us

216.73.217.135

Back
Blogs

KYC Documents: The Complete List and Requirements Guide (2026)

KYC Documents: The Complete List and Requirements Guide (2026)
Richard M. DECEMBER 16, 2019 UPDATED: JULY 10, 2026 6 minutes read

TL;DR:

  • KYC documents are the official records a business uses to verify a customer’s identity and address during Know Your Customer (KYC) checks.
  • The two core categories are proof of identity (passport, national ID, driver’s licence) and proof of address (utility bill, bank statement, tenancy agreement).
  • Businesses use them to confirm full name, date of birth, document number, photo, nationality, and address, and to check that the document is genuine and unexpired.
  • For business customers (KYB), documents extend to certificate of incorporation, business licence, and beneficial ownership records.
  • Exact requirements vary by country and risk level, and address proofs are usually accepted only if issued within the last three months.
  • Shufti verifies KYC documents in seconds with AI-powered document authentication, biometric face matching, and address verification across 240+ countries.

Whether someone is opening a bank account, joining a crypto exchange, or onboarding to a fintech app, the process starts with the same request: submit your KYC documents. These documents are how a business proves a customer is real, confirms who they are, and meets its anti-money laundering (AML) obligations.

This guide explains what KYC documents are, the full list of accepted identity and address documents, the exact information collected from them, how requirements differ by country and customer type, how digital verification works, and the red flags that get a document rejected. It also includes answers covering the questions customers and compliance teams ask most.

What are KYC documents?

KYC documents are the official identity and address records a business collects and verifies to confirm who a customer is during Know Your Customer (KYC) checks. They are the evidence behind identity verification: a passport or national ID proves identity, and a utility bill or bank statement proves where the customer lives. KYC stands for Know Your Customer.

Businesses in regulated sectors, such as banks, payment firms, crypto platforms, and lenders, are legally required to collect KYC documents before giving a customer full access to their services. The goal is to prevent fraud, money laundering, and financial crime by making sure each customer is genuine and correctly identified.

Types of KYC documents

KYC documents fall into three groups: proof of identity, proof of address, and, for business customers, entity documents. Most individual verifications need one identity document and, where the ID does not show a current address, one address document.

Proof of identity documents

These confirm who the customer is and usually carry a photo and a document number. Commonly accepted proof of identity documents include:

  • Passport.
  • National identity card.
  • Driver’s licence.
  • Government-issued photo ID card.
  • Passport card, or in some cases a debit or credit card, where permitted.

Proof of address documents

When the identity document does not show a current address, a separate proof of address is required. It must usually be issued within the last three months. Commonly accepted proof of address documents include:

  • Utility bill (electricity, gas, water, or landline).
  • Bank or credit card statement.
  • Tenancy or rent agreement.
  • Employer letter.
  • Insurance agreement or policy statement.
  • Tax bill or government-issued correspondence.

Business (KYB) documents

Verifying a company, known as Know Your Business (KYB), needs entity-level documents in addition to the identity documents of its owners and directors:

  • Certificate of incorporation or registration.
  • Business licence or trading licence.
  • Proof of registered business address.
  • Beneficial ownership and shareholding records.

What information do KYC documents provide?

KYC documents are used to capture and confirm a defined set of data fields. Across most countries and jurisdictions, verification collects:

Data field Why it is collected
Full name Core identity of the customer
Date of birth Identity and age verification
Document number Unique reference to the identity document
Photo of the person Biometric face matching against the ID
Residential address Address verification and risk profiling
Nationality Jurisdiction and sanctions risk
Document issue and expiry dates Confirms the document is valid and current

An AI-based document verification system also checks that the document itself is authentic: that it has not been forged, edited, or manipulated, and that the security features are intact.

Want to see how document checks are automated? See how AI-powered document verification authenticates IDs in real time: Shufti Document Verification Solution.

Do KYC document requirements vary by country?

Yes. The documents required for KYC vary by country, regulator, industry, and the customer’s risk level. Some documents, such as a passport, are accepted almost everywhere, while others depend on local rules. For example, banks often ask for more documentation than a low-risk app signup, and high-risk customers may face enhanced due diligence (EDD) with additional proof of source of funds. A business operating across borders needs a verification provider with broad document and country coverage to accept the right documents in each market.

How KYC document verification works (digital KYC)

Digital KYC replaces paper forms and branch visits. Instead of filling in long forms and mailing copies, the customer uploads or captures a photo of a valid document, and the checks run automatically.

  • Capture: the customer photographs or uploads the identity document, and a selfie where biometric matching is used.
  • Data extraction: optical character recognition (OCR) reads the document and extracts the data fields automatically.
  • Authentication: AI checks the document for tampering, forgery, and valid security features, and confirms it is not expired.
  • Biometric match: the customer’s selfie is matched to the photo on the document, with liveness detection to stop spoofing.
  • Decision: a verification result is returned in seconds, cutting a process that once took hours or days.

Why KYC documents get rejected

Understanding the common rejection reasons helps customers pass on the first attempt and helps businesses spot fraud. A KYC document is typically rejected when:

  • It is expired or close to expiry.
  • The image is blurry, cropped, or has glare that hides details.
  • The address proof is older than three months.
  • The name or details do not match across documents.
  • The document shows signs of editing, forgery, or manipulation.
  • The selfie does not match the photo on the ID, or fails a liveness check.

How Shufti verifies KYC documents

Shufti verifies KYC documents in seconds while stopping document fraud, with coverage across 240+ countries and a wide range of accepted document types.

  • Document verification: authenticates passports, national IDs, and driver’s licences, and extracts data with OCR.
  • Address verification: validates proof of address documents against the customer’s details.
  • Biometric face verification: matches the customer’s face to the document with liveness and deepfake detection.
  • Business verification (KYB): verifies corporate documents and beneficial owners.
  • Broad coverage: supports thousands of document types across 240+ countries for compliant onboarding anywhere.
See KYC document verification in action:
Verify IDs and address documents in seconds across 240+ countries with Shufti. Book a Shufti demo.

Disclaimer: The views and opinions expressed on this webpage or weblink are those of the author only, and are not necessarily the views or opinions of Shufti Pro Limited. The material and information on this weblink is solely for general information purposes. You should not rely upon the material or information on the website as a basis for making any business or legal decision.

While we endeavor to keep the information up-to-date and/or correct, we make no representations or warranties of any kind, express or implied, or for any purpose about the completeness, accuracy, reliability, suitability, or availability of the contents or information herein. Any reliance on its content is thus entirely at your own risk.

For the avoidance of doubt, Shufti Pro Limited will not be liable for any false, inaccurate, inappropriate, or incomplete information presented herein, and all liabilities with respect to actions taken, or not taken, based on the contents or information herein, or for any loss sustained by you as a consequence are hereby expressly disclaimed by us.

Join the
Shufti Sphere Newsletter

Get the latest trends, insights, and expert opinions on KYC, AML, fraud prevention, and more, straight to your inbox.

    Pitch a piece and get a verified byline in the Media room.

    Partnership Inquiries?
    Email us at [email protected]

    iBeta Level 1 — ISO 30107-3 Compliant iBeta Level 2 — ISO 30107-3 Compliant iBeta Level 3 — ISO 30107-3 Compliant PCI DSS SOC 2 Type 2 GDPR GDPR Fundamentals — Quality Guild ISO 27001:2022 KJM Age Verification CCPA / CPRA Cyber Essentials Cyber Essentials Plus
    Copyright © 2026 Shufti. All rights reserved.