KYC-UX: ishqalanishni kamaytirish

1) KYC-UX prinsiplari

Risk-based by design: xavf qanchalik past bo’lsa, ishqalanish shunchalik kam bo’ladi; faqat signallar bo’yicha eskalatsiya.
Progressive disclosure: Hozir kerak boʻlgan narsani koʻrsatyapmiz (minimal maydon/ekranlar).
One-tap re-entry: kontekstni saqlash, tugallanmagan tekshirishlarni xulosa qilish.
Ko’p manbali signallar: hujjatlar + liveness + xulq-atvor/tarmoq belgilari.
Maqsadlarni ajratish: KYC (siz kimsiz) ≠ SoF/SoW (pul kelib chiqqan) ≠ AML/sanksiyalar (qoʻshimcha filtrlar).
Explainability: qisqa sabablar, foydalanuvchining tushunarli harakatlari, bashorat qilinadigan muddatlar.

2) Xavf-bazaviy darajalar (namunaviy matrisa)

3) KYC-flou (mobile-first)

1. Chegara triggeri (masalan, birinchi chiqish) → qisqa sabab va foyda bilan ekran: «Xulosalarni ochish va limitlarni oshirish uchun shaxsni tekshiramiz».
2. Hujjatni tanlash (pasport/ID/haydaydi) mamlakat uchun «nima yaxshidir» degan maslahat bilan.
3. Suratga olish: avto-krap, fonni bulg’ash, porlash/kontrastni yoritish, keskinlikni nazorat qilish.
4. OCR/MRZ/NFC: tezkor taraqqiyot, UI bloklamaymiz; NFC - animatsiyalangan «hujjatni telefonga olib boring».
5. Liveness: 3-4 oddiy harakat (boshni burish/miltillash) yoki passiv liveness 2-3 kadr.
6. Avto-validatsiya (fon) + ko’rinadigan SLA taymeri (masalan, «2 daqiqagacha»).
7. Natija: + ma’qullandi → limitlar/maqom; aynan bitta band va misollar bilan to’ldirish kerak; - rad etish → apellatsiya uchun aniq sabab va yo’l.

4) «Yumshoq» qadam-aplar (step-ups) va kontekst

Geo-conflict (IP ≠ KYC) → GPS/SIM yoki proof address (L2) soʻrovi.
High-risk BIN/emitent → depozitga urinishda majburiy yashash.

Velocity/multiakkaunting → qayta selfi + SoF

PER/sanksiyalar (fuzzy) → SoF/SoW va qo’lda tekshirish bilan L3.

5) Mikro-UX: ishqalanishni qanday kamaytirish kerak

«Nima tayyorlaysiz? ~ 2 daqiqa, pasport/ID va yaxshi yoritish».
Hujjatni olish: ramka-niqob, parlama detekti, yashil chek-markalar «fotosurat o’qish mumkin/burchak tekis».
Lokal OCR-preview: vizual tekshirish uchun sanoqli maydonlarni yoritish.
NFC-maslahatlar: ma’lum bir mamlakat/blank uchun chipning joylashuvi bo’yicha axborot.
Liveness-navigatsiya: matnsiz oddiy vazifalar - piktogrammalar + qisqa ibora.
Retry og’riqsiz: taraqqiyotni yo’qotmasdan qadamni takrorlash; taymer bilan urinishlar limiti.
Maxfiylik qorovuli: "Surat shifrlangan holda saqlanadi. EXIF/UI loglarida hech qanday maʼlumot yoʻq.

6) Mahalliylashtirish va foydalanish

Yo’riqnomalar, hujjatlar namunalari va yo’l qo’yiladigan formatlarni to’liq tarjima qilish.
RTL, katta shriftlar,’aria-labels’, klaviatura navigatsiyasini qo’llab-quvvatlash.
Mamlakat bo’yicha validatsiyalar (manzil formati, ID-niqob), telefonlar uchun - E.164.
Mahalliy tildagi misollar: «Misol: Pushkin ko’chasi, 10-uy, 5-uy».

