Essential KYC Documents Checklist
If you're ready to meet crypto compliance standards, start by gathering the exact kyc documents each platform asks for. Below is a practical, no-fluff list you can print or save on your phone.
Required identification
- Passport - accepted worldwide, especially for non-resident traders. Make sure the photo page is clear and the expiration date is at least six months away.
- National ID card - works for most EU and Asian users. The card must show your full name, birthdate, and a legible photo.
- Driver's licence - fine for US and many European residents. Some platforms reject licences that are older than ten years.
Pick the document that matches the platform's “ required identification ” field. If you have more than one, submit the one with the highest security level - usually the passport.
Proof of address
- Recent utility bill (electricity, water, gas) - must display your name and a residential address.
- Bank statement or credit-card statement - same name and address requirement.
- Government-issued tax notice - acceptable if it's dated within the last three months.
All address proofs need to be dated no older than three months; older documents trigger a “freshness” check.
Source of funds
- Bank statements covering the last 30 days for traders moving more than $10,000 USD daily.
- Employment verification letter or recent payslips if your income is the primary source.
- Investment portfolio summary for those who fund accounts from other assets.
Platforms use this info to gauge risk. A sudden spike in transaction volume - say a EUR/USD liquidity surge - can prompt extra requests, such as a detailed fund-origin report .
Regulatory Drivers Behind KYC
If you trade crypto, you've probably seen a request for a passport scan or a utility bill. That isn't just a platform's idea of security, it's a direct response to AML regulations that governments around the world have tightened over the past few years.
Global AML directives
The Financial Action Task Force, or FATF, rolled out a set of recommendations that treat virtual assets like traditional money. Those guidelines push every exchange to adopt a crypto KYC law that matches the same standards you see in banks. In the EU, the Fifth Anti-Money Laundering Directive (5AMLD) took those ideas a step further, demanding real-time verification and ongoing monitoring of customer activity. The net effect? You'll be asked for ID, source-of-funds proof, and sometimes even a selfie with your document.
How market signals become compliance flags
Regulators also look at trading patterns. A sudden spike in EUR/USD liquidity, for example, can trigger an alert in a platform's monitoring system . The system sees a rapid influx of volume that doesn't match the usual order-book depth, and flags it as a potential compliance risk.
- Risk rule example: any transaction exceeding 50k USD in a single day automatically prompts enhanced due diligence , meaning the trader must submit additional documentation and answer a short questionnaire.
- Order-book depth changes are another indicator. If the depth shrinks while trade size grows, the platform may launch a KYC review to verify the source of the funds.
These rules keep the crypto ecosystem aligned with traditional finance, and they protect you from being caught in a money-laundering investigation.
Step-by-Step Verification Process
1. Upload your ID and address proof
First, you log in to the crypto onboarding portal and click the “Upload Documents” button. Choose a clear photo of a government-issued ID - passport, driver's licence or national ID - and a recent utility bill or bank statement that shows your name and address. The system runs an OCR scan, pulls the name, DOB and address, and matches them against the data you entered.
2. Take a selfie for facial match
Next, the platform asks you to snap a selfie. Hold your phone steady, make sure the lighting is good, and keep your face fully visible. The selfie is compared to the portrait on your ID. If the algorithm spots a mismatch, you'll see a prompt to retake the photo or adjust the angle.
3. Resolve OCR mismatches
If the OCR engine misreads a digit or cuts off part of the address, you'll get a short message telling you which field needs correction. Simply edit the highlighted text or upload a sharper image. Most users fix this in under two minutes.
4. Speed matters for active traders
Imagine you're a high-volatility GBP/JPY trader who flips positions every few seconds. Delays in verification can cost you a lot, so the exchange prioritises your case once the documents pass the initial checks.
5. Risk rule - three strikes
Be aware: three failed verification attempts lock your account for 24 hours. After the lockout you can start the kyc verification steps again.
Document Standards and Acceptable Formats
If you're getting ready for KYC, the first thing to check is the acceptable file formats . Your upload will be rejected if the file type or size is off, so keep these specs handy.
File types and size limits
- PDF - up to 5 MB
- JPEG - up to 3 MB
- PNG - up to 3 MB
Stick to one of these formats and stay under the size caps. Larger files often time out during the verification scan.
Resolution and clarity for OCR
KYC image requirements call for a minimum resolution of 300 dpi and a clarity score of at least 80 % when run through our OCR engine. In plain terms, the text must be sharp enough that the software can read it without guessing.
