The NordBastion polar-bear mascot in a Nordic library at night, leaning over a long oak reading table strewn with open dictionaries and PGP-signed papers under aurora-blue lamplight
Glossary entry · Regulatory term

KYC Know Your Customer

The identity check most hosts run on you — by law, by choice, or by the credit-card processor that already ran one for them.

परिभाषा
Plain English

The legal and operational practice of collecting identity documents — name, address, government ID — from customers before serving them. Required by AML regulations in the United States, the European Union and most G20 jurisdictions for financial services; voluntary for most hosting providers.

Why it matters at NordBastion

The whole product is built around not doing this.

KYC is not, in principle, a hostile practice. It exists because regulators decided that financial intermediaries should know who they move money for, and that decision has reduced the volume of straightforward fraud and sanctions evasion that flows through the global banking rails. The problem is what happens when KYC is bolted onto services that were never financial in the first place.

एक वेब होस्ट जो KYC चलाता है, उसने एक उच्च-मूल्य पहचान-से-अवसंरचना मैपिंग बनाई है जो पहले मौजूद नहीं थी। होस्ट अब जानता है कि यह सटीक व्यक्ति उस सटीक सर्वर को चलाता है, उस सटीक IP address पर, उस सटीक वेबसाइट की सेवा करते हुए। वह मैपिंग subpoena के अधीन, उल्लंघन योग्य, लीक योग्य, और — उन न्यायक्षेत्रों में जहाँ होस्ट को सीमित कानूनी संरक्षण है — होस्ट की अपनी marketing या risk टीमों द्वारा उपयोग योग्य है।

NordBastion declines to build that mapping. We accept an email address and a cryptocurrency payment, and we store no government ID, no legal name, no phone number, no proof of address. The card on file does not exist because there is no card. The definitional opposite of this practice — "no-KYC" — is the other side of this same glossary, and the foundation of the doctrine.

FAQ · KYC

The questions people actually ask.

What does KYC stand for?

KYC stands for "Know Your Customer". The phrase originates in the international anti-money-laundering framework promoted by the Financial Action Task Force in the late 1990s, and was adopted into US law as part of the USA PATRIOT Act in 2001 and into EU law through successive Anti-Money Laundering Directives.

Is KYC legally required for hosting providers?

No. KYC is mandated for financial services — banks, brokers, payment processors, regulated cryptocurrency exchanges — and for a handful of adjacent sectors such as real estate and high-value goods. Web hosting is not a regulated financial activity in any major jurisdiction. When a host runs KYC on a customer, it is a commercial choice (usually inherited from the card processor on file), not a legal obligation.

What documents does a typical KYC check ask for?

न्यूनतम: कानूनी नाम, आवासीय पता, जन्म तिथि। कड़े स्तर पर: सरकारी ID की फ़ोटो, एक selfie या छोटा वीडियो, और पते के प्रमाण के रूप में हालिया utility bill या बैंक स्टेटमेंट। कुछ financial-grade KYC नाम को sanctions और politically-exposed-person watchlists के विरुद्ध भी जाँचता है।

Why does NordBastion not run KYC?

क्योंकि यह होस्टिंग के लिए कानूनी रूप से आवश्यक नहीं है, क्योंकि यह एकल सबसे बड़ा privacy leak है जो एक होस्टिंग प्रदाता पेश कर सकता है, और क्योंकि विकल्प — ऐसी cryptocurrency में भुगतान स्वीकार करना जिसे clear करने के लिए किसी पहचान की आवश्यकता नहीं — परिचालनात्मक रूप से पूरी तरह से काम करता है। पूर्ण तर्क /doctrine/ में है।