KYC (know your customer)

What KYC means

KYC stands for know your customer. It is the set of identity and background checks that a regulated financial firm must complete before it opens an account for a person or a company, and keep up to date afterwards. The purpose is to confirm that the client is who they say they are, to understand where their money comes from, and to reduce the risk that the firm is used for fraud, money laundering or terrorist financing.

KYC is not a single document but a process. For an individual client at a broker, it normally covers proof of identity, proof of address, basic personal details such as date of birth and tax residence, and a questionnaire about financial situation, trading experience and investment objectives. For a company, the firm also looks at registration documents, directors and the people who ultimately own or control the business.

KYC is closely linked to anti-money laundering, or AML, rules. KYC is the client-facing part; AML is the wider programme that also includes transaction monitoring and reporting suspicious activity. Almost every serious broker, bank and payment provider applies it, and clients meet it at account opening and again at withdrawal or when limits are reached.

How it works

Most online brokers run KYC in several stages:

1. Registration. You provide name, email, phone, country and basic details.
2. Identity verification. You upload a government-issued photo ID, such as a passport or national identity card, often with a selfie or a short video to match your face to the document.
3. Address verification. You provide a recent utility bill, bank statement or official letter showing your name and address, usually dated within the last few months.
4. Suitability or appropriateness assessment. You answer questions about experience and risk understanding so the firm can decide whether a product is suitable for you.
5. Source of funds. For larger deposits, the firm may ask where the money came from, for example salary or sale of property.
6. Ongoing monitoring. The firm reviews accounts periodically and may re-verify documents that expire or when activity changes.

Many firms use automated identity services that read the document and check it for tampering. Where a flag appears, staff review it manually. Firms often apply a risk-based approach, so higher-risk clients, countries or transaction patterns receive more scrutiny. Politically exposed persons, meaning people who hold prominent public roles, face enhanced checks.

A worked example

This scenario is illustrative only. Suppose Daniel opens a trading account on a Monday with a broker, deposits 500 euros by card and wants to withdraw on Friday.

1. Monday: Daniel enters his details and uploads his passport and a selfie. Automated checks match the face and read the document in a few minutes.
2. Monday: He uploads a bank statement dated six weeks earlier, showing his address. The reviewer accepts it.
3. Tuesday: The firm applies a limit, since the deposit is small, and lets him trade while verification is complete.
4. Friday: Daniel requests a withdrawal of 600 euros. The firm asks for a photo of the card used, with the middle digits covered, to confirm the card belongs to him.
5. Result: Once approved, the money is returned to the same card.

If Daniel had uploaded a cropped image where the edges of the document were missing, or a statement older than the accepted period, the system would have rejected it and he would have lost a day resubmitting. The arithmetic of delay is small, but for traders needing quick withdrawals it can be significant.

Why it matters

KYC protects both sides. For the firm, it is a legal obligation, and failing it can lead to fines or loss of licence. For the client, it reduces the chance that criminals use their identity, and it means the broker is a supervised business that follows rules.

It also affects practical experience. Account opening speed, withdrawal approval, deposit limits and the choice of payment methods all depend on how smooth the verification is. Some brokers allow limited trading before full verification; others require everything first. The documents accepted, the age limit on proof of address and the amount of source-of-funds evidence vary between firms and countries.

How to use it in practice

• Prepare documents in advance: a valid passport or ID, and a recent proof of address in the same name.
• Make sure names and addresses match exactly across documents and the application.
• Use clear, uncropped images in good light, with all four corners visible.
• Read the broker's verification requirements before depositing, especially for withdrawals.
• Use payment methods in your own name, since third-party payments are usually refused.
• Keep source-of-funds evidence available, such as payslips or sale contracts.
• Update your details if you move or your document expires.
• Only submit documents through the broker's official secure client area, and be wary of requests by unsolicited email or chat.

Common mistakes and misconceptions

• Treating KYC as optional. Regulated firms cannot skip it, and refusing it means the account stays restricted.
• Using expired or unreadable documents, which delays approval.
• Depositing from someone else's card or account, which usually triggers a rejection.
• Assuming a request for documents means a scam. Legitimate firms ask, but only through secure channels.
• Believing KYC is one-time. Firms must refresh information and re-check clients periodically.
• Providing inconsistent details, such as a nickname or an old address.

Risks and limitations

KYC involves sharing sensitive personal data, so the firm's data protection and security practices matter. Fraudsters imitate brokers to harvest documents, so verify the website and entity first. KYC confirms identity but does not guarantee that a firm is trustworthy or that trades will be profitable. Requirements and thresholds differ by jurisdiction and change over time.

How Brokeli looks at it

When we review brokers, we note what verification is required to open, fund and withdraw, and which documents are accepted in each country. Because those details come from published research snapshots, a reader can compare onboarding friction fairly. We view strong KYC as a sign of regulatory compliance, not as proof of quality, and we always consider it alongside licensing and fee transparency.