What Is KYC in Crypto? A Plain-English Guide to Identity Checks

What is KYC in crypto? KYC stands for “Know Your Customer,” and it is the identity check that crypto exchanges, apps and Bitcoin ATM operators run before they let you buy, sell or withdraw digital assets. In practice, it means giving your name, date of birth, address and an ID number, and often uploading a photo ID and a selfie, so the platform can confirm you are a real person and not using stolen details.

If you have ever wondered what is KYC in crypto and why a technology built around privacy asks for your passport, this guide explains it clearly. It covers the US rules behind KYC, what information you will be asked for, how verification works step by step, how your data is protected, which platforms do not require KYC and why that can be risky, and how to avoid scams that pretend to be identity checks.

New to crypto altogether? Our crypto for beginners guide covers the basics first.

What Is KYC in Crypto? The Short Answer

KYC is the part of a company’s anti-money laundering (AML) program that confirms who its customers are. For crypto platforms in the United States, it is not optional. Federal rules treat most crypto exchanges and similar businesses as financial institutions, and those institutions must know who they are dealing with.

Gemini’s educational site describes KYC as a way to determine, “with a high degree of confidence,” that customers are who they say they are. In everyday terms, it is the same kind of check your bank ran when you opened a checking account, adapted for digital assets.

KYC, AML and CIP: how the terms fit together

You will see several abbreviations used together. They are related but not identical.

Term	Stands for	What it means
KYC	Know Your Customer	The overall process of identifying and understanding customers
AML	Anti-Money Laundering	The wider set of rules and controls to stop illegal money flows; KYC is one part
CIP	Customer Identification Program	The specific step of collecting and verifying your identity details
CDD	Customer Due Diligence	Assessing the risk a customer may bring, for example by checking the purpose of an account
EDD	Enhanced Due Diligence	Deeper checks for higher-risk customers or larger amounts
BSA	Bank Secrecy Act	The main US law that requires AML programs

Why Crypto Platforms Require KYC

KYC exists mainly to stop criminals from using financial services to hide stolen money, fund terrorism, dodge sanctions or commit fraud. Crypto can move value quickly across borders, so regulators see identity checks at the points where crypto meets traditional money as especially important.

The US legal basis

The foundation is the Bank Secrecy Act. In 2013, the Financial Crimes Enforcement Network (FinCEN), part of the US Treasury, issued guidance (FIN-2013-G001) saying that exchangers and administrators of convertible virtual currencies are money services businesses. That brought crypto exchanges under the same AML rules as money transmitters.

As a result, a US crypto business that exchanges or transmits crypto for customers is generally required to:

• Register with FinCEN as a money services business.
• Run a written AML program with a named compliance officer, staff training and independent testing.
• Collect and verify customer identity information.
• Report suspicious activity to FinCEN.
• Screen customers against US sanctions lists kept by the Office of Foreign Assets Control (OFAC).
• Hold state money transmitter licenses where required, such as the BitLicense in New York.

Why it matters to you as a customer

KYC can feel like a hurdle, but it also protects customers. It makes it harder for criminals to open accounts in your name, helps platforms freeze stolen funds, and gives you a regulated company to deal with if something goes wrong. It also supports tax reporting, which matters more now that new IRS broker reporting rules are in place.

What happens when platforms ignore KYC

The biggest example is Binance. On November 21, 2023, Binance and its founder pleaded guilty to federal charges in a resolution worth more than $4.3 billion, according to the US Department of Justice. The government said that for years users could open accounts and trade with only an email address, that full KYC was not mandatory until August 2021, and that Binance never filed a suspicious activity report with FinCEN. The case showed how seriously US authorities treat KYC failures.

What Information You Will Be Asked For

The exact list depends on the platform and how much you plan to do, but most US crypto platforms ask for the same core details.

Information	Why it is requested
Full legal name	To match you to official records
Date of birth	To confirm identity and that you are an adult
Home address	Required identity element; may be checked against records
Social Security number (or ITIN)	Identity check and tax reporting
Government photo ID	Driver’s license, state ID or passport to verify your identity
Selfie or short video	To show the ID belongs to you and that you are a live person
Phone number and email	Account security and contact
Source of funds or employment details	Sometimes requested for larger amounts or higher limits

Basic and enhanced verification

Many platforms use levels of verification. A basic level might let you buy small amounts, while higher limits or features such as wire transfers may need extra checks. If you deposit or withdraw large sums, expect questions about where the money comes from. This is enhanced due diligence, and it is normal.

