The only question I have is whether they have the right to request KYC verification on people who never have, and never will consume their services? I assume there must be some law prohibiting that. It is something else if the OP is suspected of having multiple accounts, but I have not seen it mentioned anywhere.