Crypto exchange KYC verification: documents, timing and fixes

Crypto exchange KYC verification is the identity check every licensed exchange in the EU must complete before you can deposit, trade or withdraw. You upload a passport or ID card, take a selfie or short video, and confirm details such as your address and tax residence; on a MiCA-licensed exchange you can’t skip it.

KYC stands for know your customer, and it exists because EU anti-money laundering rules apply to crypto exchanges just as they do to banks. This guide walks through the KYC process: what you’ll be asked for, why, how long it takes and what to do when the verification process stalls. We based it on EU rules and on the verification requirements the exchanges we track publish, checked on 23 October 2026. We haven’t timed verifications ourselves.

What know your customer (KYC) means on a crypto exchange

Know your customer (KYC) is the set of checks a crypto exchange uses to confirm a customer’s identity and assess the risk that an account is used for money laundering or fraud. It is one part of a wider anti-money laundering (AML) programme that also includes transaction monitoring and sanctions screening. KYC and AML go together: KYC tells the exchange who you are, and AML transaction monitoring checks what you do with the account.

In practice, KYC in crypto has three layers:

• Identity verification: proving you are who you say you are, with an ID document and a live photo or video.
• Customer due diligence: collecting your address, nationality, tax residence and the purpose of the account, then scoring the risk.
• Ongoing monitoring: watching your crypto transactions and asking questions when something doesn’t fit your profile.

For the short definition, see our glossary entries on KYC and AML.

Why crypto exchanges require KYC in the EU

Crypto exchanges require KYC because EU law treats them like other financial institutions for anti money laundering purposes. Since the EU’s fifth Anti-Money Laundering Directive, exchanges and custodial wallet providers must verify customers, monitor transactions and report suspicions of money laundering and terrorist financing.

The crypto industry spent years with patchy rules. Today the same regulatory requirements apply to all crypto companies serving EU residents, and robust KYC processes are part of what a regulator checks before it grants a licence. Four sets of rules drive the crypto KYC requirements you meet:

• Anti-money laundering law. AML compliance is also a condition of a MiCA authorisation: a crypto-asset service provider that can’t prevent money laundering risks regulatory penalties and its licence.
• The travel rule. Since 30 December 2024, the EU’s Transfer of Funds Regulation (Regulation (EU) 2023/1113) requires exchanges to send the sender’s and recipient’s details with crypto transfers between providers, with no minimum amount. It applies the standard set by the Financial Action Task Force (FATF) to virtual asset service providers.
• Tax reporting. Under the DAC8 rules, EU crypto platforms must collect customers’ tax residence details and transaction data from 1 January 2026 and report them to tax authorities, which is why you may be asked for a tax identification number.
• Sanctions and politically exposed persons. Exchanges screen customers against sanctions lists and check whether you are a politically exposed person, such as a senior public official, which triggers extra questions.

KYC and fraud risk

KYC also helps fraud prevention. Checking that the person behind an account is real and present makes account takeovers and synthetic identities, built from stolen and invented data, harder, which lowers the fraud risk for the exchange and for you. Crypto fraud and other financial crimes often rely on accounts opened in someone else’s name.

Outside the EU the rules have different names but the same idea: in the US, for example, they come from the Bank Secrecy Act, and most countries base their rules for cryptocurrency exchanges on FATF standards. Because KYC compliance is now standard across the crypto ecosystem, an exchange that skips it stands out for the wrong reasons.

What documents you need for crypto KYC

For most EU exchanges, a valid passport or national ID card and a smartphone camera are enough to start the identity verification. These are the items crypto platforms commonly ask for, and what the exchanges we track say about them:

What you provide	When it’s asked for	Examples from exchanges
Name, date of birth, address, nationality	At sign-up	Gate EU requires you to be 18 or older
Passport or national ID card	Before deposits	Bybit EU asks for an ID document and a selfie
Selfie or short video (liveness check)	With the ID	Bitvavo asks for a government ID plus a short video
Country of residence	At sign-up	Bitvavo requires you to live in a supported country
Tax residence and tax number	At sign-up or later	Linked to DAC8 tax reporting
Proof of address	If the exchange can’t confirm it	Usually a recent bank statement or utility bill
Source of funds	For larger amounts or higher risk	Payslips, a sale contract or similar
A bank account in your own name	Before euro deposits or withdrawals	Kraken and Coinbase require the names to match

KYC procedures differ per exchange, and nationality can matter as well as residence. Bybit EU, for example, doesn’t accept nationals of the US, Malta, Russia and several other countries, even if they live in the EU. Check the exchange’s country rules before you upload anything. Business accounts go through business verification, often called KYB, which asks for company documents instead.

How the KYC verification process works, step by step

The verification process on a crypto exchange platform usually takes these steps, in this order. Doing it in the official app is usually easiest, because the camera checks are built in.

