What is KYC/AML verification, and how often does it run?

KYC (know your customer) and AML (anti-money laundering) are identity verification and monitoring processes financial services use to confirm who a customer is and screen for fraud or money-laundering risk. Verification is usually a one-time step at signup; monitoring for unusual activity typically continues afterward.

Updated: 2026-08-23

KYC is the process of confirming that a customer is who they claim to be, usually by checking a government-issued photo ID (typically a passport, national ID, or driver's license) and sometimes a proof of address or a live selfie compared against the ID photo. AML refers to the broader set of controls, including KYC, that financial services are required to run under law to detect and prevent money laundering and related financial crime.

Documents typically requested include a passport or national ID (the most common), occasionally a driver's license, and sometimes a recent utility bill, bank statement, or government letter to confirm an address. Some services also ask for a video selfie or a live facial comparison for additional verification. Exactly which documents are needed depends on the country, the service's risk assessment, and local regulatory requirements; the same service may ask for different documents from different people. The process is generally handled through a mobile app or web upload with photo verification rather than in person.

The identity check itself is usually one-time and often takes 5 to 15 minutes to complete online: once a customer is verified (typically within hours or by the next business day), they do not repeat the full process for every transaction. What continues afterward is ongoing automated monitoring (checks on transaction patterns, account activity, and changes in risk profile) that can trigger a request for additional information if something falls outside the normal pattern. Enhanced verification might be requested if activity changes significantly (for example, a sudden 10x increase in transaction volume), rather than being a routine repeat of the original check.

A freelancer working with PANORAMA payments passes KYC once during registration, after which the same verified profile is used for future invoices rather than being redone each time. See how you get paid for where this step sits in the overall flow, from registration to payout.

Do I have to redo verification for every payment?

No. Identity verification is generally a one-time step done at signup, usually completed within hours. What continues after that is automated monitoring of account activity and transaction patterns, not a repeat of the original document check. Enhanced verification might be triggered if your activity changes significantly, but routine payments do not require re-verification.

How long does KYC verification take?

Usually 5 to 15 minutes to complete the initial submission (uploading your ID and any other documents). Approval typically happens within hours, sometimes by the next business day. Automated checks run in real-time; only if something flags in those checks does manual review add additional time.

What documents are usually needed for KYC?

Most commonly a government-issued photo ID: a passport, national identity card, or driver's license. Some services also ask for a proof of address, like a recent utility bill or bank statement, or a live video selfie for facial comparison. Exactly which documents a service asks for depends on the country, your risk profile, and local regulations; the same service may ask different customers for different combinations.

Why do payment services need to do this at all?

Financial services are required by regulation in virtually every country to confirm who their customers are and to screen for money-laundering and fraud risk. It is a standard part of operating a regulated payment or banking service, mandated by law, not something specific to any one customer or platform.

Can I be rejected during KYC verification?

Yes, though rare. Rejection typically happens if documents are unreadable, don't match your stated identity, are expired, or if the service detects activity inconsistent with your profile. A rejected verification can often be resubmitted with clearer documents or updated information. If you're repeatedly rejected, contact the service's support to understand the specific reason.