What Is KYC? Meaning, Process & Compliance Guide (2026)

KYC meaning: the short version

KYC stands for Know Your Customer. It is the legal obligation for regulated businesses — banks, payment providers, crypto exchanges, brokers, insurers, gambling operators, and increasingly any platform holding customer balances — to confirm the identity of the people and companies they do business with before, and throughout, the relationship.

In practice, KYC combines identity checks (documents, biometrics, address) with risk checks (sanctions, politically exposed persons, adverse media) and ongoing monitoring. It is the front door of a broader Anti-Money-Laundering (AML) programme.

Why KYC exists

KYC rules trace back to the Bank Secrecy Act of 1970 in the United States and were sharpened globally after the Financial Action Task Force (FATF) recommendations in the 1990s and again after 9/11. The purpose is simple: make it materially harder for criminals to move money through the regulated financial system without being detected.

For your business, KYC is not optional. Regulators can, and do, issue eight- and nine-figure fines for programme failures — even when no underlying money laundering is proved. The 2024 Binance settlement of $4.3 billion is the most public recent example, but community banks have been fined seven figures for the same class of failure.

The KYC process, step by step

Every modern KYC programme follows the same five stages. The depth of each depends on the customer's risk profile and your jurisdiction.

• Customer Identification Program (CIP) — collect name, date of birth, address, and government ID number.
• Customer Due Diligence (CDD) — verify those attributes against authoritative sources: document forensics, biometric match, address proofs.
• Sanctions and PEP screening — check the customer against OFAC, UN, EU, UK, and local sanctions lists plus PEP and adverse-media databases.
• Risk scoring and Enhanced Due Diligence (EDD) — higher-risk customers get source-of-funds review, ownership tracing, and analyst sign-off.
• Ongoing monitoring — periodic re-screening and transaction-behaviour monitoring for the life of the relationship.

KYC vs AML vs CDD: what's the difference?

These three acronyms are often used interchangeably and they shouldn't be. AML (Anti-Money Laundering) is the whole regime — laws, policies, monitoring, reporting. KYC is the identity slice of AML. CDD (Customer Due Diligence) is one specific step within KYC. If AML is the house, KYC is the front door, and CDD is the lock on it.

Who needs to do KYC in 2026

• Banks, credit unions, and neobanks
• Payment service providers and money service businesses (MSBs)
• Crypto exchanges, custodians, and stablecoin issuers (post-MiCA in the EU)
• Broker-dealers, fund managers, and wealth platforms
• Insurers, gambling operators, and real-estate brokers over threshold amounts
• Any platform holding customer balances or facilitating cross-border transfers

What KYC costs

Fully-loaded per-customer KYC in 2026 lands between $1.50 and $12 for retail onboarding, and $80 to $600 for KYB (business) onboarding. The wide range reflects country coverage, whether biometrics are included, and whether analyst review is bundled. Most of the cost sits in the 5 to 15 percent of cases that fail automation and need a human.

Common KYC failure modes to avoid

• Treating KYC as a one-time event instead of ongoing monitoring
• Using selfie-only liveness in a world of consumer-grade deepfakes
• Skipping UBO (Ultimate Beneficial Owner) checks on business accounts
• Storing raw ID images longer than your retention policy allows
• No documented escalation path for refer cases — regulators ask for this specifically

How to choose a KYC provider

Ignore vendor demos that only show the happy path. Ask three questions: what happens to the 10 percent of users who fail automation, which countries do you have first-party document coverage in, and can you produce a regulator-ready audit trail on demand. If the answer to any of those is vague, keep looking.

Get started

We provide the full KYC stack — document verification, biometric liveness, NFC passport reading, AML and PEP screening, and analyst review on every refer case — from $100 per verified customer with same-day turnaround. Message us on WhatsApp or Telegram with a sample case and we will scope it in one reply.