MarcusWelcome to VoraPrep Audio Office Hours. Today we're walking through a core operations task: bringing on a new client, which includes everything from verifying their identity to transferring their assets from another firm.

EmmaThis comes up all the time. A new client is excited to work with you, but as an Ops Pro, you know there’s a whole regulatory checklist you have to complete, and getting it wrong is not an option.

MarcusExactly. These aren't just firm policies; they are foundational rules from FINRA and federal law. They exist to protect the client, the firm, and the entire financial system from crime. So let's start with the first big requirement when you open any new account: Know Your Customer.

EmmaOkay, the KYC rule. I think most people have heard that term, but what does it mean in practice? What are we required to *know*?

MarcusKYC, which is FINRA Rule 2090, is about understanding the client’s complete financial picture. We need to make a reasonable effort to gather what the rule calls "essential facts."

EmmaAnd "essential facts" means more than just their name and address, right?

MarcusMuch more. We're talking about their financial status, investment objectives, their experience with different types of investments, and their tolerance for risk. Think of it like a doctor taking a patient's medical history. You can't prescribe the right treatment without understanding their condition, allergies, and lifestyle. In finance, you can't make suitable recommendations without knowing the client's financial health.

EmmaSo the main goal of KYC is suitability. Making sure the advice and products fit the client.

MarcusThat's the primary driver. Operations staff are on the front line of making sure all that data is collected accurately and maintained, because the entire relationship is built on it. FINRA Rule 4512 reinforces this by specifying what needs to be on record, like occupation, employer, and citizenship.

EmmaGot it. So KYC is about understanding the client’s financial story. But there’s another acronym that always comes up here: CIP. How is that different?

MarcusGreat question, because they are often confused. CIP stands for Customer Identification Program. This isn't a FINRA rule; it's a requirement under the Bank Secrecy Act and the Patriot Act.

EmmaSo this sounds more like a security and anti-crime measure.

MarcusPrecisely. If KYC is about understanding the customer's financial story, CIP is about verifying the identity of the storyteller. Its purpose is to combat money laundering and terrorist financing. It requires the firm to verify that a new client is, in fact, who they say they are.

EmmaWhat specific information do you need for the CIP?

MarcusThe program is very specific on this. You must obtain four key pieces of information before opening the account: their full name, date of birth, residential address, and a tax identification number, like a Social Security number.

EmmaAnd how do you verify that information? Just take their word for it?

MarcusNo, you have to verify it through reliable, independent sources. This can be documentary, like asking for a valid driver’s license or passport. Or it can be non-documentary, like using a credit report or cross-referencing information against a public database.

EmmaYou mentioned CIP is about preventing crime. Is there a specific check you have to run?

MarcusYes, and this is a critical, testable point. Before the account is officially opened, the firm must check the client's name against the Office of Foreign Assets Control list—the OFAC list.

EmmaAnd what is the OFAC list?

MarcusIt’s a list of Specially Designated Nationals, or SDNs. These are individuals and entities that the U.S. government has identified as being involved in activities like terrorism or narcotics trafficking. You are prohibited from doing business with anyone on that list.

EmmaThe timing seems crucial there. You said *before* the account is opened.

MarcusIt is non-negotiable. The OFAC check is a gate. If the person is on the list, you stop. You cannot open the account.

EmmaOkay, let's nail down this distinction because it feels like a classic exam trap. KYC and CIP both happen at account opening. Both involve collecting client data. How do we keep them straight?

MarcusHere’s the cleanest way to separate them. KYC is about suitability. It asks: *What are this person's financial needs?* CIP is about identity. It asks: *Is this person who they claim to be?*

EmmaThat’s helpful. KYC is for financial planning; CIP is for crime prevention.

MarcusExactly. KYC is an ongoing process—you need to keep their information updated if their situation changes. CIP is primarily a one-time gate at the beginning of the relationship.

EmmaPerfect. So, we've onboarded our client, satisfying KYC and CIP. Now, they want to transfer their account from their old broker. This is where ACATS comes in.

MarcusRight. The Automated Customer Account Transfer Service, or ACATS, is the system that makes this happen smoothly and according to FINRA rules. It standardizes the whole process.

