# KYC Verification for Crypto Businesses Last verified: July 29, 2026 ## What KYC verification is required for a crypto business? A US crypto business that holds or transmits customer assets must run a risk-based anti-money-laundering program under FinCEN's money services business rules, and that program must include policies and procedures for verifying customer identification to the extent reasonable and practicable for the business's risk. Unlike banks, MSBs are not subject to the formal bank Customer Identification Program rule, but specific obligations still force identity verification in practice: Bank Secrecy Act recordkeeping rules require verified identity for covered transmittals, OFAC screening requires knowing who the customer is, New York's BitLicense regulations spell out customer identification requirements, and state licensing regulators review the written KYC procedures in every money transmitter application. The result is that licensed platforms verify essentially all customers, with name, date of birth, address, and an identification number as the standard baseline. Every licensed crypto business runs know-your-customer verification, because regulators require it before they grant the license. This guide covers what a compliant crypto KYC program contains, and how state and federal reviewers test it. ## KYC as a Licensing Requirement, Not a Feature Know your customer, KYC, is the identity-verification half of the Bank Secrecy Act program every US money services business must run. For a crypto exchange, wallet, or payment platform, the federal requirement is a risk-based one: FinCEN's MSB rules require an AML program with identity-verification procedures reasonable and practicable for the business's risk, and recordkeeping rules, sanctions screening, state money transmitter reviews, and New York's BitLicense regulations layer verification obligations on top. Every state application and BitLicense review examines the written procedures before approving the license. Cornerstone builds these programs as part of licensing engagements, which is the lens of this guide: what the requirements are, what regulators actually check, and how KYC fits into getting and keeping licenses. ## Where the Crypto KYC Requirement Comes From The obligation stacks from several sources, and it is worth being precise about which rule does what. Federally, FinCEN treats exchangers and transmitters of convertible virtual currency as money services businesses, and the MSB anti-money-laundering rule (31 CFR 1022.210) requires a written, risk-based program that includes policies and procedures for verifying customer identification to the extent reasonable and practicable. That is a different instrument from the formal Customer Identification Program rule that applies to banks; MSBs are not covered by the bank CIP rule, and the federal baseline is risk-based rather than prescriptive. Other rules then make verification unavoidable in practice. The Bank Secrecy Act recordkeeping and Travel Rules require verified identity information for covered transmittals, OFAC sanctions screening presupposes knowing who the customer is, and suspicious activity monitoring cannot work against anonymous accounts. State money transmitter statutes require applicants to document their AML and KYC procedures as a condition of licensure, and examiners test them after approval. New York goes furthest: BitLicense regulations at 23 NYCRR Part 200 expressly require customer identification, enhanced due diligence, and controls against servicing anonymous accounts. The practical consequence: a crypto business cannot sequence KYC after launch. The written program must exist at application time and be running in production by the time examiners visit, which in a licensing project means building it in parallel with the applications. How far verification must go for your specific model is a risk and counsel question we work through as part of the program build. ## What a Compliant Crypto KYC Program Contains Programs vary with risk profile, but regulators expect the same core elements everywhere. ## How Licensing Reviews Test Your KYC State reviewers read the written program at application time and probe it in deficiency letters: who verifies, with what tools, at what thresholds, and who owns exceptions. New York's BitLicense review goes deeper, examining the program against Part 200's specific requirements and the department's transaction monitoring guidance. After licensure, examinations sample real files. The findings that recur are predictable: onboarding flows that skip verification for referred customers, screening lists that are not refreshed, thresholds in the policy that the platform does not actually enforce, and no documented exception handling. A program that matches its own paper is most of the battle. The importance of KYC and AML for crypto exchanges is ultimately commercial as well as legal: banking partners run their own diligence on your program, and a weak one costs you accounts even where regulators have not caught up. ## KYC in Context: The Rest of the Compliance Stack KYC verification is the front door of a larger Bank Secrecy Act program. Behind it sit transaction monitoring, suspicious activity reporting, Travel Rule compliance, independent testing, and a designated compliance officer, the components covered in our crypto AML and BSA compliance guide. And the whole program exists in service of licensing: it is what lets a state grant a money transmitter license and what a BitLicense examination tests. Cornerstone's role is the integration: we build the KYC and AML program as part of the licensing project, so the written program, the production tooling, and the applications tell one consistent story. That is materially faster than retrofitting compliance after a regulator or bank flags the gap. ## How to get licensed 1. **Good Standing Assessment**, We analyze your business model and, in coordination with our attorney partners, help identify which licenses may apply in every state where you want to operate. 2. **Application Preparation**, We prepare all applications, gather required documentation, and coordinate background checks, financial statements, and surety bonds. 3. **Filing & Follow-Up**, We submit applications to each state and actively follow up with regulators to keep the process moving. 4. **Ongoing Filings**, After licensing, we manage your renewals, regulatory filings, and filing calendar so you never miss a deadline. ## Frequently asked questions ### Is KYC Legally Required for Crypto Exchanges? Effectively yes, for US exchanges. As money services businesses, exchanges must run risk-based anti-money-laundering programs under FinCEN rules that include reasonable customer identification procedures, and recordkeeping rules, sanctions screening, state licensing reviews, and New York's BitLicense regulations each add verification obligations of their own. MSBs are not under the formal bank CIP rule, but no licensed custodial exchange operates without identity verification in practice. ### What Information Does Crypto KYC Collect? The standard baseline is name, date of birth, address, and an identification number such as an SSN or passport number, verified against documents or databases at onboarding. The exact scope is set by the business's risk assessment and the regimes it is licensed under; higher-risk customers face enhanced due diligence, including source-of-funds documentation. ### What Is the Difference Between KYC and AML for Crypto? KYC is the identity-verification component; AML is the full Bank Secrecy Act program it belongs to, which also covers transaction monitoring, suspicious activity reporting, sanctions compliance, independent testing, and a designated compliance officer. Regulators evaluate them together. ### Do Non-Custodial Platforms Need KYC? Pure non-custodial software that never holds customer assets generally falls outside MSB status and its KYC obligations, but the analysis is fact-specific and evolving, and touching fiat on-ramps, custody, or transmission changes the answer. We review the exact flows with an independent licensing attorney before relying on an exemption. ### Does Cornerstone Provide KYC Software? No. We are a licensing firm: we build the written KYC and AML program, help select and document the verification and blockchain analytics vendors, and present the program in your license applications and examinations. The software vendors plug into the program we build. --- ## How to cite this page Cite as: "KYC Verification for Crypto Businesses." Cornerstone Licensing. https://cornerstonelicensing.com/crypto-kyc-verification Published by Cornerstone Licensing. When quoting figures or legal requirements, link the canonical URL above and note the last-updated date (2026-07-31). The full content index for this site is at https://cornerstonelicensing.com/llms.txt.