FATCA is the US Foreign Account Tax Compliance Act, which requires foreign financial institutions to identify and report accounts held by US persons or face withholding on certain US-source payments. It is a tax-transparency law, but the identification work it drives overlaps heavily with KYC.
What is FATCA, in plain English?
FATCA is a tax law wearing a KYC costume. Its purpose is to stop US taxpayers from hiding money in offshore accounts. It does this by pushing the obligation outward: foreign financial institutions around the world must identify accounts held by US persons and report them, or face a withholding penalty on certain US-source payments they receive.
That penalty is the enforcement lever. A foreign bank that refuses to identify and report US account holders risks having a slice withheld from US-source income, which is a strong incentive to comply. So while FATCA is not an AML law, it drives banks worldwide to collect and document customer information they might otherwise not gather.
The overlap with KYC is the practical point. FATCA classification and reporting use much of the same identity information as customer due diligence, so the two programs draw on the same underlying data. A firm that handles both well is doing a lot of the identity work once and using it twice.
FATCA versus AML due diligence
What changes | FATCA | AML due diligence |
Primary goal | Tax transparency for US persons. | Detecting and preventing financial crime. |
Trigger | Account held by a US person. | Onboarding and ongoing monitoring of any customer. |
Data used | Identity, residency, tax status. | Identity, source of funds, risk profile. |
Overlap | Reuses much KYC identity data. | Reuses much FATCA identity data. |
Who is involved?
Who | Their role |
Foreign financial institutions | Identify US account holders and report them, or face withholding on US-source payments. |
US persons | The account holders whose accounts must be identified and reported. |
The IRS | Administers FATCA and receives the reported account information. |
KYC and tax teams | Collect the identity and tax data that serves both FATCA and AML purposes. |
What it looks like in practice
In practice
A bank outside the US onboards a customer who was born in the US but has lived abroad for decades. The FATCA classification process flags the US indicia, but the customer's file is thin: no clear tax documentation and inconsistent identity records.
The gap in FATCA data turns out to be an early warning that the KYC file is weak too, because both draw on the same underlying identity information. The team strengthens the record once and satisfies both requirements. Treating the two as separate silos would have meant chasing the same customer twice.
Why it matters to operators
Even though FATCA is a tax law, it sits right next to your AML program because it draws on the same identity data. FATCA classification and reporting run on customer identification and documentation, which is exactly what KYC produces. Recognizing that overlap lets you avoid duplicated effort and use one clean identity record for both purposes.
The overlap also works as a diagnostic. Gaps in FATCA data often reveal weaknesses in KYC, and the reverse is true too. Weak FATCA documentation can be an early sign that your customer due diligence is thin. Treat the two as related identity-data duties rather than fully separate silos, and each one strengthens the other.
Operator notes
- Tax law, KYC overlap. FATCA is about tax transparency, but it runs on the same identity data as your AML program.
- Withholding is the stick. Non-compliant foreign institutions face withholding on US-source payments, which drives global adoption.
- Gaps cut both ways. Weak FATCA data can signal thin KYC, and thin KYC can signal FATCA problems.
- Reuse the data. Collect identity information once and apply it to both FATCA and customer due diligence.
- US indicia matter. Signs a customer may be a US person trigger FATCA review, even for long-term expatriates.
Quick questions
Is FATCA an AML law?
No. It is a tax-transparency law aimed at US persons with offshore accounts. It matters to AML teams because it relies on the same customer identification and documentation that KYC produces.
What happens if a foreign bank ignores FATCA?
It can face withholding on certain US-source payments it receives. That penalty is the mechanism that pushes foreign financial institutions worldwide to identify and report US account holders.
How does FATCA overlap with KYC?
Both rely on customer identity and documentation. FATCA classification uses much of the same information as customer due diligence, so the two programs can share the same underlying data.
Who does FATCA apply to?
Foreign financial institutions that must identify and report accounts held by US persons. The US persons themselves are the account holders whose information gets reported.
Can weak FATCA data indicate an AML problem?
Yes. Because they draw on the same identity data, gaps in FATCA documentation often reveal that KYC is thin, and vice versa. The two act as cross-checks on each other.
Who administers FATCA?
The IRS administers FATCA and receives the reported account information. Many countries also have agreements that shape how institutions report under it.