English
Español
Português
What is KYC? How identity verification works on crypto exchanges
KYC stands for “Know Your Customer.” It is the identity check that a crypto exchange asks you to complete, usually when you open an account: you enter your personal details, upload a photo of your ID and often take a selfie. Exchanges do not do this by choice. Under global anti-money-laundering standards, crypto service providers must verify their customers, just as banks do. KYC helps keep criminal money out of the system, but it does not prove that a platform is safe.
This guide explains why exchanges must verify you, what they ask for, how to pass the first time and how to spot fake “KYC” messages. If exchanges are new to you, start with our guide to how crypto exchanges work.
What KYC means
KYC is the everyday name for the checks a financial company runs on its customers. The Financial Action Task Force (FATF), the intergovernmental body that sets the global standards against money laundering and terrorist financing, calls them customer due diligence (CDD). They include:1
- Identifying you and verifying your identity against reliable, independent sources, such as an official ID document.
- Understanding the purpose of the account.
- Monitoring the account for as long as you have it, to make sure your transactions match what the company knows about you, including, where necessary, where your money comes from.
The same standard bans anonymous accounts and accounts under names that are clearly fake.1 The FATF puts the reason simply: a firm that knows its customers can make sure the money it handles is not tied to crime or terrorism.2
Why crypto exchanges have to verify you
Around the world, the FATF Recommendations serve as the standard for fighting money laundering and terrorist financing (AML/CFT), and they cover crypto too: a business that exchanges crypto for regular money, or one crypto for another, is a virtual asset service provider (VASP).1 Countries should license or register these providers and supervise them, and these providers have to take the same preventive steps as banks: customer due diligence, record keeping and the reporting of suspicious transactions.3
In Latin America, this work runs through GAFILAT, one of the FATF’s regional groups, whose 18 member countries include Mexico, Brazil and Peru.4 Each country decides how to impose the CDD rules,1 so the documents and limits can differ between countries and platforms.
As a rule, the exchange should verify your identity before or while it opens your account, and if it cannot complete the checks, it should not open the account or carry out the transaction.1 It must also keep the records, including copies of your ID, for at least five years after the relationship ends.1
What you usually need for KYC
Most exchanges verify you online. FATF guidance on digital identity gives examples: you fill out an online form, upload photos of a document such as a passport and send a selfie. The platform checks that the document is authentic and has not expired, then links you to it with tools such as facial recognition and a “liveness” check.2
| What you provide | Examples | Why |
|---|---|---|
| Personal details | Full legal name, date of birth, nationality, address | To identify you |
| Photo ID | Passport, national ID card or driver’s license | To check your identity against an official document |
| Selfie or short video | A live image of your face | To show that you are the person on the ID |
| Proof of address (some platforms) | A recent utility bill or bank statement | To confirm where you live |
| Extra questions (sometimes) | Purpose of the account, source of funds | To understand how you will use the account |
How to pass KYC the first time
- Start in the official app or website, which you open yourself, not through a link in a message.
- Type your details exactly as they appear on your ID: the same full name, spelling and date of birth.
- Check that your ID has not expired.
- Photograph the original document, not a photocopy or a screenshot: on a plain, dark surface, in good light, with all four corners in the frame, sharp text and no glare from the flash or a lamp.
- Take the selfie in even light, with your face uncovered (no sunglasses or cap), and follow the prompts on the screen.
- Use a recent proof of address in your own name, with the same address that you entered.
Common reasons KYC gets rejected
| Problem | How to fix it |
|---|---|
| Blurry, dark or cropped photo | Retake it in good light, with all four corners visible |
| Glare on the ID | Turn off the flash and change the angle |
| Expired document | Use a valid ID, or renew it first |
| Name or date of birth does not match the ID | Correct your profile so that it matches the ID exactly |
| Selfie does not match the ID photo | Retake it facing the camera, in even light |
| Proof of address too old or in another name | Upload a recent document in your own name |
How to spot a fake KYC request
Because everyone knows KYC, scammers copy it. A fake message looks like it comes from your exchange and says your account is limited until you “verify it again.” The U.S. Federal Trade Commission (FTC) lists the same tricks in phishing messages: claims of suspicious activity or a problem with your account, and requests to confirm personal or financial information.8 Watch for these signs:
- The message is unexpected, arrives by email, text, social media or a chat app, and pushes you to act fast.
