...

KYC for crypto exchanges: user verification, tax number, lists and sanctions before the first deal

A broker and a digital currency trustee may no longer identify a customer in a simplified way, and the tax number has become a mandatory field of the form. We recognise the passport with no manual entry, check the face and the document for forgery, find the tax number and check the user against the Rosfinmonitoring lists and sanctions — before the first deal. The test, the limit and the decision stay in your system.

Crypto exchange user verification: passport, tax number, lists and sanctions
from 29 ₽ document + liveness per KYC session
195+ countries and territories — users' documents
36 ₽ international screening: sanctions and PEP
5 ₽ tax number from the passport or a check against a single list
Passport without entry Document anti-fraud Liveness INN by passport Watchlists and sanctions Company by tax number

Russian software register No. 19972 · 152‑FZ

Broker, exchange and trustee under 283‑FZ: what changed in user identification

Law No. 282‑FZ made a crypto exchange, a broker and a trustee participants of the Bank of Russia registers, and the accompanying Law No. 283‑FZ rewrote the 115‑FZ rules for them: there is no simplified identification, the tax number is mandatory, and the sender and recipient data are passed along with the transfer.
A repeated violation of Art. 6 and 7 of 115‑FZ within a year is a ground for excluding the organisation from the register.

  • Broker and trustee

    282‑FZ, Art. 15, 16, 31, 32; 115‑FZ, para. 1, 1.12-5 of Art. 7

    User KYC

    Identification

    • Simplified identification does not apply to a contract with digital currency deals
    • A customer who was previously identified in a simplified way is identified again when cryptocurrency is added to the contract

    Application form

    • The customer's tax number is a mandatory field of a brokerage and trust contract with digital currency
    • Passport data, address and date of birth — as in full identification

    Non-qualified investor

    • A positive test and familiarisation with the risks before purchase
    • The annual amount is within the limits set by the Bank of Russia
    • Only currencies from the list for public circulation
  • Crypto exchange and digital depository

    282‑FZ, Art. 14, 32, 53; 115‑FZ, Art. 5, para. 1.5-1, 5.2-2 of Art. 7

    Rosfinmonitoring watchlists

    Who may do it

    • Digital currency trading — only through a trading organiser from the Bank of Russia register
    • Investor testing is also carried out by exchanges

    Account and address

    • A digital depository is a subject of 115‑FZ
    • An account and an address are not opened for an anonymous person or under a pseudonym
    • A depository may delegate identification to a broker or a trustee under a contract

    Register

    • Repeated violation of Art. 6, 7, 7.3 and 7.5 of 115‑FZ within a year is a ground for exclusion from the register
  • Transfers and deadlines

    115‑FZ, Art. 7.2-1; 282‑FZ, Part 3 of Art. 1, Art. 56

    Wallet address

    Transfer data

    • Over 60 000 ₽ — the payer's full name, identifier address, address, date of birth and tax number
    • Up to 60 000 ₽ — full name and identifier address
    • Without the data the depository refuses the order

    From 1 September 2026

    • The digital currency law is in force
    • Participants prepare documents for the registers

    From 1 July 2027

    • Only persons from the registers may organise digital currency circulation

Crypto exchange, broker, trustee, depository: who verifies whom

KYC for a crypto exchange rarely lives in one company: the exchange, the broker and the depository are often part of one group and share onboarding. The card shows whom each participant checks and where NeuroVision helps.

  • Crypto exchange (trading organiser)

    • Trading participants and their customers — under the trading rules
    • Investor testing before admission to trading
    • A user who comes directly — document, face and lists in one session
  • Digital currency broker

    • Full identification before the brokerage contract, tax number in the form
    • Test, familiarisation with the risks and annual amount for a non-qualified investor
    • Securities broker that adds cryptocurrency — repeated identification of simplified-identification customers
  • Trustee and fund management company

    • The settlor of the trust — by document and lists before the contract
    • A settlor company — by tax number, the representative — in their own session
    • Repeated check on top-up and withdrawal
  • Digital depository of an exchange group

    • The owner of a digital account — no anonymous users or pseudonyms
    • Identification can be obtained from the group's broker under a contract — do not put the customer through it again
    • The payer's data for a transfer over 60 000 ₽
  • A bank with brokerage services

    • The bank's customer is already identified — for cryptocurrency the tax number and the test are added
    • Lists and sanctions — on the same data, with no new form
    • A non-resident — international screening with PEP
  • An exchange compliance workstation: a monitor with a trading terminal and a passport on the desk

Non-qualified investor, non-resident, company: what to collect when opening an account at an exchange

The same registration screen leads to different obligations. The test and the limit are calculated by your system, the customer data for them is supplied by the KYC session.

  • A non-qualified investor who is a resident

    Passport, tax number, face — in one session with no manual entry.