Who runs the checks: crypto KYC providers

Crypto firms implement KYC in different ways. Some build the onboarding process in-house; many crypto exchanges use specialist crypto KYC providers for document verification, the face check and fraud detection, tools built for verifying identities remotely. That’s normal, but it means your data passes through a second company, which the privacy policy should mention. The exchange stays legally responsible for the checks either way.

How long crypto KYC verification takes

KYC verification can take anything from a few minutes to several days, depending on how much of the check is automated and whether the exchange needs more from you. The exchanges we track don’t state a fixed processing speed in the verification information we collected, so plan ahead.

What speeds it up:

• clear, unedited photos of a supported document;
• personal details that match the document character for character;
• a bank account in your own name in a supported country.

What slows it down:

• manual processes after an automated check fails or flags a risk;
• requests for proof of address, source of funds or enhanced due diligence;
• busy periods, such as when many crypto users sign up at once and the onboarding process backs up.

If you plan to buy at a specific moment, verify your account days in advance rather than on the day.

User verification levels and limits

Many crypto platforms link what you can do to your verification level. Basic sign-up lets you look around; full identity verification unlocks euro deposits, crypto trading and higher withdrawal limits.

The exchanges we track describe it like this:

• Kraken: funding limits depend on your account’s verification level.
• Coinbase: you need a fully verified account to fund by SEPA.
• Bybit EU: ID and selfie are required for fiat deposits, Earn products and higher withdrawal limits.
• Crypto.com: standard KYC is required before you can deposit and trade.

Enhanced due diligence

Enhanced due diligence is a deeper check for higher-risk customers or larger amounts. Expect it if you deposit a large sum, if you are a politically exposed person, or if your transactions don’t match what you told the exchange. You may be asked for payslips, tax returns or a contract that shows where the money came from. It’s part of the exchange’s risk assessment, not an accusation.

The travel rule: KYC for transfers to crypto wallets

The travel rule means KYC doesn’t stop at sign-up, and identity verification plays a role every time you move coins out. When you send crypto to another exchange, your exchange must pass on your name and the recipient’s details, so it may ask who you’re sending to.

Do crypto wallets require KYC? A self-hosted wallet doesn’t: anyone can create one without identity verification. For transfers between your exchange account and a self-hosted wallet, the rules focus on larger amounts. For transfers above €1,000, exchanges must assess whether you own or control the wallet, for example by asking you to confirm ownership or to verify addresses with a signed message or a small test transaction. If you use your own wallet, read our guide to crypto wallets first.

How exchanges handle your KYC data

KYC means handing a company your passport, your face and your address, so data security matters. Under the GDPR you have the right to know what an exchange holds about you and to get a copy, but AML law also requires it to keep KYC records for years after you close the account.

Data breaches happen at large, regulated firms too. In 2025, criminals bribed Coinbase’s offshore support staff to obtain data on about 69,000 customers. In 2023 a phishing attack on a Crypto.com employee exposed limited personal data of a small number of users; Crypto.com said no funds were at risk. Both show why you should treat KYC data as sensitive.

Protect yourself from phishing scams that abuse KYC:

• Only verify inside the official app or website, reached by typing the address yourself.
• Never send ID photos by email, WhatsApp or Telegram, even if the message looks like it comes from support.
• Be suspicious of “re-verify your account” messages with a deadline. Log in yourself and check whether any request is waiting.

Read more about phishing and the tricks scammers use.

What to do if your verification is stuck or rejected

If your KYC verification is stuck or rejected, first find out exactly what the exchange needs, then fix that one thing. Most problems are a document issue, a mismatch or an eligibility rule.

1. Check your email and the app for a request, including your spam folder.
2. Compare every detail with your ID: full name, order of names, date of birth, address format.
3. Re-upload better images of a valid, unexpired passport or ID card, without filters or cropping.
4. Check that you’re eligible. Your country of residence and your nationality must both be accepted.
5. Contact support in the app and ask for the specific reason. Kraken offers 24/7 in-app support, Crypto.com 24/7 live chat and Bitvavo live chat with human agents.
6. Make a formal complaint if you get no answer. MiCA requires licensed crypto companies to have a complaints procedure.
7. Choose another licensed exchange if you’re refused and the reason can’t be fixed. Our guide on how to choose a crypto exchange helps you compare.

Exchanges don’t always explain a refusal, because AML law can stop them from telling you about a suspicion. That’s frustrating, but repeated sign-ups with different details only make it worse.

Can you buy crypto without KYC?

You can’t buy crypto without KYC on a licensed EU exchange. Exchanges need KYC to ensure regulatory compliance, so platforms that skip it for EU residents are almost always operating without a MiCA licence, and that brings its own risks: MEXC, which the Dutch AFM warned about in September 2025, allows itself in its terms to block withdrawals from unverified accounts.

Decentralized exchanges and peer-to-peer trades avoid KYC, but you lose customer support and protection, and turning euros into crypto usually still goes through a regulated on-ramp. For most people in Europe, a few minutes of verification at a licensed exchange is the better trade. Check the licence first with our guide on how to check if a crypto exchange is licensed under MiCA.