AML / KYC policy
Identity checks are the part of onboarding everyone tolerates and few enjoy. They exist so that the platform stays closed to money laundering, fraud and other financial crime, which protects legitimate users most of all. This page explains our KYC and AML procedures in full, in the order you will meet them.
1. Introduction
Know Your Customer (KYC) and Anti-Money Laundering (AML) procedures, together with counter-terrorist financing measures, form the compliance backbone of the service. Their purpose is verification: that you are who you say you are, that your funds come from a legitimate source, and that the platform is not being used to move the proceeds of crime. The checks run at onboarding and continue quietly in the background for the life of the account.
2. What KYC is
KYC is the identification of a client and confirmation that the data provided is genuine and current. In practice this means collecting your legal name, date of birth and address, then matching them against an official document. It is a one-time process for most users, refreshed only when documents expire or details change. KYC is not a judgement about you; it is the platform proving, to itself and to regulators, that every account belongs to a real, identifiable person.
3. What AML is
AML covers the ongoing work of preventing money laundering: assessing the risk a relationship carries, monitoring activity against that assessment, and investigating patterns that look inconsistent with what is known about the client. When activity raises a genuine concern, the law may require a report to the competent authority, and such reporting obligations can legally prevent us from discussing them. This is rare, but you should know it can happen.
4. Why identity verification is required
Verification prevents fraudsters from opening accounts in other people's names, blocks stolen payment credentials from being laundered through trading activity, and keeps the platform compliant with the requirements applicable in each of our six markets. It also protects you directly: an account that is hard to open with false papers is equally hard for a criminal to take over. Finally, verified identity is what makes withdrawals safe, because it ties payout destinations to a person we have actually confirmed exists.
5. Documents we ask for
Identity: a government-issued photo document, such as a passport or national identity card, valid and undamaged. Address: a utility bill, bank statement or official registration issued within the last three months showing your name and residential address. Depending on the outcome of the automatic checks, we may additionally ask for a short selfie video or a liveness capture, a frame of you holding nothing but your own face, to confirm the document belongs to a living person. We only request documents we actually use; no utility bill means no utility bill.
6. The verification process, step by step
First, registration: you create the account with basic details. Second, submission: you upload the documents described above through the encrypted verification screen, never by email. Third, automatic checking: document authenticity, data consistency and database matches are validated within minutes in most cases. Fourth, manual review: a trained reviewer looks at anything the automation flags, which is common and not an accusation. Fifth, the result: you receive written confirmation, and any failed check comes with the specific reason and the option to correct it.
7. Enhanced due diligence
Some situations call for a deeper look: clients in higher-risk jurisdictions, politically exposed persons and their close associates, unusually large initial deposits relative to the declared profile, or corporate structures with opaque ownership. Enhanced due diligence means additional documentation, questions about the source of funds, and senior-level approval before the relationship continues. It is applied by risk category, not nationality or profession alone, and it is an explanation exercise rather than an interrogation.
8. How long verification takes
Standard checks complete within minutes to a few hours during working hours, because document validation is largely automatic. Manual review cases are normally resolved within one business day. The timeline stretches when documents are hard to read, details conflict between documents, or enhanced due diligence applies, and every such case receives a named contact and a realistic estimate. You can follow the status in your dashboard at any moment rather than waiting for an email to find out where things stand.
9. Why verification can be declined
A check can be refused or paused for: expired, damaged or unreadable documents; names that differ between documents without evidence such as a marriage certificate; suspected forgery, which is reported to the authorities where required; unwillingness to provide requested information; sanctions or adverse-media matches; and source-of-funds answers that do not fit the observed activity. A refusal always states its reason in general terms and, wherever the cause is curable, exactly what would allow a fresh attempt.
10. Transaction monitoring
Deposits, withdrawals and trading patterns are monitored against your verified profile. Rapid pass-through of funds, activity inconsistent with the declared purpose, or connections to flagged addresses can trigger a review, during which certain functions such as withdrawals may be limited until the picture is clear. Monitoring is proportionate and documented; it aims to catch the exceptional case, not to slow down the ordinary one, and cleared reviews leave no restrictions behind.
11. Your responsibilities as a user
You are obliged to provide accurate, current and genuine information, to update it when it changes, and to use only accounts, cards and wallets in your own name for deposits. Providing false information can lead to suspension, termination of the relationship and, where the law requires, reporting to the authorities. You should never share your credentials with anyone, including people presenting themselves as staff, and you should tell us promptly if you suspect your identity has been misused.
12. Storage and protection of KYC data
Verification data is stored in encrypted form, access to it is role-restricted and logged, and retention follows the periods required by the applicable anti-money-laundering rules, which typically outlast the commercial relationship precisely so that records survive for investigators. Documents gathered for KYC are never used for marketing. The full detail of how all personal data is handled is in the Privacy Policy, which this section deliberately summarises rather than replaces.
13. Who receives your data
To run verification and monitoring we share the necessary data with: identity verification providers that check documents and liveness; IT providers hosting the encrypted storage; affiliated companies within the group where a service is delivered jointly; payment institutions involved in your deposits and withdrawals; and regulators or other competent authorities where the law compels disclosure. Every recipient gets only the fields it needs for its function, under contractual confidentiality.
14. Compliance with applicable requirements
The programme is aligned with the anti-money-laundering and counter-terrorist-financing requirements applicable in the markets we serve, including the frameworks overseen by FMA in Austria, ASIC in Australia, CIRO in Canada, FINMA in Switzerland, AMF in France and CONSOB in Italy. Where a service is delivered with a licensed partner, the partner's obligations apply to that service alongside ours. Compliance is maintained by a designated officer, reviewed annually and adjusted as the applicable rules change.
15. Contact for KYC and AML questions
Questions about verification status, document requirements or this policy are answered by the compliance team at [email protected]. Include your registered email and, for status questions, the date you submitted your documents. If you believe a check has gone wrong, the same address starts the review; formal complaints follow the route described on the Complaints page.