You open a remittance app, enter your recipient's details, and then — before you can send a single dollar — the app asks for your passport, a selfie, and a utility bill. If you've ever wondered why every money transfer provider puts you through this process, the answer is two words: KYC compliance.
KYC stands for Know Your Customer. It is a legal obligation placed on all licensed financial services providers by anti-money laundering (AML) laws. In the United States, this flows from the Bank Secrecy Act. In the EU, from the 6th Anti-Money Laundering Directive. In the UK, from the Money Laundering Regulations 2017. Globally, the Financial Action Task Force (FATF) sets the standards that over 200 jurisdictions implement into national law.
KYC is not optional, and it is not the provider being overly cautious. Providers that skip or weaken KYC face multi-billion dollar fines, loss of their money transmitter license, and criminal prosecution of executives. In 2012, HSBC paid $1.9 billion in fines for AML failures. In 2024, Binance paid $4.3 billion to settle US AML charges — partly due to inadequate KYC controls.
This guide explains exactly what KYC means, why it exists, which documents you need at each verification level, and how to move through the process quickly so your transfers are never held up.
KYC is the process by which a financial institution verifies that a customer is who they say they are. It has three core components: Customer Identification Program (CIP), Customer Due Diligence (CDD), and Enhanced Due Diligence (EDD) for higher-risk customers.
Remittances are a specific focus area for regulators because cross-border transfers have historically been used to move illicit funds between jurisdictions where banking oversight differs. According to the UN Office on Drugs and Crime (UNODC), between $800 billion and $2 trillion is laundered globally each year — roughly 2–5% of global GDP. International money transfers are one vector for this activity.
The FATF, which includes the G7 nations, the EU, and most major economies, specifically requires that money service businesses (MSBs) — which includes remittance companies, currency exchanges, and crypto exchanges — perform KYC on all customers. Each member country then enacts this as national law.
Under US rules (FinCEN regulations), any money transmitter must verify the identity of customers sending more than $3,000 in a single transaction or $10,000 in aggregated transactions within 30 days. Most providers apply KYC at sign-up, before any transfer, to make the ongoing compliance process cleaner.
$4.3B — Fine paid by Binance in 2024 for AML and KYC failures (US DOJ) (US Department of Justice, November 2023)
Not all KYC checks are equal. Providers typically implement a tiered verification system, where the level of verification required scales with the transfer amounts and risk involved. Understanding these tiers helps you know exactly what to prepare.
Tier 1 — Basic identity verification — is typically required to create an account and send small amounts. Providers collect your full legal name, date of birth, address, and email. Many apps complete this with just a few form fields and send a verification email. Transfer limits at this tier are usually $500–$1,000 per transaction.
Tier 2 — Document verification — is required to send larger amounts, typically above $500–$2,000 depending on the provider. You must upload a government-issued photo ID (passport, national ID card, or driver's license). Most platforms use automated document verification software (from vendors like Jumio, Onfido, or Stripe Identity) that checks authenticity in real time. This can be completed in under 5 minutes if your documents are clear.
Tier 3 — Enhanced Due Diligence (EDD) — applies to high-volume senders, business accounts, or customers flagged for additional risk (such as politically exposed persons, or senders in high-risk corridors). EDD requires proof of source of funds — payslips, bank statements, or business documentation — plus sometimes a live video call with a compliance officer. This process can take 2–7 business days.
| Tier | Typical Limit | Documents Required | Approval Time |
|---|---|---|---|
| Tier 1 — Basic | Up to $500–$1,000/tx | Name, DOB, address, email | Instant |
| Tier 2 — Document | Up to $10,000–$15,000/tx | Government photo ID + selfie | 1–10 minutes (automated) |
| Tier 3 — Enhanced (EDD) | Unlimited / Business | ID + proof of address + source of funds | 2–7 business days |
| Business / Corporate | Unlimited | Company docs + UBO verification + director IDs | 3–14 business days |
Acceptable documents vary by provider and by the country of your residence, but most licensed remittance platforms and crypto exchanges accept the following primary identity documents: a valid passport (most universally accepted), a national identity card issued by an EU/EEA country or select others, a driver's license (accepted in the US, UK, Canada, Australia, and most Western countries), and in some jurisdictions, a residence permit or national registration card.
For proof of address — required at Tier 3 or for account limits above $10,000 — providers typically accept a bank statement (no older than 3 months), a utility bill (electricity, gas, water, or internet — no older than 3 months), a government-issued letter or tax document, or a lease agreement. Credit card statements are accepted by some providers but rejected by others.
