What Is Reusable KYC? A Plain-English Guide

You have probably photographed your passport a dozen times this year. Every new bank, broker, crypto exchange, or fintech app asks you to do the same dance: upload a document, take a selfie, wait. Reusable KYC is the idea that you should only have to do this once, and that the proof should belong to you, not to whichever company happened to check it first.

The short definition

Reusable KYC means you verify your identity once with a certified identity provider, receive a cryptographically signed credential, and store that credential in a wallet you control. When the next service needs to know who you are, you present the credential instead of re-uploading documents. The service verifies the signature, confirms the issuer is trustworthy, and onboards you in seconds.

That's the whole concept. One verification, many uses, with the user (not a database somewhere) holding the proof.

Why traditional KYC repeats itself

If reusable KYC is so obviously better, why does every platform still run its own check from scratch? Two reasons, one legal and one structural.

The legal reason: anti-money-laundering rules make each regulated business individually responsible for knowing its customer. Your bank cannot simply take another bank's word for it. Historically, "reliance" on someone else's check has been narrowly permitted and rarely used, because the liability stays with the relying party. So every business runs its own process, even when nine other firms verified the same passport last month.

The structural reason: KYC results live in silos. The verification your broker performed sits in the broker's database, in the broker's format, tangled up with the broker's vendor contracts. There has been no standard way to package "this person was verified to this standard on this date" so that another party could independently check it. Without a portable, verifiable format, repetition was the only option.

The result is an industry-wide duplication of effort that users experience as friction and businesses experience as cost, something we unpack in the true cost of KYC.

How reusable KYC actually works

Strip away the jargon and there are three roles in the flow:

• The issuer is a certified identity verification provider. It does the heavy lifting once: checks your document, matches your face, runs the watchlist screening. Then it signs a digital credential attesting to what it verified.
• The holder is you, with a wallet app on your phone. The credential lives there, under your control, like a boarding pass that happens to be cryptographically tamper-proof.
• The verifier is any service that needs to know who you are. It requests proof, you approve the share from your wallet, and it checks the issuer's signature in milliseconds.

The crucial property is that the verifier doesn't need to call the issuer or trust your wallet app. The math does the work: if the signature checks out and the issuer is on a trusted list, the credential is good. This issuer-holder-verifier triangle comes from self-sovereign identity, and the credential format is typically based on W3C Verifiable Credentials, an open standard rather than anyone's proprietary scheme.

What users get out of it

The user-side benefits are immediate and concrete:

• No repeated document uploads. Verify once, then approve shares with a tap instead of re-photographing your passport in bad lighting.
• Control over your data. You see exactly which service asked for what, and you can decline. With selective disclosure, you can prove "over 18" or "verified resident" without handing over your full document.
• A smaller breach footprint. Your identity documents stop accumulating in dozens of corporate databases you'll never audit.

What businesses get out of it

For the companies doing the verifying, the economics are at least as compelling:

• Faster onboarding. Accepting a verifiable credential takes seconds; a fresh document check takes minutes at best and days when manual review kicks in. Every minute of friction costs signups.
• Lower per-check cost. Verifying a signature is dramatically cheaper than paying for a full document-and-biometrics check on every new customer.
• Less PII liability. A business that verifies a credential can record the result without warehousing passport scans and selfies. Less stored PII means less breach exposure, lighter GDPR obligations, and a smaller attack surface.

Compliance teams still make the final call. Reusable KYC changes where the evidence comes from, not who is accountable. But regulators in several jurisdictions are now explicitly building room for credential-based verification, with the EU's digital identity framework the most prominent example.

Reusable KYC vs. "KYC sharing" utilities

Reusable KYC sometimes gets confused with KYC utilities: shared databases or consortiums where banks pool customer due-diligence files. The difference matters.

In a utility model, the data is bank-held: institutions exchange files about you, usually without your involvement, inside a closed club. These projects have a mixed track record, partly because banks are reluctant to trust each other's checks and partly because users have no role in the system at all.

In reusable KYC, the credential is user-held: you are the transport layer. Nothing moves without your consent, any verifier that trusts the issuer can participate, and there's no central honeypot of pooled identity data. It's an open network instead of a private pipeline, and that openness is what lets it scale beyond a handful of consortium members.

Where this is heading

The pieces have only recently fallen into place: standardized credential formats, finalized protocols for issuing and presenting them, and regulation (most visibly the EU Digital Identity Wallet) that obliges large platforms to accept wallet-based identity. Verification is shifting from something done to you, over and over, into an asset you carry. The repeated-upload era won't end overnight, but it now has an expiry date.

Where OpenKYC fits

OpenKYC is building a reusable KYC marketplace on open standards (W3C Verifiable Credentials, OpenID4VC): verify once, hold the credential in your own wallet, reuse it everywhere, and earn every time it's used. Join the waitlist at openkyc.org.