What Is "Shotgun KYC"? The No-KYC Industry's Open Secret, Explained
"Shotgun KYC" is when a "no-KYC" exchange stops your swap halfway through and demands your passport before you can have your own money back. The term comes from the privacy community — the independent directory kycnot.me uses it as an official classification — and as of July 2026 it applies to every big-name centralized instant swapper. This page explains how it works, shows documented real cases, and gives you the habits that keep it from ever happening to you.
- Definition
- The 0–4 KYC scale
- How it works
- Why services do it
- Documented cases
- If it happens to you
- How to avoid it
- Where AceChange stands
- FAQ
- Sources
The definition, precisely
Shotgun KYC is retroactive, selective identity verification: a service advertises swaps with no registration and no ID, accepts your deposit, and only then — if its risk systems flag the transaction — suspends the order and demands documents. You never agreed to verification up front; it hits some fraction of users, unpredictably, after their money is already in the service's hands. Hence the name: it's fired blind into the crowd, and whoever it hits, it hits.
Three details make it different from ordinary KYC, and they're what makes people angry:
- It's retroactive. A normal exchange verifies you before you deposit. Shotgun KYC verifies you after — when refusing means losing access to funds already sent.
- It's selective and opaque. The flagging criteria are secret by design (ChangeNOW's FAQ says openly that they "can't be made public"), so you can't know in advance whether your order will sail through or stall.
- The exit costs vary wildly. Refusing verification gets your money back minus network fees on some services — and costs 1% (minimum $100) on others. Same situation, very different bill.
Where it sits on the KYC scale (kycnot.me's 0–4 levels)
The privacy directory kycnot.me grades every listed service on a five-level KYC scale. Shotgun KYC is level 3 — and knowing all five levels makes every "no-KYC" marketing claim instantly easier to judge:
| Level | Meaning | What it means for you |
|---|---|---|
| Level 0 | KYC guaranteed never — structurally impossible | P2P platforms and DEXes: no company exists that could demand your ID |
| Level 1 | No mention of KYC anywhere in the terms | Nothing promised either way — small services often live here |
| Level 2 | Rare, edge-case KYC | Verification is possible but genuinely uncommon |
| Level 3 | "Shotgun KYC" — may demand ID and hold funds mid-flow | This page. Every big-name instant swapper sits here as of July 2026 |
| Level 4 | Mandatory KYC for everyone | Standard custodial exchanges: verify first, trade later |
The uncomfortable headline from the current listings: ChangeNOW, SimpleSwap, FixedFloat, StealthEX, Godex, Exolix and LetsExchange all carry the level-3 classification, with overall scores between 3/10 and 5/10. The 9–10/10 scores go almost entirely to P2P platforms and DEXes. This is not a rogue-operator problem; it is how the centralized end of the category works.
How it works under the hood
When your deposit arrives, it doesn't go straight to the swap engine. It goes through automated screening first. The diagram below is the actual decision path your money takes on a level-3 service:
A clean result and your swap proceeds normally — this is the overwhelming majority of orders. A flag, and the order state flips to "hold": you get an email or a status-page message asking for identity documents, often source-of-funds evidence, occasionally more. StealthEX's process can escalate to live video verification. SimpleSwap's terms add a genuinely sharp edge: returning frozen funds costs 1% of the amount, minimum $100, after you've provided documentation. ChangeNOW gives a 3-day verification window and refunds refusers minus network fees — while reserving the right to blacklist the sending address, and charging $50 when a refund needs manual processing.
Why do "no-KYC" services do this at all?
Because the alternative is being shut down or becoming a laundry. Instant swappers sit on a regulatory fault line: they serve privacy-minded users, but stolen funds from every major hack also come looking for exactly this kind of service. After FixedFloat's own $26M hack in February 2024, its team publicly declared funds connected to one uncooperative exchange "criminal" and subject to automatic holds — the hunted becoming the hunter in a single news cycle.
Risk screening is the mechanism by which these services stay online, keep banking-adjacent partners, and avoid becoming the next enforcement headline. The honest framing isn't "no-KYC services betray their promise"; it's that for the big centralized players, "no KYC" has always meant "no KYC by default", with a risk-triggered exception written into the terms. Services that pretend otherwise in their marketing while carrying the same clauses in their legal pages are the ones to distrust most — the gap between the front page and the terms page is the single most honest measure of a swap service.
Documented cases (so you know this isn't theoretical)
| Service | What happened | Amount | Where documented |
|---|---|---|---|
| SimpleSwap | Swap frozen (Oct 2025) with escalating KYC demands although the addresses passed independent AML checks; released only after public escalation | $3,900 USDC | BitcoinTalk thread, updated Jan 2026 [1] |
| FixedFloat | Community megathread cataloguing AML freezes, some demanding source-of-funds documentation for release | ~$1,000 – $8,220 | BitcoinTalk megathread, started Jul 2025 [2] |
| StealthEX | Recurring reports of refunds withheld pending video verification (screenshots plus recorded video demanded) | various | Trustpilot reviews; kycnot.me terms review [3] |
| ChangeNOW | Recurring pattern of mid-flow verification holds, some lasting months, inside an otherwise large and positive review base | various | Trustpilot pattern; kycnot.me notes [4] |
Note what these cases have in common: the amounts are ordinary, and in at least one case the funds independently checked clean. False positives are a real, if uncommon, part of the mechanism — which is why the sections below matter even for people doing nothing remotely wrong.
