What KYC Actually Asks For, and Why

Crypto KYC is an identity check, and it exists because the venue you are using is, or claims to be, subject to anti-money-laundering rules. Those rules are not written by the exchange. They are written by the regulator in the jurisdiction where it holds a licence, and the exchange translates them into a checklist of things it must see before it lets you move money.

That translation is where most crypto KYC friction comes from. A venue that has to justify a decision to a supervisor will ask for documents proving who you are, that the document belongs to you, and where you live. A user who expected to type a name and start trading meets the same requirement as an obstacle. Most crypto KYC complaints are really about that gap between what has to be proven and what was expected.

• Verification is a legal control, not a customer rating. It exists so the venue can show a supervisor that it knows who its users are.
• Tiers usually climb. Email only, then a photo ID with a selfie or liveness check, then proof of address or source-of-funds questions for higher limits.
• Your documents are held by the venue, and often by a vendor. You frequently cannot tell from the outside which party keeps a copy.
• Requirements differ by jurisdiction. Some venues operate without a licence and ask for very little, which is a regulatory fact rather than a benefit.

What crypto KYC is actually for

It is a legal control, not a product feature. Anti-money-laundering rules generally require a firm to identify its customers, verify that identity, monitor activity, and keep records. The purpose is traceability: if funds move through an account, the venue should be able to say whose account it was.

That is why the process asks for documents rather than a declaration. A typed name proves nothing; a passport with a photograph, a number and an expiry date gives the venue something it can check and keep. The inconvenience is the mechanism working as designed.

The rule behind the form

The obligation is usually to verify identity, not to collect one specific document. Regulators tend to set the standard — identify the customer, take reasonable steps to confirm the details — and leave the method to the firm. That is why two licensed venues in the same country can ask for slightly different things, and why one accepts a bank statement where another wants a utility bill.

It also explains why questions arrive later. Verification is commonly staged: enough to open the account, then more as activity grows. A request for extra documents after months of use is usually a threshold being crossed, not an accusation.

Why licensing changes the answer

A licensed venue has a supervisor to answer to, a complaints process with some force behind it, and a reason to be conservative. An unlicensed one may ask for nothing at all. That is not a service. It commonly means no supervisor is watching, no complaint channel has authority, and there is no obligation to return funds if the operation stops responding.

Fee tables never capture this. “No verification” is a statement about where a venue sits in the regulatory map, and the map decides what recourse you have when something goes wrong.

The verification tiers, and what each one asks for

Most venues gate features rather than people: the more you can do, the more you are asked to prove. The tiers below are typical, not universal.

The boundaries are set by the venue and its regulator, so a tier that unlocks deposits on one platform may unlock nothing on another. Read the tier table on the venue’s own page rather than assuming a guide written for another country applies.

The documents, and why each one exists

Each item on the list answers a specific question the venue has to be able to answer later. Once you know the question, the rejections stop looking arbitrary.

Identity documents

A passport, national identity card or driving licence is usually accepted, because each carries a photograph, a number and an expiry date that can be checked against security features. The venue is confirming that the document is genuine, unexpired, and that the name matches the account. A middle name missing from one and present on the other is enough to fail the match.

Selfies and liveness checks

The selfie answers a different question: is the person holding the document the person in it, present now? Liveness adds a small action or a short video so a still photograph cannot be reused. Failures are usually technical rather than suspicious — glare on glasses, a hat, a strong light behind you, a camera angle that crops the face, or a screen reflection from photographing a screen instead of the document.

Proof of address

Address evidence exists because residency decides which rules apply to you and which products a venue may offer. A utility bill, bank statement or government letter showing your name and address is commonly accepted; the definition of “recent” is set by the venue, so check its page rather than guessing. A document that is otherwise perfect can be rejected for being older than the stated window.

Where your documents go, and what to check

Your documents usually go to the venue, and often to a verification vendor that performs the check. Some vendors return only a pass or fail, others retain a copy; from the outside you generally cannot tell which. The venue’s privacy notice is the place that should say.

The arithmetic of copies is worth pausing on. Three documents across five venues is fifteen copies of your passport, held by five companies and an unknown number of their suppliers, each with its own retention period and its own security posture. That is a reason to consolidate accounts rather than open one per promotion, and a reason to read what each venue says about deletion.

Never send identity documents through chat, email or a direct message, and never to an account that contacted you first. Venues collect documents inside their own application or website; anyone who offers to “speed up verification” in a DM is running a scam, and a real support agent will not ask for your password or your recovery phrase.

Two checks before you upload anything: type the venue’s address yourself rather than following a link, and confirm the upload sits inside the logged-in flow rather than on a page that asks you to log in again. Those two habits block most document-phishing attempts.

A walk-through: getting through crypto KYC in one pass

Most rejections are preventable before you start. The sequence below is about removing mismatches, not about persuading anyone.

1. Write your legal name exactly as it appears on your identity document, including middle names and hyphens, and use the same form on the account, the document and any address evidence.
2. Check the expiry date first. An expired or soon-to-expire document is a frequent reason a check cannot proceed, and retaking the photograph does not fix it.
3. Photograph the full page, all four corners in frame, no crop, no flash, no glare. Daylight from the side is usually better than a lamp directly above.
4. Take the selfie in the same session, facing a plain background, with your face unobstructed. If a liveness step asks you to move, move slowly and keep your whole face in the frame.
5. Submit through the venue’s own app or site, once, and wait for the status it shows. Retrying in parallel, or uploading through a second device, can flag the account for review instead of speeding it up.
6. Keep your own copy of what you sent, with the date, in case a check is later disputed.