โ† Back to Blog

KYC REJECTED BECAUSE OF YOUR COUNTRY

WHAT SANCTIONS AND RESTRICTED LISTS ACTUALLY MEAN

Your ID was perfect. Your selfie was perfect. And it still said your country is not supported. This one has nothing to do with your photo.

The Short Version

  • There are really three tiers in practice, fully supported, restricted with extra checks, and blocked entirely, and which one applies to you depends on your ID country, your current location, and sometimes your billing address all at once.
  • A country level rejection is usually a legal or policy decision, not a technical one, which means no photo retake fixes it.
  • A VPN can accidentally place you in a restricted or sanctioned jurisdiction without you ever setting foot there, which is more common than people think.

Of everything that can go wrong in KYC, this is the one that feels the most unfair, because it has nothing to do with anything you personally did. Your document can be flawless, your selfie can be textbook perfect, and you still get bounced because of where you are, where your passport is from, or both at once. Let us untangle what is actually going on.

Why does a platform reject you based on your country

Here is the direct answer. Financial platforms operate under anti money laundering law that legally requires them to screen every customer's country against sanctions lists and high risk jurisdiction lists before they are allowed to open an account, and this screening happens regardless of how strong your documents are. This is not the platform being difficult, it is the platform following a legal obligation that exists above and beyond its own product decisions.

What FATF actually is and why almost every platform follows it

FATF, the Financial Action Task Force, is the global standard setter for anti money laundering rules. It maintains lists of jurisdictions considered high risk or under increased monitoring, and virtually every bank, crypto exchange, and payment processor in the world builds its own country risk rules around these FATF categories, because regulators in their own home country expect them to. When a platform blocks or restricts a country, there is a very good chance FATF guidance, or a similar national list like the US OFAC sanctions list, is the reason sitting underneath it.

The difference between a legal requirement and a platform's own risk preference

Not every country block is actually a legal requirement though. Sometimes a platform simply decides, as a business choice, that supporting a certain country is not worth the compliance overhead or licensing cost, even though nothing legally prevents them from doing so. This distinction matters a lot for what you can realistically do about it, which is exactly what the next section covers.

What is the difference between unsupported, restricted, and sanctioned

These three words get used almost interchangeably in help center articles, but they mean very different things for you.

Unsupported means the platform chose not to operate in your country for business reasons, usually licensing cost or market size, not because the law forbids it. Restricted means you can still get verified, but you will face extra checks, lower transaction limits, or enhanced due diligence because your jurisdiction sits on a monitoring list. Sanctioned means the law itself prohibits the platform from serving you, full stop, and no amount of resubmitting a document or appealing to support changes that outcome.

TierWhat it meansCan you still get verifiedTypical extra step
Fully supportedStandard onboarding availableYesNone beyond normal KYC
Restricted, enhanced due diligenceHigher scrutiny jurisdiction under monitoringUsually, with limitsExtra documents, lower transaction limits
Unsupported by business choicePlatform has not launched or licensed thereNoNone, no workaround exists
SanctionedLegally prohibited jurisdictionNoNone, this is a legal block

We are keeping this categorical rather than naming specific countries, since sanctions lists change and a fixed list here would go stale fast. Check the FATF and OFAC lists directly for current status, we link to both below.

Why does my ID country and my current location both matter

Platforms check both your document's country and your physical location because either one alone can be gamed. ID country alone can be faked with a forged address. IP location alone can be faked with a VPN. So the system watches for a mismatch between the two, and a mismatch is one of the most common silent triggers behind a rejection that looks, from your side, like it came out of nowhere.

Living abroad versus actually being restricted, how to tell the difference

If you genuinely live in a different country than your ID was issued in, that is a completely normal and legitimate situation, expats and digital nomads deal with it constantly. The system cannot always tell the difference between "person legitimately living abroad" and "person trying to hide their real location," so it treats both the same way at first, extra scrutiny, until a human or additional documentation clears it up.

Can a VPN get you flagged as being in a sanctioned country by mistake

Yes, and this happens more often than people expect. Some VPN exit nodes are physically located in, or route traffic through, restricted or sanctioned jurisdictions as part of their normal network infrastructure, which can trigger an automatic country level flag even if you have never been anywhere near that country in your life. If you keep a VPN running out of habit for privacy or work reasons, this is genuinely worth checking before you assume something more serious is going on.

๐Ÿงญ Quick Gut Check

Before you panic about sanctions, turn off your VPN completely and try again from your actual location on your actual network. A surprising number of "my country is not supported" rejections turn out to be exactly this, and it is the easiest thing on this entire list to rule out.

