KYC explained: why apps ask for your ID

KYC stands for Know Your Customer. It’s the identity-verification step a financial app runs before letting a new user send, receive, or hold money, and it exists because US law requires it, not because any one app chooses to be strict.

What “KYC” means

KYC is the process a bank, wallet, or remittance app uses to confirm that a customer is a real person and matches the identity they claim. In practice this means collecting a full legal name, date of birth, address, and a government-issued ID, then checking that information against the document provided — often with a selfie to confirm the ID belongs to the person opening the account.

KYC is one piece of a broader compliance framework usually called anti-money-laundering, or AML. Where KYC confirms who a customer is, AML covers the ongoing monitoring of what that customer does with their account afterward.

Not every KYC check looks the same. Opening a wallet to send a few hundred dollars home each month typically triggers standard identity verification — the name-and-ID check described above. Larger or unusual transaction patterns can trigger enhanced due diligence, where a provider asks for more information, such as the source of the funds, before letting the transaction go through. The Basel Committee describes this tiered, risk-based approach as central to sound customer due diligence: a provider applies more scrutiny where the risk is higher, not the same fixed checklist to every user regardless of activity.

Why the law requires it

In the United States, the Bank Secrecy Act requires financial institutions — including banks, money transmitters, and other money services businesses — to maintain records and file reports that help investigators trace criminal activity, tax evasion, and terrorist financing. Verifying a customer’s identity at signup is the first step in being able to meet that requirement: an institution cannot keep accurate records on a customer whose identity it never confirmed.

This obligation isn’t unique to the US. The Basel Committee on Banking Supervision, the international body that sets global banking-supervision standards, has described customer due diligence as essential for banks to understand who their customers are and what their financial activity looks like — the same principle US law codifies through the Bank Secrecy Act.

As of 2026, this oversight extends beyond traditional banks. US regulators, including the Consumer Financial Protection Bureau, now supervise large nonbank digital payment and wallet providers under the same consumer-protection lens applied to banks and credit unions. An app that moves money across borders sits squarely inside that perimeter, whether or not it calls itself a bank.

What information you’ll be asked to provide

Most apps ask for the same core set of details during KYC:

• Full legal name and date of birth
• Home address
• A government-issued photo ID (driver’s license, passport, or national ID card)
• A selfie or short liveness check, to confirm the ID belongs to the person submitting it

Some apps ask for a Social Security number or equivalent taxpayer ID, depending on the type of account and the regulations that apply to it. The name, date of birth, address, and ID number are the identifying information the Bank Secrecy Act requires a regulated financial service to collect before opening an account. How a provider verifies that information — scanning a photo ID, running a selfie or liveness check — is a method it chooses to meet that same risk-based standard, not a separate fixed checklist the law spells out item by item.

Each piece of information does a specific job. The name, date of birth, and address let a provider match the applicant against the identity claimed. The photo ID is the documentary evidence behind that claim, issued by a government rather than self-reported. The selfie or liveness check closes the remaining gap for an app with no branch and no teller: it confirms that the person opening the account is physically present and matches the photo on the document, not someone else submitting a stolen or borrowed ID.

What happens to your information

Identity documents collected for KYC exist to satisfy a specific legal recordkeeping duty, not to build a profile for other purposes. A financial app has a direct incentive to protect that data: mishandling it creates both a regulatory problem and a security one. Look for an app that explains, in its own privacy policy, how long it keeps identity documents and who can access them, and treat a request for ID inside the app itself — rather than a text message or email link — as the safer pattern, since phishing attempts often impersonate the KYC step to steal documents directly.

How Moni’s KYC works

Moni is a mobile-first US dollar wallet for Latin America, and like any regulated money-transfer service, it verifies a user’s identity before that user can send or receive funds. That step confirms who is using the wallet — it does not change who controls the money inside it. Moni is self-custodial: users keep control of their funds at all times, and Moni cannot freeze, seize, or move user money unilaterally. Completing KYC is what lets a verified user start moving dollars in the first place; it isn’t a hand-off of control to Moni.