How Crypto KYC Works Step by Step

Most verification happens inside the app and takes minutes, although some accounts are reviewed manually and take longer.

1. Create your account with an email address and a strong, unique password.
2. Turn on two-factor authentication, ideally with an authenticator app rather than text messages.
3. Enter your personal details, including your name, date of birth, address and Social Security number.
4. Upload your ID by photographing the front and back of your driver’s license or your passport page.
5. Take a selfie or short video, often with a “liveness” check where you turn your head or follow on-screen prompts.
6. Wait for review. Automated systems compare your photo, ID and data. Many accounts are approved quickly; some are sent to a human reviewer.
7. Answer follow-up questions if asked, for example about your occupation or the source of funds.
8. Link a bank account or card to fund your account once you are approved.

Why verification sometimes fails

Verification can fail for simple reasons. Common causes include blurry or cropped ID photos, glare on a plastic card, an expired ID, an address that does not match records, or a name that differs slightly between your ID and your account. Use good lighting, include all four corners of the document, and make sure the details you type match your ID exactly.

Ongoing monitoring

KYC does not end when you are approved. Platforms continue to monitor accounts and transactions, especially large or unusual ones. You may be asked to update your information from time to time, or to explain a transaction that looks out of character.

KYC at Bitcoin ATMs

Bitcoin ATMs, also called crypto kiosks, are money services businesses too, so they must follow the same federal AML rules. Most US machines ask for at least a phone number, and many require a photo ID scan, especially for larger amounts. Some states add their own limits and rules.

On August 4, 2025, FinCEN issued a notice warning that crypto kiosks were being used in scams targeting older adults and by criminal groups, and that some operators may not be verifying customer information properly. If a stranger, a caller claiming to be from a bank or government agency, or someone you met online tells you to go to a Bitcoin ATM, stop. That is a classic scam pattern.

Travel Rule, Reporting and Taxes

KYC connects to several other rules that affect what happens when you send or sell crypto.

The Travel Rule

US rules require financial institutions, including crypto platforms, to pass along certain sender and recipient information with transfers of $3,000 or more to another institution. This is called the Travel Rule. It is one reason an exchange may ask who you are sending crypto to, or whether a destination wallet belongs to you.

Suspicious activity and large cash transactions

Platforms must report suspicious activity to FinCEN. For money services businesses, the reporting threshold is generally $2,000 or more where the activity looks suspicious. Cash transactions above $10,000 trigger separate reporting rules. These reports are confidential, and a platform is not allowed to tell you if one has been filed.

IRS reporting and Form 1099-DA

The IRS now has a dedicated form for crypto brokers. According to the IRS instructions for Form 1099-DA, US digital asset brokers must report customers’ sales, including gross proceeds, and must also report cost basis for covered assets acquired after 2025 and held in the same account. Brokers use Form W-9 to request your taxpayer identification number, and accounts without a valid number may face backup withholding. KYC is what allows a platform to tie these reports to you correctly.

Stablecoin rules

The GENIUS Act, signed into law in July 2025, created a federal framework for payment stablecoins. Among other things, it treats stablecoin issuers as financial institutions under the Bank Secrecy Act, which means AML and customer identification obligations apply to them as well.

Is My Data Safe? KYC Privacy Concerns

Handing over your ID and selfie is a reasonable thing to worry about. Data breaches do happen, and identity documents are valuable to criminals. The goal is not to avoid KYC entirely, but to share your data only with trustworthy platforms and to limit the damage if something goes wrong.

How to protect yourself

A few simple habits greatly reduce the risk of your identity documents being misused, whichever platform you choose.

• Use only well-known platforms that are registered with FinCEN and licensed in your state.
• Type the platform’s web address yourself or use the official app from your phone’s app store.
• Read the privacy policy to see how long your data is kept and who it is shared with.
• Turn on two-factor authentication and use a unique password.
• Consider freezing your credit with the three major bureaus, which makes it harder for anyone to open new credit in your name.
• Be suspicious of any message asking you to “re-verify” your identity through a link.

Why some people dislike KYC

Critics argue that KYC goes against Bitcoin’s original goal of peer-to-peer money without intermediaries, that it creates large stores of personal data that can be hacked, and that it can exclude people who lack official ID. Supporters respond that identity checks at the on-ramps are what make it possible for mainstream financial firms to offer crypto at all. Both views have merit, and the debate is likely to continue.

