Interview guide · Corporate and office roles
KYC analyst interview questions
In short
Good KYC interview questions test whether an analyst understands customer due diligence, beneficial ownership, sanctions and PEP screening, red flags for money laundering and when to escalate, and whether they can work accurately at volume without cutting corners. Below are 32 questions for KYC, AML and compliance analysts, with what to listen for, red flags, sample answers and a scorecard.
KYC (know your customer) analysts verify who a bank's or fintech's customers are, understand what they do and how they'll use the account, screen them against sanctions, PEP and adverse media lists, and assign a risk rating. AML analysts take that further, reviewing transaction alerts and drafting the narrative behind a suspicious activity report. Many banks and BPO providers hire these roles in large classes for onboarding, periodic review and remediation projects, where analysts are measured on cases per day and quality scores. The job needs accuracy, skepticism and a strong sense of when something is above their pay grade.
Use these questions in a structured interview of 45 to 60 minutes, with the same questions for every candidate at a level. For entry-level analysts, focus on the fundamentals, attention to detail and situational questions, and pair the interview with a short case review exercise. For experienced and senior analysts, add the advanced group and expect precise answers on regulations, entity structures and SAR narratives.
What to look for in a kyc analyst
- Regulatory foundationAnalysts don't need to be lawyers, but they need to know what the Bank Secrecy Act, customer identification and customer due diligence rules require, and why.
- Attention to detailA transposed date of birth, a mismatched address or a missed ownership layer can let a sanctioned party through or block a legitimate customer.
- Professional skepticismDocuments can be forged and stories can be convenient. Good analysts ask whether the explanation makes sense for this customer.
- Judgment on escalationThe job isn't to make every decision; it's to recognize what needs a second look and escalate with clear reasoning.
- Integrity and confidentialityAnalysts handle sensitive personal data and must never tip off a customer about a SAR. Lapses here are serious legal problems.
- Productivity with qualityMost KYC teams work to case targets. You need people who can hit them without skipping steps.
Opening questions
Walk me through the KYC work you've done. What kinds of customers and what kinds of reviews?
- Why ask it
- Sets the baseline: retail vs corporate, onboarding vs periodic review vs remediation.
- A strong answer
- Specific about customer types, case volume per day, systems and the stage of the process they owned.
- Red flags
- Vague or can't describe a single case end to end.
In your own words, what is the purpose of KYC?
- Why ask it
- Tests whether they understand the why, not just the checklist.
- A strong answer
- Preventing the bank from being used for money laundering, terrorist financing, sanctions evasion and fraud, by knowing who the customer is and what normal activity looks like.
- Red flags
- Describes it only as collecting ID documents.
What's the difference between KYC, CDD and EDD?
- Why ask it
- Basic terminology check.
- A strong answer
- KYC as the overall program; CDD as standard due diligence on identity, ownership and nature of the relationship; EDD as extra measures for higher-risk customers.
- Red flags
- Uses the terms interchangeably.
How many cases a day did you complete, and what was your quality score?
- Why ask it
- Checks productivity and quality awareness.
- A strong answer
- Knows their numbers and how quality was measured, and can explain any trade-off they managed.
- Red flags
- Doesn't know or dismisses targets.
Technical KYC and AML knowledge
What does a customer identification program require at account opening?
- Why ask it
- Tests knowledge of the US CIP rule under the USA PATRIOT Act.
- A strong answer
- Collecting at minimum name, date of birth for individuals, address and an identification number, verifying identity by documentary or non-documentary methods, keeping records and checking government lists.
- Red flags
- Can't list the core data points.
How do you identify beneficial owners of a legal entity customer?
- Why ask it
- Tests FinCEN's customer due diligence rule.
- A strong answer
- Individuals owning 25% or more directly or indirectly, plus one individual with significant control such as a CEO or CFO, verified and documented through the ownership chain.
- Red flags
- Stops at the first layer of ownership.