    Before purchase — a test, familiarisation with the risks and an annual amount within the limits set by the Bank of Russia.

    • Part 1 of Art. 31 of 282‑FZ
  • Qualified investor

    The same identification — qualification does not cancel 115‑FZ.

    The test and familiarisation with the risks are required, there is no annual limit; currencies outside the list for public circulation are available.

    • Part 2, 15 of Art. 31 of 282‑FZ
  • Non-resident

    Foreign national's passport from 195+ countries and territories, lists and international screening with PEP.

    Access to deals — in the cases and on the terms set by the Bank of Russia.

    • Part 8 of Art. 34 of 282‑FZ
  • A company or sole trader

    A company — by tax number: status, director, founders.

    Representative goes through their own KYC session, the authority under a power of attorney is confirmed by your employee.

    • Art. 7 of 115‑FZ
  • A securities broker's customer

    Was identified in a simplified way — when digital currency deals are added to the contract, the tax number and full identification are required.

    A session by link — with no visit to the office.

    • para. 1.12-5 of Art. 7 of 115‑FZ
  • A customer transferred under a contract

    A depository or an exchange office may delegate identification to a broker or a trustee of the group.

    The session result arrives in your system via API — the procedure for transfer within the group is determined by your contract.

    • para. 1.5-1 of Art. 7 of 115‑FZ

Crypto exchange user verification: three steps before the first deal

The user goes through the widget in the exchange app, the rest goes through the API. A session with liveness takes from seconds to a minute.

Step 1

Passport and liveness in the app

The user photographs the passport and goes through liveness in a widget on the Web SDK — in a mobile browser or in the WebView of the exchange app. The document type and country are determined automatically, the fields arrive in the form with no retyping, and a forgery or a photo of a screen is flagged at once.

A user photographs a passport and goes through liveness in the exchange app
Step 2

Tax number, lists and sanctions

The tax number is found from the passport data, the person is checked against the list of terrorists and extremists, the foreign agents register and sanctions lists; a non-resident — through international screening with PEP.

Tax number, Rosfinmonitoring lists and sanctions from the passport data
Step 3

The decision and the test in your system

The results arrive in JSON by session identifier. Your system admits the user to the test, keeps track of their annual amount and sends disputed customers to manual review.

A user card in the exchange back office with admission to the test

Other people's passports, rented accounts and limit splitting: why an exchange needs a live person behind every account

One extra passport — one more annual amount

The annual amount of a non-qualified investor is counted per person at one intermediary. Every extra passport is one more amount, and the schemes will appear in the very first month.

  • 01

    Splitting the limit between relatives

    One investor opens accounts on the passports of relatives and acquaintances to get around the annual amount. Liveness and face-to-document comparison show that the person in front of the camera is not the passport owner.

  • 02

    Account rental

    A verified account is sold or rented out for withdrawing other people's money. A repeated face check on withdrawal and device change cuts off the new “owner”.

  • 03

    Bought and stolen passports

    Lost and stolen documents are used to register drop accounts. The validity of the passport against the Ministry of Internal Affairs database and document anti-fraud — before the first deposit.

  • 04

    A deepfake instead of a face

    Liveness is passed with a video recording or a substituted video stream. Liveness tells a live person from a photo, a screen, a mask and a deepfake in the same session.

  • 1 year a positive investor test result is valid
  • 60 000 ₽ threshold of the full set of payer data in a transfer
  • 3 working days the deadline for digital analysis after a deal

Checklist for opening an account at a crypto exchange: document, face, lists and address

Four groups, eighteen lines. The tag shows who closes the line: our check, your system or the Bank of Russia rules.

  • A Russian passport or a foreigner's document from 195+ countries and territories is recognised from a photo, the fields arrive in the form NeuroVision
  • A photo of a screen, a printout, a pasted-in photo and editing in an editor — before the form is saved NeuroVision
  • Validity of a Russian passport against the Ministry of Internal Affairs database NeuroVision
  • The tax number from the passport — a mandatory field of a contract with digital currency NeuroVision
  • A form with no gaps: address, date of birth, citizenship — for a transfer over 60 000 ₽ Your system

  • Liveness: a live person is in front of the camera, not a photo, a screen, a mask or a deepfake NeuroVision
  • The face matches the photo in the document NeuroVision
  • One document — one account: repeat registration by passport number Your system
  • A repeated session on a large withdrawal and device change Your system

  • Wallet address for deposit and withdrawal — checking rules before crediting Your system
  • Transaction monitoring: splitting, transit, linked accounts Your system
  • Payer and recipient data in the transfer Your system
  • Internal control rules and requirements for the responsible employee Bank of Russia
  • NeuroVision — the line is closed by NeuroVision: document recognition, anti-fraud, liveness, tax number, lists and sanctions
  • Your system — a line of your system: form, test, annual amount, admission rules and monitoring
  • Bank of Russia — the rule is set by the Bank of Russia

A non-resident on a Russian crypto exchange: passport, sanctions and transfer data

  • The passport with no manual entry

    Risk. Latin script, a foreign alphabet and unusual date formats — errors in the form when entered manually.

