KYC, geo-blocking & regulation: what a DEX can and can't do

"Decentralized" is often read as "nobody can stop you." The reality is layered. Some parts of a DEX really are permissionless; others are run by a company with lawyers, a domain name and a jurisdiction. Knowing which is which explains why a venue blocks your country, what that block means, and where the law stops looking at the venue and starts looking at you.

Three layers: contract, front-end, you

• The smart contracts run on a public blockchain. They accept any valid transaction from any address and cannot check who is behind it. This is the permissionless layer.
• The front-end — the website at the venue's domain — is ordinary software hosted by a team or a foundation. It can read your location, refuse to load, hide products, or require identity checks. This is the layer that regulators can reach, because there is someone to send a letter to.
• You are a person in a country with its own laws on trading, derivatives, tax and sanctions. Nothing about the first two layers changes that.

Why front-ends block certain countries

Geo-blocking means the website checks your IP address or region and refuses to serve some or all of its features. Venues do this for their own legal protection, not yours. The usual reasons:

• Derivatives rules. Leveraged perpetuals are regulated as derivatives in many countries, and offering them to retail users without a licence can be an offence. This is why many perp-DEX front-ends restrict users from the United States and several other jurisdictions.
• Sanctions. Teams block countries and specific addresses that appear on sanctions lists, because facilitating transactions for them is a serious offence in most places the team could be prosecuted.
• Licensing frameworks. Regimes like the EU's MiCA regulate crypto service providers. How far they reach a protocol with no operator is still being worked out, so teams draw conservative lines.

The contracts behind a blocked front-end typically remain reachable, which is where the next question comes from.

What "permissionless" really means

The word describes the contract layer: no gatekeeper decides whether your transaction is processed. It does not mean a venue has agreed to serve you, and it does not mean your local law has. Two practical consequences:

• Alternative front-ends, self-hosted interfaces or direct contract calls can exist for a protocol, which is genuine censorship resistance. Using them also means giving up the checks and safeguards the official interface provides, and puts more of the risk on you.
• Circumventing a geo-block — most commonly with a VPN — usually breaches the venue's terms of service and may breach your own country's law. It can also give the venue grounds to freeze a points balance, deny an airdrop or refuse support. This site does not recommend it. If a venue blocks your region, the honest reading is that you and that venue are not a match right now.

KYC: why a DEX usually has none, and where it appears

KYC — know your customer — is the identity check a bank or centralized exchange must perform. A pure DEX has no account to attach an identity to, so it has none (Lesson 2). But identity checks are not absent from the wider journey:

• On- and off-ramps that convert cash to crypto almost always require KYC (Lesson 9).
• Hybrid venues that hold an order book or matching engine off-chain, or that seek licences in specific markets, may require verification for some users or products.

A venue asking for KYC is not automatically a red flag — it may simply be operating inside a regulatory framework. A venue asking for your seed phrase under the label "verification" is a scam, always (Lesson 33).

Where your responsibility begins

The absence of a gatekeeper does not transfer responsibility to the protocol. It leaves it with you:

• Legality. Whether you may trade a given product — leveraged perps especially — is a question about your country's law, not the venue's terms.
• Tax. No form will arrive. Every swap may count (Lesson 45).
• Terms of service. Front-ends have them. Read the eligibility section; it takes two minutes.
• No consumer protection. There is no deposit insurance, no ombudsman and no chargeback. If the venue fails or is exploited, the recourse is whatever the contracts allow (Lesson 32).

What to check before you trade

• Does the front-end load and offer the product in your region without workarounds?
• Do the terms of service list your country as eligible?
• Is the product legal for a retail user where you live? If you do not know, that is the answer for now.
• Where does the venue sit on the spectrum — fully on-chain, hybrid, or licensed? Read its profile on the ranking and, above all, the venue's own documentation.

None of this is legal advice; rules differ by country and change often. The principle does not: a DEX can decline to serve you and can leave you alone, but it cannot take on your obligations. Those were always yours.

Written and reviewed by the dexwatch editorial team. Last updated 2026-09-22. Educational content, not financial advice. Spotted an error? Tell us.