Controls without
overpromising.

Accounts must complete the required verification steps before money movement. Requirements can vary by user type, jurisdiction, risk profile, and requested limits.

• Identity document and profile review based on the required onboarding tier
• Liveness check for individual accounts
• Source-of-funds information may be requested for higher-risk or higher-tier activity
• Identity is re-verified on material account changes
• KYC is processed through integrated verification provider workflows

Provider details, verification technology, risk scoring, and tier thresholds are operational details and are not disclosed publicly for security reasons.

Transactions are screened using AML rules that can route higher-risk activity to manual review or document collection before settlement is attempted.

• Risk rules applied to transfers, wallets, beneficiaries, and account activity
• Velocity checks on account-level and beneficiary-level patterns
• High-value and structuring pattern detection
• Manual escalation with structured document collection when required
• Audit trail recorded for AML-related decisions

Beneficiaries and transfers are screened against applicable sanctions and risk sources before they can be used.

• Screening uses applicable sanctions and PEP sources configured for the relevant jurisdiction
• Screening may run at beneficiary creation and again before transfer execution
• Blocked beneficiaries cannot be used until a formal review is completed
• Transfers blocked by screening rules cannot proceed without resolution

List sources, screening providers, match logic, and thresholds are operational details and subject to legal and compliance governance.

Privacy controls are governed by the published Privacy Policy and user consent settings. Users can manage consent and exercise privacy rights through account tools.

• Consent management for marketing and optional processing
• Right to data export — full account data available on request
• Right to erasure — subject to legal retention obligations
• Retention periods defined and published in the Privacy Policy
• Cross-border processing safeguards are described in the published Privacy Policy

Accounts are protected by authentication controls, session visibility, device tracking, and security-event monitoring.

• Two-factor authentication and step-up checks for sensitive actions
• OTP step-up for sensitive beneficiary, withdrawal, and transfer actions
• Active session visibility and remote session termination
• Device trust tracking and binding
• Account freeze capability — user-initiated and compliance-initiated
• Login event log visible to account holder

Important user, system, transfer, support, and compliance events are logged for auditability and retained according to record-keeping obligations.

• Relevant events timestamped when they are recorded
• Audit records include user actions, system decisions, and compliance events
• Structured records support compliance review and legal discovery when required
• Transfer receipts auto-generated as PDF on settlement
• Audit access restricted to account owner views and authorised personnel