To meet the document quality standards , avoid shadows, glare, or folded corners. A quick tip: place the document on a flat surface, use natural light, and hold the camera steady.
Corporate documents
For corporate entities, a notarised version of the certificate of incorporation is mandatory. When you upload, select “Corporate - Notarised” from the dropdown, then attach the notarised PDF or high-resolution PNG. The system will flag any missing notarisation before you can submit.
Risk indicator
Our platform includes a risk indicator that watches for low image clarity. If the clarity score drops below the 80 % threshold, a warning flag appears and your account activation may be delayed until you provide a clearer image.
Special Requirements for Corporate and Institutional Clients
If you're onboarding a business or a high-frequency trading firm, the paperwork goes beyond a simple personal ID. Corporate KYC demands a clear legal picture, so regulators expect you to submit the articles of incorporation, a board resolution authorising the account, and a complete beneficial owner verification list.
Core documentation
- Articles of incorporation - proves the entity's legal existence.
- Board resolution - shows that the company's leadership has approved crypto trading.
- Beneficial owner verification - identifies individuals who ultimately control the firm, satisfying institutional crypto compliance standards.
Assessing order flow legitimacy
One practical signal is institutional order flow on EUR/USD. When a new client consistently places large, market-aligned orders that match typical liquidity patterns, you can infer genuine trading intent. Conversely, erratic spikes or repeated wash trades raise red flags and may require deeper investigation.
Risk rule for high volume
We apply a simple rule: if daily trading volume exceeds 1 million USD, the account moves into a secondary KYC tier . At that point you'll need to provide source-of-wealth documentation, such as audited financial statements or capital-raising disclosures, before the client can continue trading.
Volatility exposure example
When a hedge fund shows significant volatility exposure on GBP/JPY, we ask for a separate risk assessment document. That file should outline the fund's leverage strategy, stress-test results, and the internal controls used to manage rapid price swings. Supplying this extra layer of analysis helps us meet institutional compliance requirements while protecting both parties.
Maintaining Ongoing KYC Compliance
If you're a regular trader, keeping your KYC information fresh is as important as checking your crypto balances. Most platforms run an annual KYC renewal, so you'll get a reminder when it's time to upload a new ID and proof of address. The notification usually lands in your inbox and on the dashboard, giving you a 30-day window to submit the documents before any trading limits kick in.
What to do when you move
A change of residence or tax residency isn't something you can ignore. You must report the new address within 30 days of the move. Log in, go to the “crypto account updates” section, and upload a recent utility bill or bank statement that shows the new address. Failure to do so can trigger a temporary freeze, and nobody wants that when the market spikes.
Inactivity and risk rules
- 30-day inactivity on your account automatically flags a re-verification request. The system assumes the account might be dormant, so it asks for a fresh selfie and ID scan.
- If your transaction frequency starts to decline, the platform may treat it as a risk signal. You could be asked for updated source-of-wealth proof, like recent salary slips or investment statements.
Staying on top of these steps ensures smooth ongoing compliance and keeps your crypto trading uninterrupted. A quick check each year, plus prompt updates after a move or a quiet month, will save you headaches down the road.
KYC's Role in Crypto Tax Reporting
When your exchange verifies who you are, that identity data doesn't just sit in a drawer. The tax reporting module pulls the verified name, address and tax ID and tags every trade with that same identifier. That way each buy, sell or swap is automatically linked to the correct taxpayer, which is the backbone of crypto tax compliance.
Imagine you bought Bitcoin with euros, then later sold it for USD. Your KYC-linked transaction log shows a EUR → BTC purchase on 2023-03-15 and a BTC → USD sale on 2024-01-10. The tax engine reads the two records, converts the EUR cost basis to the USD rate on the purchase date, and then subtracts it from the USD proceeds. The resulting figure is your capital gain, a taxable crypto transaction that shows up on your return.
Risk rule: if the KYC information on file does not match the trade logs, the system flags the account for audit. A mismatched name, missing tax ID or inconsistent address can trigger an audit flag and delay your filing.
Don't forget the source-of-funds paperwork. Tax authorities can ask for bank statements, fiat-to-crypto receipts or gift letters, and they expect you to keep those records for at least five years. Holding onto that documentation smooths the kyc tax reporting process and protects you from costly penalties.