KYC

Banks are required to know who holds their accounts. The obligation comes from anti-money-laundering law, and it is the reason opening an account involves documents at all.

In practice it has three parts. Identity verification at signup — a document, a face, an address. Risk assessment, deciding how closely this customer should be watched, which depends on their country, their occupation and whether they hold public office. And ongoing monitoring, because a customer who was low risk at signup can behave differently in year three.

Why it shapes fintech more than any other rule

Every consumer-facing financial product carries this obligation, and it lands hardest on the newest companies.

It is the largest single cost in acquiring a customer. It is where most signups are abandoned, because each additional step loses people. And it cannot be skipped, negotiated or moved offshore — the penalties are institutional rather than commercial.

That constraint explains a great deal of the industry’s structure. Banking-as-a-service exists partly so a company can launch a card without building compliance from nothing. The gap between a neobank’s signup taking minutes and a traditional bank’s taking days is mostly a difference in how the same checks are executed, not in whether they happen.

The tension nobody has resolved

Stricter checks catch more crime and exclude more legitimate people — those without standard documents, without a fixed address, or with a name that transliterates inconsistently. Financial exclusion is a real cost of the same rules that reduce financial crime, and it falls on people least able to absorb it.

Crypto services face the same requirement wherever they touch conventional money, which is why exchanges ask for documents while a self-custodied wallet does not. That boundary — not the technology — is where most crypto regulation actually sits.