Verification and KYC: A Stalling Tactic or the Law?

Why brokers demand verification

Anti-money-laundering law requires a regulated firm to establish who its clients are, where their money comes from and that they are who they claim. Without that, the firm cannot lawfully release funds — regardless of how the client feels about it.

Know Your Customer checks exist because the alternative is an anonymous international payment system, and every financial regulator on earth has decided that is unacceptable. For a CySEC-regulated Cyprus Investment Firm the obligation sits in Cypriot AML law, and it is supervised, audited and enforced. It is not a customer-service policy the broker could waive if it liked you.

What the checks are actually for

• Identity. Confirming a real, named person holds the account and that the account is not being operated for someone else.
• Jurisdiction. Confirming where you live, because the entity that may lawfully serve you, the products you may access and the protections you receive all depend on it.
• Payment ownership. Confirming the card or account funding the deposit belongs to you — the control that stops stolen payment instruments being laundered through a trading account.
• Age and eligibility. Confirming you are an adult and not resident somewhere the firm cannot serve. United States residents, for example, are not accepted.
• Sanctions and risk screening. A regulatory requirement independent of anything about you personally.

The part that catches people out

Verification protects you as much as it constrains you. Consider the alternative world where a broker pays out to whoever asks. Someone who compromises your email could request a withdrawal to their own card, and the firm would have no basis to refuse. The identical rule that feels obstructive when you are waiting for your own money is the rule that stops a stranger taking it.

That is also why the enforcement record in this niche so often touches AML. When CySEC settled with IQ Option Europe Ltd by a Board decision dated 15 April 2019, published on 21 May 2019, the matters covered included due diligence obligations under the AML law L.188(I)/2007 alongside the investment services law. Regulators treat client due diligence as a core duty, and a firm that relaxes it gets fined for that, not praised for good service.

KYC is a legal obligation on the firm, not a discretionary hurdle — and the same rule that delays your withdrawal is what stops someone else requesting it.

What documents you'll be asked for

Three categories: photo identity, proof of address, and proof of the payment method used to deposit. Requirements vary by entity and country, so treat this as the shape of the request rather than an exact checklist.

Almost every regulated broker asks for the same three things, because the same three legal questions have to be answered. What varies is the exact document list, which depends on your country and on which entity holds your account — always check the requirements shown inside your own account rather than a list on any review site, including this one.

The rule that governs all of them

The name on the account, the name on the identity document and the name on the payment instrument must be the same person. Not "the same family". Not "my partner's card, we share everything". A regulated firm cannot accept third-party funding, and an account funded by someone else's card is the fastest route to a frozen withdrawal that will feel exactly like theft and is not.

Practical document hygiene

• Photograph documents flat, in daylight, with all four corners visible.
• Use the same address format everywhere — abbreviations that differ between your profile and your bill invite a manual review.
• Check the expiry date before you upload, not after the rejection.
• Upload the payment proof for every method you have funded with, not just the first.
• Keep copies of what you sent and when. If a dispute ever escalates, that record is your case.

Identity, address and payment proof — all in the same name as the account, all current, all legible; most rejections are a mismatch rather than a refusal.

Where the "stalling" perception starts

It starts with timing. Most traders verify nothing until they request a withdrawal, so the compliance check and the money request arrive together — and the check looks like the reason the money has not come.

The sequence behind most complaints is remarkably consistent, and it is worth laying out because recognising it is what stops it happening to you.

1. An account is opened and funded quickly, because taking a deposit needs less paperwork than releasing one.
2. Trading happens. Sometimes it goes well.
3. A withdrawal is requested.
4. Only now does the full document check appear — the request is pending, the trader is anxious, and each additional document feels like a manufactured excuse.
5. A document is rejected for a name mismatch or an unreadable scan, the cycle repeats, and by the third round the trader is writing a review that begins "they refuse to pay".

The routing rule that compounds it

Regulated brokers generally require withdrawals to return to the original funding method where possible. Deposit by card, and the refund leg typically goes back to that card first. This is standard anti-money-laundering practice — it prevents a trading account being used to move money between unrelated instruments — and it produces a genuinely frustrating experience when the original card has expired, been replaced, or belonged to a payment method you no longer use. The broker is not inventing an obstacle; it is following a rule that assumes nothing changed.