Can You Use Crypto Without KYC?

Yes, in some situations, but it comes with trade-offs. KYC applies to businesses that handle money for customers. It does not apply to software that only you control.

Activity	Is KYC usually required?	Notes
Buying crypto on a US exchange	Yes	Required by federal AML rules
Buying at a Bitcoin ATM	Usually	Depends on amount and state; phone and ID often required
Using a self-custody wallet	No	You control the keys; the software does not hold your money
Sending crypto between your own wallets	No	Though the exchange you send from may ask about the destination
Peer-to-peer trades between individuals	Not always	Higher scam risk; platforms that match buyers and sellers may require it
Decentralized exchanges (DEXs)	Often no	Some front-ends block US users or sanctioned addresses
Offshore exchanges with no KYC	No, but risky	May not legally serve US users; funds can be frozen or lost

The risks of no-KYC platforms

Offshore exchanges that advertise “no KYC” are often not licensed to serve US customers. If they fail, are hacked, or simply freeze withdrawals, you may have no regulator to complain to and little chance of getting your money back. Many also suddenly demand full KYC when you try to withdraw a large balance. Using a VPN to access a platform that blocks US users can break its terms and put your funds at risk.

A self-custody wallet is different. It is software, not a company holding your money, so it does not need your identity. You will still usually pass through KYC at the point where you buy crypto with dollars or sell it back.

KYC Rules Outside the United States

KYC is not only an American requirement. Most countries apply similar rules to crypto businesses, largely because of standards set by the Financial Action Task Force (FATF), the international body that sets anti-money laundering guidelines.

In 2019, FATF extended its Travel Rule recommendation to virtual asset service providers, meaning exchanges and similar businesses worldwide are expected to identify customers and share sender and recipient information on transfers. Countries then turn these standards into their own laws, so the details vary.

Region	How KYC applies to crypto
United States	Bank Secrecy Act, FinCEN registration, state licenses, $3,000 Travel Rule threshold
European Union	MiCA licensing for crypto firms and the Transfer of Funds Regulation, applied from December 30, 2024, which covers crypto transfers between providers without a minimum amount
United Kingdom	Crypto firms must register with the Financial Conduct Authority; Travel Rule in force since September 1, 2023
Other FATF members	Similar KYC and Travel Rule laws, with different thresholds and timelines

What this means for US users

If you use a foreign platform, it may follow different rules, and it may not be allowed to serve US residents at all. Sending crypto from a US exchange to a foreign one can also trigger extra questions, because both sides need to share information about the transfer. For most people in the US, staying with a US-registered platform is the simplest way to avoid frozen transfers and compliance problems.

How long platforms keep your information

US financial rules generally require institutions to keep identity and transaction records for at least five years. That means your KYC data may be stored even after you close an account. It is another reason to choose a platform with a strong security record and a clear privacy policy.

Fake KYC Scams to Watch For

Because people expect identity checks, scammers often pretend to run them. Knowing the warning signs can save you from handing your identity, or your crypto, to a criminal.

• “Verify your wallet” emails or texts that link to a fake site. Real platforms do not need your recovery phrase.
• Requests for your recovery phrase or private keys. No legitimate KYC process ever asks for these.
• Fees to “unlock” or “verify” a withdrawal. This is a common trick on fake investment sites.
• Fake support staff on social media or by phone who ask you to share your screen or install remote access software.
• Job offers that ask for your ID before any real interview, which can be used to open accounts in your name.

If you are unsure, close the message, open the official app yourself, and contact support only through it. If you have been scammed, read our guide to crypto recovery and recovery scams, and report it to the FBI’s Internet Crime Complaint Center at ic3.gov and to the Federal Trade Commission.

Frequently Asked Questions

These are the questions people ask most often about identity checks in crypto.

Final Thoughts

So, what is KYC in crypto? It is the identity check that regulated platforms must run before you buy, sell or withdraw digital assets, built on US anti-money laundering law that dates back decades. It asks for personal information, but it also makes it harder for criminals to misuse accounts, supports tax reporting, and gives you a regulated company to deal with.

The safest approach is to complete KYC only on well-known, licensed platforms, protect your account with strong security, and treat any request for your recovery phrase or a “verification fee” as a scam. Do that, and identity checks become a small, one-time step rather than a risk.

Sources