It can be noted that the cryptocurrency and many online finance firms require KYC or Know Your Customer checks, that’s normal. But the fraudsters have been weaponizing that process against the users. The Re-Verify Your Account KYC scam is rising concern in the UK, where the victims get realistic-looking emails, texts or WhatsApp messages asking them to re-submit the ID documents. They are also asked to sign in through a portal, or download an update app. When you comply with such requirements, you hand over your identity documents, OTP or credentials that let criminals steal your funds, and open accounts in your name, or launder money. This piece will walk you through how such scams work, real-world risks, identity theft, fake KYC portals, document scams and phishing verification, and how to spot them easily, and exactly what to do if you are the target in UK.
Why KYC is used by scammers to target the users
Usually, the KYC processes require highly sensitive data such as passport, driving-licence photos, selfies, and sometimes video ID checks. For fraudsters that data is a goldmine as it can be used to impersonate you. It can be used to open bank or crypto accounts, create SIM-swap attacks on your system, and help build mule accounts that move stolen funds. The UK regulators and agencies have highlighted such crypto and phishing as a priority threats and government assessments have flagged the misuse of the identity documents as a key tactic used by organised fraudsters.
How “Re verify your account” scam works
- Initial contact via phone/SMS/email/social media and WhatsApp- In your perspective message looks urgent saying re-verify within 24 hours or your account will be suspended. It mimics branding through logos and wording of real exchanges or wallets.
- Fake KYC portal- the message links you to a convincing clone of the exchange verification page. It will ask you to upload your identity documents such as take a selfie or enter OTP. The URL looks like the real site with small typos or subdomains.
- Malicious apps and attachments- usually attacker asks you to download an official KYC app like an APK on Android or open PDF form. This will contain malware that harvests credentials or reads the SMS.
- Requiring the request for OTP and 2FA codes- the attackers will ask you to paste the one-time codes. Once provided they can confirm transactions and move funds.
- After handover- after the handover of the documents the criminals use these documents to open accounts, apply for credit, and pass as you to services. These documents also get sold on darknet markets for a price. There is evidence from multiple incidents that shows this will lead to identity theft and financial losses.
How to identify a fake KYC request
- There will be a message creating urgency like 24 hours, suspend, final notice. It must be noticed that legitimate organizations do not use high-pressure threats without any prior notice.
- The sender email or SMS origin is untraceable, hover over links don’t click and inspect the domain. The official UK fintech services use the corporate domains and in-app messaging for such critical requests.
- You are asked to send OTP, PIN, or download an unknown app, make srue to never share the OTP/2FA codes.
- The verification page would ask for unusual extras such as full bank details, card CVV, or signed blank document.
- The URL is not the site you expect to be with misspellings, extra words, and odd subdomains.
- You must notice that you were contacted out of blue about the KYC when you have not used service recently.
If any of such signs match, then treat the request as suspicious and verify the same directly via the official website or app. The UK National Cyber Security Centre or NCSC and other authorities would encourage the forwarding of suspicious emails and texts for analysis so that future threats can be traced and stopped.
If you already have provided codes/documents, Step-By-Step guide
- Assume this as a compromise and treat it very seriously. Make sure to immediately log into affected accounts and change the passwords and revoke any active sessions or keys if there are any.
- Contact the crypto exchange or wallet provider through official support channels and inform of the compromise. Make sure to ask them to freeze or lock the account if possible.
- Contact your bank and explain what happened and ask them to keep a track and monitor or freeze accounts based on exposure. There are UK banks that may have special teams for such frauds.
- Report the crime with UK’s national reporting service on Report Fraud / ReportFraud.police.uk, or Action Fraud identity fraud pages. Here you will receive a crime reference number which will help when disputing the losses.
- Make sure to forward phishing email or any screenshot to NCSC on report@phishing.gov.uk.
- Check your credit files such as Experian, Equifax, TransUnion and consider placing protective registration or fraud alert. These steps will make it harder for the criminals to open a new credit in your name. It must be noticed that Experian and other credit reference agencies outline clear victim steps.
- If there is any malware installed like APK or suspicious app, disconnect the device from internet and get inspected with a reputable technician. At the same time, you can reset it to factory settings after backing up the necessary data but do not backup potentially infected apps.
- Keep a record of screenshots, copies of messages, dates and times, and any transaction ID. In future these will help the investigators and your bank to detect and prevent the fraud.
Final words
It must be noticed that KYC verification is normal and necessary step for many online financial services. But the criminals will mimic such normalcy to harvest your identity for fraudulent purpose. Here is good news, with thorough vigilance and few simple habits you can prevent frauds. Make sure to never click on unsolicited links, verifying requests in the official app, never sharing OTP, reporting suspicious messages. If something usually felt off it probably was and reporting it will help build a safer environment for everyone in the UK. If you suspect you have been a victim than act fast, contact your providers, report to Report Fraud and Action Fraud and forward such suspicious communications to NCSC so the platforms can respond.
FAQ
1. What is a crypto KYC scam?
In most of the cases crypto KYC scam is type of fraud where the scammers pretend to be a crypto exchange or wallet provider and ask users to re-verify their identity. In such case, victims are easily tricked into sharing their documents, login details, or OTP through a fake KYC portal, and which later leads to identity theft or financial loss.
2. How a fake KYC portal works?
The fake KYC portal is cloned website that looks very similar or identical to a real exchange verification page. You will get tricked and once you upload your documents or enter the verification codes, then the information goes directly to such scammers and not to company you think you are dealing with.
3. Do genuine crypto companies ever ask for OTPs or PINs during verification?
Definetly No. The legitimate companies never ask for OTP, PIN, recovery phrases, or full card details via email, SMS, or phone calls. if you get any request for such information, then there is a strong sign of a phishing verification scam.
4. How can I avoid phishing verification scam?
Make sure to access the KYC requests directly through official app or website and never click links in unexpected messages. Report the suspicious emails to report@phishing.gov.uk or make a text to 7726. Always staying cautious and slowing down the movement before acting is enough to stop these scams.
5. What should I do if I have already uploaded documents to a fake KYC site?
In such case act quickly and contact the affected crypto platform and your bank. Change your passwords, ensure stronger security, and report incident to Action Fraud or Report Fraud in the UK.
GET IN TOUCH
Have a question or need to report a fraudulent exchange? Our team is here to help you 24/7.
Inquiry TypeGeneral InquirySupportSalesPartnership
MOST POPULAR
WhiteBit Review 2026: Trust Analysis, Regulatory Status & Payment Platform Verification
WhiteBit Review 2026: Trust Analysis, Regulatory Status & Payment Platform Verification
Sim Swap and 2FA Bypass: How Crypto Accounts Get Hijacked
Sim Swap and 2FA Bypass: How Crypto Accounts Get Hijacked
KYC Verification Scam “Re-Verify Your Account” Fraud Alert
KYC Verification Scam “Re-Verify Your Account” Fraud Alert
Empowering Crypto users through
transparent reviews, complaints, and
trust-driven insights.
About Bitavolt
Help
Community
Stay Safe in Crypto
Get alerts & insights weekly
© 2026 Bitavolt. All rights reserved.