    NeuroVision. Passports of 195+ countries and territories and the machine-readable zone; an additional document in the same session — 10 ₽.

  • Sanctions and PEP

    Risk. A foreign customer is more likely to appear on sanctions lists and lists of politically exposed persons.

    NeuroVision. OFAC, EU, UK and UN — 5 ₽, international screening with PEP — 36 ₽, by spelling in Latin and Cyrillic.

  • Data for the transfer

    Risk. Without the address and date of birth the depository will refuse an order over 60 000 ₽.

    NeuroVision. The fields from the document arrive in the form at once, the tax number — where available.

  • Access to deals

    Risk. Deals of a broker and a trustee with non-residents — only in the cases and on the terms of the Bank of Russia.

    Your system. Admission by residency and investor status; we provide the verified document data.

A non-resident goes through the same KYC session as a resident — only the set of database checks changes. The decision on admission stays with the exchange or the broker.

Repeated check of an exchange user: large withdrawal, new lists, data change

Identification at account opening is only the beginning. Customer information is updated, lists change, and the most expensive mistakes happen at withdrawal.

  • List updates

    Rosfinmonitoring and the sanctions authorities update their lists. The customer base is rechecked against the new versions, matches go to manual review.

  • A large withdrawal and a new address

    Before a large withdrawal or a withdrawal to a new address — a short session with liveness. This way a person with a stolen password cannot make the withdrawal.

  • A change of passport and data

    The customer changed their passport or surname. The new document is recognised with no manual entry, the tax number and lists are checked again.

  • A new product in the contract

    A securities broker's customer adds cryptocurrency deals. If they previously passed simplified identification, full identification and the tax number are needed.

Crypto exchange user checks: catalogue and prices

Each check is enabled separately — by customer type and risk. Payment is for completed requests. All database checks are in the catalogue AML checks.

User

Passport without manual entry, anti-fraud and live presence.

  • OCR · anti-fraud

    Russian passport recognition

    A Russian passport is recognised from a photo: the fields arrive as a JSON response to the platform.

    from 16 ₽

    Learn more
  • OCR · anti-fraud

    Foreigners' documents: 195+ countries and territories

    A foreign citizen's document is recognised from a photo; the name in Latin script is taken from the machine-readable zone.

    from 16 ₽

    Learn more
  • KYC

    Liveness and face-to-document comparison

    A check that a live person is in front of the camera, and a comparison of their face with the photo in the document.

    from 29 ₽ per session

    Learn more
  • Police · SMEV

    Validity of a Russian passport

    The authenticity and validity of a Russian passport through the interagency interaction system. It catches expired, replaced, lost and invalid documents and verifies that the passport was issued to this particular person.

    5 ₽ / check

    Learn more

How much KYC of a crypto exchange user costs

The price is per one KYC session of one user and per each database check. No subscription fee, the more checks a year — the lower the price.

  • Document

    from 16 ₽ per session

    Calculate

    A Russian passport or a foreigner's document with no manual entry, anti-fraud: photo of a screen, printout, pasted-in photo, editing. An additional document — 10 ₽.

  • Most popular choice

    Document + liveness

    from 29 ₽ per session

    Enable

    Everything from “Document”, plus liveness, face-to-document comparison and deepfake detection. For account opening and large withdrawals.

  • Tax number, lists and sanctions

    5 ₽ per check

    Build a set

    Tax number from the passport, list of terrorists and extremists, foreign agents register, OFAC, EU, UK and UN sanctions. International screening — 36 ₽.

One session — one person: a company representative goes through their own. At 10 000 checks a year the “Document” session costs 18 ₽ per the calculator. Calculator on the pricing page.

Connecting to the exchange onboarding: Web SDK in the app, API in the back office, session link

The check is built in where the user already works: registration, the app and the withdrawal screen. The steps are switched on by scenario rules — passport and liveness at account opening, repeated liveness on a large withdrawal.

SDK and widget

The Web SDK is embedded in registration with a single script or an npm package and works in a mobile browser and WebView — including in the exchange's mobile app and web terminal. The logo, colours, texts and languages are configurable. Documentation

  • Web SDK
  • WebView
  • REST API
  • Session link

Test scenario in the personal account

Payment for completed checks, the data retention period is set in the scenario, support through a ticket system.

Why crypto exchanges and brokers choose NeuroVision

An exchange needs a vendor that covers the whole user — from the passport to the lists.

