What is KYC (Know Your Customer)?
KYC, or Know Your Customer, is the process of verifying the identity of investors or users before allowing them to purchase or trade property tokens.
It is a legal requirement under anti-money laundering regulations in virtually every jurisdiction where financial products are offered. For real estate tokenization platforms, KYC is the compliance gate through which every investor must pass before they can be added to the token whitelist and receive or trade tokens.
What KYC Involves
A standard KYC process requires an investor to provide proof of identity, typically a government-issued document such as a passport or national ID and proof of address, such as a recent utility bill or bank statement. For corporate investors, KYC extends to the entity itself: company registration documents, ownership structure, and identification of beneficial owners above a defined ownership threshold.
The platform or its appointed KYC provider verifies these documents against third-party data sources, screening the investor against sanctions lists, politically exposed persons (PEP) registers, and adverse media databases. The result is a verified investor profile that links the person or entity to a confirmed identity.
KYC and the Token Whitelist
In a compliance-native token architecture using ERC-3643, KYC verification directly controls access to the token. Once an investor completes KYC successfully, their wallet address is added to the on-chain identity registry and whitelisted for the relevant offering. The smart contract checks this whitelist before permitting any token transfer; a wallet that is not verified cannot receive tokens, regardless of the circumstances.
This on-chain enforcement means that KYC is not just an onboarding step, it is a persistent, automated gate that applies to every transfer throughout the life of the token. If an investor’s verification lapses or is revoked, their wallet can be removed from the whitelist and blocked from further transfers without any manual intervention in the token transfer process itself.
KYC Requirements by Jurisdiction
KYC requirements vary by jurisdiction, offering type, and investor category. In the US, offerings under Regulation D require accredited investor verification in addition to standard identity checks. Regulation A+ and Regulation Crowdfunding have different thresholds. In the UAE, VARA and ADGM frameworks set their own KYC standards for digital asset offerings, with specific requirements for retail versus professional investors.
Platforms operating across both markets must be able to apply jurisdiction-specific KYC rules to the appropriate investor populations. ERC-3643’s on-chain identity claims system handles this by attaching jurisdiction-specific eligibility claims to each investor’s identity, allowing the compliance module to enforce different rules for different investor groups within the same token structure.
Ongoing KYC and Re-Verification
KYC is not a one-time event. Regulatory frameworks require periodic re-verification, particularly when an investor’s circumstances change a change of address, a change in beneficial ownership of a corporate investor, or a flag raised by ongoing transaction monitoring. Platforms must maintain processes for refreshing investor verification and updating the on-chain registry accordingly.
Failure to maintain current KYC on all token holders is a regulatory risk that can result in enforcement action. Compliance-native infrastructure reduces this risk by making the whitelist status of each investor visible and auditable on-chain, simplifying the task of identifying and remediating verification gaps.
KYC at Node Proptech
Node Proptech conducts KYC verification for every investor before onboarding, using a combination of automated document verification and third-party screening against sanctions and PEP databases. Verified investor identity is linked to the on-chain identity registry under ERC-3643, and whitelist status is enforced automatically at the contract level for every token transfer. Re-verification processes are maintained in line with the requirements of both US and UAE regulatory frameworks.