KYC alone is already a bad idea, IMO. Sending your sensitive information to them which might be used against you as your ID contains vital information that would help them hack your account. Rumors has it too that the information you send to them will be sold in the darkweb and they will earn money from your data.