Documents must clearly show your full legal name, your current residential address, and the issuing authority. Blurry photos, cropped edges, or expired documents are the most common reasons for KYC rejection. Always photograph documents in good lighting on a dark, flat background, with all four corners visible.
For selfie verification, most automated systems require a live selfie (not a photo of a photo) with your ID held next to your face. Some providers use liveness detection — you may be asked to blink, turn your head, or complete a brief facial movement challenge to confirm you are physically present.
Use a passport if you have one — it is the most universally accepted document and has the highest automated approval rate. Photograph it in natural daylight, flat on a dark surface, with all text readable. Complete your selfie in good lighting facing a plain wall. Avoid glasses, hats, or filters.
Wise requires Tier 2 verification (government ID + selfie) before your first transfer over approximately $1,200, depending on your country of residence. Verification is handled via automated software and typically completes in 1–5 minutes during business hours. For transfers above $10,000, Wise may request source of funds documentation.
Remitly completes basic verification at sign-up and triggers document verification for transfers above a corridor-specific threshold. In the US, Remitly's limit before ID verification is typically $999. Remitly uses Jumio for automated ID checks and usually approves within minutes.
Western Union has an extensive KYC process partly because it offers cash pickup, which is higher risk than bank deposits. Online account verification requires government ID. In-person agents may require ID for transfers above $1,000. Western Union is also subject to a 2012 deferred prosecution agreement with the US DOJ that requires extensive AML controls.
Coinbase, Kraken, and other crypto exchanges used as on-ramps for stablecoin remittances operate under the same MSB regulations as traditional providers and in some cases stricter rules due to the Travel Rule (which requires sharing sender/recipient data for crypto transfers above $3,000). Expect full Tier 2 verification before any crypto purchase, and EDD for high-volume accounts.
Smaller crypto exchanges in receive-country corridors — such as CoinDCX (India), Bitso (Mexico), Luno (Nigeria), or Quidax (Nigeria/Ghana) — are regulated by their local financial authorities (RBI, CNBV, CBN, SEC-Ghana) and have equivalent KYC requirements. You or your recipient may need to complete local exchange verification to receive funds.
| Provider | KYC Trigger | Accepted IDs | EDD Threshold | Typical Approval Time |
|---|---|---|---|---|
| Wise | First transfer >~$1,200 | Passport, national ID, driver's license | >$10,000 | 1–5 min (automated) |
| Remitly | First transfer >$999 (US) | Passport, national ID, driver's license | >$10,000 | Minutes–24 hrs |
| Western Union (online) | Account creation | Passport, driver's license | >$3,000 (varies) | Minutes–hours |
| Coinbase | Any purchase | Passport, national ID, driver's license | >$50,000/yr | Minutes (automated) |
| Kraken | Any purchase | Passport, national ID, driver's license | >$25,000 | Minutes–hours |
| CoinDCX (India) | Account creation | Aadhaar + PAN card (mandatory) | >₹50,000 | Minutes–24 hrs |
| Bitso (Mexico) | Account creation | INE/IFE, passport, or FM2/FM3 | >$9,999 MXN/day | Minutes (automated) |
Since 2019, the FATF has extended KYC requirements to virtual asset service providers (VASPs) — including crypto exchanges — through a requirement known as the Travel Rule. The Travel Rule mandates that when a crypto transfer exceeds a threshold ($3,000 in the US, €1,000 in the EU, £1,000 in the UK), the sending platform must collect and transmit the sender's and recipient's identity information to the receiving platform.
This means that for large stablecoin remittances — say, sending USDC from Coinbase to a recipient's wallet on Bitso — both exchanges must share KYC data about the parties. The mechanics are handled by Travel Rule compliance protocols like TRP, TRISA, or Notabene, which most major exchanges now support.
For the average remittance sender, the practical impact is that you need to be fully KYC-verified on the sending exchange, and your recipient's exchange must also be a regulated VASP. Transfers to unhosted wallets (personal crypto wallets not held at an exchange) may face additional compliance steps or lower limits depending on jurisdiction.
The good news: on-ramp/off-ramp stablecoin remittances as supported by RemitRoutes use regulated exchanges on both ends, so Travel Rule compliance is built into the flow.
200+ — Jurisdictions that have adopted FATF's Travel Rule for crypto transfers (FATF, 2025)
The most common reason a transfer is delayed or blocked is an incomplete or failed KYC check. Automated systems reject documents that are blurry, expired, or show a name that doesn't match the account registration. Manual review queues — typically 24–48 hours at most providers — are triggered when the automated system cannot make a confident decision.
