OnionSwap
What is KYC in crypto?
KYC stands for Know Your Customer. In crypto it means the identity verification an exchange puts you through before it will let you trade, deposit or withdraw — handing over your legal name, date of birth, address, a photo of a government ID, and increasingly a live selfie. If you have ever signed up for a mainstream exchange, you have done KYC. This piece explains what it actually is, why it exists, what the real costs are, and what the alternatives look like — without pretending the trade-offs run only one way.
What KYC collects, and when
A typical KYC flow gathers, in ascending tiers: your email and phone, then your full legal name, date of birth and residential address, then a government-issued photo ID, and often a selfie or short video for "liveness" checks that match your face to the document. Higher withdrawal limits unlock higher tiers. Behind the scenes the exchange also runs ongoing monitoring — screening your transactions, scoring them for risk, and cross-referencing your withdrawals against blockchain-analytics databases.
The key thing to understand is that KYC is not a one-time gate. It is the beginning of a permanent record that links your verified identity to every transaction you make on that platform, retained for years and available to whoever can compel it.
Why exchanges require it
Not by choice, mostly. Most jurisdictions classify any business that converts between crypto and fiat, or holds customer funds, as a regulated money-service business or virtual-asset service provider. Those rules — descendants of decades-old anti-money-laundering and counter-terrorism-financing law — require the business to identify its customers, screen them against sanctions lists, and report suspicious activity to authorities. An exchange that skips KYC is not being generous; it is operating illegally in most places and risks being shut down. So the demand is real and the reasons behind it are not frivolous. The question is whether every kind of crypto activity should inherit that framework, and what it costs you when it does.
The real costs of KYC
A honeypot of your data. Exchanges assemble exactly the dataset identity thieves want — ID, address, face, financial history — in one place. These databases get breached with grim regularity, and once your ID and a selfie leak, you cannot reissue your face. This is the risk people underrate most.
A permanent identity-linked ledger. Every deposit and withdrawal is tied to you and kept indefinitely. Combined with public blockchain data, it lets your entire on-chain history be reconstructed and profiled — not just on the exchange, but wherever those coins went afterward.
Custodial control. To enforce KYC an exchange must hold your funds, which means it can freeze them. Accounts get locked for a source-of-funds review, a sanctions false-positive, or simply depositing a privacy coin, and the funds sit frozen while it runs. "Not your keys, not your coins" is the short version.
Exclusion. KYC quietly locks out anyone without the right documents, in the wrong country, or on the wrong list — people for whom the barrier is not a mild inconvenience but a wall.
"No KYC" is not one thing
Plenty of services advertise no KYC while actually deferring it — you trade freely until an order trips a risk score, at which point verification is demanded and your coins are already held hostage to it. That is worse than honest KYC, because it ambushes you mid-transaction. The difference between deferred and structural no-KYC is the single most useful distinction to learn before trusting any such claim.
Structural no-KYC means there is no account to attach an identity to in the first place. A self-custody wallet never asks who you are because it never holds your funds. A no-account swap service converts between assets from its own reserves and identifies an order by a code rather than a person — there is nothing to verify because there is nothing being custodied under your name.
How to transact without KYC
Hold your own keys. A self-custody wallet is the foundation. Nothing about receiving, holding or sending from it requires identifying yourself.
Swap instead of trading on an account. To move between assets, a no-account swap does in one step what an exchange account does across a signup, a verification and a trade — without the record. You can acquire Monero or convert BTC to XMR this way in minutes, identified only by an order ID you keep.
Mind the fiat edges. KYC concentrates at the on- and off-ramps between crypto and traditional money. The more of your activity that stays crypto-to-crypto, the less surface there is for it. When you do touch fiat, that is where your identity attaches regardless of the venue.
The honest summary
KYC is a real regulatory requirement built on real concerns, and for buying your first crypto with a bank card it is often unavoidable. It is also a permanent, breachable, freezable record of your financial life that many people reasonably prefer not to create for every routine transaction. Knowing what it is lets you decide when it is worth accepting and when a no-account alternative does the same job without the record — rather than having that decision made for you by default.