For customers asked to verify
Why am I being asked to do a check?
A business you're dealing with has asked you to verify your identity. That's because EU law requires it — not because anyone suspects you of anything. Here's what's going on.
It's the law
EU anti-money-laundering law requires businesses known as "obliged entities" to verify the identity of their customers before providing certain services — and the new EU Single Rulebook tightens this further.
It takes about a minute
You'll fill in a short form and photograph your national ID card or passport. Most people are done in under a minute.
Your details are protected
Your information is encrypted, hosted in the EU, handled under GDPR, and used only to complete the verification — never for marketing.
The longer answer
What's changed?
The European Union has been steadily tightening its anti-money-laundering and counter-terrorism financing (AML/CFT) rules. Businesses the law calls “obliged entities” — estate agents, lawyers, accountants, crypto providers and more — must verify who their customers are before providing certain services. A new EU-wide rulebook (the AML Regulation, known as AMLAR) takes this further from July 2027, applying one consistent standard across all 27 Member States.
You'll hear the check called KYC — Know Your Customer. If the customer is a company or a trust, the business also needs to check who owns and controls it, which is called KYB — Know Your Business.
So if you've been asked to complete a check, it's not because anyone suspects you of anything. It's a legal requirement that applies to every customer, every time.
Who the law applies to
These businesses have to run checks.
Estate agents
when you buy, sell, rent or transfer property
Lawyers & notaries
for property, company and trust work
Accountants & tax advisers
when setting up companies or handling client money
Trust & company service providers
when creating or managing entities
High-value goods dealers
for precious metals, stones and luxury goods
Crypto-asset service providers
for exchanges, transfers and custody
What to expect
Three steps. About a minute.
Open the link
The business sends you a secure form by email, branded with their name and logo. There's no account to create and no app to download.
Verify your ID
Enter a few details and take a photo of your national ID card or passport. Some checks include a quick selfie — verification meets eIDAS standards.
You're done
Verification usually completes in seconds. The business is notified automatically, and whatever you were doing together can go ahead.
Your information is protected.
- Encrypted in transit and at rest
- Hosted exclusively on EU servers
- Used only to complete your verification — never sold, never used for marketing
- Handled under GDPR, kept only as long as the law requires, then securely deleted
Want the detail? Read our privacy policy or visit the security & trust centre.
Common questions
You might be wondering…
Is this request legitimate?
If you received an email asking you to complete a check through Instant Compliance, it was sent on behalf of the business you're dealing with — we're the verification platform they use. The form will carry their name and branding. If you're ever unsure, contact the business directly using contact details you already have (not the ones in the email) and ask them to confirm.
Do I have to complete the check?
If you want to go ahead with the service, yes. EU law doesn't allow the business to provide certain services until your identity has been verified — it's not optional for them, and they can't waive it.
What will I need?
Usually just a national ID card or passport, and a phone or computer with a camera. ID cards and biometric passports from all 27 EU Member States are supported. The whole thing typically takes about a minute.
Why am I being asked to pay for the check?
Some businesses cover the cost of verification themselves; others pass the small fee on to the customer. If you're asked to pay, you'll enter your card details securely and pay Instant Compliance directly before the check runs. The business never sees or stores your card details.
What happens to my information?
Your details are encrypted in transit and at rest, hosted exclusively on EU servers, and used only to complete your verification. They are handled under GDPR and kept only as long as the law requires the business to keep verification records, then securely deleted.
What if my ID doesn't verify?
It happens — a blurry photo or an expired document is the usual cause. You can simply try again. If it still doesn't work, the business will be in touch about other ways to verify you.
Still unsure about a request?
Ask the business that sent it — they can confirm it came from them. That's always the safest move.
Are you a business that needs to run checks? See how Instant Compliance works