Other triggers for manual review include: sending to a high-risk corridor (transfers to certain countries are subject to stricter transaction monitoring), sending an unusually large amount relative to your account history, using a new device or IP address from a different country, or having a name that appears on sanctions screening lists (false positives happen and are usually resolved within 24 hours by submitting an explanation).
Sanctions screening is a separate process from KYC but related. Every licensed provider runs sender and recipient names against OFAC's SDN list (US), the UK HM Treasury list, and EU consolidated sanctions lists. This happens automatically in milliseconds. If your name or your recipient's name is a close match to a sanctioned party, the transfer may be held pending manual review.
To minimize delays: complete KYC verification before you need to send urgently. Most providers let you verify your identity at sign-up, before any transfer. Verify to Tier 2 at minimum so you have a higher limit buffer. If you regularly send above $5,000, proactively complete Tier 3 / EDD before you hit the limit mid-transfer.
Submitting forged, altered, or borrowed identity documents to a financial institution is a criminal offense in every jurisdiction. Penalties include account closure, reporting to law enforcement, and potential prosecution. If your documents are in a different name due to a legal name change or marriage, submit both the old and new documents with a supporting legal certificate.
If you are sending money as a business — whether you are a small business owner paying overseas suppliers, an employer sending payroll to international contractors, or an NGO disbursing funds to field offices — KYC requirements are significantly more extensive.
Business KYC (sometimes called KYB — Know Your Business) requires: proof of business registration (articles of incorporation, business license, or certificate of formation), identification of all beneficial owners with greater than 25% ownership stake (their personal KYC documents are required), identification of authorized signatories, and often a description of the business's source of funds and expected transaction volumes.
For businesses operating in high-risk sectors (cryptocurrency, gambling, arms, precious metals, cannabis), or businesses incorporated in certain jurisdictions (offshore financial centers, countries with elevated FATF risk ratings), EDD requirements apply and the onboarding process can take 1–3 weeks.
Wise Business, Western Union Business Solutions, and Currencies Direct all offer business accounts with appropriate KYC frameworks. For high-volume international payroll, dedicated platforms like Deel or Remote handle KYC compliance as part of their service.
Before you create an account on any remittance platform or crypto exchange, gather: a valid government-issued photo ID (passport preferred), a recent proof of address document (utility bill or bank statement dated within 3 months), and your device's camera ready for a selfie.
Check that your ID is not expired. Expired documents will be automatically rejected. If your ID expires within 6 months, renew it first — most providers require 6 months validity.
Tip: Scan your documents at home in advance and save high-resolution images to your phone's camera roll so you can upload instantly during sign-up.
When you first sign up, complete the ID upload and selfie verification immediately — even before you make your first transfer. This ensures your account is at Tier 2 verification from day one, giving you a higher per-transaction limit and avoiding delays when you need to send urgently.
Most automated systems approve Tier 2 verification in under 10 minutes during business hours. Night-time submissions may take longer as manual review queues run during business hours.
If you regularly send $10,000 or more, or if you are making a single large transfer, prepare source of funds documentation in advance. Acceptable documents include: recent payslips (last 1–3 months), a letter from your employer confirming your salary, bank statements showing the funds arriving and accumulating, or tax returns if you are self-employed.
The question 'where did this money come from?' is not an accusation — it is a standard compliance requirement. Providing clear, organized documentation speeds up EDD review significantly.
Tip: Keep a dedicated folder on your phone or computer with your current KYC documents and update it whenever a new bank statement or payslip arrives. This eliminates scrambling during a transfer.
If you are about to make a transfer that is significantly larger than your normal pattern — for example, sending $50,000 for a property purchase abroad versus your usual $500 monthly transfer — contact your provider's compliance or support team in advance.
Proactively explaining the purpose and providing supporting documentation (property purchase agreement, invoice, etc.) before the transfer prevents it from being held in review. Most providers have a proactive disclosure path and will fast-track verification if you reach out first.
A common concern among remittance users is: what does the provider do with my passport scan? Licensed financial institutions are required to retain KYC records for a minimum of 5 years under most jurisdictions' AML laws (7 years under EU law), so the records are kept for a defined period.
Reputable providers store ID documents using encrypted databases, with access restricted to compliance personnel. Document verification vendors like Jumio, Onfido, and Stripe Identity are SOC 2 Type II certified and process documents under strict data processing agreements with the platforms that use them.