7) Maxfiylik, saqlash va rozilik

Aniq kelishuvlar: maqsad (KYC/AML), saqlash muddati, olib tashlash/apellyatsiya huquqi.
Maʼlumotlarni minimallashtirish: tokenlarni/xeshlarni imkon qadar saqlash, PAN/EXIFni yashirish.
Olib tashlash/retenshn siyosati: L0-L1 qisqaroq, L2-L3 qonun/litsenziya bo’yicha uzoqroq.
Audit-trail: kim/qachon tomosha qildi/qaror qildi; o’zgarmas loglar.

8) Muhandislik: voqealar va ma’lumotlar modeli (minimal)

kyc. sessions (
kyc_id PK, user_id, level_target, started_at, status, provider, country, risk_score, conflict_flags, sla_eta_at
)
kyc. documents (
doc_id PK, kyc_id FK, type, side, ocr_json, mrz_ok, nfc_ok, quality_score, captured_at, storage_ref
)
kyc. liveness (
kyc_id FK, type, result, confidence, frames_ref, captured_at
)
kyc. sanctions_pep (
kyc_id FK, list, match_type, score, reviewed_by, reviewed_at, decision
)
kyc. proofs (
kyc_id FK, kind -- POA      SOF      SOW,
file_ref, parsed_json, status, requested_at, received_at, reviewer
)
kyc. decisions (
kyc_id FK, level_granted, result -- APPROVED    MORE_INFO    REJECTED,
reason_code, comment, decided_at
)

9) Psevdo-DSLdagi siyosat (misol)

yaml policy: "kyc_v2_risk_based"
triggers:
- name: "first_withdrawal"  -> target_level: L1
- name: "limit_5k_month"   -> target_level: L2
- name: "sanctions_fuzzyhit" -> target_level: L3 escalations:
- if: geo_conflict_score >= 2 then step: "POA"
- if: issuer_risk in ["high","unknown"] and method == "CARD" then step: "liveness"
- if: velocity_deposits_24h > 3 then step: "liveness"
timeouts:
L1: "PT10M" # waiting for auto-check
L2: "PT30M"
L3: "P3D"
ux:
show_timer: true resume_link: true

10) Metrika va dashbordlar

Konvertatsiya/tezlik

KYC Start → Auto-Pass → Manual Review → Approved

Median/95p va mamlakatlar bo’yicha time-to-KYC

Auto-pass% (OCR/MRZ/NFC/liveness) va qo’lda ishlatiladigan

Sifat/xavf

Mismatch rate (IP ≠ KYC/SIM) va eskalatsiyalar ulushi

False Reject% (apellyatsiya → revers)

Yechim uchun PEP/Sanctions hit rate va TAT

UX/Xatolar

Abandonment на шагах (Doc Capture, Liveness, Upload, Review)

Retry-rate va sabablari (blik/noaniqlik/NFC fail)

Mobile vs Desktop: muvaffaqiyat va vaqt deltasi

11) Alerta va ostonalar

Bosqichda abandonment spike (soatiga oʻsish> X bps)

OCR quality drop (quality_score p50

Mamlakat bo’yicha NFC fail surge/blanka

Auto-pass collapse: qulash> Y% d/d

Manual backlog: TAT> SLA (qizil zona)

Sanctions provider down: taymautlar, bekapga oʻtish

12) SQL namunalari

12. 1. KYC hunisi

sql
SELECT stage, COUNT() AS users
FROM (
SELECT user_id, 'start' AS stage FROM kyc. sessions WHERE started_at BETWEEN:from AND:to
UNION ALL
SELECT user_id, 'doc_captured' FROM kyc. documents WHERE captured_at BETWEEN:from AND:to
UNION ALL
SELECT user_id, 'liveness_done' FROM kyc. liveness WHERE captured_at BETWEEN:from AND:to
UNION ALL
SELECT user_id, 'approved' FROM kyc. decisions WHERE decided_at BETWEEN:from AND:to AND result='APPROVED'
) s
GROUP BY stage ORDER BY 1;