The user, their tax number and lists — in one platform

Passport recognition, liveness, tax number and list checks work on the same data. The form for full identification is assembled with no manual entry.

There is no need to assemble a solution from several vendors and reconcile their responses.

Passport Liveness Tax number API

One platform

Document, liveness, tax number and lists — via the Web SDK and REST API, without several vendors.

Liveness

A check that a live person is in front of the camera, not a photo, a screen or a mask.

Payment per check

From 5 ₽ per check, no subscription fee.

A Russian developer

Register of Russian software No. 19972; personal data — under 152‑FZ.

Crypto exchange KYC glossary: trading organiser, investor test, simplified identification

A brief note on the concepts found in the law and in the contract with the user.

Digital currency trading organiser
An exchange from the Bank of Russia register that holds organised trading in digital currency and digital rights.
Exchange
Digital currency broker
An organisation that concludes digital currency deals on the customer's instruction — in its own name or in the customer's name, at the customer's expense.
Broker
Digital depository
An organisation from the Bank of Russia register that records rights to digital currency and keeps customers' digital accounts.
Custodian
Non-qua­lified investor
An investor who has access to the currencies from the Bank of Russia list after a test and within the annual amount.
Retail investor
Investor testing
A knowledge check before digital currency deals; a positive result is valid for a year from the test or the last deal.
Suitability test
Simplified identification
Identifying the customer by a shortened set of data; it does not apply to contracts with digital currency deals.
Simplified ID
Identifier address
A unique sequence of characters for recording digital currency — the wallet address.
Wallet address
Payer and recipient data
The information passed along with a digital currency transfer: full name, identifier address, and for amounts over 60 000 ₽ — address, date of birth, tax number.
Travel Rule
PEP
A politically exposed person — Russian, foreign or of an international organisation.
Politically exposed person
Liveness
A check that a live person is in front of the camera, and not a photo, a screen, a mask or a deepfake.
Liveness detection

Frequently asked questions about KYC for crypto exchanges

KYC — establishing the user's identity and checking them against lists before deals. From 1 September 2026 the digital currency law No. 282‑FZ and Law No. 283‑FZ are in force: the exchange, the broker and the trustee enter the Bank of Russia registers, simplified identification does not apply to contracts with digital currency deals, and the customer's tax number is mandatory.

No. Simplified identification under 115‑FZ does not apply to a brokerage contract and a trust management contract with digital currency deals. A customer who was previously identified in a simplified way is fully identified when cryptocurrency is added to the contract.

Yes. For digital account contracts, brokerage and trust contracts with digital currency, the customer's tax number is among the mandatory data. NeuroVision finds the tax number from the passport data — 5 ₽ per check.

The annual amount is set by the Bank of Russia; the draft instruction says 300 000 ₽ through one intermediary. Before purchase the investor takes a test and is informed of the risks. Your system keeps track of the amount and the test, and the identity check can be delegated to NeuroVision.

Brokers, trustees, digital depositories and exchanges. A positive result is valid for a year from the test or the last deal. NeuroVision does not run the test — we confirm that the test is taken by that very person.

A broker and a trustee conclude deals with non-residents in the cases and on the terms set by the Bank of Russia. To identify a non-resident we recognise passports of 195+ countries and territories and check them against sanctions and international screening with PEP.

Liveness confirms that a live person is in front of the camera and that the face matches the photo in the passport. It tells a live person from a printout, a screen, a mask and a deepfake. This makes it harder to open accounts on relatives' passports.

No. We check the user and pass the results to your system. The decision on a deal, a refusal and reports to Rosfinmonitoring are for your responsible employee.

Yes. A customer who previously passed simplified identification is sent a session link: passport, liveness and tax number — with no visit to the office. Checks of a securities broker's customers — on the page for brokers and investment platforms.

Wallet address checking and transaction monitoring are separate tasks, they go beyond user KYC. This page describes checking the person: document, face, tax number, lists and sanctions; the address admission rules stay in your system. More details — on the page about AML checking of crypto wallets.

The Web SDK for a website and a web terminal works in a mobile browser and in a WebView inside a mobile app, and for server integration there is the REST API. A session link can also be sent to the customer.

Document with liveness — from 29 ₽ per session, the tax number and list checks — 5 ₽ each, international screening — 36 ₽. There is no subscription fee. The test is in the test scenario of the personal account.

We will pick the checks for your crypto exchange or broker

Tell us who your users are and how many accounts you open a month. We will assemble a KYC scenario under 115‑FZ and give you test access.

Can't put your request into words? Book a call and our team will contact you at a convenient time

Book a call

The company is included in the register of IT companies and the register of personal data operators of the Russian Ministry of Digital Development.

Address: Moscow, Presnenskaya Embankment 12 — Moscow City business centre, Federation Tower. Nearest metro stations: Delovoy Tsentr and Mezhdunarodnaya.