EmmaSo as the new firm, the "receiving firm," what's our first step?

MarcusThe client will sign a Transfer Initiation Form, or TIF. Your firm submits that form electronically through ACATS to the client's old firm, which is called the "carrying firm."

EmmaOkay, the TIF is sent. Now the ball is in the carrying firm's court. How long do they have to respond?

MarcusThe timeline is very specific. The carrying firm has one business day from receipt of the TIF to validate the transfer instructions.

EmmaJust one day. What would be a valid reason for them to reject it?

MarcusIt has to be a legitimate issue, like the account number doesn't match, the signature is missing, or the account is for an asset type they don't support. They can't just delay it because they're losing a client. If they reject it, they have to state the reason.

EmmaLet's say everything is correct and they validate the transfer. When does the client actually get their assets moved over?

MarcusOnce validated, the carrying firm has three business days to complete the transfer of the assets to the receiving firm.

EmmaSo it’s a one-day clock for validation, and a three-day clock for the actual transfer.

MarcusYou got it. One business day to validate, three business days to transfer. Memorize that rhythm: one day, three days.

EmmaLet's apply this with an exam-style scenario. An Ops Pro gets a new account application. The client provides their name, address, and social security number. The pro verifies this info using a public database and runs an OFAC check. What has the firm primarily done, and what big step is still missing?

MarcusOkay, let's break that down. The pro collected the key identifiers—name, address, tax ID—and verified them. They also ran the mandatory OFAC check. This squarely checks all the boxes for the Customer Identification Program, or CIP.

EmmaSo, they’ve satisfied the CIP requirements. What's missing?

MarcusThey haven't gathered the 'essential facts' for KYC. They know *who* the person is, but they don't know anything about their financial situation, their investment goals, or their risk tolerance. They've verified the identity, but they haven't done the work to ensure suitability. So the missing piece is KYC.

EmmaThat really clarifies the difference. One is done, the other hasn't been started.

MarcusCorrect. The exam will test if you can see which set of obligations has been met and which has not.

EmmaAlright, let's try another one, this time on transfers. A customer wants to transfer their account from Firm X to your firm, Firm Y. On Monday, you submit the TIF to Firm X. Assuming no holidays, what are the deadlines?

MarcusOkay, the clock starts when the carrying firm, Firm X, receives the TIF on Monday. The first deadline is for validation. They have one business day.

EmmaSo they have to validate or reject the transfer by the end of the day on Tuesday.

MarcusExactly. Now, let's assume they validate it on Tuesday. The second clock starts for the asset transfer. They have three business days.

EmmaSo counting from Tuesday, that would be Wednesday, Thursday, Friday. The assets must be transferred by the close of business on Friday.

MarcusThat's the timeline. One business day to validate, three business days to transfer. The exam loves to test those specific timelines, so knowing the 1-and-3-day rule is critical.

EmmaThis kind of focused, step-by-step breakdown is so important. For our listeners who want to practice more questions like this, VoraPrep can help.

MarcusThat's right. VoraPrep is a full exam-prep app — lessons, practice questions, and an AI tutor in one place. You can work through these concepts and test yourself until they become second nature. Just go to Vora Prep dot com to get started. It's free to try.

EmmaSo to wrap this all up, what are the absolute key takeaways for our listeners on account onboarding and transfers?

MarcusI'd say there are three main pillars. First, KYC is about understanding your customer's financial profile to make suitable recommendations. Think suitability.

EmmaSecond, CIP is about verifying your customer's identity to prevent financial crimes. Think verification.

MarcusAnd third, for ACATS transfers, remember the rhythm: one business day for the carrying firm to validate the transfer form, and three business days to move the assets once it's validated.

EmmaKYC for suitability, CIP for verification, and ACATS is one day plus three days.

MarcusThat’s the core of it. Master those distinctions and timelines, and you'll be in great shape for these questions on the exam.

EmmaThanks, Marcus. And thanks to all of you for joining us for Office Hours. Keep up the great work.

MarcusYou're on the right track. We'll talk to you next time.