Table of contents
Proof of address (POA) is a document that ties a person to a residential address, typically a utility bill, bank statement, tax letter or tenancy agreement dated within the last three months. Regulated businesses collect it under customer due diligence rules to confirm where a customer lives, assess jurisdiction risk and detect synthetic identities that pass a document check but have no real footprint.
Documents usually accepted
- Utility bill: electricity, gas, water, landline or broadband (mobile bills are often excluded)
- Bank or credit-card statement
- Government or tax correspondence: council tax, tax assessment, benefits letter
- Tenancy agreement or mortgage statement
- Insurance policy document
Most policies require the document to be dated within 90 days, show the customer’s full name and address exactly as given, and be a complete page rather than a cropped screenshot. Requirements vary by country and by the firm’s risk appetite; the accepted list is set per verification flow. The country-by-country list is in the proof of address verification guide.
What must a proof of address document show?
A document is accepted on four attributes, and firms reject on any one of them.
- The full legal name, spelled as it appears on the identity document in the same session.
- The current residential address, matching the address entered in the application.
- An issue date inside the accepting firm’s validity window, usually three months.
- A recognisable issuer: a licensed bank, a utility company, a tax authority or another public body.
A name or address that does not match the rest of the application is the single most common reason an address check fails, ahead of forgery. It is also the cheapest to design out, by pre-filling the address from the document rather than asking the customer to type it twice.
What does not count as proof of address?
- Mobile phone bills. Some firms accept them; many refuse because a mobile account can be redirected without moving house.
- Screenshots of a banking app or a billing portal, rather than the issued PDF.
- Cropped, flattened or re-saved files, which lose the metadata a forgery check reads.
- Envelopes, address labels and postmarks.
- Handwritten letters or self-declarations of address.
- Documents in another person’s name, unless the firm has a stated policy for people living with family.
Which documents count in the US, UK and EU?
Acceptance is set by each firm inside its national AML framework, so the table below is the common baseline rather than a guarantee.
| Document | United States | United Kingdom | EU (typical) |
|---|---|---|---|
| Utility bill for electricity, gas, water or broadband | Accepted | Accepted, dated within 3 months | Accepted |
| Bank or credit card statement | Accepted | Accepted, dated within 3 months | Accepted |
| Tax or government correspondence | Accepted | Accepted | Accepted |
| Council tax or property tax bill | Accepted | Accepted, usually valid for the tax year | Accepted |
| Tenancy agreement or mortgage statement | Often accepted | Accepted | Varies by country |
| Driving licence showing the address | Frequently doubles as identity and address | Accepted by some firms, rarely as both documents at once | Varies; rarely accepted as both |
| National ID card showing the address | No national ID card exists | No national ID card exists | Accepted where the card carries an address |
| Residence registration certificate | Not applicable | Not applicable | Accepted, for example the German Meldebescheinigung or the Spanish empadronamiento |
| Benefits or pension letter | Accepted | Accepted | Accepted |
| Mobile phone bill | Frequently refused | Frequently refused | Frequently refused |
Two structural differences explain most of the variation. In the United States there is no statutory list at all: 31 CFR 1020.220 requires a bank to obtain a residential or business street address, not a post office box, with an Army or Fleet Post Office box or the address of a next of kin allowed for an individual who has neither. It then lets the bank verify that address by documentary or non-documentary means, which is why many US fintechs never ask for a bill and check a credit bureau or public record instead. In the United Kingdom and much of the EU documentary evidence remains the norm for higher-risk products, with firms working to the industry standard set by JMLSG guidance.
How long is a proof of address valid?
No statute sets an expiry date. Validity windows are policy, set by each firm under its risk-based programme, and they cluster tightly.
| Document type | Typical validity window |
|---|---|
| Utility bill, bank statement, broadband bill | 3 months from the issue date, occasionally 6 |
| Tax or government correspondence | 3 to 12 months, depending on the letter |
| Council tax bill, annual mortgage statement | Up to 12 months, because they are issued annually |
| Tenancy agreement | Must be current, covering today’s date |
| Residence registration certificate | 3 to 6 months, or as issued for the stated purpose |
The three-month convention exists because an address document is point-in-time evidence: the older the bill, the higher the chance the person has moved. When a document falls outside the window the fastest fix is almost always a fresh statement downloaded from online banking.
Are digital bills and e-statements accepted?
In most cases yes, and this has changed in the last few years as paper billing disappeared. What still gets a digital document refused is how it was produced rather than that it is digital: a screenshot instead of the issued PDF, a file that has been cropped or re-saved and lost its metadata, a print-at-home page with no issuer branding or account reference, or a photograph of a screen. Downloading the original PDF from the issuer solves all four.
What if you have no proof of address?
Being newly arrived, young, unbanked or living with family should not lock someone out of financial services, and several regulators expect firms to handle these cases rather than reject them. The routes, roughly in order of speed:
- Put one utility in your own name. Broadband and electricity accounts can usually be switched quickly, and the first bill is acceptable evidence.
- Create state-issued evidence. Registering to vote, updating an address with the tax authority or requesting a benefits letter all produce a document from a public body.
- Ask the bank for a statement or an address confirmation letter. App-only banks will normally issue one on request.
- If you live with family, ask before applying. Some firms accept a document in the householder’s name with a signed confirmation, or a joint account statement.
- Students can usually use an enrolment or accommodation letter from the university.
- In registration countries, register your residence first. In Germany, Austria or Spain the certificate is the proof of address, and it is issued in days.
- If you are repeatedly refused, ask whether the firm offers non-documentary verification against database or credit-file data, or a basic account with lighter requirements.
Why KYC needs it
An identity document proves who someone is; it does not prove where they live. Address matters for sanctions and tax rules that depend on residence, for detecting mule accounts opened with real documents at fake addresses, and for the customer-identification requirements in the US (CIP), the EU (AMLD) and Australia (AML/CTF Rules). Some regimes let firms verify address electronically instead of collecting a document at all.
How automated address verification works
- Document capture and classification: the system identifies the document type and issuer.
- Data extraction: name, address and date are read and compared with the details the customer entered and with the ID document.
- Tamper and template checks: fonts, layout, metadata and known-forgery templates are examined. Edited PDFs and AI-generated bills are the fastest-growing fraud vector here.
- Name matching: the name on the address document is matched to the verified identity, which is what makes a fraudulently obtained genuine ID harder to use. The document is real, but the address trail is not.
Zyphe’s proof of address verification runs these checks alongside document and liveness verification in the KYC software. The result is recorded as a verification outcome; the document itself is processed transiently and stored in the user’s encrypted vault, not in a central database, and can be reused through the KYC Passport without being collected again.
Written by Michelangelo Frigo (Co-Founder at Zyphe) Reviewed September 21, 2026 Michelangelo Frigo is a privacy and identity infrastructure expert and co-founder of Zyphe.