KYC and AML are not crypto-specific concepts. They come from traditional banking regulation, where financial institutions are required to verify customer identities and monitor transactions for suspicious activity. When crypto businesses grew large enough to be regulated, these same requirements followed.
What KYC means
Know Your Customer (KYC) is the process of verifying a customer’s identity before providing financial services. If you’ve ever signed up for a crypto exchange and been asked to upload a photo of your driver’s license and a selfie, that’s KYC. The exchange is satisfying its regulatory obligation to confirm you are who you say you are.
KYC requirements typically involve collecting a government-issued ID, proof of address, and sometimes a selfie or liveness check. For higher transaction volumes or business accounts, additional documentation may be required.
What AML means
Anti-Money Laundering (AML) refers to the policies and procedures financial institutions use to detect and prevent the use of their services for money laundering or financing illegal activity. This includes transaction monitoring, reporting suspicious activity to regulators, and maintaining records of transactions above certain thresholds.
Who KYC/AML applies to
Regulated crypto businesses must comply
- Cryptocurrency exchanges (Coinbase, Kraken, Gemini, etc.)
- Custodial wallet providers
- Bitcoin payment processors acting as financial intermediaries
- Crypto ATM operators
- Any business classified as a Money Services Business (MSB) under FinCEN rules
What about merchants accepting Bitcoin directly?
This is the important distinction for small businesses. If you accept Bitcoin payments directly into your own wallet — peer-to-peer, with no intermediary processing the funds on your behalf — you are generally not acting as a Money Services Business and the KYC/AML obligations that apply to exchanges do not directly apply to you in the same way they apply to a financial institution.
You are receiving payment for goods and services, the same as accepting cash. The same general business obligations apply: keeping records, reporting income, complying with applicable tax law. You are not required to verify the identity of every customer who pays you in Bitcoin any more than you’re required to ID every cash customer.
OrangeTill is a point-of-sale software tool that generates payment requests and QR codes. Payments go directly to your wallet. OrangeTill does not custody your funds, process payments as an intermediary, or act as a financial institution. The compliance obligations for accepting payments remain with you as the merchant, consistent with your existing business obligations.
When a merchant might encounter KYC
You will encounter KYC requirements when you open accounts with regulated crypto services: exchanges to convert received crypto to dollars, business Bitcoin wallets from regulated providers, or crypto banking services. These institutions are required to verify your identity before providing services, just as a bank does when opening a business account.
Payments, simplified.
OrangeTill generates invoices and QR codes for Bitcoin payments directly to your wallet. No custodial middleman.
Try OrangeTill Free →