KYC REJECTED BECAUSE OF YOUR COUNTRY
WHAT SANCTIONS AND RESTRICTED LISTS ACTUALLY MEAN
Your ID was perfect. Your selfie was perfect. And it still said your country is not supported. This one has nothing to do with your photo.
WHAT SANCTIONS AND RESTRICTED LISTS ACTUALLY MEAN
Your ID was perfect. Your selfie was perfect. And it still said your country is not supported. This one has nothing to do with your photo.
Of everything that can go wrong in KYC, this is the one that feels the most unfair, because it has nothing to do with anything you personally did. Your document can be flawless, your selfie can be textbook perfect, and you still get bounced because of where you are, where your passport is from, or both at once. Let us untangle what is actually going on.
Here is the direct answer. Financial platforms operate under anti money laundering law that legally requires them to screen every customer's country against sanctions lists and high risk jurisdiction lists before they are allowed to open an account, and this screening happens regardless of how strong your documents are. This is not the platform being difficult, it is the platform following a legal obligation that exists above and beyond its own product decisions.
FATF, the Financial Action Task Force, is the global standard setter for anti money laundering rules. It maintains lists of jurisdictions considered high risk or under increased monitoring, and virtually every bank, crypto exchange, and payment processor in the world builds its own country risk rules around these FATF categories, because regulators in their own home country expect them to. When a platform blocks or restricts a country, there is a very good chance FATF guidance, or a similar national list like the US OFAC sanctions list, is the reason sitting underneath it.
Not every country block is actually a legal requirement though. Sometimes a platform simply decides, as a business choice, that supporting a certain country is not worth the compliance overhead or licensing cost, even though nothing legally prevents them from doing so. This distinction matters a lot for what you can realistically do about it, which is exactly what the next section covers.
These three words get used almost interchangeably in help center articles, but they mean very different things for you.
Unsupported means the platform chose not to operate in your country for business reasons, usually licensing cost or market size, not because the law forbids it. Restricted means you can still get verified, but you will face extra checks, lower transaction limits, or enhanced due diligence because your jurisdiction sits on a monitoring list. Sanctioned means the law itself prohibits the platform from serving you, full stop, and no amount of resubmitting a document or appealing to support changes that outcome.
| Tier | What it means | Can you still get verified | Typical extra step |
|---|---|---|---|
| Fully supported | Standard onboarding available | Yes | None beyond normal KYC |
| Restricted, enhanced due diligence | Higher scrutiny jurisdiction under monitoring | Usually, with limits | Extra documents, lower transaction limits |
| Unsupported by business choice | Platform has not launched or licensed there | No | None, no workaround exists |
| Sanctioned | Legally prohibited jurisdiction | No | None, this is a legal block |
We are keeping this categorical rather than naming specific countries, since sanctions lists change and a fixed list here would go stale fast. Check the FATF and OFAC lists directly for current status, we link to both below.
Platforms check both your document's country and your physical location because either one alone can be gamed. ID country alone can be faked with a forged address. IP location alone can be faked with a VPN. So the system watches for a mismatch between the two, and a mismatch is one of the most common silent triggers behind a rejection that looks, from your side, like it came out of nowhere.
If you genuinely live in a different country than your ID was issued in, that is a completely normal and legitimate situation, expats and digital nomads deal with it constantly. The system cannot always tell the difference between "person legitimately living abroad" and "person trying to hide their real location," so it treats both the same way at first, extra scrutiny, until a human or additional documentation clears it up.
Yes, and this happens more often than people expect. Some VPN exit nodes are physically located in, or route traffic through, restricted or sanctioned jurisdictions as part of their normal network infrastructure, which can trigger an automatic country level flag even if you have never been anywhere near that country in your life. If you keep a VPN running out of habit for privacy or work reasons, this is genuinely worth checking before you assume something more serious is going on.
Before you panic about sanctions, turn off your VPN completely and try again from your actual location on your actual network. A surprising number of "my country is not supported" rejections turn out to be exactly this, and it is the easiest thing on this entire list to rule out.
I want to be straight with you instead of pretending there is always a workaround, because there genuinely is not always one. Here is what is realistic.
We are not going to pretend there is a clever trick around a real sanctions block, because there is not one, and pretending otherwise would just waste your time and possibly put you in a worse position. If your country is genuinely sanctioned for a given platform, the realistic path is finding a platform that is licensed to serve you, not finding a workaround for one that is not.
Guessing whether your country is sanctioned, restricted, or just unsupported is how people end up more confused than when they started. There are real, public, regularly updated sources for this, and checking them directly beats reading forum speculation every time.
Most banks, exchanges, and payment processors publish a countries or regions page, usually linked from their help center or footer. This tells you their business decision, which may be stricter than what the law actually requires, since a platform can always choose to be more conservative than it legally has to be.
These are the actual global compliance reference lists most platforms build their country risk rules around. If your country appears here, expect enhanced due diligence almost everywhere, not just on one particular platform.
Any platform with a US banking relationship or US incorporation, which covers a large share of global fintech and crypto platforms, is legally bound by OFAC sanctions regardless of where its users are based. If your country appears here, this is the hardest category to get around, since it is US federal law, not platform preference.
Sometimes a country level rejection is simply a mistake in the system rather than an actual policy match, and it helps to recognize the pattern.
None of these are fraud. All of them can trigger the same generic rejection message as an actual sanctions match, which is exactly why checking the real published lists before assuming the worst matters so much.
