Crypto Identity Checks: Documents and Privacy

Know your customer, or KYC, is shorthand for checks used to identify customers and assess relevant risks. Providers subject to anti-money-laundering rules may need identity information before offering a service and may request updates later. The requirements depend on the jurisdiction, legal entity, customer and activity.

For example, Australia’s AUSTRAC explains that its regulated businesses must verify customers and that the documents requested vary. Treat a provider’s current instructions for your country as the starting point. Completing KYC is not a guarantee of solvency, honest conduct or investment safety.

Before uploading documents or depositing money, check whether the provider serves your actual country of residence, which legal entity will hold the account, and which services that entity offers you.

A verified account may permit buying an asset while a separate rule prevents access to margin, derivatives, staking or a particular payment method. Limits, suitability checks and additional approvals can also differ. Kraken’s published geographic restrictions illustrate this distinction; other providers have their own rules.

Use accurate information. A VPN, borrowed identity or different address does not resolve an eligibility restriction. Do not deposit in the hope that verification or product approval will necessarily follow.

Open the official app or type a previously verified address yourself. Check that the request also appears in your authenticated account or confirm it through an independently found support channel. A logo, sender name or HTTPS padlock alone does not establish who operates a website.

Use the provider’s documented secure upload method. Do not send identity documents to an unsolicited social-media account or a person offering to accelerate approval. Identity verification does not require your wallet recovery phrase, private key or account password.

On a shared device, avoid leaving document copies behind. Keep your own records only where you can control access, and note what you submitted, when and under which support-ticket number.

A provider may ask where particular deposited funds came from, or how you accumulated your overall wealth. Those are different questions. A salary payment and the savings built from years of work can require different supporting records.

Follow the specific request and ask which document would answer it. Do not send an entire financial history merely because you are unsure. For crypto acquired elsewhere, keep purchase and transfer records; a blockchain address alone may not establish the original source of money.

Read the exact reason before resubmitting. For example, a current passport may establish identity while an old utility bill fails the provider’s address-date requirement. Replacing the passport would not address that problem.

Correct genuine errors through the official process, supply the requested replacement and retain the case reference. Ask for an accepted alternative if your circumstances do not fit the standard document list. Avoid duplicate applications or repeated unrelated uploads. Published processing estimates are not a promise of approval or timing.

If the service is unavailable to you, ask about the official account-closure or return-of-funds process where relevant. Do not pay an intermediary who claims they can override eligibility.

Identify the organization responsible for your data, the purpose of the checks, any verification vendors, retention rules, international transfers and the privacy contact. Consider whether you accept those arrangements before opening the account.

Where the GDPR applies, data-processing principles include transparency, minimization and storage limitation. Access, correction and deletion rights have conditions. Closing an account does not necessarily require immediate deletion of records the provider must legally retain. Use the published privacy-request and complaint channels if an answer is unclear.

Reviewed 15 October 2026. Check the linked primary sources for current provider instructions and applicable protections.