Chapter 7

KYC and Onboarding

Know Your Customer (KYC) is the gate between anonymous browsing and full exchange access. Regulators treat centralized exchanges as financial intermediaries, so most major platforms require identity verification before fiat deposits, higher withdrawal limits, or derivatives trading. The process creates a durable link between your legal identity and every deposit, trade, and withdrawal on that account.

Exchanges segment users by risk and compliance burden — basic email signup allows little; verified identity unlocks fiat rails and higher limits.

Typical verification tiers

Tier	Requirements	Typical access
Level 0	Email and phone only	Crypto-only, low withdrawal caps
Level 1	Government ID and selfie	Fiat on-ramp, standard limits
Level 2	Proof of address, source of funds	Higher limits, derivatives
Restricted	Sanctions, fraud flags, jurisdiction block	Withdraw-only or frozen

Accounts freeze when submitted documents fail checks, sanctions lists match, or activity triggers enhanced due diligence — not always with clear explanation to the user.

Geofencing blocks entire countries when local law prohibits unlicensed exchange activity. VPN circumvention violates terms of service and can result in frozen funds — exchanges re-verify IP and document origin during withdrawals. Enhanced due diligence kicks in for large deposits, peer-to-peer volume spikes, or transfers involving privacy tools and high-risk jurisdictions.

KYC data becomes a honeypot: breaches at exchanges have leaked millions of identity documents. From a user perspective, the practical takeaway is to submit accurate information, enable two-factor authentication, and understand that regulated platforms will cooperate with lawful requests — your exchange account is not a privacy wallet.