In the EU and UK, GDPR/UK GDPR applies. Providers must disclose what data they hold, allow you to request deletion after the legally mandated retention period expires, and report data breaches within 72 hours. For US users, relevant protections come from state-level privacy laws (California CCPA) and FinCEN regulations.
The risk of submitting your ID to a licensed, regulated provider is materially lower than submitting it to an unlicensed operator. Licensed providers face heavy regulatory scrutiny of their data practices. Always verify that a provider holds a valid money transmitter license (or equivalent) in your jurisdiction before completing KYC.
In the US, check FinCEN's MSB registrant search at fincen.gov. In the UK, check the FCA register at register.fca.org.uk. In the EU, check your national financial regulator's register. Never submit ID documents to an unlicensed platform.
If you are using a crypto rail — buying USDC on Coinbase, sending it over Stellar or Tron, and having your recipient cash out at a local exchange like CoinDCX or Bitso — KYC applies at both ends: the on-ramp exchange where you buy the stablecoins, and the off-ramp exchange where your recipient sells them.
This means your recipient also needs a verified account on the off-ramp exchange. If your recipient is new to crypto exchanges, plan for the verification time in advance — typically 10–30 minutes for automated Tier 2 approval at well-staffed exchanges.
One advantage of crypto rails for KYC purposes: once both parties are verified on their respective exchanges, subsequent transfers have no additional KYC friction. The blockchain transfer itself requires no personal information — only wallet addresses. The identity verification happens at the fiat conversion points.
Transfers between two verified exchange accounts are also fully compliant with the Travel Rule, as both exchanges are regulated VASPs that share the required sender/recipient data automatically behind the scenes.
All providers listed on RemitRoutes are fully licensed and KYC-compliant. Compare live fees, transfer speeds, and total costs for your send and receive countries.
KYC stands for Know Your Customer. It is a legal requirement under anti-money laundering (AML) laws that obliges licensed money transfer providers — including banks, remittance apps, and crypto exchanges — to verify the identity of their customers before processing transfers. Providers collect your name, address, date of birth, and a government-issued ID to comply with these regulations.
Selfie verification confirms that the person submitting the ID documents is physically present and matches the photo on the ID. Most platforms use automated liveness detection to prevent fraud — for example, to stop someone from submitting another person's ID photo. The selfie is processed by identity verification software (such as Jumio or Onfido) and is typically reviewed within seconds.
Tier 2 automated verification (government ID + selfie) typically takes 1–10 minutes at most major providers during business hours. Manual review — triggered by document quality issues or unusual risk flags — can take 24–48 hours. Enhanced Due Diligence (EDD) for high-value transfers or business accounts can take 2–7 business days. Completing verification before you need to send urgently avoids delays.
All three providers accept a valid passport (most reliable), national ID card, or driver's license for identity verification. For proof of address (required at higher limits), they accept a utility bill or bank statement dated within 3 months. For transfers above $10,000, source of funds documentation (payslips, bank statements) may be required.
Yes. Crypto exchanges operating as money service businesses are subject to the same KYC/AML requirements as traditional remittance providers. In the US, this flows from FinCEN regulations. Exchanges like Coinbase and Kraken require full ID verification before any purchase. Additionally, the FATF Travel Rule requires exchanges to share sender and recipient identity data for transfers above $3,000 (US) or €1,000 (EU).
Yes. Transfers can be held or blocked for incomplete KYC verification, failed document checks (expired or blurry ID), sanctions screening matches (false positives do occur), unusual transaction patterns, or high-risk corridors. To minimize this risk: complete full Tier 2 verification before your first transfer, maintain current documents on your account, and contact your provider's compliance team proactively before making unusually large transfers.
Yes, provided the provider is licensed and regulated. Licensed money transmitters are legally required to protect your data, retain it securely for the mandatory period (typically 5–7 years), and comply with data protection laws (GDPR in the EU, CCPA in California). Verify that your provider holds a valid license (FinCEN in the US, FCA in the UK) before submitting documents. Never submit ID to an unlicensed platform.
The Travel Rule is a FATF recommendation — implemented as law in the US, EU, UK, and 200+ other jurisdictions — requiring that when a crypto transfer exceeds a threshold ($3,000 in the US, €1,000 in the EU), the sending exchange must transmit the sender's and recipient's identity information to the receiving exchange. It mirrors the information-sharing requirements that already apply to traditional wire transfers under the original Bank Secrecy Act Travel Rule.
Compare live rates across 370+ corridors on RemitRoutes · methodology.