Customer Verification & Crypto Payment Information Policy (KYC, Fraud, Travel Rule)

Effective date: 2026-01-05
This policy explains when and why we may ask for identity or business information for (1) general account use and (2) crypto payments that we later convert using regulated exchanges.

We aim to keep checks as light as possible, while meeting legal and safety requirements.

1. General Account Verification (Risk-Based KYC)

What we do by default

To protect our platform and customers, we run automated and, when needed, manual checks to prevent fraud, abuse, and legal violations. These checks may include:

  • Account and billing consistency checks (name, address, country, company info)
  • Payment risk and chargeback signals
  • Abuse and security signals (e.g., bot activity, spam behavior, network abuse)
  • Sanctions and restricted-party screening (where legally required)

When we may request KYC / KYB

We may ask you to complete identity verification (KYC) or business verification (KYB) if it is reasonably necessary to reduce fraud and legal risk. Common triggers include:

  • Unusual or high-risk payment patterns (e.g., repeated failed payments, chargebacks)
  • High-volume or rapid scaling of services
  • Activity strongly associated with abuse (spam, phishing, malware, scanning, proxy misuse)
  • High-risk geographies or mismatch between account details and usage signals
  • Sanctions risk indicators or legal/regulatory concerns
  • Requests for services/features that are commonly abused

What we may request

Depending on the situation, we may ask for one or more of the following:

For individuals (KYC)

  • Full name, date of birth, address
  • Government-issued ID (and a selfie/liveness check, where appropriate)
  • Proof of address

For companies (KYB)

  • Legal entity name, registration number, registered address
  • Director/authorized signatory information
  • Beneficial owner information (where required)
  • Business website and brief description of intended use

What happens if verification is required but not provided

If we request verification and you do not provide it (or it fails), we may:

  • Place the account under review
  • Limit certain features (e.g., provisioning new resources)
  • Suspend or terminate service
  • Refuse or cancel orders

We may also require verification before processing refunds or account changes when fraud risk is high.

Our approach to fairness and privacy

  • We follow a data minimization approach: we request only what we need.
  • We use verification information only for fraud prevention, security, and compliance.
  • We retain data only as long as needed for these purposes and as required by law.

2. Crypto Payments and "Travel Rule" Information (Upstream Exchange Compliance)

Why we will ask for extra info for crypto payments

If you pay us directly in crypto (e.g., BTC via CryptoAstra) and we later convert those funds using a regulated exchange, that exchange may require additional information about the transaction to meet AML and "Travel Rule" obligations.

This requirement comes from the exchange's compliance duties. Even if we do not require full KYC for every customer, crypto deposits require extra details before we can convert or move funds through our exchange partners.

What information may be requested

For all crypto deposits, we may ask you to provide:

  • The sender/owner name (individual or company)
  • The sender's country of residence/incorporation
  • The origin wallet address (where technically feasible)
  • The purpose of the payment (e.g., invoice number, service description)
  • If a payment is made by a company: basic company identification details

We may also request documents if needed to satisfy an exchange compliance review.

When this may happen

We may request Travel Rule / exchange compliance information when, for example:

  • The exchange flags the transaction for additional review
  • The deposit amount or pattern is unusual
  • The deposit has elevated risk signals (e.g., exposure to sanctioned entities, mixers, or other high-risk sources)
  • We need to demonstrate a clear link between the deposit and an invoice/order

What happens if the info is not provided

If required information is not provided (or cannot be verified), we may:

  • Delay conversion/processing of the crypto funds
  • Restrict service related to the deposit
  • Return funds where feasible and permitted (net of network/processing costs), or
  • Refuse to accept future crypto payments from that source

Important notes

  • Exchanges may change their requirements over time.
  • We cannot guarantee that all deposits will be accepted or convertible.
  • We may apply additional checks to comply with sanctions and applicable law.

Contact

If you have questions about verification or a pending review, contact our support team with your account email and any relevant invoice/order IDs.