What KYC is
Know Your Customer is the process a regulated firm runs to verify who its customers are. For most retail crypto exchanges in regulated jurisdictions, that involves collecting your name, date of birth, address and a government ID, and often verifying it via document scan and selfie. Higher-tier accounts may require proof of address, source-of-funds questions or additional information.
KYC is not new. Banks, brokers and other financial firms have run KYC programmes for decades. What is new in crypto is the speed and scale at which the same standards have been extended to digital-asset firms, often in jurisdictions where users previously interacted with anonymous services.
This is an educational overview, not legal advice.
What AML is
Anti-Money Laundering is the broader umbrella for rules and systems designed to prevent the financial system from being used to disguise the origin of criminal proceeds, fund terrorism or evade sanctions. It covers KYC, transaction monitoring, suspicious-activity reporting, sanctions screening (see what is OFAC and crypto sanctions) and the Travel Rule for crypto transfers (see what is the FATF Travel Rule).
For a crypto firm, an AML programme is a continuous operation: customers are screened at onboarding, transactions are monitored against rules and risk scores, alerts are reviewed by analysts, suspicious activity is reported to the relevant financial-intelligence unit, and policies are kept current as risks evolve.
Why these rules exist
The motivation is straightforward and pre-dates crypto. Money laundering and the financing of terrorism are crimes that the financial system can unwittingly facilitate. International standards from the Financial Action Task Force (FATF) and national laws require regulated firms to apply KYC and AML controls so that the system as a whole is harder to abuse.
In crypto specifically, the case is that open, peer-to-peer transfers are excellent at moving value but can complicate traceability. Regulated firms — the bridges between fiat and crypto, between users and the chain — are where AML controls are applied. Whether the rules fully achieve their intent is debated, but the policy direction is clear.
What KYC looks like for a user
If you have signed up at a regulated crypto exchange, your KYC journey was probably similar to this:
- Provide name, date of birth, address and country of residence.
- Upload a government-issued ID and a selfie or video for face matching.
- Possibly answer source-of-funds and source-of-wealth questions.
- Possibly provide proof of address (utility bill or bank statement).
- For higher tiers — say if you want to deposit large amounts — provide additional documentation.
Different jurisdictions and platforms have different tiers and thresholds, but the basic shape is consistent.
What AML looks like behind the scenes
Most users do not see what AML monitoring does, but a regulated crypto firm typically runs:
- Sanctions screening of every customer and every transaction against lists like the OFAC SDN list.
- Transaction monitoring rules and risk scoring to detect patterns that may indicate money laundering or fraud.
- Blockchain analytics to assess on-chain counterparties — for example, did the funds you received come from a mixer or a sanctioned address?
- Suspicious activity reporting to the relevant financial-intelligence unit when alerts are escalated.
- Periodic review of customer risk and information refresh as regulations require.
Most legitimate users never trigger more than the routine monitoring. Significant alerts can lead to account questions, requests for additional information or, in rare cases, account restrictions.
How crypto-specific rules layer on top
Crypto adds its own twists to KYC and AML:
- FATF Travel Rule. When you send crypto from one regulated firm to another above a threshold, the sending firm has to share information about you and the receiver with the recipient firm.
- Self-custody interactions. Withdrawing to or depositing from a self-custodial wallet may trigger questions about who controls the wallet.
- On-chain analytics. Firms screen transactions against the broader on-chain history. Receiving funds from a flagged source can prompt a compliance question.
- Stablecoin and sanctions controls. Major stablecoin issuers can and do freeze tokens at sanctioned addresses.
These are not different rules from traditional AML — they are crypto-shaped implementations of the same principles.
The user perspective
For most users, KYC and AML look like one-time signup friction plus occasional follow-up questions. The trade-offs are real: stronger consumer protection, better tools for detecting fraud against you, but also more friction, more data collection and reduced privacy compared with a fully anonymous service.
The right response is informed engagement. Use registered platforms in your jurisdiction; keep your records; respond promptly when a compliance question comes up; understand that the platforms operate within rules that exist for reasons broader than crypto.
Follow KYC/AML developments as they move
The regulatory environment continues to evolve — new Travel Rule deadlines, new stablecoin rules, new sanctions designations. Zippfeed surfaces regulatory headlines with sentiment and importance scoring so you can tell which updates are routine and which will change how exchanges, custodians and stablecoin issuers operate. This is education, not financial or legal advice — but informed beats surprised every time.