If it happens to you: a 6-step response plan
Most guides stop at "be careful". Here's what to actually do the day an order freezes — the pattern that got the documented cases above resolved:
- Don't panic-comply or panic-refuse. Read the service's ToS refund clause first — it defines your two exits and what each costs. Fifteen minutes of reading changes your negotiating position.
- Screenshot everything immediately: the order page, the status, the exact demand, timestamps. Support chats have a documented habit of disappearing.
- Run your own AML check on the sending address with a free checker. If it comes back clean, you have evidence — that's what turned the $3,900 SimpleSwap case.
- Reply once, precisely, in writing. Provide what's reasonable, ask which specific rule triggered the hold, and ask for a written timeline. Vague threats get vague answers; specific questions create a paper trail.
- Escalate publicly if stalled past the stated window. A factual Trustpilot review and a post on BitcoinTalk with your order ID work — services resolve public, documented cases first. Stay factual; exaggeration kills your credibility.
- Know when to take the refund. If the demand escalates past what you'll tolerate (video, source-of-wealth), a refund minus fees today usually beats an indefinite hold — check whether your service charges for it before deciding.
How to keep your risk near zero in the first place
Send boring coins
Coins that sat in your own wallet, bought or earned through ordinary channels, are what screening systems wave through. Coins fresh out of a mixer or two hops from a hacked exchange are what they exist to catch.
Don't structure
Splitting one large swap into a burst of small ones looks like layering to a pattern engine — it raises your risk rather than lowering it. One clean order beats ten nervous ones.
Check before you send
kycnot.me scores the major players; the aggregator Trocador grades each partner's KYC behaviour with A–D letter grades, so you can route around the strictest desks entirely.
Read two clauses
What triggers a hold, and what a refund costs if you refuse verification. You've seen how much they differ: from free-minus-network-fees to 1%/min-$100.
Cap single swaps
Keep one order at an amount you could tolerate having stuck for weeks — not because it's likely, but because "unlikely × painful" is still worth capping.
Solve privacy properly
If privacy is the actual goal, swap to Monero — privacy built into the protocol — instead of trying to obscure history on transparent chains, which is precisely what screening flags.
Where AceChange stands
AceChange runs no KYC and no AML screening on crypto-to-crypto swaps — ever. No account, no email, no identity, at any amount. Our fee is published (0.5% floating / 1% fixed, shown in your quote) rather than embedded in the rate, and before you fund a deposit you always see the exact amount, network and address you'll receive. We built the swap side for exactly the people this page is written for — and we'd rather explain the industry's fine print openly than let you discover it the hard way. For the full landscape, see our comparison of crypto swap sites.
Frequently asked questions
Is shotgun KYC legal?
Generally yes — the right to verify flagged transactions is written into the services' terms, which you accept by using them, and it exists because anti-money-laundering rules reach even account-free services through their banking, liquidity and jurisdictional relationships. The practice can be unfair in individual false-positive cases; that's a different thing from being unlawful.
Can I get my money back if I refuse verification?
Depends entirely on the service and the risk level it assigned. ChangeNOW's published path: refund to the sending address minus network fees within 24 hours (plus $50 if manual processing is needed). SimpleSwap: documentation first, then a 1%/min-$100 charge on the return. High-risk classifications at some services can mean the funds stay held indefinitely. This variance is exactly why reading the refund clause before sending matters.
Which exchanges never do shotgun KYC?
Truly guaranteed-never means removing the company from the middle: P2P platforms like Bisq and RoboSats, atomic swaps, and DEXes — kycnot.me's level-0 category. Among instant-style services, AceChange runs no KYC or AML checks on swaps; for anyone else, check their kycnot.me level and read the AML clause in their terms before trusting the front page.
What triggers a shotgun KYC check most often?
By the services' own published criteria: on-chain proximity to hacks, mixers, darknet markets or sanctioned addresses; sanctions-list matches; and structuring-like patterns (many rapid swaps, threshold-skimming amounts). Ordinary funds from your own wallet, swapped in ordinary amounts, sit outside all of these.
Does shotgun KYC mean my swap history is being reported somewhere?
Not automatically. Screening is a filter, not a filing system — the typical flow checks your deposit against risk databases and lets it through. What a service retains and shares differs by operator and jurisdiction; kycnot.me's terms reviews flag "data sharing with authorities" clauses where they exist, which is one more reason to read the listing before you send.
Sources (verified 6–7 July 2026)
- BitcoinTalk — "SimpleSwap froze my money & forced KYC while my address is clean" (Oct 2025, updated Jan 2026)
- BitcoinTalk — FixedFloat frozen-funds megathread (Jul 2025)
- kycnot.me — StealthEX listing and terms review
- kycnot.me — ChangeNOW listing
- kycnot.me — directory and KYC-level scale
- SimpleSwap Terms of Service (§8.2 — 1%/min-$100 return fee) and AML-KYC policy
- ChangeNOW Terms of Use (§3 — risk system, freeze, 3-day window; §6.17 — $50 manual-refund fee)
- Exolix AML/KYC policy (published trigger list)
- FixedFloat blog — March 2025 AML directive
Classifications, scores, clauses and cases cited above can change after the verification date. Educational content, not financial or legal advice.
