Explainer · 3 min read
What Is KYC in Crypto?
KYC means know your customer: the identity checks crypto exchanges run before you can trade. What they collect, why they exist, what can go wrong, and what the five KYC levels on this site mean.
Updated · First published 12 Oct 2026
KYC stands for “know your customer”. It is the process a financial business uses to confirm who you are before it serves you. In crypto, it is the step where an exchange asks for a photo of your passport or ID card, a selfie, and often proof of your home address.
What a KYC check collects
A typical check asks for:
- Full name, date of birth and nationality
- A government ID document, front and back
- A live selfie or short video, matched against the document
- Proof of address, such as a utility bill
- For larger amounts, where the money came from
The exchange usually passes this to a specialist verification company, so your documents end up stored by at least two firms.
Why exchanges do it
Anti-money-laundering laws require it. Businesses that exchange or hold crypto for customers are regulated in most countries and must identify customers, monitor transactions and report suspicious activity. KYC is one part of that. A related rule, often called the travel rule, requires providers to pass sender and recipient details to each other when crypto moves between them.
What can go wrong
Leaks. Identity documents cannot be changed like a password. Breaches at exchanges and at verification vendors have exposed ID scans and home addresses. For people known to hold crypto, a leaked address is a safety risk.
Exclusion. People without accepted documents, or living in countries a provider does not serve, cannot pass.
Frozen accounts. Passing KYC once does not prevent an account being locked later while the provider asks more questions.
What “no KYC” and “non-KYC” mean
“No KYC” and “non-KYC” mean the same thing: a service you can use without those checks. There are three quite different kinds:
- Services that cannot identify you. Non-custodial software, where trades happen between users and no company holds funds.
- Services that choose not to ask. Their terms say identity is not required.
- Services that do not ask until something triggers. Their terms let them hold your funds and demand ID after an automated risk flag. Many “no KYC” swap sites are in this group.
The third kind is the one that catches people out, and it is why this site scores services on what their terms say, not on their marketing.
The five KYC levels used on this site
| Level | Label | Meaning |
|---|---|---|
| 0 | ID never required | The terms rule out identity checks, or the design makes them impossible |
| 1 | No ID mentioned | No identity requirement appears anywhere in the terms |
| 2 | ID in rare cases | Only in exceptional cases, such as a legal order |
| 3 | ID on risk flag | Funds can be held and ID demanded after an automated flag |
| 4 | ID mandatory | Verification is required to use the service |
Level is the biggest single input to a listing’s Privacy grade. It does not tell you whether the service is safe, which is why Safety is graded separately. The methodology has the full arithmetic.
KYC versus AML
AML, anti-money-laundering, is the wider set of duties. KYC is the identification part. A service can skip KYC at sign-up and still run AML screening on every deposit using blockchain analytics. That combination is common, and it explains most stories of held swaps: see why crypto swaps get frozen.
Do you have to use a KYC exchange?
No. Holding crypto in your own wallet and trading peer to peer are lawful in most countries. What the law regulates is the businesses. Browse P2P exchanges or no-KYC exchanges to see what exists, and check the rules where you live.
