Law & jurisdiction
What is KYC?
KYC is the set of identity-verification duties imposed on regulated financial institutions before providing services. These duties bind banks, exchanges and payment institutions because they handle money transmission. Hosting is not a regulated financial activity, so a compute provider has no equivalent obligation in the jurisdictions where we operate.
Why KYC matters
These duties bind banks, exchanges and payment institutions because they handle money transmission. Hosting is not a regulated financial activity, so a compute provider has no equivalent obligation in the jurisdictions where we operate. Hosts that demand a passport do so for chargeback and fraud control, not because a statute requires it — which is why crypto-settled providers, who cannot receive a chargeback, generally do not ask. The distinction matters practically: an identity document collected for fraud control is still an identity document that can be breached, sold, or produced in response to a demand years later.
KYC in practice
When you run a server, KYC means checking who your customer is before letting them in. In practice, you would look at a passport or utility bill, record the details, and re-check them periodically. If you are a financial institution, getting this wrong can mean fines or losing your licence. For a compute provider, the cost is less regulatory and more about trust: collect identity documents for fraud control, and you hold sensitive data that can be breached or demanded years later. Every piece of identity you store is a liability you must protect.
What people get wrong about KYC
People often think KYC is a universal requirement for any online service, so they assume a VPS host must ask for a passport. That is wrong. KYC is a legal duty only for regulated financial institutions like banks and exchanges. A hosting provider has no such obligation, so asking for your ID is a choice, not a requirement. If a host asks, it is for their own fraud protection, not because the law says so.
KYC — common questions
Do I need to provide ID to rent a server?
No, if you choose a no-KYC host. KYC is required for regulated financial services, not for hosting. Many providers still ask for ID for fraud control, but crypto-settled hosts like us generally do not. You just need an email address you control.
What happens to my ID after I give it to a host?
Once a host has your identity document, it becomes their liability. If their data is breached, your document could be exposed. They may also retain it and could share it in response to a legal demand. With a no-KYC host, there is nothing to store or lose.
Where KYC comes up
- What is no-KYC hosting? No-KYC hosting is server hosting that does not require identity verification. No passport, no photo ID, no billing address and no payment card. An email ad…
- How do I host a website anonymously? Combine four things: a no-KYC host paid in Monero, a domain registered with privacy protection or an anonymous registrar, a CDN or reverse proxy so the ori…
- Is no-KYC hosting legal? Yes. There is no general legal requirement to identify server customers in the jurisdictions where OnionVPS operates. Anti-money-laundering identification …
- Can a VPS be traced back to me? It depends entirely on the links you create, not on the hosting itself. A no-KYC server paid for in Monero and administered over Tor has no provider-side l…
- Do you accept PayPal, credit cards or bank transfer? No. OnionVPS is crypto-only, deliberately. Accepting cards would require collecting a name, billing address and often identity documents for fraud control …
- How many locations and countries do you offer? OnionVPS operates 138 locations across 116 countries and 8 regions, including offshore and privacy-tier jurisdictions such as Panama, Seychelles, Switzerla…
More from law & jurisdiction
- Warrant canary
- A warrant canary is a regularly republished statement that a provider has not received a secret legal demand; its disappearance implies that one has arrived.
- No-KYC hosting
- No-KYC hosting is server hosting that requires no identity verification — no government ID, billing address, phone number or payment card.
- Offshore hosting
- Offshore hosting means placing a server in a jurisdiction other than your own, typically one outside the Fourteen Eyes alliances and outside EU data-retention rules.
- Five Eyes
- The Five Eyes is a signals-intelligence sharing alliance between the United States, United Kingdom, Canada, Australia and New Zealand.
- Fourteen Eyes
- The Fourteen Eyes is the widest of the signals-intelligence sharing groupings, comprising the Five Eyes plus Denmark, France, the Netherlands, Norway, Belgium, Germany, Italy, Spain and Sweden.
- MLAT
- An MLAT is a treaty through which one country formally requests another to gather evidence on its behalf.
- DMCA
- The DMCA is United States copyright statute whose notice-and-takedown procedure and safe harbour apply to service providers situated in the United States.
- Data retention
- Data retention laws require communications providers to store connection metadata for a defined period so that authorities can obtain it later.