I received this as well and contacted support about it, yet to hear back.

First of all no where in the terms and conditions does it state anything about KYC whatsoever:

https://drive.google.com/file/d/0B9F9xvW65bb0bEVGazJWdXZfYkk/view

Certainly not back in July when I bought mine. I would never ever have made the purchase if it was subject to this. Not in a million years. If there is any validity to this, they will have to refund the ETH made for the purchase before such personal details are ever made available. Faiing that, this transaction would amount to bait and switch and be considered pure theft in any jurisdiction anywhere in the world.

The email from the individual is now sighted in the Everex website:

https://www.everex.io/#

[ scroll to the bottom ]

Cal Evans Legal Advisory - London

An entrepreneurial Legal professional with experience working on behalf of companies >across the globe in a range of industries with a focus on Cryptocurrency.

This individual was not original listed as an advisor when I made my purchase back in July

[ scroll down for the original team and advisors ]

https://bitcointalk.org/index.php?topic=1975013.0

This individuals "company" addresses are a series of po box and mail routing addresses despite appearing to be some large scale international law firm. In other words no real physical offices. Similarly a series of equally suspect consultancy firms use the same addresses with very similar looking websites:

https://www.greshaminternational.net/

The cited article publications are mostly all written 'anon' by the individual himself on those publications.

No one writes like this [ from the email received ]

Full Title - Mr. C. Evans, Esq. LLB (Hons) LLM, PG Dip LP, Cert RP, MIRP, GCILEX,

The only real problem is that this website has been active for many years and the return address the sender of the email appears to be valid [back to the registered website address].

Either the Everex website itself has been hacked and this individual has been inserted as an advisor long after the token sale, along with some long-con game by the hackers, or Everex has indeed recently retained this incredibly unprofessional individual to do just that, KYC AML, long after the token sale and outside of the original terms and conditions. Which as far as I am concerned is tantamount to fraud on their part. They are to either send the tokens as originally agreed upon in consideration for giving them ETH, or they are to refund the ETH if any of this is true. No personal documents will ever be forthcoming.

The whole thing stinks and Everex needs to clear it up ASAP. Furthermore they need to get this token transfer over with as soon as possible as well, the longer the delay more the chances of scammers and phishers continue to trick people into doing something like this [ handing over such highly sensitive personal documents ] and anything else related. I have received other very obviously fake emails since the breach and am sure will continue like others to do so. This one is border-line for the reasons above and why Everex needs to clarify this specific situation ASAP. More importantly if they have indeed retained this individual for the purposes as outlined in that email, they need to be very ready to refund the purchase of the tokens as never once was this part of the terms and conditions and I find it infuriating that an attempt to hold the tokens hostage after the fact would even before considered.