KYC — Know Your Customer — is the identity-verification process every US-regulated crypto platform runs before letting you deposit, withdraw, or trade. Driver's license, selfie, sometimes proof of address, sometimes source-of-funds documentation. Coinbase, Kraken, Gemini, Binance.US, Robinhood — all require it. Required by the Bank Secrecy Act (BSA, 1970) as extended to crypto businesses by FinCEN's 2013 guidance.
What KYC actually means for a US holder
Three operational consequences:
First, your name, address, and trading history at the platform are linked to your real-world identity. The IRS receives 1099-B and 1099-MISC forms from US-regulated CEXes; the FBI and Treasury can subpoena historical records.
Second, withdrawals to non-KYC destinations may be flagged, slowed, or refused. Coinbase's "Travel Rule" implementation requires that on certain large withdrawals you confirm the destination's owner identity. This is FinCEN compliance, not Coinbase being difficult.
Third, your KYC data is at risk separately from your funds. The Coinbase customer data breach in May 2025 — where rogue support contractors leaked PII for an undisclosed number of users — is the canonical example. KYC turns the exchange into a custodian of identity data, not just funds.
What KYC catches
KYC is designed to catch money laundering, terrorist financing, and sanctioned-party transactions. It does this imperfectly — sophisticated bad actors use stolen identities, layered shell companies, and jurisdictional arbitrage — but well enough that platforms can demonstrate good-faith compliance and avoid FinCEN enforcement actions.
For ordinary US-resident holders, KYC is mostly a friction tax that produces tax records the IRS will eventually see. It is not designed to protect you; it is designed to protect the platform's regulatory position.
The KYC-free alternative
Truly KYC-free fiat on-ramps to crypto have largely disappeared in the US since 2022. The remaining options — P2P platforms like LocalBitcoins (now defunct), Bisq (decentralized P2P), and small-volume cash-by-mail services — are mostly used by holders who have specific privacy needs (whistleblowers, journalists, people in custody disputes) rather than mainstream users.
On-chain activity itself is KYC-free: once you have crypto in a self-custodied wallet, swapping on a DEX, providing liquidity, or staking does not require KYC. The KYC gate is only at the fiat boundary.
The travel-rule wrinkle
FinCEN's Travel Rule (technically applicable to crypto since the 2019 FATF revision) requires US-regulated platforms to share originator and beneficiary information for transactions above $3,000. In practice this means a $5K withdrawal from Coinbase to a self-custody wallet will trigger additional friction; a $50K withdrawal will trigger documentation requests.
For US holders moving substantial sums off-exchange, plan the move: notify the exchange in advance if possible, keep records of the destination wallet's ownership, expect a 24-72 hour delay on the first large transfer to a new address.
Further reading: AML, CEX, Withdrawal whitelist.