Coinbase · Coinbase User Agreement

AML/KYC Identity Verification Requirements

Medium severity
Share 𝕏 Share in Share

What it is

Coinbase is required by law to comply with applicable anti-money laundering and 'know your customer' laws, regulations and standards, including the Bank Secrecy Act and the USA PATRIOT Act. You must provide accurate and complete information about yourself when creating your Coinbase Account, including your full legal name, address, phone number, date of birth, and taxpayer identification number (SSN or ITIN). Coinbase may require you to provide additional verification information at any time.

Why it matters

You are required to share highly sensitive personal and financial information including your SSN with Coinbase as a condition of service, and this data is subject to their privacy practices and potential government disclosure obligations.

Consumer impact

Coinbase's User Agreement gives the company broad unilateral powers to suspend accounts, freeze funds, and reverse transactions with limited notice, directly affecting your access to your money and cryptocurrency. In the event of Coinbase's insolvency, cryptocurrency held in your Coinbase account may be treated as Coinbase's property under bankruptcy law, leaving you as an unsecured creditor rather than the outright owner of your assets. You can withdraw your cryptocurrency to a self-custodied hardware or software wallet to avoid platform insolvency risk, and you can opt out of mandatory arbitration by sending written notice to Coinbase within 30 days of first accepting the agreement.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Export Your Data
    Submit a CCPA data access request through Coinbase's Privacy Rights portal at coinbase.com/settings/privacy-rights to receive a copy of all personal data Coinbase holds about you, including identity documents and SSN records.

Applicable agencies

  • CFPB
    The CFPB has supervisory authority over Coinbase's data collection and consumer financial data practices, including security of sensitive personal information like SSNs.
    File a complaint →
  • FTC
    The FTC enforces data security requirements for companies holding sensitive consumer data including SSNs under Section 5 of the FTC Act and the Safeguards Rule.
    File a complaint →

Provision details

Document information
Document
Coinbase User Agreement
Entity
Coinbase
Document last updated
March 24, 2026
Tracking information
First tracked
March 20, 2026
Last verified
April 4, 2026
Record ID
CA-P-002036
Document ID
CA-D-00047
Evidence Provenance
Source URL
Wayback Machine
SHA-256
28b08bdc2391062cc0b1b467b0c8cfeb1e19b51011dcce671448d97947da4585
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Coinbase | Document: Coinbase User Agreement | Record: CA-P-002036
Captured: 2026-03-20 06:40:29 UTC | SHA-256: 28b08bdc2391062c…
URL: https://conductatlas.com/platform/coinbase/coinbase-user-agreement/amlkyc-identity-verification-requirements/
Accessed: April 4, 2026
Classification
Severity
Medium
Categories

Other provisions in this document