AML / KYC Policy
Last updated: January 1, 2025
1. Introduction
CryptoSwapPro operates under international AML/CTF standards, including FATF's 40 Recommendations for virtual asset service providers (VASPs). This page describes what we check, what we block, and when we ask for identification.
We apply these rules because we have to by law and because we don't want our platform used for financial crime. The policy is enforced by automated screening on every transaction, not just spot checks.
2. Know Your Customer (KYC) Procedures
2.1 No-KYC Tier (up to $10,000/day)
For exchange transactions up to the equivalent of $10,000 USD per day, we do not require identity verification. Users only need to provide a valid destination wallet address.
2.2 Standard KYC (above $10,000 up to $100,000)
Transactions exceeding $10,000 USD per day require basic identity verification:
- Government-issued photo ID (passport, national ID card, or driver's license)
- Proof of address (utility bill or bank statement, no older than 3 months)
- Selfie with ID and handwritten date
2.3 Enhanced Due Diligence (above $100,000)
For transactions exceeding $100,000 USD, we apply Enhanced Due Diligence (EDD) procedures in accordance with FATF Recommendation 10:
- All Standard KYC documents
- Source of funds declaration
- Source of wealth documentation
- Business registration (if applicable)
- Enhanced ongoing monitoring
3. Prohibited Activities
We do not facilitate transactions associated with:
- Money laundering or proceeds of crime
- Terrorism financing or sanctions evasion
- Drug trafficking, human trafficking or arms smuggling
- Tax evasion or fraud
- Activities prohibited by applicable law
- Entities or individuals on OFAC, EU, UN or other applicable sanctions lists
4. Transaction Monitoring
We employ automated and manual transaction monitoring to detect suspicious patterns. Our monitoring system is powered by blockchain analytics technology (including tools similar to Chainalysis and/or Elliptic) to analyze:
- Source and destination of funds on-chain
- Risk scoring of wallet addresses
- Connection to known illicit entities
- Unusual transaction volumes or patterns
- High-risk jurisdictions
Any wallet address associated with a risk score exceeding our threshold will be flagged for manual review. Transactions may be delayed or rejected pending investigation.
5. Suspicious Activity Reporting
When we identify suspicious activity, we are required to file a Suspicious Activity Report (SAR) with the appropriate financial intelligence unit. We will cooperate fully with law enforcement authorities and provide all requested records, to the extent permitted by law.
6. Sanctions Compliance
We screen all users and transactions against international sanctions lists including:
- OFAC (Office of Foreign Assets Control) SDN List
- EU Consolidated Sanctions List
- UN Security Council Consolidated List
- HM Treasury Financial Sanctions
We do not provide services to individuals or entities located in, or operating from, sanctioned jurisdictions including but not limited to: North Korea, Iran, Cuba, Syria, and certain regions of Ukraine.
7. Fund Freezing Procedures
In cases where we identify funds that are potentially linked to criminal activity or sanctions violations, we reserve the right to:
- Temporarily freeze the funds pending investigation
- Request additional documentation from the user
- Report the activity to relevant authorities
- Permanently block the user from our platform
8. Record Keeping
In accordance with FATF Recommendation 11, we retain the following records for a minimum of 5 years:
- Transaction records including amounts, dates, and wallet addresses
- Customer due diligence documentation
- Suspicious activity reports (where filed)
- Risk assessments and monitoring results
9. Compliance Officer
We have designated a Compliance Officer responsible for overseeing this AML/KYC program, ensuring it is kept up to date with regulatory developments, and training relevant staff on AML obligations.
10. Politically Exposed Persons (PEPs)
We apply enhanced due diligence to customers identified as Politically Exposed Persons (PEPs) or their close associates, in accordance with FATF Recommendation 12. PEPs are subject to senior management approval for establishing or continuing business relationships.
11. High-Risk Jurisdictions
Customers from jurisdictions identified by FATF as having strategic AML/CFT deficiencies are subject to enhanced scrutiny. We maintain an up-to-date list of high-risk countries and apply proportionate counter-measures.
12. Training and Awareness
All relevant personnel receive regular training on AML/CTF obligations, including how to identify suspicious activity, the correct escalation procedures, and the legal consequences of non-compliance.
13. Policy Updates
This policy is reviewed at least annually and updated as necessary to reflect changes in applicable law, FATF guidance, or our business operations. Material changes will be communicated via our website.
14. Contact
For AML/KYC inquiries or to submit documentation, please contact our Compliance Team:
📧 [email protected]
For general support: [email protected]
AML compliance and no-KYC: how they coexist
A common misconception is that "no KYC" means "no compliance." This is incorrect. Anti-Money Laundering compliance and identity verification are two separate things, and confusing them leads to poor security decisions from both sides of an exchange.
AML compliance means screening every transaction for connections to criminal activity — dark web markets, ransomware wallets, sanctioned entities, mixer outputs. This can be done entirely via blockchain analytics without knowing the name of the person initiating the transaction. The blockchain is public: every address has a history, and that history is analyzable.
KYC (Know Your Customer) is a separate layer required only when transaction volumes reach thresholds defined by financial regulations — in most jurisdictions, $10,000 per day is the standard threshold. Below that threshold, the legal requirement is risk-based screening of the transaction, not of the person. CryptoSwapPro does the former on 100% of transactions and the latter only when legally required.