AML/KYC/CTF Compliance Policy
1. Mission and Regulatory Standards
ExchEngine service powered by Universal Valuables Inc., Panama, (the "Service") operates as a specialized non-custodial gateway for exchanges between fiat currencies (Wire/SEPA/SWIFT) and stablecoins (USDT/USDC). Our operations are governed by international standards, including the FATF Recommendations, the EU 5AMLD / 6AMLD directives, and the guidelines provided by the OFAC (U.S. Treasury).
2. The "Self-to-Self" (S2S) Mandate
The Service is built on the principle of individual financial autonomy.
- Exclusivity of Ownership: We facilitate transactions exclusively between accounts and digital wallets belonging to the same verified User.
- Zero Third-Party Tolerance: Any attempt to process funds from an account not owned by the User, or to direct an exchange to a third party, is strictly prohibited.
2.1. Transaction Traceability and Anti-Layering
The Service recognizes that a primary characteristic of Money Laundering (ML) is the intentional obscuring of financial flows (the "layering" stage). To counter this risk, our infrastructure ensures unbroken end-to-end traceability:
- 1-to-1 Mapping: Every exchange event is strictly mapped as a singular flow between one verified source and one verified destination.
- Audit Trail Integrity: The Service maintains a meticulous, permanent record of every transaction, ensuring a direct link between the sender’s account, the exact amount, and the recipient’s wallet.
- Documentary Alignment: This link is explicitly reflected in all internal records and the "Payment Purpose" (Reference) metadata associated with the fiat transfer.
- Anti-Mixing: Because the Service does not offer custodial storage, the "layering" stage of money laundering is technically impossible within our operational framework.
3. Eligibility and Prohibited Business Activity
The Service applies a strict filter based on the economic origin and legal status of the activity.
3.1. Prohibited Corporate Entities
The Service does not provide services to legal entities incorporated, headquartered, or maintaining significant operations within comprehensively sanctioned jurisdictions (including, but not limited to, Russia, Belarus, Iran, North Korea, Syria, Cuba).
3.2. Prohibition of Domestic Economic Activity
The Service strictly prohibits transactions derived from business activity within restricted territories. This includes revenue generated from contracts with sanctioned states or capital flows intended for operational expenses within restricted territories.
4. Individual Users and Source of Funds
Our compliance focus is on the legitimacy and location of the User's economic life.
- Verified Source of Funds (SoF): All Users must demonstrate that the capital involved originates from legitimate, non-sanctioned financial systems.
- Offshore Economic Origin: For citizens of high-risk jurisdictions, the Service requires evidence that their income and wealth are generated through professional or investment activities external to the sanctioned financial infrastructure.
5. Geolocation and Anonymization Technology
We acknowledge that Users may utilize VPNs or encrypted protocols for legitimate privacy or stable connectivity. However, VPN usage must not be used to facilitate transactions that violate the prohibition of domestic business activity outlined in Section 3.
6. Transaction Monitoring and "Hold" Protocols
In accordance with international protocols, the Service does not perform immediate returns of flagged funds.
- Administrative Hold: Payments flagged for links to prohibited business activity will be placed on "Hold" for internal audit.
- Non-Disclosure: We are legally prohibited from informing the User if a Suspicious Activity Report (SAR) has been filed (Anti-Tipping Off).
- Regulatory Clearance: Funds held due to sanction risks will remain held until the Service receives explicit clearance from the competent Financial Intelligence Unit (FIU).
7. Data Privacy and Retention
Records are retained for a minimum of five (5) years in strict compliance with the General Data Protection Regulation (GDPR).
8. User Declaration
By using this Service, the User warrants that: (1) They are the sole legal owner of the funds; (2) Funds are not derived from business activity within sanctioned jurisdictions; (3) Their use of the Service complies with the laws of their actual place of economic residence.
Comments
Post a Comment