It is worth separating this from our other guide on expats and digital nomads, because the mechanism here is different even though the symptom looks similar. Our expat guide is mostly about document types, using a foreign passport, proving an address in a country that is not on your ID. This guide is about something upstream of that, whether the country itself is one the platform is legally able to serve at all, regardless of how good your documents are.
A useful way to tell them apart. If the rejection message mentions your documents, address proof, or account details, you are likely dealing with a document level problem, and our expat guide is the better resource. If the rejection simply says your country or region is not supported, with no mention of your specific documents, you are almost certainly dealing with a jurisdiction level block, which is what this guide covers.
If you have ruled out a VPN, confirmed your actual location, and you are still being told your country is not supported despite genuinely believing it should be, a short message to support can sometimes clarify whether this is a real policy block or a system error.
This message does one specific job, it asks a direct yes or no question that a support agent can actually answer without guessing, instead of an open ended complaint that is easy to leave unanswered.
If a platform genuinely cannot serve your country for legal reasons, the most useful thing you can do with your time is stop trying to force that specific door open and look at which platforms are actually licensed for your jurisdiction. Coverage varies a lot between crypto exchanges, neobanks, and payment processors, and a country that is fully blocked on one platform is sometimes completely normal on another that holds a different license or operates under a different regulatory umbrella entirely.
Dual and multiple citizenship adds a genuinely useful option that a lot of people do not realize applies to them. Platforms generally verify the document you submit, not every citizenship you happen to hold, which means if one of your passports is from a fully supported country and another is from a restricted or sanctioned one, submitting the supported document can resolve the entire problem without any appeal or waiting period at all.
This is not a loophole or a workaround in the way a VPN would be, it is simply using accurate, valid documentation for a country you are genuinely also a citizen of. The one thing worth being careful about is consistency, if your account already has other details tied to the restricted country, like a phone number or a previously submitted address, switching documents without addressing that mismatch can raise the exact kind of inconsistency flag covered elsewhere in this article. If you are going to use a different passport, it is worth updating the surrounding account details to match as well.
Sanctions and monitoring lists are not fixed documents written once and left alone, they are living lists reviewed on a recurring schedule and updated in response to real world events. FATF reviews its high risk and monitored jurisdictions lists multiple times a year at plenary meetings, adding and removing countries as their compliance situation changes. National sanctions programs, like those maintained by the US, EU, and UK, can update far faster than that, sometimes within days of a major geopolitical event, since they are a direct policy tool rather than a periodic technical review.
This is exactly why a country that was completely unremarkable for KYC purposes a year ago can suddenly become a restricted or blocked jurisdiction with very little warning, and why an account that verified without issue a year ago can later get re-flagged when the platform runs its existing customers back through an updated list, a process most compliance programs are required to do periodically rather than only at initial signup.
A recent move adds a specific wrinkle worth calling out separately. If you moved from a fully supported country to a restricted or unsupported one, existing accounts sometimes keep working for a while simply because the platform has not yet re-verified your current location, until a routine re-screening or a new action, like raising your transaction limits, triggers a fresh check. This can create a confusing situation where a long standing account suddenly hits a country level wall that a brand new signup from the same location would have hit immediately. If this describes your situation, the honest starting point is contacting support directly and explaining the move, rather than trying to keep the account looking like it never happened.
Out of every reason a KYC check can fail, a country level block is the one that feels the most personal, because it is the one where there is genuinely nothing about your own conduct to fix. You did not upload a bad photo. You did not make a mistake on a form. You simply happen to be from, or currently living in, a place that a distant compliance policy has decided is out of scope. That is a frustrating thing to sit with, and it is fair to feel annoyed by it even once you understand the legal mechanics behind it.
The most useful mindset here is treating this as information about a specific platform's licensing footprint, not as a verdict on you personally. The same passport that gets blocked on one exchange might sail through onboarding on a bank three doors down that happens to hold a license covering your region. This is a mismatch between you and one company's regulatory scope, not a universal judgment, and remembering that distinction makes it a lot easier to move on to a platform that actually fits your situation instead of spending weeks appealing one that legally cannot say yes.
Check the platform's own published list of supported countries first, then compare against the FATF high risk and monitored jurisdictions lists and, for US based platforms, the OFAC sanctioned countries list, since these are the actual public sources rather than guesswork.
Sometimes. If you hold a valid passport from a fully supported country, using that document instead of a restricted or sanctioned one can resolve the issue, since platforms generally check the document you submit rather than every citizenship you hold.
Sanctions and restricted jurisdiction lists change over time as geopolitical situations shift, and platforms periodically re-screen existing customers against updated lists, which can surface a flag on an account that passed verification long ago.
Yes. Platforms can and do stop serving a country immediately in response to new sanctions, license changes, or a shift in their own risk appetite, sometimes faster than their own help pages get updated to reflect it.
Yes. Some verification systems weigh a stored billing address more heavily than your current location, so an outdated address on file can trigger the same generic country mismatch flag as an actual restricted jurisdiction match.
It can. Large institutional networks sometimes route traffic through infrastructure based in a different country, which can look identical to VPN usage from the verification system's point of view, even though nothing suspicious is happening.
Related reading: My KYC Keeps Getting Rejected and My Documents Are Fine ยท How Many Times Can You Fail KYC Before You Get Banned ยท KYC for Expats & Digital Nomads
Before you assume the worst, check your document quality is not adding a second problem on top of a location issue.
Check My Document Free โโ Free AI analysis โ No account needed โ Results in seconds