What the public complaint pattern actually shows

Across public complaint boards the recurring themes for this brand are withdrawal delays tied to incomplete KYC or a payment-route mismatch, verification friction, losses on short-expiry trades attributed to platform manipulation, and confusion between OTC and exchange pricing. That is a qualitative pattern, not a measurement — we have not counted complaints, timed resolutions or scored any platform, and any page that gives you a precise figure for those things is guessing. We unpack the pattern further in withdrawal complaints, delay or denial and scam complaints explained.

The honest summary: a real friction point, widely experienced, and structurally different from a broker stealing money. Both deserve to be named as what they are.

Verify before you need to withdraw — the perception of stalling comes almost entirely from doing the paperwork at the worst possible moment.

Is it the law or an excuse?

The requirement is the law. The execution can still be poor. Both statements are true at once, and separating them is the difference between a fair complaint and a misdirected accusation.

Treat it as two questions rather than one.

Question one: is the firm allowed to ask?

Yes, and more than allowed — required. A CySEC-regulated firm cannot release funds to an unverified account, and CySEC has enforced due diligence obligations against this very entity. A broker that skipped KYC to make you happy would be committing the breach, not doing you a favour.

Question two: is the firm handling it well?

That is a service question, and it is legitimate to be angry about it. Slow manual review, rejections without a stated reason, requests arriving one at a time instead of together, support replies that restate policy instead of naming the defect in your document — these are real failures of execution and they are worth complaining about. An EEA client of the licensed entity has a formal complaints procedure and an escalation route beyond the firm.

Those last two rows matter more than everything above them. Genuine KYC never involves a further payment. Any "verification fee", "tax clearance", "unlock deposit" or account manager promising to release your balance for a transfer is an impersonation scam — very often run from a lookalike domain rather than by the broker at all. Our page on fake clone sites covers how those operations reach people in the first place.

One boundary to keep in view. Completing verification does not protect a losing balance. Trading CFDs and leveraged products carries a high risk of losing money, and no amount of paperwork changes that.

The demand for documents is lawful; the quality of the process is fair game — and any request for an extra payment is not verification at all.

Getting verified smoothly

Do it before your first trade, in one sitting, with documents that match your account details exactly. Verification handled on day one turns a withdrawal into an administrative event rather than a confrontation.

This is the shortest section on the page and the most useful one. The whole problem is solvable in advance.

The order to do it in

1. Fix the profile first. Make sure the name, date of birth, address and country in your account exactly match your identity document before you upload anything. Nearly every rejection traces back to a discrepancy created at this step.
2. Upload photo identity. An unexpired passport or national ID, flat, sharp, all corners visible, no glare across the photo or the machine-readable strip.
3. Upload proof of address. A recent utility bill, bank statement or official letter with your full name and the same address as your profile.
4. Verify the payment method immediately after your first deposit. Card image with the middle digits masked and the cardholder name visible, or a statement for the bank account or e-wallet used.
5. Repeat for any additional method. A second card or wallet needs its own proof; adding one only at withdrawal time is the classic delay trigger.
6. Confirm the account shows fully verified before you trade seriously, and keep a dated record of everything you submitted.
7. Withdraw a small amount early. Once verified, running one modest withdrawal end to end tells you more about a broker than any review — and it does it while the stakes are trivial.

If it goes wrong anyway

• Ask support to state the exact defect in the exact document rather than resubmitting blindly.
• Send every outstanding item together, not one at a time.
• Keep the tone factual and keep the thread — a documented history is what makes a formal complaint work.
• If you are an EEA client of the licensed entity, use the firm's formal complaints procedure and then escalate beyond it if the answer is inadequate.
• If your account sits with a non-EU entity, that escalation route may not exist. Read the CySEC licence page to work out which entity you actually contracted with.

Requirements change and vary by country, so confirm the current document list inside your own account. Regulatory details on this page were checked against public regulator records on 3 September 2026.

Verify on day one, match every document to your profile exactly, then test one small withdrawal — the friction disappears when the paperwork is already done.