Know Your Customer Requests: When Sharing ID Is Legitimate
Banks, mobile money providers and exchanges must verify customers, so ID requests are normal. How genuine know-your-customer checks work, and how scammers fake them.
Banks, mobile money providers, crypto exchanges and payment apps are legally required to know who their customers are. So being asked for your ID, a selfie or proof of address is normal. That is exactly why scammers copy these requests: "Your KYC has expired. Update now or your account will be blocked."
How genuine KYC checks work
- Done inside the official app, on the official website, or at a branch or agent.
- Usually triggered when you open an account, reach certain limits, or when regulations change.
- May ask for ID photos, a selfie or video, proof of address, and sometimes source of funds.
- Never ask for your PIN, password or one-time codes.
How KYC scams work
- A text, email, WhatsApp or call says your account will be blocked unless you update KYC.
- A link leads to a fake bank page, or an agent asks you to install an app.
- You enter your login, card details, codes, or upload ID and selfies.
- The scammer empties your account or uses your identity.
hxxps://bank-kyc-update[.]in or call our officer on the number below.- Same-day blocking threat.
- A link or phone number, instead of directing you to the official app.
- What to do: open your bank's app or visit a branch to check.
Rules for any ID request
- Only complete verification inside the official app, website or branch you reach yourself.
- Never share PINs, passwords or codes as part of "verification".
- Be suspicious of urgency and blocking threats.
- Be careful with selfie and video requests outside official apps. See selfie verification scams.
Got a KYC update message? Paste it into CyberWatch AI Scan for a free check.
Related: fake identity verification requests. For more, read about protecting your identity in our complete guide.
Frequently asked questions
What is KYC?
Know Your Customer: checks regulated financial services must carry out to confirm who their customers are, usually by collecting ID and sometimes a selfie or proof of address.
Will my bank ask me to update KYC by text message?
Some banks notify customers to update details, but you should always do it inside the official app, website or branch, never through a link in a message.
Is 'your account will be blocked unless you update KYC today' real?
That urgent phrasing is a common scam, especially in countries where KYC updates are routine. Check through your bank's official app or branch.
Sources
- What To Know About Identity Theft, US Federal Trade Commission
- How To Recognize and Avoid Phishing Scams, US Federal Trade Commission
- National Cybercrime Reporting Portal, Government of India
