KYCLESS team · Published 2026-11-12 · Updated 2026-11-12
Check the address before opening an account
Start with a recorded service address, then compare it with the operator’s own published contact and documentation pages. Watch for different spellings, unexpected subdomains and substituted support accounts.
A listed Tor or I2P address identifies a recorded alternative endpoint. Its presence alone does not prove that the operator is trustworthy.
Check the key and the complete message
When a service supplies a PGP key, compare its full fingerprint using independently obtained operator information. A verification result only establishes that the message matches a signature from that key.
On a KYCLESS card with a PGP key, open Verify a signed letter and paste the complete signed message. Check the message’s recipient, amounts, addresses, deadline and order details rather than relying on the valid-signature label alone.
Understand what verification cannot establish
A valid signature does not prove payment, delivery, solvency or the truth of every statement in the message. A compromised or incorrectly attributed key can still sign a message.
Never submit a seed phrase or private key for verification. KYCLESS’s signature tools work with public keys and signed messages. Use the report or correction controls when recorded information conflicts.
Sources and related reading
KYCLESS methodology · Compare exchange offers · All guides
Found an error? Contact the KYCLESS team with the page and relevant public source. Never send account keys or identity documents.