OliverWales
Joined 5 years ago
Joined 5 years ago
KYB is vastly more complex than KYC because there are more things that need to be checked, and for each one a large range of acceptable proof documents. There are also many more edge cases e.g. change of business name or structure, foreign beneficial owners etc. that make an end-to-end solution tricky.
There are other players in this space but they tend to be tools to assist human analysts. We want to fully automate the low risk cases so that they never require human intervention.
There's a big difference between the nature of fraudulent documents submitted to our customers today, and the ones that one might create knowing that the system is build with LLMs - we've mostly optimised for the former so far.
I'm also glad to see it took a number of attempts - security through obscurity is not something we want to rely on but the real system requires your identity and will offboard you without explanation at the first hint of misbehaviour.
We'll continue to improve our system to be more vigilant and make fewer assumptions.
For now, we limit the amount of decisioning that is made by an LLM and make as much of the business logic as we can concrete in code. It's mostly used to extract information from documents, crawl websites and identify specific fraud signals.
You can also choose to bucket your customers by risk level and require manual review for higher risk customers (e.g. certain business activities like crypto or gambling, complex ownership structures or foreign UBOs). Ultimately the level of automation vs review is up to the risk appetite of the customer, as they are the one that has to answer to the regulator.