KYC, KYB, AML and cross-border compliance terms

KYC and KYB: Verifying the Same Question

KYC (Know Your Customer) and KYB (Know Your Business) are often treated as two separate things, but they really ask the same question: who you are, and whether what you say is true.

	KYC	KYB
Subject	Individuals	Businesses or organizations
Core materials	Government-issued ID, face or liveness check, proof of address	Registration documents, business information, ultimate beneficial owner (UBO)
Verification methods	Document authenticity, biometrics, cross-checking against data sources	Cross-checking registry records, looking through the ownership structure
Shared structure	Collection → verification → ongoing review	Collection → verification → ongoing review

The last row is the key point: of the three steps, the one most often neglected is the third.

The crux of KYB is the UBO: it's not about what the company calls itself, but looking through to who ultimately controls the organization. Verification that only looks at registration certificates is incomplete.

Why the third step is both easy to overlook and impossible to skip: lists get updated, documents expire, and risk levels change. So beyond the verification at account opening, there are periodic reviews and trigger-based reviews (triggered by changes to your information or abnormal transactions).

AML Isn't a Single Action—It's a Chain

AML (anti-money laundering) isn't the one-time identity check at account opening—it's a continuously running chain:

Customer due diligence (CDD): confirm identity and use it to determine the risk level;
List screening: checking against sanctions lists, politically exposed persons (PEP) lists, and the like;
Transaction monitoring: continuously watching whether actual transactions deviate from their expected pattern;
Suspicious activity reporting: filing reports with the financial intelligence unit of the relevant country when anomalies are found;
Enhanced due diligence (EDD): requesting additional materials and explanations when the risk level rises.

The dividing line in this chain is at step three: the first two steps verify identity, while the last two look at behavior. Whether a transaction is suspicious depends on how far it deviates from what the account should look like—not on how large the amount is.

Reporting obligations and the receiving agencies differ from country to country. In the US, for example, money services businesses are registered with the Financial Crimes Enforcement Network, and its public registration lookup can be used to verify an institution's registration status.

Cross-Border Brings Currency, Exchange Rates, and Responsibility

Cross-border transactions don't introduce just one variable—"can I pay or not"—but three:

Variable	What it is	What it means for the cardholder
Transaction currency	The currency the merchant prices and captures in	May differ from the settlement currency of the card account
When the exchange rate is set	Determined by the card network at clearing per network rules	The number you see at checkout is not the number you'll finally be charged
Cross-border surcharge	Some card networks apply an additional assessment to cross-border transactions	May show up in the final charged amount

The middle row is the source of most of the confusion.

At authorization, the merchant submits the amount in the original currency; the card network converts it at the clearing stage per its current rules. There's a time gap between the two, which is why the amount shifts slightly.

This explains a common question: the order page shows an amount in a foreign currency, the number you compute with that day's exchange rate doesn't match the actual charge on your statement—that's not an error, it's because the conversion happens at the clearing point. For the order of capture and clearing, see From preauthorization to refunds: capture, clearing and settlement.

DCC: Bringing the Exchange Rate Choice Into the Open

DCC (Dynamic Currency Conversion) is a service offered at the merchant side: at checkout, the amount is displayed and settled directly in your home currency.

	Without DCC	With DCC
Transaction currency	The merchant's local currency	Your home currency
Where the rate comes from	Determined by the card network at clearing	Quoted on the spot by the DCC provider
When you know the amount	Only afterwards do you learn the final converted amount	You see a definite number right at checkout
Predictability	Subject to fluctuation at the clearing point	Locked in on the spot, easy to keep track of in your records

The key difference isn't cost—it's "when you find out the number."

The standard requirements are two: DCC must be disclosed, and the cardholder must have the option to settle in the merchant's local currency.

If a checkout page has home-currency settlement pre-checked by default and offers no way to switch back to the local currency, that's a practice worth being wary of—the problem isn't the price, it's that you weren't given a choice.

As for whether it's a good deal: DCC rates usually include a provider markup, but how much is set by the merchant and the provider, and it varies widely between providers. Comparing on the spot is the only reliable way to judge, and DCC is not necessarily "always more expensive" or "always cheaper."

What These Requirements Mean for Cardholders

Get your materials ready and keep them consistent

ID and proof of address, with names and addresses matching across all of them. Contradictory information is the most common reason verification fails.

Understand that verification isn't a one-time thing

An expired document or a change in your information can trigger a review. Being asked for additional materials is usually just the process at work, not a sign that something is wrong.

Check cross-border charges twice

The original-currency amount at checkout, and the final converted amount on your statement. A normal difference between the two isn't something to treat as an anomaly at first sight.

When you encounter DCC, first see whether there's a choice

If there's no local-currency option, choose it directly; if there is an option, compare the two numbers on the spot before deciding.

Keep your records

For the timing, amounts, and order details of cross-border transactions, see Checking failed payment records for Claude and ChatGPT.

Compliance limits and permitted use

Observe the following three limits:

It doesn't offer ways to bypass identity verification—verification is an obligation, not an option, and it protects every user, yourself included;
It doesn't offer ways to circumvent cross-border rules or regional restrictions—understanding the mechanism does not permit bypassing applicable rules;
It doesn't assess any specific institution's compliance level—verify registration and filing status yourself through official channels.

Our platform's position: the scope of collection and the retention period for identity information are set out in the KYC Policy page; the registration and filing details of the legal entity are governed by that page and can also be cross-checked through public registries; for the rules covering accounts and funds, see the Security and Compliance page.

Once the compliance prerequisites are confirmed, registration and card issuance only require you to submit your information truthfully once: Start Registration.

FAQ

What's the difference between KYC and KYB?

The subject differs: KYC verifies individuals, KYB verifies organizations. But the structure is the same—a three-step process of "collection → verification → ongoing review."

What is a UBO, and why look through the ownership structure?

The ultimate beneficial owner—the natural person who ultimately controls the organization. Registration certificates alone don't reveal who is actually in control, so looking through the ownership structure is necessary.

After verification passes, can I be asked to do it again?

Yes. Lists get updated and documents expire, so in addition to the verification at account opening, there are periodic reviews and trigger-based reviews (triggered by information changes or abnormal transactions).

Are AML and KYC the same thing?

No. KYC is the step that confirms identity; AML is the whole chain that includes list screening, transaction monitoring, and suspicious activity reporting. KYC is one link in that chain.

Why does a cross-border charge differ from what I computed at checkout?

Because the exchange rate is set by the card network at clearing per its current rules, while at authorization the merchant submits the amount in the original currency—there's a time gap between the two points.

What is DCC?

Dynamic Currency Conversion: a service offered on the merchant side that displays and settles the amount in your home currency at checkout. Its exchange rate is quoted on the spot by the DCC provider.

Is DCC always more expensive?

Not necessarily. DCC rates usually include a provider markup, but how much is decided by the merchant and the provider and varies widely between them. Comparing on the spot is the only reliable way to judge.

At checkout, should I choose my home currency or the local currency?

It depends on whether you have a choice: if there's no way to switch, just choose the local currency; if there is a choice, compare the two numbers on the spot and decide.

How do I verify an institution's registration status?

Use official registry channels. In the US, for example, the registration of money services businesses can be verified through the Financial Crimes Enforcement Network's public registration lookup; rely on the official query result.

Got the idea in a few minutes? Go open a card

Cards start at $1, no monthly fee; account top-up is $0 with a $20 minimum per deposit. See the pricing page for full details.

Open a card See pricing