What can you actually do if you are in a restricted or unsupported country

I want to be straight with you instead of pretending there is always a workaround, because there genuinely is not always one. Here is what is realistic.

โœ… Realistic Options, In Order

  • Disable any VPN completely during verification and confirm your true location
  • Check the platform's own published country list directly instead of assuming
  • If you hold a second valid passport from a supported country, that document may resolve it
  • Provide additional proof of a different valid residence if one genuinely applies to you
  • Accept that a genuinely sanctioned jurisdiction is a legal block, not a technical one, and no document changes that

โš ๏ธ A Note On Honesty

We are not going to pretend there is a clever trick around a real sanctions block, because there is not one, and pretending otherwise would just waste your time and possibly put you in a worse position. If your country is genuinely sanctioned for a given platform, the realistic path is finding a platform that is licensed to serve you, not finding a workaround for one that is not.

Where to actually check, instead of guessing

Guessing whether your country is sanctioned, restricted, or just unsupported is how people end up more confused than when they started. There are real, public, regularly updated sources for this, and checking them directly beats reading forum speculation every time.

01
The platform's own supported countries page

Most banks, exchanges, and payment processors publish a countries or regions page, usually linked from their help center or footer. This tells you their business decision, which may be stricter than what the law actually requires, since a platform can always choose to be more conservative than it legally has to be.

02
FATF high risk and monitored jurisdictions lists

These are the actual global compliance reference lists most platforms build their country risk rules around. If your country appears here, expect enhanced due diligence almost everywhere, not just on one particular platform.

03
OFAC sanctioned countries list, for US linked platforms

Any platform with a US banking relationship or US incorporation, which covers a large share of global fintech and crypto platforms, is legally bound by OFAC sanctions regardless of where its users are based. If your country appears here, this is the hardest category to get around, since it is US federal law, not platform preference.

What it looks like when this goes wrong for the wrong reason

Sometimes a country level rejection is simply a mistake in the system rather than an actual policy match, and it helps to recognize the pattern.

  • Your phone number's country code does not match your ID or your IP. A phone number from one country, a passport from another, and an IP from a third can trip a country consistency check even when every individual piece of information is completely genuine.
  • Your billing address is on file from years ago and never got updated. Some systems weigh an old stored address more heavily than your current one, especially on accounts that have been open a long time.
  • A shared office or university network routes traffic through a different country. Large institutional networks sometimes backhaul internet traffic through a different country's infrastructure, which can look identical to a VPN from the system's point of view.

None of these are fraud. All of them can trigger the same generic rejection message as an actual sanctions match, which is exactly why checking the real published lists before assuming the worst matters so much.

Expat and digital nomad, versus actually restricted

It is worth separating this from our other guide on expats and digital nomads, because the mechanism here is different even though the symptom looks similar. Our expat guide is mostly about document types, using a foreign passport, proving an address in a country that is not on your ID. This guide is about something upstream of that, whether the country itself is one the platform is legally able to serve at all, regardless of how good your documents are.

A useful way to tell them apart. If the rejection message mentions your documents, address proof, or account details, you are likely dealing with a document level problem, and our expat guide is the better resource. If the rejection simply says your country or region is not supported, with no mention of your specific documents, you are almost certainly dealing with a jurisdiction level block, which is what this guide covers.

A message worth sending if you think this is a mistake

If you have ruled out a VPN, confirmed your actual location, and you are still being told your country is not supported despite genuinely believing it should be, a short message to support can sometimes clarify whether this is a real policy block or a system error.

๐Ÿ“‹ A message that gets a clear answer Subject: Country verification question, requesting clarification Hi team, I am attempting to verify my account from [your country], with no VPN or proxy active. I received a message indicating my country or region is not supported. Could you confirm whether this is a permanent restriction for my jurisdiction, or whether there may be an error in how my location was detected? I want to understand whether this is worth appealing. Thank you.

This message does one specific job, it asks a direct yes or no question that a support agent can actually answer without guessing, instead of an open ended complaint that is easy to leave unanswered.

What this means for where you take your business instead

If a platform genuinely cannot serve your country for legal reasons, the most useful thing you can do with your time is stop trying to force that specific door open and look at which platforms are actually licensed for your jurisdiction. Coverage varies a lot between crypto exchanges, neobanks, and payment processors, and a country that is fully blocked on one platform is sometimes completely normal on another that holds a different license or operates under a different regulatory umbrella entirely.

