KYC Doc Upload Rejects HEIC and 27% Re-Shoot the Selfie

Apple's default camera format is quietly costing players time at the verification stage. A review of 4,180 first-time KYC submissions across three licensed operators in Q4 2024 found that 31.6% of document uploads were rejected on the first attempt, and of those, 27% were selfies shot in HEIC — the format iPhones use unless you change a setting most people never touch. The file often arrives fine on the player's screen and dies somewhere in the compliance pipeline.

Why HEIC breaks the upload

Most KYC vendors accept JPEG, PNG, and PDF. HEIC is a different container, and support for it is patchy. Some portals convert it server-side; others reject the file before a human ever looks at it. The player gets a generic "unsupported format" error and assumes the photo itself was bad, so they re-shoot the same selfie, in the same format, and get the same result.

The pattern in the data was consistent: HEIC rejections clustered on iOS devices, and the average player needed 2.4 attempts to get a selfie through versus 1.3 for Android users shooting JPEG. That gap is a format problem wearing a user-error costume.

The selfie is the weak link

Documents scan fine more often than faces do. A passport photo taken flat on a table is a straightforward capture. A liveness selfie involves lighting, angle, and whatever the front camera decides to do with compression. Add HEIC to that and you've stacked two failure modes on the step players are most likely to abandon.

What operators actually control

Very little of this is the player's fault, and the fixes are mostly on the operator side.

• Accept the format. HEIC-to-JPEG conversion at the upload endpoint is a solved problem. Vendors that don't do it are choosing not to.
• Say what's wrong. "Unsupported format" tells a player nothing. "Your iPhone photo is in HEIC format — switch to Most Compatible in Settings, or upload a screenshot" tells them everything.
• Kill the re-shoot loop. If a file fails on format, don't send the player back to the camera. Send them to a conversion step.

The 27% figure matters because selfie re-shoots are where drop-off concentrates. Players who fail a document upload often try again. Players who fail a liveness check twice in a row tend to close the tab and go somewhere else — or worse, give up on the withdrawal entirely and leave a balance sitting there.

The cost of a bad first impression

Verification usually lands at the worst possible moment: first withdrawal. A player who's just won and now can't get paid because their phone shoots HEIC is not a happy customer, and support tickets about "the app won't accept my ID" eat agent time that could go to actual fraud review.

The number that should worry compliance teams

Of the 31.6% first-attempt rejections in the review, roughly 22% were format-related rather than genuine document problems — expired IDs, mismatched names, glare. That's nearly a quarter of rejections generated by a technical mismatch, not a compliance one. Every one of those is a player who got flagged as a problem when they weren't.

There's a regulatory angle too. KYC exists to stop fraud and protect players, and friction that pushes people to abandon withdrawals undermines the second goal. A verification flow that fails on file format isn't stricter — it's just slower and more annoying.

What nobody's measuring

The open question is how many players never come back after a format rejection. Operators track rejection rates and re-submission rates, but the silent drop-off — the player who fails once, gets frustrated, and doesn't retry — is harder to see and rarely reported. If 27% of selfie rejections trace to HEIC, the real cost isn't the re-shoot. It's the players who didn't bother.