Table of contents
Proof of address (POA) is a document that ties a person to a residential address, typically a utility bill, bank statement, tax letter or tenancy agreement dated within the last three months. Regulated businesses collect it under customer due diligence rules to confirm where a customer lives, assess jurisdiction risk and detect synthetic identities that pass a document check but have no real footprint.
Documents usually accepted
- Utility bill: electricity, gas, water, landline or broadband (mobile bills are often excluded)
- Bank or credit-card statement
- Government or tax correspondence: council tax, tax assessment, benefits letter
- Tenancy agreement or mortgage statement
- Insurance policy document
Most policies require the document to be dated within 90 days, show the customer’s full name and address exactly as given, and be a complete page rather than a cropped screenshot. Requirements vary by country and by the firm’s risk appetite; the accepted list is set per verification flow. The country-by-country list is in the proof of address verification guide.
Why KYC needs it
An identity document proves who someone is; it does not prove where they live. Address matters for sanctions and tax rules that depend on residence, for detecting mule accounts opened with real documents at fake addresses, and for the customer-identification requirements in the US (CIP), the EU (AMLD) and Australia (AML/CTF Rules). Some regimes let firms verify address electronically instead of collecting a document at all.
How automated address verification works
- Document capture and classification: the system identifies the document type and issuer.
- Data extraction: name, address and date are read and compared with the details the customer entered and with the ID document.
- Tamper and template checks: fonts, layout, metadata and known-forgery templates are examined. Edited PDFs and AI-generated bills are the fastest-growing fraud vector here.
- Name matching: the name on the address document is matched to the verified identity, which is what makes a fraudulently obtained genuine ID harder to use. The document is real, but the address trail is not.
Zyphe’s proof of address verification runs these checks alongside document and liveness verification in the KYC software. The result is recorded as a verification outcome; the document itself is processed transiently and stored in the user’s encrypted vault, not in a central database, and can be reused through the KYC Passport without being collected again.
Written by Michelangelo Frigo (Co-Founder at Zyphe) Reviewed September 18, 2026 Michelangelo Frigo is a privacy and identity infrastructure expert and co-founder of Zyphe.