KYC usually means uploading an ID document and a selfie, and sometimes proof of address. It is required by anti-money-laundering rules in most countries.
Never send ID documents to someone who contacts you first, and only do KYC on the exchange's real website or app — fake "verification" pages are a common phishing trick.