KYC (Know Your Customer): What It Is and How It Works

How KYC works on a crypto platform

KYC is part of a wider set of anti-money-laundering and counter-terrorist-financing (AML/CFT) duties. A regulated exchange or other virtual-asset service provider typically:

1. Collects identity data: name, date of birth, nationality and address.
2. Verifies it: a photo of a government ID, a live selfie or video to prove the person matches the document, and sometimes proof of address.
3. Screens it: checks against sanctions lists and lists of politically exposed persons.
4. Assigns a risk level and limits: higher tiers, larger withdrawals or business accounts may require source-of-funds documents (enhanced due diligence).
5. Monitors activity: unusual transactions can trigger further questions or reports to the authorities.

The details depend on the country where the platform is licensed, but the principle comes from international standards set by the Financial Action Task Force (FATF), which extended its rules to virtual-asset service providers.

KYC, AML and the travel rule

• KYC answers "who is this customer?"
• AML is the broader programme that uses that knowledge to spot and report suspicious activity.
• The travel rule requires providers to pass basic sender and recipient information along with transfers above certain thresholds, as banks do for wire transfers. This is why an exchange may ask who owns the wallet you are withdrawing to.

Most countries now require KYC from centralized crypto platforms. In the UAE, for example, providers licensed by VARA in Dubai or by ADGM's regulator must apply these checks; in South Korea, exchanges must report to the country's financial intelligence unit and verify customers.

KYC vs self-custody and DeFi

KYC applies to the service, not to the blockchain. You can create a self-custody wallet without identification, and decentralized exchanges usually do not collect KYC because they do not hold customer funds. However, moving money between fiat and crypto almost always passes through a regulated platform, and transactions on public blockchains are traceable, so on-chain activity is not truly anonymous.

Requiring KYC has trade-offs: it helps fight fraud and gives regulators oversight, but it concentrates personal data at companies that can be hacked. Be wary of any "KYC" request that arrives by email or chat rather than inside the platform's official app, since fake verification pages are a common phishing trick.