KYC & AML Basics: Why Legitimate Businesses Ask for Your Documents
In short
KYC (Know Your Customer) and AML (Anti-Money-Laundering) are standard checks that responsible businesses carry out before working with a client. Being asked for proof of identity and proof of address is normal and is usually a sign that a firm is legitimate and compliant — not a red flag. What matters is that the request is proportionate, that you understand why it is needed, and that you share documents through a secure, verifiable channel. This guide explains what KYC and AML are, what you'll typically be asked for, and how to provide documents safely.
What KYC and AML actually mean
KYC — Know Your Customer — is the process of verifying who a client is before entering a business relationship. AML — Anti-Money-Laundering — is the broader set of rules and practices designed to prevent illicit funds from moving through legitimate businesses. In practice, KYC is how a firm meets its AML responsibilities.
These checks are a normal part of doing business worldwide. A firm asking for basic verification is typically demonstrating that it takes compliance seriously.
What you'll typically be asked for
A proportionate KYC request usually includes:
- Proof of identity (POI): a passport, national ID card or driving licence.
- Proof of address (POA): a recent utility bill, bank statement or official letter.
- Basic contact and, for businesses, registration details.
- For some engagements, the source or purpose of a payment.
Why KYC protects both sides
Good KYC is not just a box-ticking exercise for the firm — it protects you too. It confirms that the business is dealing with the real you, reduces the risk of impersonation and fraud, and creates a clear, documented record of a legitimate relationship that benefits both parties if any question is raised later.
A firm that keeps orderly identity and payment records is, by definition, a firm that can account for its clients and its transactions.
How to share your documents safely
While KYC requests are normal, you should still share sensitive documents sensibly:
- Confirm the request comes from the real business, through an official channel.
- Use a secure upload or encrypted method rather than open email where possible.
- Provide only what is proportionate to the engagement — question anything excessive.
- Keep your own copy of what you sent, and to whom, and when.
How EZFIN handles KYC
EZFIN collects proportionate KYC records as part of onboarding and keeps them to a clear client-file standard, so that every engagement is documented and verifiable. We handle personal data in line with our Privacy Policy and use it only for the purposes of the engagement.
This article is general educational information about compliance practice, not legal advice.
Frequently asked questions
Why does a company need my ID and proof of address?
To meet Know Your Customer (KYC) and Anti-Money-Laundering (AML) responsibilities — verifying who they are dealing with. A proportionate request is normal and is usually a sign of a compliant, legitimate business.
Is it safe to send my passport or ID to a business?
It can be, if you confirm the request is genuine and use a secure channel. Share only what is proportionate to the engagement, keep a record of what you sent, and be cautious of excessive or off-channel requests.
Does providing KYC documents guarantee a service is legitimate?
No single step guarantees legitimacy, but proportionate KYC is a positive signal. Combine it with basic checks on the company's registration, contact details and reputation.
This article is general, educational information about KYC and AML practice and is not legal or regulatory advice. Requirements vary by jurisdiction and by the nature of the engagement.