KYC (Know Your Customer)
KYC (Know Your Customer) is a mandatory identity verification process that regulated crypto exchanges run before allowing trading or withdrawals. You submit a government ID and a selfie; the exchange's system (often Jumio, Onfido, or Sumsub) verifies them automatically. Failed, rejected, or pending KYC is one of the most common reasons exchange accounts get frozen or limited.
What Is KYC and Why Do Exchanges Require It?
KYC is a legal requirement stemming from FATF (Financial Action Task Force) guidelines on anti-money laundering (AML) and counter-terrorism financing (CTF). Under these frameworks, any regulated financial service provider — including Virtual Asset Service Providers (VASPs) such as crypto exchanges — must verify the identity of their users before allowing them to transact.
For crypto exchanges, KYC serves multiple purposes: it prevents the platform from being used for money laundering, allows the exchange to comply with sanctions screening obligations, and creates an auditable trail for regulatory authorities. Exchanges that operate without KYC face licence revocation, fines, and criminal liability in most jurisdictions.
The KYC Verification Process Step by Step
The typical KYC flow on a crypto exchange proceeds as follows:
- Step 1 — Document submission: You upload a photo of a government-issued ID (passport or national ID card). The image must be clear, undamaged, and showing all four corners.
- Step 2 — Selfie or liveness check: You take a live selfie or complete a liveness test (moving your head, blinking) to confirm the document belongs to you and is not a photo of a photo.
- Step 3 — Automated verification: The exchange's KYC provider (Jumio, Onfido, Sumsub, or similar) cross-references your document with database checks, sanctions lists, and PEP (Politically Exposed Person) screening.
- Step 4 — Manual review (if flagged): If the automated system cannot verify the document, a human reviewer may request additional documents or clarification.
- Step 5 — Approval or rejection: You receive a decision, typically within minutes for automated checks or 1–3 business days for manual review.
KYC Tiers and What Each Unlocks
Most exchanges implement tiered KYC, where higher verification levels unlock higher transaction limits:
- Level 1 (Basic): Email, phone number, and sometimes country of residence. Enables small deposits and limited withdrawals (typically $1,000–$2,000/day). No document upload required.
- Level 2 (Standard): Government ID and selfie. Unlocks full trading and higher withdrawal limits (typically $50,000–$100,000/day on major exchanges).
- Level 3 (Enhanced / Institutional): Source of funds documentation, bank statements, sometimes video call with a compliance officer. Required for very high-volume accounts or institutional clients.
Why KYC Gets Rejected and How to Fix It
KYC rejection is more common than most users expect. The most frequent causes:
- Blurry or dark photos — the automated system cannot read the document. Retake in good lighting, ensure the full document is visible with no glare.
- Expired ID — many systems automatically reject documents within 30–60 days of expiry, even if technically still valid.
- Name mismatch — the name on the ID does not exactly match the name used during account registration. This includes middle names, hyphenated surnames, and transliteration differences.
- Restricted country — the exchange does not operate in your jurisdiction. No amount of resubmission will resolve this.
- Liveness check failure — poor lighting, moving too fast, or browser/camera issues. Try a different device or browser.
For most rejection cases, resubmitting with corrected photos resolves the issue. If the rejection persists or the account is frozen pending enhanced due diligence, a professional compliance letter addressing the exchange's specific concerns is often required.
What a KYC Freeze Means and How to Resolve It
A KYC freeze means the exchange has restricted your account — typically blocking withdrawals and trading — until identity verification is completed or updated. This can happen when you first register, when an exchange upgrades its KYC standards, or when your account is flagged by automated transaction monitoring for unusual activity.
To resolve a KYC freeze: complete the verification process if you haven't, resubmit with better-quality documents if rejected, or contact the exchange's compliance team if the freeze persists after successful verification. For complex cases — particularly where the freeze is linked to AML review rather than identity verification — a formally structured response letter significantly increases the chance of resolution.
KYC vs. AML: What Is the Difference?
KYC is one component of a broader AML (Anti-Money Laundering) compliance programme. KYC establishes who you are; AML monitors what you do with your funds. An exchange may pass you through KYC successfully but later flag your account for AML review if your transaction patterns are unusual — for example, large inflows from high-risk addresses, rapid fund movements, or peer-to-peer transfers inconsistent with your stated profile.
When an AML review results in an account freeze, the exchange typically requests a Source of Funds explanation: documentation showing the legitimate origin of the funds in question. This is a more complex process than standard KYC resubmission and often benefits from professional assistance in drafting the response.
Frequently Asked Questions
What documents are required for crypto KYC?
Typically: a government-issued photo ID (passport or national ID card), a recent selfie or live selfie (liveness check), and sometimes proof of address (bank statement, utility bill dated within 3 months). Tier 2 KYC on large exchanges may also require source of funds documentation.
Why does an exchange freeze my account for KYC?
If your KYC is rejected, expired, or never completed, the exchange restricts withdrawals and trading to comply with AML regulations. A freeze can also happen if the exchange updates its KYC requirements and your existing verification no longer meets the new standard.
What is the difference between KYC Level 1 and Level 2?
Level 1 (basic) usually requires just an email, phone, and ID — enables small deposits and withdrawals. Level 2 (enhanced) requires full identity documents, selfie, and sometimes source of funds — unlocks higher withdrawal limits. Some exchanges have Level 3 for institutional clients.
Can KYC verification be rejected even with valid documents?
Yes. Common rejection reasons: blurry photo, expired ID, name mismatch with registration data, ID from a country on the exchange's restricted list, or the liveness check failing. Resubmitting with clearer photos resolves most rejections.
Is it safe to submit personal documents for crypto KYC?
On regulated exchanges (Binance, Coinbase, Kraken), yes — KYC data is legally protected under their privacy policies and regulatory frameworks. Never submit KYC documents to unregulated platforms or strangers claiming to 'help' with verification.