It depends on country to country. The cheapest option is probably sending out OTPs in text messages to their phone and validating that. Verifying someone's phone number is also a form of KYC though a very low grade one.