Skip to content
Docs

KYC Core overview

KYC Core is where a customer opens an account. It is a web app in the institution’s own name and look that works on a phone or a computer; a Thai applicant installs nothing, and a foreign applicant’s passport chip is read in the native mobile app. It collects what the law and the institution’s licence require, proves who the applicant is, and hands a complete, signed application to CDD Core in the same database — nothing is re-keyed.

Who uses it: applicants — individuals, and juristic persons through their authorised signatories. The institution decides what the journey asks through its licence profile. Officers work on the result in CDD Core.

The KYC Core journeyThe applicant fills in the forms first, then proves identity, makes the declarations, signs once and submits. The system checks with the state, applies the gates, scores the risk and screens the names at once; officers in CDD Core review and sign; on approval the account opens by itself with the institution's own number.SUBMITTEDAPPROVED1 Formsdetails · workguardian if under 202 IdentityID card · NFC passportface check · SMS code3 DeclarationsPEP · FATCAbank account · suitability4 Sign onceface rescan + SMS codeno camera → QR to phone5 SubmitDOPA · NDIDgates · risk · screeningMODULECDD Coreofficers review, ask for more and sign the decisionAccount opensthe institution's own numberfund platform · Trading CoreCustomer homestatus · account · documentsONE JOURNEY · CONFIGURED PER LICENCE PROFILE · FUND BUSINESS · DA DEALERLEGENDApplicantSystem, at onceOfficersResult
Forms first, identity next, one signature at the end. On submission the system acts at once; officers decide in CDD Core; the account opens by itself after approval.

One journey, configured per licence profile

Section titled “One journey, configured per licence profile”

KYC Core is built once and serves every licence type through a licence profile: designed for companies supervised by the SEC, starting with fund businesses (asset managers and selling agents) and DA Dealers. The profile decides which questions, documents, gates and pre-service steps apply. One institution may hold more than one profile, so the profile is recorded on each application. An institution’s own settings can make a profile stricter, never looser.

Fund businessDA Dealer
IdentityThai national ID card · NFC passport (chip read in the native mobile app)Thai national ID card · NFC passport (chip read in the native mobile app)
Gates at applicationState-authority lists, institution policy, prohibited customer listThe same, plus agency mule-tier lists and the suspicious-pattern gate
Before service opensSuitability and knowledge assessmentInvestor class, suitability, knowledge test and wallet registration with proof of ownership
Where the account opensThe fund platform, mapped to the institution’s own account numberQirin X’s Trading Core

The journey

Section titled “The journey”
  1. Applicant details and declarations — personal and work details, political status, FATCA, a guardian’s consent when the applicant is under 20.
  2. Identity proofing — the identity document, a live face check and an SMS one-time code that binds the mobile number.
  3. Gates and suitability — what refuses an application at once, and what must be known before service opens.
  4. Signing and submission — the destination bank account, one signature, checks with the state, and the application’s states up to an open account.

What the system does or refuses

Section titled “What the system does or refuses”
  • SMS carries codes only, never links. Notices go by e-mail; an SMS is used for one-time codes and for notices that need no click.
  • The journey never dead-ends. If the applicant closes the tab, the e-mail link leads back into the same application.
  • Submitted data is read-only to officers. When something is missing, the officer asks and the applicant edits in KYC Core.
  • One neutral sentence on refusal. Every refusal shows the same message, whatever the reason, so nothing is tipped off.
  • Abandoned drafts are removed after 60 minutes of inactivity — 72 hours once the applicant’s e-mail is verified — when they hold nothing that must be kept. See Records and retention.
Section titled “Related”