ShareKYC Blog

Guides on KYC, identity and data protection

Plain-English articles on verifying identity, meeting anti-money-laundering duties and sharing sensitive documents without losing control.

Data protection & security

Share Your ID Without Losing Control

The five levers that keep you in control when you share ID or KYC data: expiry, access limits, downloads off, instant revocation, and watermarking.

6 min read
Data protection & security

Redacting ID Copies: What You Can Black Out

Which ID fields you may redact, how the diagonal Sperrvermerk note works, and when a full unredacted copy is legally required versus merely requested.

6 min read
Data protection & security

Revoking Access After You've Shared — Impossible With Email

Why an emailed ID copy can never be recalled, what real revocation actually means, and how expiring, revocable links with an audit log give you a working undo.

7 min read
Data protection & security

Identity Theft From an ID Copy: Real Risks

A practical threat model for what an attacker can and can't do with a static ID copy versus the physical document or eID, plus the protections that move the needle.

7 min read
Data protection & security

What Banks Are Actually Allowed to Require for KYC

Where GwG due-diligence duties end and GDPR data minimisation begins: spotting over-collection in KYC and how to push back without derailing onboarding.

5 min read
Data protection & security

Your ID Data Leaked: Immediate Steps and Damage Control

A concrete first-48-hours response when your ID copy leaks: block hotlines, fraud monitoring, and a clear-eyed read on what an attacker can and cannot do with a copy.

7 min read
Data protection & security

Data Minimization: Which Fields a Bank Actually Needs

A field-by-field walkthrough of KYC data minimization: which identity attributes a bank can demand, which you can withhold, and the legal basis for each.

7 min read