Payou

Legal and compliance information

Anti-Money Laundering (AML) and Know Your Customer (KYC) Policy

Last Updated: July 19, 2026

1. POLICY OBJECTIVES AND SCOPE

PAYOU LTD ("PAYOU", "Company") is committed to maintaining the highest global standards of anti-money laundering (AML), counter-terrorist financing (CTF), and strict Know Your Customer / Business (KYC/KYB) risk mitigation. Although PAYOU LTD functions strictly as a payment aggregation software infrastructure developer and payment interface router, we enforce a strict zero-tolerance approach toward any attempts to abuse our digital infrastructure for illegal purposes, tax evasion, transaction concealment, or processing funds derived from illicit operations.

This Policy applies across all integration routes, internal corporate reviews, and Merchant onboarding operations. We structure our screening procedures to comply with the UK Proceeds of Crime Act 2002, the Terrorism Act 2000, the Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017, and international Financial Action Task Force (FATF) guidelines.

2. KNOW YOUR BUSINESS (KYB) AND CUSTOMER VERIFICATION

Every corporate merchant seeking to integrate our software infrastructure must successfully complete a mandatory corporate verification check before any live production credentials or API keys can be activated. The KYB verification protocol requires the submission of the following validated documentation:

  • A valid, unexpired government-issued passport or national ID card belonging to the company's authorized directors and ultimate beneficial owners (UBO) holding more than 25% control.
  • A certified copy of the Certificate of Incorporation, Memorandum and Articles of Association, and official Share Register proving current corporate standing.
  • A fresh document verifiably confirming the company's operational address or the director's residential address (e.g., utility bill or corporate bank statement dated within the last 90 days).
  • Clear specification of the integrated platform domains (URLs), expected traffic GEO structures, estimated monthly transaction volumes, and transaction methods.

3. CONTINUOUS RISK SCORING AND SANCTIONS SCREENING

PAYOU LTD utilizes manual compliance checks and automated screening systems to evaluate every corporate profile against global databases, including:

  • a) International Sanctions Lists: Explicit checks against the Office of Financial Sanctions Implementation (OFSI) UK, the EU Consolidated Sanctions List, and the US OFAC SDN directories. We do not under any circumstances activate routes for entities located within embargoed or high-risk uncooperative jurisdictions.
  • b) Politically Exposed Persons (PEPs): Screening of directors and UBOs against lists of prominent public figures, family associates, and state-affiliated profiles to identify potential extraction risks.
  • c) Adverse Media Databases: Verification of corporate registries against verified global regulatory watchlists, enforcement reports, and media lists to eliminate reputational threats.

4. PROHIBITED AND RESTRICTED TRAFFIC CATEGORIES

We strictly refuse integration access to digital domains or business lines that engage in or are linked to:

  • Materials violating international copyright or intellectual property protocols.
  • Unlicensed online betting, illegal card-to-card processing schemes, or shadow transaction matching frameworks.
  • Unregulated financial services, anonymous virtual wallets, or high-risk mixers that conceal structural paths.
  • Any deceptive practices or domains utilizing hidden landing structures or intentional cloak-redirect mechanisms to obscure the true nature of their underlying commercial goods.

5. TRANSACTION ROUTING MONITORING

Our smart platform architecture monitors routed transaction payloads for anomalies, including card testing scripts, sudden volume spikes, processing geographic discrepancies, and cross-border currency misalignments. If our infrastructure detects suspicious patterns or indicators of money laundering, our technical compliance team reserves the absolute right to instantly suspend all API connections, disable secret keys, place underlying clearing settlements on rolling hold, and submit all required compliance reports to partner financial institutions and competent legal enforcement authorities.