KYC and onboarding compliance
We verify each user's identity and assess their risk before enabling any payment.
Verification before payment
Activating the account and paying are separate stages. Activation is free of charge: it only registers and verifies the user.
Only approved identities can transact
A user cannot start payments until their identity verification and AML screening have been approved.
Traceable evidence
Every acceptance, check, and compliance decision is recorded with its date, result, and reason.
Onboarding stages
Each stage must be completed before moving to the next.
- 1
Registration
The user identifies with their email. New users register their name, phone, country, city, address, and postal code.
- 2
Agreement acceptance
The terms, the collection mandate, and the data processing policy are accepted before continuing. Mandatory acceptances are enforced at sign-up.
- 3
Email confirmation
A one-time passcode confirms the user controls their email, with retry limits and cooldowns.
- 4
Identity and AML
Government ID validation, liveness check, face match, and screening against restrictive lists.
- 5
Activation
Only once the identity is approved is the account enabled to start payments.
Identity checks
We confirm the user is who they claim to be and that their document is genuine.
Government ID
National ID, passport, driver's license, or residence permit, depending on the issuing country.
Document authenticity
The front and back are captured, security features are checked, and the data is extracted and matched against the registration.
Liveness check
A selfie with liveness detection confirms a real person is in front of the camera, not a photo, video, or mask.
Face match
The selfie is compared with the document photo and the result is measured with a score.
Device and network signals. We also assess approximate location and the use of a VPN, proxy, or the Tor network as risk indicators.
AML screening
Every user is checked against sanctions lists, politically exposed persons, and adverse media.
Restrictive lists and sanctions
Lists binding in Colombia and international lists such as those of the UN, OFAC, the European Union, and the United Kingdom.
PEPs and associates
Politically exposed persons, their family members, and close associates.
Adverse media and alerts
Negative news, warnings, and regulatory alerts linked to the person.
Match score
How likely it is that a record found refers to the same person.
Risk score
The risk of the record found based on the lists and categories where it appears.
Verification states
Each state determines the next permitted action.
Not verified
Start verification.
Started
Continue or restart the session.
In progress
Wait for the result.
Expired or abandoned
Start a new session.
In review
Wait for the compliance decision.
Approved
The account can start payments.
Declined
Contact support.
An expired or abandoned session can be retried. A verification in review, approved, or declined cannot be restarted.
Compliance review
Cases with alerts in verification or screening go to manual review.
- 01
Case in review
An identity, risk, or screening alert routes the case to compliance.
- 02
Evidence review
The analyst reviews the document, biometrics, risk signals, and list matches.
- 03
Assessment
They cross-check the information, clear or confirm matches, and determine the outcome.
- 04
Recorded decision
The approval or decline is recorded with its reason, an analyst note, and the evidence reviewed.
Traceability and data protection
The controls behind every onboarding decision.
Versioned agreements
Acceptance evidence keeps the agreement version, its content, and the acceptance date.
Authenticated results
Verification results are received over authenticated channels and their signature is validated before the user's status is updated.
Permissioned, audited access
Only authorized staff can view compliance cases, and every view is logged.
Protected sensitive data
Document numbers are shown masked and images are stored protected. Biometric data is processed with the data subject's express authorization.