Quote from: M-BTC on Today at 01:37:06 PM

Quote from: kaefergeneral on Today at 01:10:17 PM

Quote from: M-BTC on Today at 09:41:52 AM

It is a valid excuse to hold the funds (according to AML/CFT policies). Chain analysis can't link deposits and withdrawals on exchanges without contacting the exchanges and having them provide the information. This is why similar actions (depositing and withdrawing without making trades) are flagged and will result in having to provide KYC information, as it is a money laundering indication. Exchanges have no other option than to follow the AML/CFT regimes.

Don't get me wrong, I'm not giving my personal opinion here but this is how these policies work. Regulations will only get worse from here. I wouldn't be surprised if they already reported OP's transaction(s) to local authorities (if they know what country he's from).

But that's my whole point here. I did provide them with my KYC information.
I also explained who I am and where the funds were coming from.

KuCoin has everything they need to verify the legitimacy of my claims and funds.
The data they are asking me to provide on the other hand contributes nothing to this.

Neither my phone number, my residential address, TAX number, Employer information nor annual income has anything to do with the funds they froze.
Giving them this information would not change, that they need to be contacted to get the information about where the funds went.
And if they should ever be contacted the KYC information they have is by far enough to verify my identity.
So all giving them this information does is opening myself up to a lot of possible attacks as I can not ensure they are kept safe.
Nor have I even been provided a way to submit this data securely if I wanted to.

I simply do not trust KuCoin to keep my data safe. Asking me to submit all this in plaintext in an email just proves my case.
If they clearly stated I would require to KYC before making transactions I would probably have done so.
But this is not a risk I am willing to take. And from the looks of it that is EXACTLY what they are banking on here.

All I'm asking of them at this point is to just refund my tokens to the wallet I sent them from.

Perhaps they are contacting your local authorities to report their 'suspicions' and holding your funds until they hear back from them. If the authorities are satisfied with the information you provided KuCoin can release your funds:

Quote

(c) KuCoin will, where possible, return any Funds stored in your KuCoin Account not otherwise owed to KuCoin and/or will use commercially reasonable efforts to provide you with a period of 90 days to transfer affected Digital Tokens from your KuCoin Account, unless prohibited by applicable laws or regulations or by order of law enforcement or governmental authority,

Their privacy policy is also very clear on why they can/will collect personal data:

Quote

(l)carrying out due diligence or other screening activities (including background checks) in accordance with legal or regulatory obligations (whether Seychelles or foreign country) applicable to us or our affiliates/associated companies, the requirements or guidelines of governmental authorities (whether Seychelles or foreign country) which we determine are applicable to us or our affiliates/associated companies, and/or our risk management procedures that may be required by law (whether Seychelles or foreign country) or that may have been put in place by us or our affiliates/associated companies;

(m)to prevent or investigate any fraud, unlawful activity or omission or misconduct, whether or not there is any suspicion of the aforementioned; dealing with conflict of interests; or dealing with and/or investigating complaints;

(n)complying with or as required by any applicable law, court order, order of a regulatory body, governmental or regulatory requirements, of any jurisdiction applicable to us or our affiliates/associated companies, including meeting the requirements to make disclosure under the requirements of any law binding on us or our affiliates/associated companies, and/or for the purposes of any guidelines issued by regulatory or other authorities (whether of Seychelles or elsewhere), with which we or our affiliates/associated companies are expected to comply;

(o)complying with or as required by any request or direction of any governmental authority (whether Seychelles or foreign country) which we are expected to comply with; or responding to requests for information from public agencies, ministries, statutory boards or other similar authorities (whether Seychelles or foreign country). For the avoidance of doubt, this means that we may/will disclose your personal data to such parties upon their request or direction;

Not sure where I read it but I think that, according to AMLD5, exchanges are no longer allowed to inform users in case of an investigation/inquiry.

Maybe I would not be as pissed and concerned about this if they hadn't blatantly told me they could not hold or freeze customer funds half a year ago when I got 'hacked' for a big amount of tokens that got laundered through KuCoin.
I honestly don't care if they reported me to authorities, and if local authorities ask this information from me I am happy to comply as nothing about the funds is in any way fraudulent.

But sending a shit ton of private information, unencrypted across the globe to be permanently stored by some shady company goes against about everything I believe in.
I simply don't see what applicable laws or regulations I should have violated. Even after asking multiple times, they did not provide me with a reason or regulation I may have violated, other than that they want me to submit this data.
As the whole process took place on a Friday evening an order by law enforcement or governmental authority is highly unlikely.

I do get, how creating a new account depositing funds and then trying to withdraw them again might trigger red flags. Thus why I was willing to comply with KYC.
But the privacy invasion beyond this is and in this form is simply out of place.