Compliance
Client identification and verification are two different duties
· 7 min read
Identification applies to every client. Verification is triggered by money, carries a timing rule, and cannot be repaired later — the record shows when it was done.
The two words are not synonyms
By-Law 7.1 imposes two obligations that are routinely treated as one, which is why firms are surprised by findings in this area. They differ both in what they require and in what triggers them.
- Identification means obtaining and recording specified information about who the client is — and about any third party the client is acting for or representing.
- Verification means actually looking at documents, data or information to confirm the client is who they say they are.
Writing a client's name and address onto a file-opening form is identification. It is not verification, and no quantity of it becomes verification.
Money is the trigger
Verification is required when a licensee is retained to provide legal services and engages in, or gives instructions in respect of, the receipt, payment or transfer of funds. That phrase does more work than it appears to: giving instructions about someone else's transfer counts, so a licensee who never handles the money can still be caught by it.
There is a timing rule attached. Identity is to be verified immediately after first engaging in that activity, not at some convenient later point in the retainer. Exemptions exist and are genuinely limited — they turn on particular licensees, clients or kinds of funds, not on how well you happen to know the person.
The permitted ways to verify an individual
The methods are set out rather than left to judgment, and for an individual they come down to a choice among:
- Government-issued photo identification.
- The credit file method.
- The dual process method.
- Virtual verification with authentication.
- Verification through an agent.
Verifying an individual brings two companions with it: a source-of-funds requirement, and an ongoing obligation to monitor the professional relationship for the duration of the retainer. Monitoring is the one most often forgotten, because it has no single moment at which it is performed — it is a standing duty rather than a task with a date.
Relying on someone else's verification
Where a referring licensee has already identified and verified the client in accordance with the current requirements, the receiving licensee does not have to repeat the exercise. The condition does real work in that sentence: the earlier verification has to meet the requirements as they now stand, not as they stood whenever it was carried out.
Reliance also does not carry the monitoring duty across. Where the matter is ongoing, the licensee still has to monitor the relationship periodically to assess whether there is a risk of assisting or encouraging fraud or other illegal conduct.
Sources
Read on August 30, 2026. Each link goes to the original text, not a summary — check it for the current wording.
- By-Law 7.1 — Client identification, verification, and ongoing monitoring (KYC)Law Society of Ontario — By-Law 7.1
- By-Law 9, s. 16 — $7,500 limit on cash received for any one client matterLaw Society of Ontario — By-Law 9
Related
- What an LSO spot audit actually looks at
A spot audit is a records review, not an investigation. Here is what the Law Society asks for, in the order it usually asks — and what a clean answer looks like.
- When money is allowed to leave a trust account
By-Law 9 permits five reasons to withdraw from trust and no others. The fee one carries a condition that produces a large share of spot-audit findings.
Intaklo keeps these records for you
Trust ledgers, monthly three-way reconciliation and an audit-ready binder, built for Ontario sole practitioners and small firms.
See pricing