KYC, short for know your customer, is the process by which a business verifies the identity of a client or customer before providing a service. Banks, online brokers, crypto exchanges, payment processors, and online casinos all run KYC checks. The goal is simple: confirm that a customer is who they claim to be, and flag those who might be using a service to launder money, finance illegal activity, or commit fraud.
What KYC actually involves
KYC is not a single step. It's a framework with three standard components, each serving a distinct function.
- Customer identification program (CIP): collecting basic identity data such as name, date of birth, address, and a government-issued ID number.
- Customer due diligence (CDD): assessing the risk a customer poses. Low-risk customers get light scrutiny; high-risk customers trigger deeper investigation.
- Enhanced due diligence (EDD): applied to politically exposed persons (PEPs), customers from high-risk jurisdictions, or accounts with unusual transaction patterns.
In practice, you'll encounter KYC as a form asking for your passport or driving licence, sometimes a utility bill for proof of address, and occasionally a selfie or short video to confirm the document matches your face. Many platforms now use automated identity verification software that processes these uploads in seconds.
Why businesses are legally required to run KYC checks
KYC isn't optional. Regulators in most countries require it under anti-money laundering (AML) legislation. In the United States, the Bank Secrecy Act and rules from the Financial Crimes Enforcement Network (FinCEN) set the framework. In the European Union, successive AML directives, with the 6th AML Directive being the most recent major iteration, impose strict obligations on financial institutions. The UK's equivalent sits in the Money Laundering Regulations 2017.
Firms that fail to comply face substantial fines. In 2023, Binance paid a $4.3 billion settlement to US regulators partly over KYC and AML failures, making it one of the largest financial penalties in the sector's history. The risk of non-compliance is not theoretical.
KYC in online gambling and gaming revenue
Online gambling operators have particularly rigorous KYC obligations, because their platforms can attract both money laundering and problem gambling. A licensed casino must verify a player's identity before processing a withdrawal, and many now require verification before a player can deposit at all. This connects directly to how operators calculate and report metrics like GGR (gross gaming revenue): regulators want assurance that the revenue figures derive from verified, legitimate players rather than anonymous actors.
KYC checks in gambling also protect players. Operators confirm that a customer is of legal gambling age and isn't on a self-exclusion register before opening an account. Skipping that check isn't just a regulatory failure. It's a direct harm to the player.
The difference between KYC and AML
KYC and AML are related but not the same thing. KYC is a subset of AML. Anti-money laundering is the broader body of law and regulation aimed at preventing financial crime; KYC is the specific customer identity and risk-assessment process that sits inside it. You can think of AML as the policy and KYC as one of the tools used to enforce it.
Other AML tools include transaction monitoring, suspicious activity reports (SARs), and sanctions screening. A customer who passes KYC can still trigger a SAR later if their transaction behaviour looks unusual. Passing the initial identity check doesn't close the file permanently.
Ongoing monitoring: KYC isn't a one-time event
Regulators expect businesses to maintain what's called a "living" KYC file. That means re-verifying customers periodically and updating risk ratings when circumstances change. A customer who starts sending large wire transfers to unfamiliar jurisdictions after years of routine activity will trigger a review, regardless of how cleanly they passed the original check.
This ongoing dimension is why KYC compliance is expensive for businesses. It isn't a checkbox completed on sign-up. It's a continuous process requiring systems, staff, and regular audits. Smaller operators sometimes use third-party KYC providers like Jumio to handle document verification and biometric checks rather than building the infrastructure in-house.
What customers should expect from a KYC request
If a platform asks you to complete KYC, it's a legal requirement on their end, not an optional preference. You'll typically need a government-issued photo ID (passport or driving licence), proof of your current address dated within 3 months (a utility bill or bank statement), and sometimes proof of the source of funds if you're depositing large amounts.
Refusal to complete KYC means the platform can't legally serve you. That's not a policy quirk. It's how the regulatory framework works. Platforms don't get to waive it any more than a bank branch could hand over an account to someone who won't show ID.
The process has become faster. Many services now clear a KYC check in under 5 minutes using automated document scanning. Manual reviews, which used to take days, are now reserved for edge cases where the automated system flags something unusual.
KYC and the broader question of financial transparency
KYC sits inside a wider push for financial transparency that has accelerated since the early 2000s. The Financial Action Task Force (FATF), an intergovernmental body, sets global AML standards that member countries translate into domestic law. FATF's grey list and blacklist carry real economic weight: being listed restricts a country's access to international banking systems and foreign investment.
For consumers, KYC can feel like friction. A few minutes uploading documents is a minor inconvenience. But it's the mechanism that keeps financial services from becoming anonymous conduits for criminal money. Industries that rely on transparent revenue reporting, including those tracked by metrics like NGR (net gaming revenue), depend on that integrity to function legally across multiple jurisdictions.
KYC isn't going away. If anything, regulatory pressure is pushing it deeper into more industries, from property transactions to NFT marketplaces. Knowing what it is, and why it exists, takes the friction out of the next time you're asked for your passport.