CeFi

KYC (Know Your Customer)

Identity verification required by regulated crypto platforms before allowing users to lend, borrow, or trade. KYC typically requires government ID, proof of address, and sometimes a selfie.

Every regulated crypto lending platform needs to know who you are before you deposit a dollar — or borrow one. KYC is the legal process behind that requirement: you submit a government ID, proof of address, sometimes a live selfie, and the platform checks you against financial crime watchlists before your account goes live.

This isn't a platform preference. It's a legal obligation. Platforms operating under financial regulations in the US, EU, and most major jurisdictions are required to verify customer identity under anti-money laundering (AML) laws. If they skip it, they lose their licenses — or worse.

How It Works

The process is usually three steps: identity verification (passport or driver's license), address verification (a utility bill or bank statement dated within 90 days), and a liveness check (a selfie or short video to confirm you're a real person, not someone using a stolen ID). Most platforms process this in minutes using automated verification services.

Once you pass, your account is tiered. A basic KYC tier might let you lend up to $10,000 in stablecoins. Enhanced verification — sometimes including source-of-funds documentation — unlocks higher limits or institutional-grade products. The tiers vary by platform and jurisdiction.

Some platforms also run ongoing monitoring. A large deposit or unusual transaction pattern can trigger a secondary review even after your initial KYC clears. That's not paranoia — it's a regulatory requirement called transaction monitoring.

Why It Matters

KYC is the clearest dividing line between CeFi and DeFi. A platform that requires it operates inside the regulated financial system — which means legal recourse if something goes wrong, but also a paper trail of your activity. A platform that skips it entirely is either operating in a gray area or is a pure smart-contract protocol with no legal entity behind it.

What is Security Audit?

A professional review of a protocol's smart contract code to identify vulnerabilities. Leading audit firms include Trail of Bits, OpenZeppelin, Certik, and Consensys Diligence.

Full glossary entry

For borrowers, KYC also affects your loan terms. Verified identity can unlock lower collateral requirements on some platforms, because the platform has legal recourse against you if you default — unlike an anonymous DeFi loan that relies entirely on over-collateralization.

Bill's Take

In 25 years of mortgage lending, every single borrower signed a 1003 application and handed over two years of tax returns before we touched their file. KYC in crypto is the same instinct — lenders want to know who they're dealing with before money moves. The difference is that a mortgage takes 30 days to close. A crypto KYC check takes 10 minutes. The speed is new; the principle is ancient.

What to Watch

Passing KYC doesn't mean your data is safe. You're handing a government ID and home address to a company that may be storing it on servers with varying security standards. Several crypto platforms have suffered data breaches that exposed customer identity documents. Before you complete KYC on any platform, check whether they've published a security audit and what their data retention policy actually says.

What is CeFi?

Centralized Finance — crypto financial services operated by a company that holds custody of user funds. CeFi lending platforms like Nexo and Ledn offer interest accounts and crypto-backed loans.

Full glossary entry

Your KYC data can also be subpoenaed. If a platform is served with a government request, your name, address, and transaction history go with it. This isn't a reason to avoid regulated platforms — it's a reason to understand exactly what you're agreeing to when you upload that passport.

Watch Out

KYC compliance doesn't equal platform safety. A platform can be fully verified, legally registered, and still mismanage your funds. Celsius passed KYC requirements and still collapsed. Regulatory compliance tells you the platform plays by the rules — it says nothing about whether the business model is sound.

Master Crypto Lending

Get weekly deep-dives on concepts like kyc (know your customer), platform analysis, and market trends. Free, no spam.