What's the Dilly-o with consumer account opening: a buyer's guide for credit unions

The Dilly-o

For most credit unions, we'd start with the account opening your digital banking platform already offers or connects to, since that keeps one less integration to run. Then make the vendor show you how its identity checks hold up against fake IDs and deepfake selfies. Settle the exit terms before you sign, because that is when you have leverage.

How we'd size up a vendor

1. Identity proofing - does it check the government ID and match a live selfie, and what does it do when the selfie or document is AI-generated? Ask the vendor to show you results from tests with fake IDs and AI-generated selfies.
2. Watching after day one - ask the vendor whether it flags a change to a new member's phone, email or address. Ask how long it keeps watching, and who on your team hears about a change.
3. Fit with your systems - is it already connected to your core and your digital banking platform, or will you pay to build that link?
4. A way out - ask what it costs to leave and how your member data comes back to you. NCUA's third-party guidance says contracts should address default, termination and escape clauses.⁴

What changed this year

Your Customer Identification Program (CIP) must be written and risk-based.⁵⁶ Nacha's Phase 2 rule requires receiving institutions not covered in Phase 1 to run risk-based processes to identify credits sent due to fraud.⁷ The rule does not require checking those credits before they post.⁷ The June 19, 2026 effective date fell on a federal holiday, so the practical start was June 22, 2026.⁸ Ask your vendor and your fraud team who watches the credits that arrive in newly opened accounts.

Will it work with your systems?

MANTL announced an integration that connects its consumer and business deposit origination to Q2's Digital Banking Platform.⁹ Lumin Digital offers digital account opening as an optional feature for Lumin-affiliated credit unions.¹⁰ If you run Symitar, we've seen Alkami, Blend, Clutch, DigiFi, Glide and MANTL listed for credit unions in Jack Henry's Fintech Integration Network.^C We haven't yet reviewed core fit for Nymbus, Plaid, Prelim, SBS, Simplici, FIS or Truv.^C Ask your digital banking provider which account opening products it already connects to. Then ask any vendor for a live credit union reference on your core.

What other credit unions did

Lumin Digital partnered with Consumers Credit Union to launch digital account opening.¹⁰ Separately, Stanford FCU and four other companies won dismissal of a suit on Oct. 14.¹¹

What your examiner will ask

Your CIP must still have written, risk-based procedures that let you form a reasonable belief you know each member's true identity.⁶¹² Members must be told you are verifying their identity.¹³ NCUA's examiner guide expects you to build a member risk profile, using the information you collect at account opening.¹⁴¹⁵ For the vendor, NCUA's third-party guidance says contracts should cover scope, subcontractor oversight, service levels, performance reporting, penalties, records access and audit rights.¹⁶ Have ready your CIP procedures as the vendor runs them, how its results feed your risk profiles, and the signed contract.

What it costs

Ask for a full quote that includes integration, identity checks per application and any core connection fees. NCUA notes some credit unions accepted large termination penalties believing them fixed, though early termination and default terms are often negotiable.¹⁷ A law firm writing on vendor exits warns that vendors may pull back earlier incentives and charge for deconversion and data migration.¹⁸ We'd put deconversion fees and data return in writing before you sign.

Food for thought

NCUA's examiner guide also expects ongoing monitoring to identify and report suspicious transactions after the account is open.¹⁵ Before you sign, ask who watches a new account in its first year: your vendor, your core or your fraud team.