Identifying Common Missteps in Perpetual KYC Implementation by Firms

Perpetual KYC: Misunderstandings Persist in the Financial Sector

For several years, perpetual KYC (pKYC) has been branded as the next evolution in the realm of traditional KYC methods. Yet, misconceptions about its true value persist among firms.

Unlike conventional KYC methods that rely on static and periodic checks, pKYC emphasizes a continuous and automated approach. This paradigm aims to enhance a firm’s responsiveness to evolving circumstances, drastically reducing the risk of compliance issues going unnoticed for extended periods. For instance, if a customer suddenly appears on a sanctions or PEP list, pKYC will instantaneously recognize this change and alert the institution to take appropriate action. In contrast, a traditional KYC process could leave financial institutions unaware of such a change for months, potentially incurring regulatory penalties.

The advantages of this technology extend beyond compliance; it also offers significant cost savings on operational expenses. A report by PwC indicated that medium-sized banks could reduce operating costs by 60 to 80% concerning customer management.

With such monumental benefits, it’s no wonder that the pKYC market is gaining momentum. Research from Market Intelo found that the global pKYC market, valued at $1.2 billion in 2024, is set to grow at a staggering CAGR of 20.3%, reaching $6.5 billion by 2033.

Despite the eagerness to adopt this technology, Stephen Platt, CEO of KYC360 (a branch of Experian), warns that many businesses underestimate the foundational work required for successful implementation.

He states that firms often assume automation will serve as a quick solution without thoroughly evaluating essential elements like data quality and gaining internal support for automated processes. “If foundational data is compromised or teams aren’t aligned, automation can exacerbate existing challenges,” he cautions.

Rethinking the KYC Framework

Before assessing how firms interpret pKYC, it is essential to revisit the often superficial view of traditional KYC. Historically, many businesses treated these processes as mere compliance tasks. Teams dealt with cumbersome, inefficient procedures that relied on limited datasets and rule-based triggers. Once a client was onboarded, a risk score—typically categorized as low, medium, or high—was assigned to their profile.

Elvin notes that risk executives often must contend with limited coverage and blind spots caused by technological, manpower, and financial constraints. “Program leaders often hoped to avoid significant exposure during dormant review periods, trusting that regulators would accept this approach,” he explains.

Elvin highlights that, despite this superficial adherence to KYC, most higher-risk profiles are generally well-managed, leaving hidden risks in lower- or medium-risk clients whose changing activities and profiles may go unnoticed during prolonged review periods. This necessitated continual adjustments to KYC metrics, leading to inefficiency and increased costs.

Redefining pKYC: Beyond Frequency to Real-Time Response

While genuine pKYC entails continuous monitoring for changes, some industry players mistakenly equate it with merely increasing the frequency of scheduled checks. Rather than reevaluating their procedures, many firms shorten their review intervals from annually to biannually, which does not align with the true ethos of pKYC.

Scott Nice, CRO at Label, articulates this misunderstanding, stating, “Many firms misconceive pKYC as heightened frequency. Instead of redefining their architecture, they merely compress review cycles and increase outreach.” He emphasizes that true pKYC should be event-driven, relying on signal detection rather than predefined calendar intervals.

The distinction lies in being proactive rather than task-oriented. Running daily checks on sanctions or PEPs is insufficient if the underlying infrastructure remains fundamentally flawed. Daragh Tracey, a product director at MyComplianceOffice, further warns, “Many firms mistakenly label daily checks as perpetual KYC, leading to inefficiencies and increased costs while exposing firms to greater risk.” He argues that effective pKYC should act as an ongoing monitoring system capable of dynamically responding to real-time risks using rich data analytics.

Tracey elaborates that an advanced pKYC system enables firms to maintain an accurate risk profile that reflects up-to-date information, instantly flagging any risks that may emerge in the customer lifecycle.

Coping with Operational Challenges in Continuous Monitoring

Transitioning from a static KYC process to a continuous one presents numerous challenges for firms. Label’s Nice points out that many organizations still depend on outdated practices, such as spreadsheet-based exception tracking and manual validations, leading to inefficiencies that can compound issues instead of mitigating them.

Moreover, KYC360’s Platt highlights that data and workflows are often disjointed across various teams, complicating the assessment of customer-related risks. “Too much noise can lead analysts to focus on irrelevant alerts rather than genuine risks,” he explains. Aligning operational frameworks is critical for overcoming these hurdles and ensuring that pKYC serves its intended purpose without causing further complications.

Firms must also navigate external challenges, including customer friction, when implementing continuous monitoring. Platt stresses that ongoing monitoring should enhance customer interactions rather than complicate them. Effective pKYC processes should automate outreach and requests strategically to reduce redundancy and improve customer experience.

Difficulties emerge when alerts are not acted upon swiftly, accumulating over time and leading to lapses in customer communication. Nice notes, “Delayed reviews create an unnecessary disconnect between the institution and the customer’s current activities, often leading to broader requests for information that can feel intrusive.” The effectiveness of pKYC relies on timely alert management, allowing firms to maintain operational efficiency while avoiding negative customer experiences.

In a landscape that demands agility and compliance, it is paramount for organizations to embrace pKYC effectively—transforming it from a compliance obligation into a strategic tool that deepens customer relationships and enhances risk management.