Skip to main content

What is KYC in crypto?

KYC — Know Your Customer — is the identity check a regulated crypto venue runs before it will let you deposit, trade or withdraw. It is not an exchange preference; it is anti-money-laundering law applied to anyone who holds customer funds or touches fiat rails. This explainer covers exactly what gets collected, which activities genuinely require it, what the real risks are, and where swaps still work without it.

What KYC actually involves

  1. 1

    Identity collection

    Full legal name, date of birth, residential address and usually a national tax or ID number. This is the baseline 'customer identification programme' step every regulated venue runs.

  2. 2

    Document verification

    A photo of a passport, driving licence or national ID, plus a liveness selfie. Most exchanges outsource this to a third-party vendor, so your documents sit with that vendor as well as the exchange.

  3. 3

    Screening

    Your details are checked against sanctions lists, politically-exposed-person databases and adverse media. A partial name match can freeze onboarding until a human reviews it.

  4. 4

    Ongoing monitoring

    Verification is not a one-off. Transactions are scored continuously, and an unusual deposit can trigger a source-of-funds request months after signup — often with the account frozen until you answer.

Which activities require KYC

Crypto activities compared by whether identity verification is required
ActivityKYCWhy
Buying crypto with a card or bank transferAlways requiredFiat rails run through regulated payment institutions and banks that must identify every customer.
Holding a balance on a custodial exchangeAlways requiredHolding customer funds makes the venue a regulated custodian in nearly every major jurisdiction.
Crypto-to-crypto swap, non-custodialUsually noneNo account is created and no funds are held; you supply a destination address and the assets pass straight through.
Withdrawing to a self-custody walletAlready done at signupSome jurisdictions also require the venue to record the beneficiary of the withdrawal (the travel rule).
Using a decentralised exchangeNone at protocol levelThe contract has no operator to verify you, though front-ends can geoblock and screen addresses.

The rules behind it

In the United States, custodial exchanges register with FinCEN as money services businesses under the Bank Secrecy Act, which mandates a customer identification programme and suspicious-activity reporting. In the European Union, the AML directives and MiCA impose equivalent duties on crypto-asset service providers. The United Kingdom applies the Money Laundering Regulations through FCA registration. Layered on top is the FATF travel rule, which makes venues exchange customer details on transfers above roughly 1,000 USD or EUR. The common thread is custody and fiat: obligations attach to the intermediary holding your assets, not to you as an individual holder.

The trade-offs

Verification buys you fiat access, higher limits and, on custodial venues, some recourse when something goes wrong. It costs you a permanent link between your legal identity and your on-chain activity, copies of your ID sitting with the exchange and its verification vendor, and exposure to account freezes during review. Neither side is strictly better — the right answer depends on whether you need a bank rail or simply need to move between assets you already hold.

Swapping without KYC

If you already hold crypto, a non-custodial swap sidesteps the whole process: no account, no document upload, no balance held on your behalf. You send one asset, supply a destination address, and receive the other. Providers still screen deposits automatically and can pause an order flagged by an AML check, so it is not an unmonitored channel — it simply does not require an identity file. See how to buy Bitcoin with no KYC for a worked example, or the no-KYC exchange hub for the venue comparison.

Swap without an account

Monivo quotes every connected no-KYC provider at once and routes to the best executable output. No signup, no ID, non-custodial.

Get a live quote

Frequently asked questions

What does KYC mean in crypto?

KYC stands for Know Your Customer: the legally mandated process where a regulated exchange collects and verifies your identity before letting you trade, deposit or withdraw. In practice it means handing over your name, address, date of birth and a government ID document, then being screened against sanctions and watchlists on an ongoing basis.

Why do crypto exchanges require KYC?

Because anti-money-laundering law treats them as financial institutions. Custodial exchanges and fiat on-ramps fall under regimes such as the US Bank Secrecy Act, the EU's AMLD/MiCA framework and the UK Money Laundering Regulations, all of which require customer identification, record keeping and suspicious-activity reporting.

Is KYC required for every crypto transaction?

No. It is required wherever a regulated intermediary holds your money or touches fiat rails. A non-custodial crypto-to-crypto swap creates no account and holds no balance, so it generally proceeds with nothing more than a destination address.

What are the risks of completing KYC?

The main one is data concentration: your ID document, selfie and address sit in a database — often a third-party vendor's — that becomes a target. Exchange and verification-vendor breaches have leaked customer identity data repeatedly. Verified accounts can also be frozen pending review, and your holdings become linked to your legal identity on-chain once you withdraw.

Can I legally avoid KYC in crypto?

Using a non-custodial swap that does not ask for it is legal in most jurisdictions — you are not evading a duty that falls on you, because the verification obligation sits with regulated custodians and fiat processors. Falsifying identity documents, or structuring transactions specifically to defeat reporting thresholds, is not legal anywhere. You remain responsible for reporting taxable disposals.

What is the travel rule and how is it different from KYC?

KYC identifies you to the venue you use. The travel rule requires that venue to pass your identifying details to the receiving venue alongside transfers above a threshold — 1,000 USD or EUR in most implementations. It is why some exchanges now ask who owns the wallet you are withdrawing to.

How long does exchange KYC take?

Automated verification usually clears in a few minutes. Manual review — triggered by a name match, a poor document scan or a higher-tier limit request — commonly takes one to five business days, and source-of-funds reviews can run considerably longer.

This guide is general information, not legal or tax advice. Related: Best no-KYC exchanges compared · Buy Monero with no KYC · Crypto swap taxes