A company is owned 50% by a holding company, which is owned 60% by an individual. Is that individual a beneficial owner?
- Why ask it
- Tests indirect ownership math.
- A strong answer
- Yes: 50% times 60% is 30% indirect ownership, above the 25% threshold.
- Red flags
- Can't calculate or ignores indirect ownership.
What is a PEP, and how does PEP status change your review?
- Why ask it
- Checks understanding of politically exposed persons.
- A strong answer
- A person with a prominent public function, plus family and close associates; triggers EDD such as source of wealth and funds and senior management approval, depending on policy.
- Red flags
- Thinks PEPs must be rejected.
How do you handle a potential sanctions match?
- Why ask it
- Tests OFAC screening practice.
- A strong answer
- Compares identifiers such as name, date of birth, nationality and address, documents why it is or isn't a true match and escalates likely matches without delay.
- Red flags
- Clears matches on name spelling alone.
What do you look for in adverse media screening, and how do you avoid false positives?
- Why ask it
- Tests research skills and judgment.
- A strong answer
- Credible sources, relevant offenses such as fraud, corruption or trafficking, matching identifiers and documented reasoning for discounting irrelevant hits.
- Red flags
- Counts any negative article or ignores it entirely.
Name some red flags for money laundering you'd look for in a business customer's file.
- Why ask it
- Checks typology awareness.
- A strong answer
- Complex structures with no clear purpose, high-risk jurisdictions, cash-intensive business inconsistent with its size, nominee directors, reluctance to provide information, activity inconsistent with stated business.
- Red flags
- Only mentions large cash deposits.
What is a SAR, and what does it mean that you can't tip off the customer?
- Why ask it
- Tests critical confidentiality knowledge.
- A strong answer
- A suspicious activity report filed with FinCEN; the existence of a SAR must stay confidential, so no one tells the customer it was filed or considered.
- Red flags
- Would tell the customer why their account is under review.
How do you assign a customer risk rating?
- Why ask it
- Tests understanding of risk-based approach.
- A strong answer
- Combines customer type, geography, products and channels, and activity, following the institution's model and documenting overrides.
- Red flags
- Rates on gut feel.
Behavioral questions
Tell me about a case where something didn't add up. How did you find it and what did you do?
- Why ask it
- Tests skepticism and escalation in practice.
- A strong answer
- Specific inconsistency, the extra research done, a clear escalation and the outcome.
- Red flags
- Can't recall ever escalating anything.
Describe a mistake you made in a case and how it was caught.
- Why ask it
- Tests honesty and learning.
- A strong answer
- Owns it, explains the fix and the habit they changed.
- Red flags
- Claims they've never made a mistake.
Tell me about a time you were pressured to approve a case quickly.
- Why ask it
- Tests integrity under business pressure.
- A strong answer
- Held the line on required steps, explained what was missing and offered the fastest compliant route.
- Red flags
- Approved it to keep the relationship manager happy.
Give an example of feedback from QA that you disagreed with. What happened?
- Why ask it
- Tests coachability and professional disagreement.
- A strong answer
- Raised the disagreement with evidence and accepted the outcome, learning either way.
- Red flags
- Dismisses QA or accepts everything without understanding it.
Tell me about a time you suggested a change to a procedure.
- Why ask it
- Tests initiative.
- A strong answer
- Spotted a gap or inefficiency, proposed a fix with evidence and saw it adopted.
- Red flags
- Never questioned a procedure.
Describe how you handled a backlog during a remediation project.
- Why ask it
- Tests productivity and organization.
- A strong answer
- Prioritized by risk, tracked their pipeline, raised capacity issues early and kept quality steady.
- Red flags
- Speed went up and quality fell without them noticing.
Situational questions
A relationship manager tells you a new client is important and the documents will come next week. They want the account opened today. What do you do?
- Why ask it
- Tests independence from the business.
- A strong answer
- Explains that the account can't open without required information, lists what's missing and escalates if pressured.
- Red flags
- Opens it on the promise of documents.
