Is buying crypto without KYC legal? Who the law binds, where a buyer becomes a business, and what still applies to you.

01Is buying crypto without KYC legal? The short answer

In the US, the EU and the UK, KYC is a duty on businesses. Read the rules themselves and you'll find the same pattern four times:

• US: FinCEN says exchangers "generally qualify as money transmitters under the BSA, while users do not". A person using their own wallet for themselves is "not a money transmitter".
• Global: the FATF says person-to-person transfers are "not explicitly subject to AML/CFT controls" under its standards.
• EU: the transfer rules "shall not apply" to a person-to-person transfer with no crypto firm involved.
• UK: the FCA says "Peer-to-peer transactions carried out on a personal basis do not require FCA registration."

So the buyer acting for themselves isn't the one the rulebook is written for. That's why there are real routes to a first coin without ID, which our main guide on buying crypto without KYC walks through one by one.

One line of honesty, and then we move on: rules differ by country, and this guide shows what the texts say, not advice for your case.

02Who the law binds: the business, swap services included

Here's what most pages get wrong. They treat services that skip ID as a gap in the law. They aren't.

Every major rulebook lists the same activities as regulated business:

• FATF: anyone who "as a business" exchanges crypto for money, or "between one or more forms of virtual assets", for someone else.
• EU: MiCA says no one may provide crypto services without authorisation, and "exchange of crypto-assets for other crypto-assets" is one of those services.
• UK: the regulations cover exchanging "one cryptoasset for another" by way of business, and operating a crypto machine.

So whether a service is licensed is the service's legal problem, not the customer's. The texts set duties for the counter. They don't make it a crime to walk up to one and buy for yourself.

If you want to know exactly what a regulated exchange must ask and keep, our guide on what KYC means in crypto lists it rule by rule.

03When a buyer becomes the business: the P2P line

This is the part that matters if you trade with people, and nobody else explains it. Escrow and safe payments have their own guide: P2P crypto without KYC.

FinCEN says people who buy and sell crypto as a business are money transmitters, "regardless of the regularity or formality of such transactions". They must register, run a compliance program and file reports.

Then comes the exemption: someone selling "on an infrequent basis and not for profit or gain" is outside the rule.

The UK draws the same line. "Anyone doing this by way of business in the UK requires appropriate registration." In April 2026 the FCA visited eight sites run by unregistered P2P traders and issued cease and desist letters at each.

• A user: you sell some coins you no longer want to a friend, at the going rate, once.
• A business: you post daily rates, take a cut on every trade and sell to whoever answers.

For you as a buyer, this means something practical: the more professional the seller, the more likely they must ask for your ID.

04Who actually gets charged

Laws are one thing. What happens in court is another. Here are four US cases, in the government's own words.

1. The dealer, 2019. A man sold bitcoin to over 1,000 customers through a P2P marketplace and charged "a commission of 5 percent above the prevailing exchange rate", without registering. Two years in prison and $823,357 forfeited.
2. The P2P seller, 2019. FinCEN's first action against a P2P exchanger: no registration, no reports, over 200 large cash trades. A $35,000 fine and a ban from the industry. "Obligations under the BSA apply to money transmitters regardless of their size."
3. The exchange that skipped ID, 2023. The DOJ says it advertised that "neither selfies nor passports [are] required". Its founder was arrested in Miami and charged with unlicensed money transmitting.
4. The large exchange, 2025. Its operator pleaded guilty. The DOJ says that "until at least July 2023, KuCoin did not require customers to provide any identifying information". Penalties: more than $297 million, and an exit from the US for at least two years.

Notice who's in the dock each time: the operator or the dealer. The charge is running an unlicensed money transmitting business, which only someone running the business can commit.

We found no DOJ or FinCEN case charging a customer only for buying from them. Customers get pulled in when their own conduct is the crime, which is the next section.

05What still applies to you, whatever the route

No KYC changes who checks your ID. It doesn't change these three:

TaxThe coin is still property

The IRS says crypto "is treated as property". Swap it for another coin and you "will recognize a capital gain or loss", and you report it whether or not anyone sends you a form. No KYC doesn't mean no tax. Keep your own records of what you paid and what you swapped.

you swap bitcoin you bought for $2,000 into Monero when it's worth $3,000, with no account anywhere. In the US, that's a $1,000 gain to report.

SplittingThe one crime clean money can commit

US law says no one may structure transactions "for the purpose of evading the reporting requirements". The penalty is up to five years in prison, ten in aggravated cases.

Never split an amount to stay under a reporting line. Splitting is the crime, even when every dollar is clean. The 2019 dealer above moved cash in amounts the DOJ says were "slightly below the $10,000 reporting requirement".

SanctionsNo route makes them legal

The FATF names sanctions as the exception that can bind individuals directly. Paying a sanctioned person, or handling the proceeds of a crime, is illegal however the coin moved.

06US, EU and UK: the rules side by side

Here's the whole picture on one screen.

The EU is the one still moving. Three dates matter, and all three bind firms:

From 10 July 2027, EU crypto firms may not keep anonymous crypto-asset accounts, or accounts for coins built for privacy. The same law says the ban doesn't reach makers of self-hosted wallets that have no access to or control over your wallet.

Outside these three, check your own country. A few governments ban crypto trading outright, and where that's the law, it binds you whether or not anyone asks for ID.

07Who does the rule bind in your case?

Pick where you are and what you're doing. The check answers with the rule's own sentence. It asks no amounts, on purpose.

08How to stay on the right side of every rule

Five habits, in order of how much they matter:

1. Act for yourself. Buy, hold and swap your own coins. Selling to strangers for a margin is a business, with its own rules.
2. Keep your own records. What you paid, when, and what you swapped it into. For your tax return, not for anyone else.
3. Never split amounts to stay under a reporting line, at a kiosk, a seller or anywhere else.
4. Know who you deal with. If a seller looks like a sanctioned party or a scam, walk away.
5. Know your country. If it bans crypto trading, no route changes that.

Buying from a machine? Our guide to Bitcoin ATMs without ID shows what kiosks ask at each amount. Already hold a coin? Swapping crypto covers networks, fees and memos.