Opening a regulated account involves identity checks. A provider may request an ID image, address evidence or a photograph, but the accepted documents and verification method depend on its lawful procedure and the client’s circumstances. Read the actual requirements before submitting personal data.

KYC in one sentence

KYC, short for Know Your Customer, refers to identification and related checks under the applicable anti-money-laundering framework. The Polish GIIF example covers identity, beneficial ownership where relevant, the purpose of the relationship and ongoing monitoring. Country rules and the institution’s lawful, risk-based procedure determine the required steps; European and Polish examples are not worldwide law.

  • Preventing money laundering
  • Preventing the financing of terrorism
  • Identifying and verifying the beneficial owner where applicable
  • Applying the checks required by the actual sanctions and AML framework

Which documents are required

Documents a broker may request — confirm your provider's accepted verification method
1. Proof of identityA valid passport or national ID card, with a photograph
2. Proof of addressAddress evidence accepted by the provider; confirm document type and permitted age
3. Photograph with the documentA photograph or electronic method if required by the actual verification procedure
4. Source of fundsEvidence explaining origin where justified by the risk assessment; a declaration is not universally sufficient
Time to approvalprovider- and case-specific; no universal completion time

Tax identifiers depend on the client’s residence and status. Supply the identifier requested under the applicable tax-reporting rules; PESEL, SSN and National Insurance numbers are examples rather than mandatory identifiers for every person in those countries.

A different portal name needs explanation

Suppose the company’s dashboard links to a verification portal with a different name. The name difference alone proves neither fraud nor a proper transfer of data.

A different portal name needs explanationThe steps help confirm the recipient, purpose and channel before sending a document. They do not certify the portal’s security.MODEL / A DISTINCT DIFFERENCE1. Notice a changed recipientPortal and firm names differ2. Check official informationWho receives data, and why?3. Confirm the channel separatelyContact found outside the message4. Confirm the required scopeDo not alter documents on your own

A hypothetical external-portal scenario, with no client data or named provider. The list organises questions; it does not decide the legality or need for a copy in an individual case. The document Poland’s UODO — identity-document copies explains the need to assess the purpose and necessary scope of a copy in Poland. The portal-checking sequence is our example.

The steps confirm recipient, purpose and channel before sending a document; they do not certify portal security.

Do not send a copy solely because a message says KYC. If the company confirms an external provider, still check that the address and requested scope match that confirmation. Do not publish identity scans or personal data in your notes about the check.

The most common reasons for rejection

  1. Unreadable evidence — follow the accepted format and visibility requirements for the actual portal.
  2. An expired document — the ID card or passport has to be valid on the day you send it
  3. Evidence outside the accepted period — check the provider’s stated rule rather than assuming a universal three-month limit.
  4. Unexplained address differences — resolve substantive differences through the official correction procedure; formatting alone does not establish rejection.
  5. An incomplete verification image — if this method is requested, follow the confirmed instructions and avoid glare or missing required details.
  6. A document in a foreign language — some brokers then ask for a certified translation

The process step by step

  1. Account registration — e-mail address, password, basic personal details
  2. The investment assessment — in the EU, appropriateness generally concerns knowledge and experience. Suitability for advice or portfolio management also covers financial circumstances and objectives, subject to service-specific rules. Identity verification is a separate question.
  3. Submitting evidence — use the verified official channel and only the required scope under the actual procedure; the four example categories are not a mandatory upload pack.
  4. Verification — follow the case status and outstanding requests; an automated or manual route does not establish a promised completion time.
  5. Follow-up questions — the broker sometimes asks for one more document or an explanation
  6. Permitted account actions — confirm whether funding, trading or withdrawals are restricted at the current verification stage. Do not infer a worldwide sequence.
  7. Funding evidence — follow the accepted method and ownership rules. An own-name transfer may establish the sender but does not alone explain the earlier origin of the funds.

Practical tips

  • Submit a readable image. Use the accepted scan or photograph method and check that required details are visible without glare or cropping.
  • Take the photograph against a neutral background — a white wall, light from the front, no shadow across the document
  • Use an accepted file format. Follow the portal’s size, format and image-quality instructions; there is no established general rejection advantage for PDF over a clear photograph.
  • Check the address in the form. Resolve differences from the evidence you submit and follow the provider’s correction instructions.
  • Allow for the provider’s processing schedule. Check support hours and any pending verification requests; do not assume that every Friday application waits until Monday.
  • Keep a secure record of the request, date, official channel and response. Protect any retained sensitive documents; do not put identity scans or bank data in public notes or this site’s checklist.

Checks can recur when data change or circumstances justify an update; a completed onboarding does not end all monitoring. A new request is neither automatically improper nor proof that every demanded document is necessary. Ask the official support channel for the missing element and purpose. In a hypothetical PLN 20,000 deposit funded by PLN 10,000 salary savings and PLN 10,000 sale proceeds, the sum reconciles the deposit, but an ID, transfer receipt and origin evidence answer different questions. Arithmetic does not establish authenticity or guaranteed approval.

Identity verification is part of regulated onboarding, but it can use different document or electronic methods. A request labelled KYC does not authenticate the sender, and the absence of a particular scanned document does not establish that a firm is unregulated. Confirm the entity, its accepted verification channel and any unresolved requirements before funding or withdrawing. Related reading: depositing and withdrawing money at the broker.