It is likely true that it is not legally required; however, from a BSA/AML perspective that would raise the risk level of your customer. It would be prudent for you to document your due diligence on the ISO to ensure they are reputable, especially if the credits will be flowing through your institution.
_________________________
CFE, CAMS