What Is KYC?
KYC means Know Your Customer. In practice, it is one part of customer due diligence. A crypto exchange may identify you, check documents, screen sanctions lists, assign a risk rating, monitor transactions, and ask where funds came from.
KYC does not make an exchange safe. It gives the exchange a verified identity record and links that record to account activity. That link can satisfy a legal duty, but it also creates sensitive data that may remain after you close the account.
What a KYC check can collect
The form varies by country, product, and risk level. A basic check may ask for a legal name, date of birth, address, and government ID. A firm may add a selfie or video comparison, tax or national identifier, occupation, bank statement, or proof of source of funds.
Collection does not stop at the upload screen. Exchanges can process IP addresses, device information, account history, payment details, wallet addresses, and transaction records. Coinbase's current privacy policy, for example, says its identity process may use biometric information generated from photos or videos and third-party identity verification vendors. Its policy also says retention depends partly on AML, KYC, and other financial obligations.
Why regulated crypto firms require it
Rules differ by jurisdiction, but they usually attach duties to a business that holds, exchanges, or transmits assets for customers. The legal question depends on what the business does, not the label on its website.
- United States: FinCEN says a business that accepts and transmits convertible virtual currency can be a money transmitter. Covered money services businesses must register and follow Bank Secrecy Act rules.
- European Union: Regulation (EU) 2023/1113 requires covered crypto-asset service providers to send specified originator and beneficiary information with crypto transfers.
- United Kingdom: in-scope cryptoasset businesses must register with the FCA under the Money Laundering Regulations and maintain customer due diligence, sanctions screening, transaction monitoring, recordkeeping, and reporting controls.
These frameworks do not create one worldwide KYC form. A service can ask for more information than another because its licence, location, banking partners, product, and risk assessment differ.
The Travel Rule is not a universal $1,000 switch
FATF sets international standards that countries implement through their own laws. Its virtual-asset guidance refers to a USD or EUR 1,000 threshold for customer due diligence on occasional transactions. The same guidance says covered providers should obtain, hold, and transmit required originator and beneficiary information for virtual-asset transfers under the Travel Rule.
National law may go further. The EU's transfer regulation applies information requirements to covered crypto transfers without a general minimum transfer value. Its separate €1,000 provisions concern checks involving self-hosted addresses. A single global claim that the Travel Rule begins at $1,000 is wrong.
Direct transfers and no-KYC services
FATF defines a peer-to-peer transfer as one made without a virtual-asset service provider or other obliged entity, such as a transfer between two self-hosted wallets. Its guidance says those transfers are not explicitly subject to FATF's AML controls because the standards usually place duties on intermediaries.
That does not exempt a business that acts as an intermediary. In the US, FinCEN says a person who exchanges or transmits convertible virtual currency as a business can be a money transmitter based on the facts and circumstances. Calling a service decentralized or peer to peer does not settle its legal status.
What KYC changes for privacy
| Route | Identity held by provider | Public-chain exposure |
|---|---|---|
| Regulated custodial exchange | Account and verification records | Deposit and withdrawal addresses can be linked to the account |
| Broker or kiosk | Depends on local rules and limits | Payment and wallet records may create a link |
| Direct self-hosted wallet transfer | No provider in the transfer itself | Addresses and transaction details remain public on transparent chains |
| Privacy-preserving network | Depends on how funds enter and leave | Protocol may hide some transaction details, but endpoints can still identify the user |
Avoiding an identity check does not make a transaction anonymous. A bank transfer can identify the buyer. A reused address can connect transactions. An IP address, delivery address, logged-in browser, or later exchange deposit can restore the link.
Before sending documents
- Check which legal entity will hold the account and which regulator lists it.
- Read the privacy notice for the exact data collected, verification vendors, sharing rules, and retention terms.
- Confirm whether withdrawals to self-hosted wallets trigger extra ownership checks.
- Use a unique password and phishing-resistant multi-factor authentication.
- Do not send identity documents through email or chat unless the firm's official process requires it and you have verified the destination.
- Keep only the balance needed for the service. KYC does not remove custody or insolvency risk.
Sources
- FATF: Updated Guidance for a Risk-Based Approach to Virtual Assets and VASPs
- FinCEN: Application of FinCEN's Regulations to Certain Business Models Involving Convertible Virtual Currencies
- EUR-Lex: Regulation (EU) 2023/1113 on information accompanying transfers
- FCA: Requirements for cryptoasset registration applications
- Coinbase Global Privacy Policy
Browse the directory to compare services by identity requirements, custody, and payment method.
Information is provided for educational purposes. Rules vary by jurisdiction and service. Not financial advice. Commercial disclosure.
Frequently Asked Questions
What does KYC mean in crypto?
KYC means Know Your Customer. A regulated crypto firm uses customer due diligence to identify customers, assess risk, screen for sanctions, monitor transactions, keep records, and report suspicious activity where required. The exact checks depend on the firm, jurisdiction, product, and risk level.
Is it illegal to buy or transfer crypto without KYC?
A direct transfer between people is not automatically illegal because no regulated intermediary performs KYC. Laws still apply to the conduct itself. A person operating an exchange or money transmission business may have registration and anti-money-laundering duties even if the service describes itself as peer to peer.
What information can a crypto KYC check collect?
A firm may ask for a legal name, date of birth, residential address, government ID, selfie or video, tax or national identifier, occupation, and source of funds. It may also process device, IP, account, and transaction data. Requirements vary by firm and risk level.
Does the FATF Travel Rule start at $1,000?
FATF guidance uses a USD or EUR 1,000 threshold for customer due diligence on occasional virtual-asset transactions, but the Travel Rule requires covered firms to obtain, hold, and transmit originator and beneficiary information for virtual-asset transfers. National rules can differ. The EU applies its crypto transfer information rules without a general minimum transfer threshold.
Can I ask an exchange to delete my KYC file?
You can make a privacy request where local law gives you that right, but financial recordkeeping duties may let or require the firm to retain some information. Closing an account does not guarantee immediate deletion. Check the firm’s privacy notice and the law that applies to your account.