The ownership chart for a corporate client ends at a trust in an offshore jurisdiction. How do you proceed?
- Why ask it
- Tests handling of complex structures.
- A strong answer
- Requests trust documents to identify settlor, trustees and beneficiaries, applies EDD for jurisdiction risk and escalates if information is refused.
- Red flags
- Accepts the trust as the final owner.
The customer's ID looks genuine but the photo seems slightly different from the selfie. What do you do?
- Why ask it
- Tests fraud awareness.
- A strong answer
- Doesn't approve, uses available verification tools, requests additional verification and follows the fraud referral process.
- Red flags
- Approves because the document passed an automated check.
A customer calls asking why their account is frozen and you know a SAR is being considered. What do you say?
- Why ask it
- Tests tipping-off awareness under pressure.
- A strong answer
- Follows the approved script, says the account is under review without detail, and routes the call to the right team.
- Red flags
- Hints at suspicion or explains the investigation.
You notice a teammate copying research notes between cases. What do you do?
- Why ask it
- Tests integrity and team awareness.
- A strong answer
- Raises it with the teammate or supervisor because copied research can hide real risk.
- Red flags
- Ignores it because targets are tight.
You're at 70% of your daily target with an hour left and a complex case in front of you. What do you do?
- Why ask it
- Tests quality versus speed judgment.
- A strong answer
- Works the case properly, flags the situation to the team lead and doesn't skip steps.
- Red flags
- Rushes the complex case to make the number.
Questions for experienced and senior analysts
How would you write the narrative section of a SAR?
- Why ask it
- Tests investigative writing.
- A strong answer
- Covers who, what, when, where, why it's suspicious and how, in clear chronological order, with amounts and accounts, avoiding jargon.
- Red flags
- Writes vague conclusions without facts.
How do you approach a periodic review for a high-risk customer whose activity has changed?
- Why ask it
- Tests ongoing monitoring judgment.
- A strong answer
- Compares expected versus actual activity, requests explanations and documents, updates the risk rating and escalates if unexplained.
- Red flags
- Refreshes documents and ignores activity.
How would you train a new class of KYC analysts to be productive in four weeks?
- Why ask it
- Tests coaching and process knowledge.
- A strong answer
- Fundamentals first, side-by-side case reviews, graded practice cases, ramped targets and early QA feedback.
- Red flags
- Hands over the procedure manual.
How do you see automation and AI changing KYC work, and where should humans stay in the loop?
- Why ask it
- Tests forward-looking judgment.
- A strong answer
- Automation for data collection, screening and low-risk cases; human review for complex entities, true match decisions and suspicious activity, with oversight of model errors.
- Red flags
- Thinks automation can replace judgment entirely, or rejects it outright.
Sample answers
I treat every potential match as real until I can show it isn't. I'd open the list entry and compare every identifier I have: full name and aliases, date of birth, nationality, address, passport or registration numbers. A common name alone isn't enough to clear or confirm. If the date of birth and nationality differ clearly, I document exactly which identifiers don't match and clear it as a false positive, so the next reviewer can see my reasoning. If there's real overlap or I can't rule it out, I stop processing and escalate to the sanctions team the same day, because a true match can mean blocking or rejecting transactions and reporting. I never contact the customer to ask about it.
I'd tell them I understand the client matters and that I want to get it open as fast as possible, but I can't approve it without the required documents. Then I'd make it easy for them: a short list of exactly what's missing and why, and a promise to turn the case around the same day the documents arrive. In my last role this happened often with corporate clients at quarter end. If the relationship manager kept pushing, I'd bring in my team lead rather than argue. An account opened without CDD is a finding for the bank in the next audit, and it puts the relationship manager at risk too, which I usually point out.
