AML and KYC

Settings → AML and KYC — subsections Settings and Providers.

AML — screening incoming coins

Incoming coins are checked with an AML provider:

Risk	What happens
Low	The order proceeds
Medium	The order goes to an operator for review
High	The order is frozen — only the owner or a role with “Change frozen orders” can move it

Risk thresholds are set in Settings. Without a connected provider screening is off and orders proceed as usual.

Providers

Cards: AMLBot, Crystal, Bitok, Elliptic, Sumsub and “Operator” (manual review). Keys are entered in the card and stored encrypted.

KYC — identity verification

An order above the threshold asks for a document and a selfie. An operator with the “AML check and KYC decisions” permission approves or rejects with a reason; the client gets an email with the decision. Every document view is logged. The owner sets the threshold.

Documents are kept in a private folder on the server, outside the website folder.

Address check for clients

On the website a client can check their own wallet for risk before exchanging.

Client card check next version

Enabled here. A client paying in rubles from a new card sends its photo; the decision is made in Orders → Card checks. See Reserves and blacklist.