Know Your Customer (KYC) is the process a regulated service uses to establish who a customer is and assess relevant risks before or during a business relationship. In crypto, it most often appears when a centralized exchange or other custodian opens an account, processes fiat deposits, or enables certain transactions. The exact checks depend on the service, risk, and applicable law; KYC is not a single global rule requiring every wallet or protocol user to submit an ID.
How It Works
A provider may collect identity details and documents, verify them against trusted records, screen for sanctions or other legally relevant risks, and monitor activity under its compliance program. Checks can be different for an individual customer, a business, a low-risk transaction, or a higher-risk relationship. A self-custody wallet is software controlled by its user; it does not itself perform exchange-style identity checks. A service that exchanges, holds, or transmits assets may face different obligations depending on its role and jurisdiction.
History
Customer identification grew out of financial institutions’ efforts to manage fraud and financial crime, then became part of national laws and international anti-money-laundering standards. As crypto services began connecting blockchain assets to banks and fiat payment systems, regulators applied existing risk-based frameworks to some businesses in the sector. The FATF standards influence national rules, but FATF does not directly license every exchange or set one identical KYC form for every country.
Common Misconceptions
KYC is not synonymous with blockchain surveillance, and completing verification does not make a transaction private or guarantee that a service is safe. Some decentralized applications can be used without an account, while access through a hosted company, front end, or fiat on-ramp may involve checks. Conversely, calling a service ‘decentralized’ does not by itself determine whether a person or company has regulatory duties.
Criticisms
Identity checks can reduce some abuse and help regulated businesses meet legal obligations, but collecting passports, addresses, and face images creates privacy and data-security risks. Reviews can delay legitimate customers, exclude people who lack accepted documents, or rely on opaque decisions. A fair assessment asks what data are necessary, how securely they are stored, how long they are retained, and whether users have a way to correct errors. Requirements and consumer protections vary by jurisdiction.
Social Media Sentiment
In a Reddit discussion, one Bitcoin user describes avoiding identity-linked exchanges as a privacy preference, while replies point to peer-to-peer options and raise practical trade-offs. This is one discussion, not a measure of community-wide opinion or a recommendation to evade applicable law. Reddit discussion.
Last updated: 2026-10
Related Terms
See Also
For related context on custody, financial access, and institutions:
- Bitcoin as Collateral: Bank Loans, Mortgages, and DeFi Explained
- How the 2024 Bitcoin ETF Changed Crypto
- Why Calling It a ‘Wallet’ May Have Been Crypto’s Biggest Mistake
Sources
- FATF Recommendations — The international standards describe customer due diligence and record-keeping expectations that countries implement through their own laws.
- FATF Guidance for Virtual Assets and VASPs — This guidance explains how FATF applies a risk-based AML/CFT approach to virtual-asset activities and service providers.
- FATF report on decentralized finance — The report discusses how standards may apply where identifiable people or entities exercise control or sufficient influence.
- FATF report on offshore VASPs — This report covers cross-border virtual-asset service providers and the challenges of applying oversight across jurisdictions.