12. 2. Avto-verifikatsiyadan oldingi vaqt

sql
SELECT level_target,
PERCENTILE_CONT(0. 5) WITHIN GROUP (ORDER BY EXTRACT(EPOCH FROM (COALESCE(decided_at, now()) - started_at))) AS t_median_sec,
PERCENTILE_CONT(0. 95) WITHIN GROUP (ORDER BY EXTRACT(EPOCH FROM (COALESCE(decided_at, now()) - started_at))) AS t_p95_sec
FROM kyc. sessions
LEFT JOIN kyc. decisions USING (kyc_id)
WHERE started_at BETWEEN:from AND:to
GROUP BY 1;

12. 3. Kadrlar sifati va retrajlar sabablari

sql
SELECT reason_code, COUNT() AS cnt
FROM (
SELECT CASE
WHEN quality_score < 0. 6 THEN 'low_quality'
WHEN mrz_ok = FALSE THEN 'mrz_fail'
WHEN nfc_ok = FALSE THEN 'nfc_fail'
ELSE 'other'
END AS reason_code
FROM kyc. documents
WHERE captured_at BETWEEN:from AND:to
AND doc_id IN (SELECT doc_id FROM kyc. documents GROUP BY doc_id HAVING COUNT() > 1)
) t
GROUP BY 1 ORDER BY cnt DESC;

13) Frodga qarshi signallar («g’ildirakka tayoqlarsiz»)

Device-graph va takrorlanuvchi selfie/hujjatlar → L2/L3 jim eskalatsiyasi.
Geo-velocity (mamlakat o’zgarishi) → takroriy OCRsiz takroriy hayot.
BIN-geo mismatch → liveness depozitda, butun KYC-flouni buzish emas.
VPN/Proxy/Tor → banga qadar muqobil signalga (GPS/SIM) yumshoq so’rov.

14) Best practices (qisqacha)

1. Tadbir uchun dizayn: KYC aynan foydalanuvchi qiymat oladigan joyda (depozit/chiqarish/limit).
2. Avto-kapcher + live-maslahatlar; OCR/NFC va imkon qadar passiv hayot.
3. Step-up faqat signallar (geo/conflict/velocity/sanksiyalar) va summalar chegaralari bo’yicha.
4. Kuchli resume-tajriba: «Shu qadamdan davom ettirish», xatlar/SMSdagi chuqur havolalar.
5. Hamma joyda SLA taymerlari va halol maqomlar mavjud.
6. Lokalizatsiya/a11u: matnlar, namunalar, formatlar, RTL.
7. Maxfiylik: minimallashtirish, shifrlash, tushunarli kelishuvlar, retenshn siyosati.
8. Telemetriya va sifat bo’yicha alertlar (porlash/bulg’anish/NFC).
9. A/B testlari nusxa ko’chirish/yo’riqnomalar/rad etish bo’yicha guardrails bilan qadamlar tartibi.
10. Aniq TAT bilan apellatsiya va qo’lda tekshirish dok-tartib-taomillari.

15) Joriy etish chek-varaqasi

• L0-L3 darajalari matritsasi, triggerlar va qadam-aplar.
• OCR/NFC/liveness/backaplar bilan sanksiyalar provayderlari.
• Koʻrsatma + quality hints; avto-kapcher, ramka, blik-detekt.
• Passiv liveness default, aktiv - fallback kabi.
• Resume-mexanika, deep-links, eslatmalar.
• Mahalliylashtirish, RTL, a11u, mamlakat bo’yicha hujjatlar namunalari.
• Maxfiylik/rozilik, retenshn, audit-trail.
• Dashbordlar: qadamlar konvertatsiyasi, auto-pass, TAT, kadrlar sifati.
• Alertlar: abandonment/OCR/NFC/auto-pass/backlog.
• Apellyatsiya va qo’lda hal qilish tartib-taomillari, SLA.

Xulosa

Past ishqalanishga ega KYC-UX - bu xavf-bazaviy eskalatsiya, «aqlli» tutish texnologiyalari (OCR/NFC/liveness), mahalliylashtirilgan ko’rsatmalar va kuchli resume tajribasi. Shaffof muddatlarni, ma’lumotlarni minimallashtirishni va oldindan aytib bo’ladigan qadamlarni qo’shing - va siz bir vaqtning o’zida depozitlar/xulosalar konversiyasini oshirasiz, muvofiqlikni tezlashtirasiz va qo’lda tekshirish uchun operatsion xarajatlarni kamaytirasiz.