---
title: "KYC"
url: "https://mahouse.world/glossary/kyc"
type: "glossary term"
topic: "Financial crime"
author: "Ihor Vlasov"
reviewed: "2026-09-20"
published: "2026-08-06"
---

# KYC

Know your customer (KYC) is the process by which a financial institution establishes and verifies who a customer is — their identity, and for a business its ownership and controllers — before providing a service, and keeps that knowledge current throughout the relationship; it is the first component of the anti-money laundering regime and the gate every fraud attempt must pass. In practice it is documents, biometrics, database checks and screening at onboarding, risk-rated by customer and product.

**Also known as:** Know your customer, KYC checks, Identity verification, Customer identification

## Key facts

- **Used at:** onboarding of every customer at a bank, payment or e-money institution, lender, broker, crypto exchange or insurer; re-verification at trigger events and periodic reviews; and, for business customers, the parallel process of know your business (KYB)
- **Binding:** the AML rules in each jurisdiction (EU AML directives and 2024 regulation, UK Money Laundering Regulations 2017, US Customer Identification Program under the Bank Secrecy Act) set what must be established — identity, beneficial ownership, purpose and nature of the relationship — and allow risk-based methods; eIDAS in the EU and the UK's digital identity framework govern electronic verification
- **Typical methods:** document capture with authenticity checks, a selfie with liveness detection and face match, verification against government or credit-bureau databases, electronic identity schemes (BankID, itsme, the German eID), screening against sanctions and PEP lists, and, for higher risk, source-of-funds evidence and video or in-person verification
- **Typical numbers:** automated pass rates of 80–95% depending on market and document quality; 5–15% of applicants to manual review; abandonment at the KYC step of 10–40% on a poorly designed flow; fraud attempts at 1–5% of applications in exposed segments; vendor cost per verification from €0.30 to €3
- **Parties:** the institution's onboarding and compliance teams, the identity-verification vendors, the regulator, the fraudsters, and the customers whose experience of the firm begins here

## How KYC works in practice

A neobank applicant enters their details, photographs their passport and takes a selfie. In seconds the vendor's stack reads the document's fields, checks its security features and the machine-readable zone, confirms the face on the document matches the selfie, tests the selfie for liveness (a real person in front of the camera, not a photo, screen or injected image), screens the name and date of birth against sanctions and PEP lists, and checks the details against a bureau or register. Most applicants pass; those with a document glare, a screening hit or a mismatch go to a human reviewer with the evidence laid out; a minority are declined. The risk rating assigned decides the monitoring the account gets and when it will be reviewed again. Every artefact is retained for the statutory period.

The design tension is conversion against control. Each added check loses applicants; each removed check admits fraud. The resolution is risk-based: light checks for a low-limit wallet, full checks before the limits rise; friction added where signals warrant it (a new device, a mismatched address, a high-risk country) and not elsewhere. The threat moved fast: synthetic identities assembled from real and fake elements pass document checks; generated faces defeat naive selfie matching; injection attacks feed synthetic video to the app. Vendors answered with liveness, injection detection and consortium data, and a firm's KYC stack now needs a review cadence like its fraud models. For business customers the process multiplies — every owner and controller is a KYC subject, and ownership registers are unreliable — which is why KYB is its own discipline. In an acquisition, the target's KYC files are sampled: gaps found in a hundred files are extrapolated to the book, and remediation is priced.

For a fintech, KYC is where the licence, the fraud loss and the growth rate meet in one screen; the flows that convert well and defend well were designed by compliance, fraud and product together.

## Example

A lender's onboarding converts 61% of applicants through KYC; the fraud team traces 3% of funded loans to synthetic identities — bureau records built over 18 months from a real national ID number and invented details, passing document and database checks. Changes: liveness detection with injection-attack checks on every selfie; a consortium query for identities seen across many lenders in a short period; a velocity rule on device and address reuse; and a lighter path (no selfie) for applicants verified through the national electronic identity scheme, which 40% now use. Six months later: synthetic-identity losses down 85%, conversion up to 68% because the eID path is faster than the document path, manual reviews down from 14% to 8%, and a documented risk-based rationale for each path that the regulator's next review accepts.

## Common mistakes

- Maximum friction for every applicant rather than risk-based paths.
- Face match without liveness and injection detection, which synthetic media defeats.
- Treating KYC as a one-time gate; the obligation is ongoing.
- KYB that verifies the company and not its owners and controllers.
- Buying a fintech without sampling its KYC files and extrapolating the gaps.

## Related terms

- [AML](https://mahouse.world/glossary/aml.md)
- [Customer Due Diligence](https://mahouse.world/glossary/customer-due-diligence.md)
- [Know Your Business](https://mahouse.world/glossary/know-your-business.md)
- [Enhanced Due Diligence](https://mahouse.world/glossary/enhanced-due-diligence.md)
- [Synthetic Identity](https://mahouse.world/glossary/synthetic-identity.md)
- [Politically Exposed Person](https://mahouse.world/glossary/politically-exposed-person.md)

— Ihor Vlasov, M&A FinTech Expert. Last reviewed 2026-09-20. https://mahouse.world/authors/ihor-vlasov