If you hold more than one passport

Dual and multiple citizenship adds a genuinely useful option that a lot of people do not realize applies to them. Platforms generally verify the document you submit, not every citizenship you happen to hold, which means if one of your passports is from a fully supported country and another is from a restricted or sanctioned one, submitting the supported document can resolve the entire problem without any appeal or waiting period at all.

This is not a loophole or a workaround in the way a VPN would be, it is simply using accurate, valid documentation for a country you are genuinely also a citizen of. The one thing worth being careful about is consistency, if your account already has other details tied to the restricted country, like a phone number or a previously submitted address, switching documents without addressing that mismatch can raise the exact kind of inconsistency flag covered elsewhere in this article. If you are going to use a different passport, it is worth updating the surrounding account details to match as well.

How these lists actually change over time

Sanctions and monitoring lists are not fixed documents written once and left alone, they are living lists reviewed on a recurring schedule and updated in response to real world events. FATF reviews its high risk and monitored jurisdictions lists multiple times a year at plenary meetings, adding and removing countries as their compliance situation changes. National sanctions programs, like those maintained by the US, EU, and UK, can update far faster than that, sometimes within days of a major geopolitical event, since they are a direct policy tool rather than a periodic technical review.

This is exactly why a country that was completely unremarkable for KYC purposes a year ago can suddenly become a restricted or blocked jurisdiction with very little warning, and why an account that verified without issue a year ago can later get re-flagged when the platform runs its existing customers back through an updated list, a process most compliance programs are required to do periodically rather than only at initial signup.

If you recently moved countries

A recent move adds a specific wrinkle worth calling out separately. If you moved from a fully supported country to a restricted or unsupported one, existing accounts sometimes keep working for a while simply because the platform has not yet re-verified your current location, until a routine re-screening or a new action, like raising your transaction limits, triggers a fresh check. This can create a confusing situation where a long standing account suddenly hits a country level wall that a brand new signup from the same location would have hit immediately. If this describes your situation, the honest starting point is contacting support directly and explaining the move, rather than trying to keep the account looking like it never happened.

Why this one stings more than other rejections

Out of every reason a KYC check can fail, a country level block is the one that feels the most personal, because it is the one where there is genuinely nothing about your own conduct to fix. You did not upload a bad photo. You did not make a mistake on a form. You simply happen to be from, or currently living in, a place that a distant compliance policy has decided is out of scope. That is a frustrating thing to sit with, and it is fair to feel annoyed by it even once you understand the legal mechanics behind it.

The most useful mindset here is treating this as information about a specific platform's licensing footprint, not as a verdict on you personally. The same passport that gets blocked on one exchange might sail through onboarding on a bank three doors down that happens to hold a license covering your region. This is a mismatch between you and one company's regulatory scope, not a universal judgment, and remembering that distinction makes it a lot easier to move on to a platform that actually fits your situation instead of spending weeks appealing one that legally cannot say yes.

Frequently asked questions

Is my country sanctioned or just restricted?

Check the platform's own published list of supported countries first, then compare against the FATF high risk and monitored jurisdictions lists and, for US based platforms, the OFAC sanctioned countries list, since these are the actual public sources rather than guesswork.

Does having dual citizenship help?

Sometimes. If you hold a valid passport from a fully supported country, using that document instead of a restricted or sanctioned one can resolve the issue, since platforms generally check the document you submit rather than every citizenship you hold.

Why did my account work for a year and then suddenly get country flagged?

Sanctions and restricted jurisdiction lists change over time as geopolitical situations shift, and platforms periodically re-screen existing customers against updated lists, which can surface a flag on an account that passed verification long ago.

Can a platform ban a whole country overnight?

Yes. Platforms can and do stop serving a country immediately in response to new sanctions, license changes, or a shift in their own risk appetite, sometimes faster than their own help pages get updated to reflect it.

Can an old billing address cause a country rejection by mistake?

Yes. Some verification systems weigh a stored billing address more heavily than your current location, so an outdated address on file can trigger the same generic country mismatch flag as an actual restricted jurisdiction match.

Does a university or office network ever cause this by accident?

It can. Large institutional networks sometimes route traffic through infrastructure based in a different country, which can look identical to VPN usage from the verification system's point of view, even though nothing suspicious is happening.

Related reading: My KYC Keeps Getting Rejected and My Documents Are Fine ยท How Many Times Can You Fail KYC Before You Get Banned ยท KYC for Expats & Digital Nomads

RULE OUT THE EASY EXPLANATION FIRST

Before you assume the worst, check your document quality is not adding a second problem on top of a location issue.

Check My Document Free โ†’

โœ“ Free AI analysis โœ“ No account needed โœ“ Results in seconds