Customer Experience and Friction

Key Takeaways

  • AML controls create 'friction' (steps, delays, document requests); the goal is to apply friction proportionate to risk, not to eliminate it.
  • Risk-based onboarding lets low-risk customers pass quickly while high-risk customers face Enhanced Due Diligence.
  • Excessive false positives create friction (account holds, repeated information requests) that damages experience without reducing real risk.
  • Abandonment, drop-off, and pressure to 'just approve' are red flags that controls are being weakened for commercial reasons.
Last updated: June 2026

Customer Experience and Friction

Friction is any step that slows or interrupts a customer — identity checks, document uploads, additional questions, holds on funds, or follow-up Requests for Information (RFIs). Anti-money-laundering controls inherently create friction, and the business often pushes to remove it to win and keep customers. CAMS tests the resolution: apply friction proportionate to risk, never eliminate controls for commercial convenience.

The friction trade-off

ApproachCustomer experienceAML risk
No/low controlsSmooth, fastHigh — bad actors onboard easily
Uniform heavy controlsSlow for everyone, high abandonmentWastes resources on low-risk customers
Risk-based frictionFast for low risk, intensive for high riskBalanced — resources follow risk

The right answer is the third row. A salaried customer with a verified domestic identity should complete onboarding in minutes; a customer with offshore structures, PEP exposure, or cash-intensive business should expect source-of-funds questions and senior sign-off. This is the risk-based approach applied to experience.

Worked example. A digital bank sees 35% of applicants abandon onboarding at the document-upload step. Two responses are on the table: (a) drop the document check to cut abandonment, or (b) investigate whether the upload tool is broken and whether the same documents are demanded of low-risk customers who do not need them. The CAMS-correct response is (b) — reduce friction by removing unnecessary checks and fixing tooling, not by removing required controls. Lowering controls to chase conversion is a governance failure.

Friction that signals a control problem

Not all friction is intended. Excessive false positives create accidental friction: a customer is repeatedly asked the same questions, funds are held without cause, or an account is frozen on a weak name match. This harms experience and erodes trust without reducing real risk. The fix is model and threshold tuning plus better data — the same remediation discussed under data quality.

Use these cues when a scenario pits experience against compliance:

  • Commercial pressure cue ('sales wants faster approval'): keep risk-based controls; document any exception and its approver.
  • Abandonment cue (high drop-off): distinguish necessary from unnecessary friction; never remove required CDD.
  • Repeated-RFI cue (same customer asked again and again): likely false-positive noise — investigate tuning and data.
  • VIP cue ('this client is too important to question'): treat as a red flag; high-value/PEP clients warrant MORE diligence, not less.

Common traps

First, 'reduce friction' is not 'reduce controls.' The exam-correct improvement removes redundant steps, fixes broken tooling, and reuses verified data (re-using KYC across products) — it never skips identification, screening, or beneficial-ownership capture. Second, VIP exceptions are dangerous: relationship managers championing a high-revenue client to bypass EDD is a classic predicate to large laundering cases; PEPs and high-net-worth clients require enhanced, not relaxed, scrutiny. Third, holding funds or freezing accounts on a weak match is over-control, not diligence; resolve the match before penalizing the customer.

Fourth, perpetual KYC (event-driven updates triggered by behavior rather than fixed-date reviews) can reduce friction while improving coverage — a modern, exam-relevant control design. The unifying principle: experience and compliance are reconciled by calibrating friction to risk, with documented exceptions and accountable ownership.

Reducing friction without weakening controls

There are legitimate ways to cut friction that the exam treats as good practice. Re-using verified data across products (a customer already KYC'd for a checking account should not re-prove identity to open a savings account) removes redundant steps without lowering assurance. Progressive (or tiered) onboarding lets a customer open a low-limit account quickly with minimal data, then unlocks higher limits only after fuller verification — friction scales with the privileges granted. Straight-through processing for clearly low-risk applicants reserves manual review for genuine exceptions.

Each of these reduces friction by removing waste, not by removing required CDD.

The conversion-versus-control conflict

Product and sales teams measure success by conversion and time-to-onboard; compliance measures it by assurance. The exam-correct resolution is governance: control standards are owned by the second line and cannot be overridden by a conversion target. Where a faster path is desired, the institution changes the process (better tooling, data re-use) or formally accepts and documents a higher-risk product within appetite — it does not let the first line quietly drop checks.

A scenario where 'the growth team lowered the verification bar to hit a quarterly target' describes a control breakdown, and the answer is to restore the standard and escalate, not to ratify it.

False-positive friction is a real cost

Friction caused by false positives is often the largest experience problem and the easiest to misdiagnose. A customer whose legitimate salary payment is held every month because of a loose name match, or who is re-asked for the same ID quarterly, experiences the control as harassment. This both damages trust and wastes investigator capacity on noise, which in turn slows the clearing of genuinely suspicious cases.

The remediation is the data and tuning discipline from the previous section — better identifiers, governed match thresholds, and de-duplicated records — which simultaneously improves experience and frees analysts for real risk.

A worked balance scenario

A payments firm wants to launch instant account opening to compete with rivals. The compliant design is layered: verify identity electronically with liveness in seconds, screen against sanctions before the first transaction clears, cap initial limits, and apply behavioral monitoring afterward — giving a fast experience while keeping every required control. The non-compliant design — open instantly and verify 'later' — inverts the sequence and lets unscreened, unverified accounts transact. The CAMS principle holds: experience improvements must preserve the order and substance of controls, never bypass them.

Test Your Knowledge

A digital bank finds 35% of applicants abandon onboarding at the document-upload step and proposes dropping the identity-document check to improve conversion. What is the CAMS-aligned response?

A
B
C
D
Test Your Knowledge

A relationship manager argues a high-revenue client is 'too important' to subject to source-of-funds questions. How should this be treated?

A
B
C
D
Test Your Knowledge

Repeated, identical Requests for Information sent to the same low-risk customer most likely indicate which problem?

A
B
C
D