Financial crime controls

KYC and AML policy

Identity verification and anti-money-laundering controls help protect accounts, meet legal obligations and identify activity that may require review. Requirements vary with region, risk and the service requested.

1. Purpose

Know-your-customer, anti-money-laundering and counter-terrorist-financing procedures establish who uses a service, whether activity is consistent with the known profile and when a concern must be escalated.

2. What KYC means

KYC is the collection and verification of identifying information. It links an account to a real person and checks whether submitted details are accurate, current and supported by reliable evidence.

3. What AML means

AML controls assess risk, monitor relevant transactions and identify patterns that may indicate concealment of criminal proceeds, sanctions evasion, fraud or misuse of another person's identity.

4. Why verification is required

Verification can deter impersonation, account takeover and prohibited use. It also helps payment providers and regulated entities comply with UK, Canadian and Australian obligations.

5. Documents and evidence

Depending on the check, users may provide a valid passport, driving licence or national identity document, plus a recent bank statement, utility bill or official correspondence showing address. A selfie or liveness check may be requested to compare the person with the identity document.

Only requested documents should be uploaded through the approved channel. Do not email a password, one-time code or full payment-card credentials.

6. Verification process

The usual sequence is registration, submission of personal details, document capture, automated validity checks and manual review where a match is uncertain. The result may be approval, a request for clarification, restriction or rejection.

7. Enhanced due diligence

Higher-risk circumstances can require source-of-funds or source-of-wealth evidence, occupation details, transaction purpose, corporate ownership information or additional independent documents. Enhanced review is not an accusation; it is a proportionate risk control.

8. Timing

Simple checks may complete quickly, while unclear images, inconsistent details, international records or enhanced review take longer. No fixed completion time can be promised because external data and user responses affect the process.

9. Refusal or suspension

A check may fail because a document is expired, unreadable, altered or inconsistent with submitted data. Failure to provide requested information, suspected forgery, sanctions concerns or inability to establish beneficial ownership may also result in restriction.

10. Transaction monitoring

Relevant activity may be assessed against known profile, geography, payment source, value, frequency and unusual patterns. A transaction can be delayed or a function restricted while information is reviewed.

11. User responsibility

Users must provide truthful, complete and current information, use accounts and payment methods they are authorised to control, and respond promptly to reasonable requests. False information can cause closure and reporting where required.

12. Storage and protection

Verification records are retained for legal, fraud-prevention and dispute purposes, with access limited by role. Technical and organisational safeguards are described further in the Privacy Policy and Security page.

13. Data recipients

Information may be shared with identity-verification vendors, hosting and security providers, affiliated operating entities, payment providers, authorised service providers, regulators, law enforcement or courts when applicable.

14. Regional compliance

Controls are adapted to applicable UK money-laundering and sanctions rules, Canadian FINTRAC-related obligations of relevant providers, and Australian AML/CTF requirements. The precise obligation depends on the responsible legal entity and service.

15. Contact

Questions about verification or financial-crime controls can be sent to [email protected]. Include the account reference and a concise question, but never include authentication secrets.