Interview scorecard
| Competency | Weight | Strong (4–5) | Weak (1–2) |
|---|---|---|---|
| KYC and AML knowledge | 25% | Explains CIP, CDD, beneficial ownership, sanctions, PEPs and SAR basics accurately. | Confuses core concepts or knows only the checklist. |
| Attention to detail | 20% | Catches inconsistencies in the case exercise and describes self-checking habits. | Misses obvious mismatches in the exercise. |
| Judgment and escalation | 20% | Knows what to escalate, when and how, and documents reasoning. | Escalates everything or nothing. |
| Integrity and confidentiality | 15% | Holds the line under business pressure; clear on tipping-off rules. | Bends rules for relationship managers or would explain investigations to customers. |
| Productivity | 10% | Knows their numbers, manages a pipeline and keeps quality steady. | No awareness of targets or quality slides under volume. |
| Written communication | 10% | Clear, factual case notes and narratives. | Vague notes that another reviewer couldn't follow. |
Score each competency from 1 to 5 straight after the interview, before discussing the candidate with anyone else, then multiply by the weight.
How to structure a KYC analyst interview
For entry-level analysts, a 20-minute phone screen plus a 45-minute structured interview is usually enough, combined with a 30-minute case exercise. Give each candidate the same mock case file: an ID, a proof of address, an ownership chart and a screening hit or two, with three or four planted issues. Ask them to list what they'd check, what they'd escalate and why. Score it against a fixed answer key. The exercise is the best predictor you'll get of accuracy, and our attention to detail interview questions can fill out the rest of that competency.
For experienced and senior analysts, add a panel with a compliance officer and a SAR-writing or EDD exercise. Ask the integrity interview questions of every candidate, not just the ones you're unsure about.
Mistakes interviewers make
- Testing memorized acronyms instead of judgment. A candidate who can define EDD but wouldn't escalate a nominee director is the wrong hire.
- Over-valuing certifications. AML certifications show commitment, but plenty of strong analysts don't have them, especially early in their careers.
- Skipping the case exercise to save time. Interviews alone don't show accuracy.
- Ignoring productivity. Analysts who can't hit case targets after ramp-up struggle in BPO and remediation settings.
- Treating related roles as the same. A claims adjuster or fraud analyst shares the investigative mindset but needs different domain knowledge.
Background checks are standard for these roles, and banks are subject to restrictions on hiring people with certain convictions under federal banking law. Apply FCRA steps for any screening report and check state fair chance rules where you hire.
Hiring KYC analysts in volume
Remediation projects and new product launches often need 20 to 100 analysts at once. Structure makes that manageable. Use a short online assessment or case exercise to screen first, then a structured interview with the same questions and scorecard for everyone, so decisions from different interviewers are comparable. Asynchronous video or AI-assisted first-round interviews can handle scheduling for large classes, as long as every candidate gets the same questions and a human reviews the results.
Plan for ramp-up. A typical new analyst needs three to six weeks to reach full case targets, and early quality scores predict who will make it. Keep a bench of second-choice candidates from each hiring wave, since attrition in the first 90 days is common on high-volume compliance projects.
Frequently asked questions
What are common KYC interview questions?
Expect questions on the purpose of KYC, CIP requirements, the difference between CDD and EDD, identifying beneficial owners, handling sanctions and PEP matches, money laundering red flags, SAR confidentiality and situational questions about pressure from the business.
What AML interview questions should I ask an analyst?
Ask them to describe money laundering red flags for a specific customer type, walk through an alert investigation, explain what goes in a SAR narrative and how they'd handle a customer asking why their account is frozen.
How do I test a KYC analyst's attention to detail?
Use a mock case file with planted inconsistencies, such as a mismatched date of birth, an indirect owner above 25% or an incomplete ownership chain, and score how many they find and how they explain them.
What are compliance analyst interview questions for entry-level candidates?
Focus on fundamentals, accuracy, integrity and coachability: why KYC exists, how they check their own work, what they'd do if pressured to skip a step, and how they'd handle a potential sanctions match.
Do KYC analysts need a certification?
Not usually for entry-level roles. AML certifications help for senior roles, but a strong case exercise and sound judgment predict performance better.