AML / KYC Policy

1. Our commitment

Obsidiate maintains a risk-based program to prevent money laundering, terrorist financing and sanctions evasion, aligned with EU anti-money-laundering directives and FATF recommendations. This is not a checkbox for us: an exchange that tolerates dirty money eventually loses its banking, its license and its customers' trust — in that order.

2. Identity verification (KYC)

Every account is verified at registration: legal name, date of birth, residential address, nationality and a government-issued identity document with a liveness check. Most checks complete in minutes; some require human review.

Limits scale with verification level. Unverified accounts cannot deposit or trade.

3. Screening

Customers are screened at onboarding and continuously thereafter against applicable sanctions lists (including EU, UN, OFAC and UK lists), politically-exposed-person registers and adverse-media sources. Matches are reviewed by a human before any action is taken — names collide more often than people think.

4. Transaction monitoring

Deposits, withdrawals and trading patterns are monitored for indicators of laundering: structuring, rapid pass-through, interaction with high-risk addresses or services, and activity inconsistent with a customer's profile. Crypto deposits are additionally screened with on-chain analytics.

Unusual activity may trigger questions, holds or — where the law requires — reports to the financial intelligence unit. We are legally prohibited from telling you when such a report has been made.

5. Source of funds

For larger balances, OTC block trades and activity that warrants it, we ask where the money comes from and we expect documented answers — salary, sale proceeds, trading history elsewhere. The VIP List application includes this review as standard.

6. Prohibited customers and jurisdictions

We do not serve anonymous accounts, shell banks, sanctioned persons or residents of jurisdictions where our services would be unlawful. The list of restricted jurisdictions is maintained internally and reviewed as regulation moves.

7. Record keeping and training

Identity and transaction records are retained for the statutory period (typically five years after the relationship ends), stored encrypted. Staff complete AML training at onboarding and annually; the compliance function reports independently of the commercial side of the desk.

8. Contact

Questions about this policy: compliance@obsidiate.com. To report suspected misuse of the platform: security@obsidiate.com.