- It asks for something KYC never needs, such as your password, a two-factor code or a wallet seed phrase.
- It asks you to pay a fee or send crypto to “verify” or “unlock” the account. No legitimate business demands crypto in advance, whether to buy something or to protect your money.9
- It asks for photos of your ID through a chat, social media or a link you did not expect.
If a message worries you, do not use its link. Open the app or type the exchange’s address yourself, and contact the company through a website or phone number you know is real.8
What KYC does not mean
Passing KYC shows that the exchange knows who you are, not that the exchange is safe. KYC is not insurance for your money, and it is not a guarantee. As the FTC points out, crypto held in accounts is not insured by a government the way deposits in an insured U.S. bank account are; if the company that stores it goes out of business or is hacked, the government has no obligation to help get your money back.9
So check the platform as well: who operates it, where it is registered, which rules it follows in your country and how it protects customer funds. The FATF warns that crypto assets can become worthless and are vulnerable to cyberattacks and scams, and that most countries have yet to put effective rules in place.3
Frequently asked questions
Is KYC mandatory?
In countries that apply the FATF standards, yes: crypto exchanges must verify their customers, usually when you open an account. The details depend on each country’s law, so documents and limits differ between platforms.
How do I complete KYC verification?
Open the exchange’s official app or website, go to the verification section and follow the steps: enter your details, upload photos of your ID, take a selfie and, if asked, upload a proof of address.
How long does KYC take?
It depends on the platform and on your documents. Many checks are automatic, some need a manual review, and a blurry photo or a missing document means another round. You usually get the result by email or in the app.
What should I do if my KYC is rejected?
Read the reason, fix that point, such as a blurry photo or a name that does not match your ID, and submit again in the official app. If the reason is not clear, contact support through the app or the official website.
Is it safe to send my ID to a crypto exchange?
It is a normal step: the exchange needs your ID to meet anti-money-laundering rules. Send it only inside the official app or website, never through a link in a message. Exchanges must keep these records for years, so choose a platform you trust.
Related guides: crypto for beginners · USDT networks explained
Risk warning. Crypto assets are volatile and carry risk. Identity verification does not protect you from market losses, hacks or the failure of a platform. Never share your password, two-factor codes or seed phrase. This article is for educational purposes only and is not financial, investment or legal advice.
Sources
- Financial Action Task Force (FATF), "The FATF Recommendations" (International Standards on Combating Money Laundering and the Financing of Terrorism & Proliferation, updated June 2026). https://www.fatf-gafi.org/en/publications/Fatfrecommendations/Fatf-recommendations.html ↩
- FATF, "Guidance on Digital ID" (March 2020). https://www.fatf-gafi.org/en/publications/Financialinclusionandnpoissues/Digital-identity-guidance.html ↩
- FATF, "Virtual Assets." https://www.fatf-gafi.org/en/topics/virtual-assets.html ↩
- GAFILAT (Financial Action Task Force of Latin America), "¿Qué es el GAFILAT?" (in Spanish). https://www.gafilat.org/index.php/es/gafilat/que-es-gafilat ↩
- YimmiT Docs, "Deposit Crypto." https://docs.yimmit.com/wallets/deposit-crypto ↩
- YimmiT Docs, "Withdraw Crypto." https://docs.yimmit.com/wallets/withdraw-crypto ↩
- YimmiT Docs, "Community." https://docs.yimmit.com/support/community ↩
- U.S. Federal Trade Commission, Consumer Advice, "How To Recognize and Avoid Phishing Scams." https://consumer.ftc.gov/articles/how-recognize-avoid-phishing-scams ↩
- U.S. Federal Trade Commission, Consumer Advice, "What To Know About Cryptocurrency and Scams." https://consumer.ftc.gov/articles/what-know-about-cryptocurrency-scams ↩
This article is educational and is not financial, investment, or tax advice. Crypto assets are volatile and carry risk; do your own research and consider a licensed professional before making decisions. About our editorial process.
