Introduction
Perpetual KYC, frequently abbreviated to pKYC, is the practice of continuously refreshing customer due diligence as new information emerges, rather than relying on periodic reviews at fixed intervals. The approach reflects a shift in AUSTRAC and international supervisory expectations: customer due diligence should be a living process that responds to changing risk.
Adopting pKYC effectively requires significant investment in data, integration, and workflow, but the benefits — both in compliance effectiveness and customer experience — can be substantial.
What Perpetual KYC Means (Plain English)
Traditional KYC operates as a cycle: customers are onboarded with full due diligence, then reviewed periodically — perhaps annually or every three years — depending on their assessed risk. Between reviews, the customer’s risk profile may change significantly without the insurer being aware.
Perpetual KYC closes this gap. Instead of waiting for the next scheduled review, the firm continuously monitors data sources for changes that affect the customer’s risk profile. Where material changes are identified, due diligence is refreshed automatically or escalated for review.
Why Perpetual KYC Matters
Customer risk profiles change for many reasons:
- Changes in beneficial ownership or control
- New PEP relationships emerging through promotion or appointment
- Adverse media coverage of the customer or connected parties
- Changes to sanctions or designated person lists
- Significant changes in transaction or claims activity
Under traditional cyclical KYC, these changes may not be reflected in the customer file for months or years. Perpetual KYC ensures that risk relevance is current.
The Australian Regulatory Context
AUSTRAC has been clear that customer due diligence is not a one-off activity. The ongoing customer due diligence obligations under the AML/CTF Act 2006 require reporting entities to monitor customers, update information as appropriate, and apply enhanced due diligence where risk changes.¹,²
The AML/CTF Amendment Act 2024 and AML/CTF Rules 2025 modernise these obligations and align more closely with international standards on ongoing customer due diligence. Tranche 2 expansion from 1 July 2026 extends similar expectations to a broader range of regulated entities.³
Common Challenges
Adopting perpetual KYC presents several practical challenges:
- Data integration across screening, transaction monitoring, and customer systems
- Defining trigger events that warrant action versus those that do not
- Managing alert volume without overwhelming compliance teams
- Maintaining customer experience through proportionate intervention
- Ensuring documentation supports demonstration of compliance to AUSTRAC
Building a Perpetual KYC Capability
Effective pKYC programmes typically include several components, aligned with FATF Recommendations on ongoing customer due diligence:⁴
- Continuous screening of customers against sanctions, PEP, and adverse media data
- Event-based triggers from external data sources, such as ASIC company changes
- Behavioural triggers from transaction and claims monitoring
- Structured workflow for alert disposition and case management
- Reporting that demonstrates ongoing monitoring to internal and external stakeholders
Customer Experience Considerations
Done well, perpetual KYC improves customer experience as well as compliance. Customers are not asked for the same information repeatedly through scheduled reviews; instead, intervention occurs only when something material changes.
Done poorly, pKYC can generate excessive alerts and unnecessary customer outreach, eroding trust and creating operational burden. Calibration of triggers and disposition workflow is therefore essential.
Role of Analytics and Integration
Perpetual KYC depends on the integration of multiple data sources, real-time analytics, and structured workflow. Where these components operate in isolation, pKYC remains aspirational. Where they operate as an integrated capability, pKYC delivers genuine value.
Related Topics
Know Your Customer (KYC) in insurance
AML/CTF compliance in Australian insurance
Sanctions screening in insurance
Sources & further reading
¹ Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) — ongoing customer due diligence
² AUSTRAC — customer due diligence guidance
³ AML/CTF Rules 2025 — programme design requirements
⁴ Financial Action Task Force (FATF) — Recommendations on ongoing CDD
