-money-laundering audit checks we compare those expectations to the first months of activity — not to punish growth, but to see whether anyone refreshed the risk rating when behaviour changed.
Source of funds language
Generic phrases such as “business income” rarely survive supervisory questions. We prefer files that name the economic activity in concrete terms and keep corroborating invoices or bank statements for higher-risk profiles.
Practical tip
Before an engagement, ask your relationship managers to pull five files they consider “typical” and five they consider awkward. Awkward files teach auditors more about control culture than polished ones.