W9 Information CenterPurpose and applicability
Anti-Money Laundering (AML) and Know Your Customer (KYC) processes are used in some regulated settings to establish customer identity and respond to financial-crime risks.
The exact obligations, verification steps and retention periods depend on the legal status of the service and the jurisdiction in which it operates.
Identity and account checks
Where required, checks can involve personal details, proof of identity, account ownership information or review of inconsistent records. The amount of information requested should reflect the applicable legal obligations and risk.
An identity document should be transmitted only through a verified, secure channel identified by the relevant service.
Transaction risk and unusual activity
Risk review may consider inconsistent personal information, suspicious transaction patterns, attempted third-party payments, identity misuse or unusual account activity.
A review should be evidence-based and handled under the applicable procedures and laws, rather than relying solely on assumptions.
Source-of-funds enquiries
Certain circumstances may legally require information about where funds originate. Any request must be relevant to the lawful purpose and handled with appropriate privacy and security safeguards.
Records and confidentiality
Verification materials and transaction records may contain sensitive personal information. Access should be restricted to authorised functions and storage should follow an appropriate retention schedule.
A legitimate enquiry should never require disclosure of a banking password, one-time login code or recovery phrase.
Restrictions and escalation
Where permitted or required by law, a service may delay processing, limit an account or refer suspicious activity for further review. Applicable reporting duties must be followed by the responsible operator.
Visitors facing a review should use official support and supply only the records reasonably needed to address the enquiry.
Privacy and fair treatment
Verification procedures should respect privacy obligations, accurate recordkeeping and non-discriminatory handling. The W9 Privacy Policy explains related personal-data considerations.