Why an investment form asks for your passport
The AML/CFT Act 2009 makes managed-investment-scheme managers reporting entities. Before establishing a business relationship — i.e., before accepting your application — they must complete customer due diligence (CDD): verifying name, date of birth and address against reliable, independent documents or electronic sources. This is a statutory obligation, not manager caution; a manager that onboards without CDD is committing a compliance breach regardless of how low-risk the customer looks.
Standard, simplified and enhanced due diligence
The Act sets three CDD levels. Standard CDD covers most individual investors. Simplified CDD is available for certain lower-risk customers such as listed companies and government agencies. Enhanced CDD applies to higher-risk situations — most commonly trusts (which is why family-trust applications ask for trust deeds, beneficiary details and source of wealth or funds), plus politically exposed persons and other elevated-risk profiles. If a trust application feels more intrusive than a personal one, that is the statute operating as designed.
What managers must run internally
Behind the forms, each reporting entity must maintain a written risk assessment and AML/CFT programme, appoint a compliance officer, verify and monitor customers on an ongoing basis, report suspicious activities to the NZ Police Financial Intelligence Unit, file an annual AML/CFT report with its supervisor, and have its risk assessment and programme independently audited at the intervals set under the Act. For fund managers the AML/CFT supervisor is the FMA (banks, life insurers and non-bank deposit takers sit with RBNZ; the DIA covers most other sectors).
Why you might be asked again — ongoing CDD and remediation
CDD is not a one-time event. Managers must conduct ongoing CDD and account monitoring, refresh verification when risk or rules change, and remediate older customer records onboarded under earlier standards. That is why long-standing investors sometimes receive re-verification requests from platforms or managers years after opening an account — usually triggered by regulatory updates or audit findings rather than anything about the individual customer.
What this means practically when investing
For individuals: have photo ID and a recent proof of address ready; electronic verification often makes the process invisible. For trusts: expect to supply the trust deed, details of settlors, trustees and beneficiaries, and evidence of source of funds — allow extra days. Investing through a platform concentrates CDD at the platform layer, which is one reason adding a second fund on a platform is faster than opening direct accounts with several managers.