AML & KYC Policy

Last updated: 16 July 2026 · Brand: Xntara · Public legal notice

1. Our commitment

We will not knowingly facilitate money laundering, terrorist financing, fraud, sanctions evasion, or other financial crime. Controls apply at onboarding and throughout the client relationship, proportional to risk.

2. Customer due diligence (KYC)

Before activating trading or at defined trigger events, we identify and verify clients and, where relevant, beneficial owners and controllers of non-individual applicants. We assess purpose of the account, expected activity, and risk profile.

We may use electronic verification, document checks, video or liveness verification, and reputable third-party KYC providers. Additional steps apply for higher-risk profiles.

3. Documents and information we may request

• Government-issued photo identification (passport, national ID, or equivalent)
• Proof of residential address (recent utility bill, bank statement, or official register extract)
• Tax residency information and identifiers where required
• Selfie or liveness capture matching your ID
• Corporate documents for entities (incorporation, ownership structure, authorised signatories)
• Any other information reasonably required to complete due diligence

Documents must be valid, legible, and consistent. We may reject altered, expired, or third-party documents.

4. Source of funds and source of wealth

We may ask how you fund the account and, for higher risk or larger amounts, how your overall wealth was generated (employment, business, investments, inheritance, etc.). Supporting evidence can include payslips, bank statements, sale contracts, or company financials. Incomplete answers can delay deposits or trading.

5. Enhanced due diligence (EDD)

EDD may apply to politically exposed persons (PEPs), clients from higher-risk countries, complex ownership structures, unusual activity, or other elevated risk factors. EDD can include senior management approval, additional documentation, and closer monitoring.

6. Sanctions, watchlists, and PEPs

We screen clients and relevant parties against sanctions lists and other watchlists at onboarding and on an ongoing basis. We do not provide services where prohibited by applicable sanctions. Matches may result in application rejection, freezing of activity, or reporting as required by law.

7. Ongoing monitoring

Account activity (deposits, withdrawals, trading patterns) may be monitored using rules, analytics, and manual review. We may request updated KYC information periodically or when your circumstances change (new address, nationality, employment, or payment methods).

8. Suspicious activity reporting

Where required, we file reports with financial intelligence units or other authorities. Law may prohibit us from “tipping off” a client that a report has been made. We may pause activity while reviewing alerts.

9. Refusal, restriction, and exit

We may decline an application, restrict products, freeze or return funds, or close an account where:

• We cannot complete KYC to our satisfaction
• Information appears false, inconsistent, or incomplete
• Activity is outside our risk appetite or appears unlawful
• Sanctions or legal prohibitions apply
• You fail to provide information within requested timeframes

We are not obliged to provide detailed reasons where disclosure would breach law or compromise controls.

10. Record keeping

Identification data, transaction records, and related files are retained for the periods required by AML and commercial law (often a minimum of five years after the relationship ends, or longer if required). See also our Privacy Policy.

11. Your responsibilities

You must provide accurate, complete, and up-to-date information; update us promptly on material changes; use only payment methods in your own name; and not allow third parties to trade or fund your account unless expressly approved. Providing false information may lead to account closure and legal consequences.

12. Privacy

KYC data is sensitive personal data processed for legal compliance and fraud prevention. Processing is described in the Privacy Policy.