Weekly ecommerce tips, deals & news.
Know Your Customer, usually shortened to KYC, is the process of verifying who you are actually doing business with. Financial regulators require it before money can be moved on someone’s behalf. For most online stores it arrives indirectly, through the payment processor or marketplace platform you use. If you pay out to sellers, KYC is almost certainly already part of your setup.
Think of opening a bank account. Nobody hands you an account number on your word alone. The bank has to prove you are who you claim.
KYC applies that same logic to anyone receiving money through your business. The obligation exists to stop fraud, money laundering, and payments to sanctioned parties.
This is the point most store owners get wrong. KYC is not something you perform on ordinary customers buying a product.
It applies to people and businesses receiving funds. That means marketplace vendors, affiliates taking payouts, and you yourself when you open a payment account.
So a single-brand store meets KYC once, during its own onboarding. A multi-vendor marketplace meets it repeatedly, for every seller it pays.
Stripe describes the obligation in two parts. You collect information about the individual or company receiving funds, then the processor verifies that the information is genuine.
What is required depends on the entity. Stripe distinguishes 4 business types: individual, company, non-profit, and government entity.
Country matters just as much. What a UK limited company provides is not what a US LLC provides. Neither matches an Australian sole trader.
Platforms get a genuine choice about timing, and it is a real trade-off. You can collect everything at signup, or gather more as a seller earns more.
Upfront collection means one request and no surprises later. It also exposes risky sellers early, because the ones who refuse to provide documents reveal themselves immediately.
Incremental collection gets sellers live faster, since they hand over less at the start. The cost is a possible interruption later, when a threshold triggers new requirements.
Marketplaces chasing seller numbers usually pick incremental. Those handling higher-value goods generally prefer upfront, because a paused payout mid-trade damages trust badly.
Compliance is the obvious reason, but fraud prevention is the practical one. A marketplace that lets anyone sell without checks invites counterfeit listings and payment fraud.
The scale of retail fraud makes the case. Retailers lost around $101 billion to return fraud and abuse, which is $13.70 of every $100 returned.
Theft dominates inventory loss too. The National Retail Federation attributed 65% of shrink to internal and external theft combined.
Verification will not stop all of that. It does raise the cost of setting up a fraudulent seller account, which removes the easiest attacks.
KYC is where a lot of marketplaces leak signups. The requests feel intrusive, and sellers abandon onboarding halfway through.
Most of that loss is avoidable. Four habits keep completion rates up without weakening the checks themselves.
The localisation point is easy to underestimate. A seller who does not recognise the term you are asking for often assumes the form is broken.
Stripe recommends its hosted onboarding for exactly this reason. Verification rules shift constantly across jurisdictions, so owning that complexity yourself is rarely worth it.
Imagine a craft marketplace called Thistle Market. Independent makers list handmade goods, and the platform takes a commission on each sale.
At launch, sellers register with an email address and a bank account. Nobody checks whether the person behind the account is real.
Growth is fast, which feels like validation. Then two problems arrive together.
A seller lists branded goods that turn out to be counterfeit. Because nobody verified their identity, the account details lead nowhere useful.
Separately, several genuine sellers hit a payout threshold and get frozen. Their funds stop moving until they supply documents nobody had asked for.
The second problem does more reputational damage than the first. Sellers experience it as the marketplace withholding their money without warning.
Thistle Market move verification to the start. New sellers complete identity checks before their first listing goes live.
Crucially, they explain why. The signup flow states plainly that verification protects payouts and is required before money can be released.
Signups dip slightly, and the sellers they lose are mostly the ones who would not have verified anyway. Our guide to setting up a vendor verification process walks through the mechanics.
The counterfeit problem shrinks as a side effect. Sellers willing to attach a verified legal identity to a listing behave differently from anonymous ones.
Buyer trust improves too, which nobody expected. Thistle Market start displaying a verified badge on seller profiles. A compliance chore becomes a selling point.
The two terms travel together and are not the same thing. Anti-money laundering, or AML, is the broad framework of laws and controls.
KYC is one component inside that framework. It is the identification step specifically, carried out when a relationship begins.
AML covers everything after that too. Ongoing transaction monitoring, sanctions screening, and suspicious activity reporting all sit under AML rather than KYC.
The distinction matters practically. Stripe notes that even after it verifies an account, platforms must still monitor for and prevent fraud themselves.
So passing KYC is a starting point, not a clearance. A verified seller can still behave badly next month.
There is a third term worth knowing alongside these. Customer due diligence, or CDD, is the risk assessment that decides how much checking a given account needs.
Higher-risk sellers attract enhanced due diligence. That might mean extra documents, proof of where funds originate, or closer ongoing review.
For most WooCommerce marketplaces this happens invisibly. Your processor applies the risk tiers, and you only notice when a particular seller is asked for more.
It is still worth knowing the vocabulary. When a processor emails about enhanced due diligence, that is a risk classification rather than an accusation.
No, and doing so would create friction for no benefit. A shopper paying by card is verified by their own bank and card network.
Your KYC obligations attach to people receiving money through your platform. If you only sell your own products, that means you and nobody else.
Often it is near-instant, because much of the data can be checked automatically against official registers. Problems appear when details do not match exactly.
Manual document review takes longer, sometimes a few business days. Tell sellers this upfront so a normal delay does not read as a problem.
Their payouts stop, and eventually their ability to take charges does too. This is not discretionary, since the processor cannot legally release funds without it.
Treat persistent refusal as a signal rather than an inconvenience. Legitimate businesses supply their registration details as a matter of routine.
KYC is the price of moving money on someone else’s behalf. Your processor will enforce it whether or not you plan for it. Collect what is needed early, explain why you are asking, and treat a refusal as useful information about that seller.
Copyright © StoreOwnerTips.com. All Rights Reserved.
