Introduction

The person resource allows the Merchant to retrieve relevant information about individuals in the context of a AML customer due diligence process. The information provided is either clearly referenced in the AML legislation, or is necessary for risk profiling.

Information provided

• Full name and SSN
• Address from the national registry (separate application process needed) or Bisnodes matchit service.
• Search results from Trapets´ list of nordic PEP and RCA
• Search results from sanctions lists (EU/FN and optionally OFAC)
• Signed PDF of the search results, as documentation that the search has been conducted.

Data sources of the person resource

The person resource currently returns information from the following data sources

EU commission

The EU commission owns and updates the list "EU_consolidated"

UN Security council

The UN security council owns and updates the list "UN_global"

Trapets

Trapets AB is a leading provider of Market/Trading Surveillance, AML and KYC solutions. Trapets provide an editorially made list of nordic PEP and RCA, with daily updates, that is considered to have close to 100% coverage in the nordics.

Trapets also facilitates access to the sanction lists.

National registry (DSF)

The address provided in the BankID AML product is provided from the national registry, through the service Infotorget.

Presently a separate application to the national registry is provided to enable this feature. Contact us for more information about this process. We are working with the national registry to make this process easier

If you haven’t enabled this feature BankID AML will only provide the persons residential address from other sources than DSF (See Datasource “Bisnode”)

Bisnode

For merchants that have not yet applied for access to the national registry (DSF), the residential address (postal address) will be delivered.

BankID

The full name and national identity number is retrieved from BankID.

Interpreting the results of the person resource

The different resources in BankID AML returns data to be used in the customer due diligence process.

The sanction_pep resource

The sanction_pep resource contains information retrieved from PEP lists and sanction lists.

If a match is made, a match indicator is also returned, showing how certain the data provider is that it is an actual match, and not a false positive (A match produced by the system that, following subsequent investigation, turns out to be another person). If the match indicator is high (max: 500), the Merchant can trust the match, but if it is low, further investigation would be necessary.

Please note that not all properties will be filled with values for all matches, and there might be null values. This reflects the information that is available about the matched person.

A list of known addresses is sometimes included in the match (retrieved from Trapets). The address list is included in the service, because alternative addresses could be of value to evaluate risk associated with the person, for example by giving a reason for further investigation. Note that the address provided in the address resource (retrieved from the National Registry or residential address collected from Bisnode), will usually be more up to date and of better quality. 

The list of urls will include links to web pages of relevance to the match.

Nnin

The national identity number is returned as part of the person resource. If needed, this can be used for registration of new customers.

Please note that the nnin_altsub attribute returned by the ID Token on the OIDC platform, should not be used for this purpose, only for identifying existing customers.

PEP matches

The information provided in a PEP match can reveal the role and function the person has today / had earlier, that makes / made him a PEP, or why the person is regarded a "Relative or Close Associate" (RCA). A list of known aliases is also provided, if the person is known by several names. Norwegians in the list can usually be matched on Date of birth and name, and the list has close to 100% coverage.

Sanction lists matches

The source property states which sanction list the match comes from. BankID AML provides, by default, results from two sanction lists: EU_CONSOLIDATED (owned by the EU Commission) and UN_GLOBAL (owned by the UN security council). Other sanction list, such as OFAC and HM Treasury, can be included.

Please note that these sources often do not have the SSN or birth date on the persons sanctioned. If matched by name only, a person should not be excluded from entering into a customer relationship without further investigation.

Empty results

If an empty list is returned, this means that a successful search has been conducted and no matches where made. 

This does not necessarily mean that there is no risk associated with this customer, and the Merchant is advised to evaluate if further examinations are needed.

The address resource

The address resource will return information from the national registry and/or from Bisnode if you have not yet applied for access to the national registry.

.

Please note that some matches might contain special values in the personStatus and adressStatus fields. Examples of this could be that the person has a hidden address, or as moved abroad. This could be valuable information for the Merchant, to understand why no address is not returned. 

Use cases for the person resource

B2C and B2B contexts

The person resource is helpful to retrieve information about individuals in a B2C context, but is also used in a B2B context, to retrieve information about relevant roles in the organizations (beneficial owners etc), provided that you already know who they are. The person resource can be successfully combined with the organization resource. In such cases, the merchant will first retrieve role  information about the company from the organization, then use the person resource to get information about the provided individuals, often combined with information provided by the customer himself.

Usage in customer onboarding process or in ongoing customer due diligence

Typically, the person resource will be used before or as part of the onboarding prosess, often combined with acquiring legitimation with BankID. But the person resource can also be used in an ad hoc fashion, when there is reason for suspicion, or when there is reason to believe that the information has changed. If you have retrieved the SSN and name of the customer, you can at any time check the customer again.