Jeremy has applied over the internet to open a bank account. Having established and verified Jeremy's identity by post, the bank can also do which one of the following, as an additional Customer Due Diligence measure?

• A. Ring Jeremy on a home or business number which has been verified by the bank.
• B. Undertake a Google search on Jeremy to seek confirmation of his identity.
• C. Ask Jeremy for a written reference.
• D. Wait 30 days before activating the account for Jeremy.

Answer: (C)

The level of due diligence here is about obtaining external verification to confirm the applicant’s information beyond the initial identity check. After identity has been established and verified by post, asking for a written reference provides a third-party attestation about the person’s identity, status, and credible background. This reference helps the bank corroborate details such as occupation, residence, or expected account activity, strengthening the risk assessment and support for ongoing monitoring.

Ringing a verified phone number, while useful for contact verification, isn’t a robust, standalone due diligence step and can be vulnerable to spoofing. A Google search raises privacy concerns and may yield unreliable or incomplete information, which isn’t an appropriate or sanctioned verification method. Waiting 30 days before activating the account is a procedural delay, not a CDD activity, and doesn’t directly enhance identity verification or risk assessment.