Global Know Your Customer Policy

1. Introduction and Global Framework

NomercyX ("Company") implements a comprehensive global Know Your Customer (KYC) policy to ensure compliance with international standards for customer identification, verification, and ongoing due diligence. This policy establishes our framework for preventing identity fraud, money laundering, terrorist financing, and other financial crimes across all jurisdictions where we operate.

1.1 International KYC Standards

• FATF Recommendations: Customer Due Diligence and record-keeping requirements
• Basel Committee Principles: Customer due diligence for banks and financial institutions
• Wolfsberg Group Standards: Global KYC standards for correspondent banking
• OECD Guidelines: Common Reporting Standard (CRS) and tax transparency
• EU AML Directives: Customer due diligence and beneficial ownership requirements
• US BSA/AML Requirements: Customer Identification Program (CIP) and beneficial ownership
• UK Money Laundering Regulations: Customer due diligence and enhanced due diligence
• AUSTRAC Guidelines: Customer identification and verification procedures

1.2 Regulatory Compliance Framework

1.3 Virtual Asset Specific Requirements

• FATF Virtual Asset Guidelines: Enhanced CDD for virtual asset service providers
• Travel Rule Compliance: Customer information sharing for transfers ≥ $1,000
• Unhosted Wallet Verification: Enhanced verification for self-hosted wallet transactions
• DeFi Protocol KYC: Emerging requirements for decentralized finance interactions
• Cross-Chain Transactions: Multi-blockchain identity verification and tracking

2. Customer Risk Classification Framework

2.1 Risk-Based Approach

We implement a comprehensive risk-based approach to customer classification, considering multiple risk factors to determine appropriate due diligence levels:

2.2 Geographic Risk Assessment

2.3 Product and Service Risk Assessment

• Cryptocurrency Trading: Risk varies by asset type, volume, and frequency
• Fiat Currency Services: Higher risk for cash transactions and money transfers
• Institutional Services: Lower risk for regulated institutional clients
• Cross-Border Transfers: Enhanced risk for international transactions
• Privacy Coins: Higher risk for privacy-focused cryptocurrencies
• DeFi Integration: Emerging risks from decentralized finance protocols

3. Customer Identification and Verification

3.1 Individual Customer Requirements

Basic Identification Information

Document Verification Requirements

3.2 Corporate Customer Requirements

Corporate Documentation

Beneficial Ownership Identification

• Ownership Threshold: Individuals owning ≥25% of shares or voting rights
• Control Persons: Individuals exercising ultimate control over the entity
• Senior Managing Officials: If no individual meets ownership threshold
• Trust Beneficiaries: For trust structures, identification of settlors, trustees, and beneficiaries
• Complex Structures: Full ownership chain documentation for multi-layered entities

3.3 Advanced Verification Technologies

Digital Identity Verification

Video-Based Customer Identification (V-CIP)

• Live Video Session: Real-time interaction with trained verification agents
• Document Presentation: Physical presentation of original documents
• Identity Confirmation: Verbal confirmation of personal details
• Liveness Verification: Confirmation that the person is physically present
• Session Recording: Secure recording for audit and compliance purposes
• Multi-Language Support: Verification in customer's preferred language

4. Enhanced Due Diligence (EDD) Procedures

4.1 EDD Trigger Events

4.2 PEP Identification and Management

PEP Categories

PEP-Related Persons

• Family Members: Spouse, children, parents, siblings, and their spouses
• Close Associates: Business partners, close personal friends, advisors
• Beneficial Owners: Entities where PEPs hold significant ownership or control
• Former PEPs: Individuals who held PEP positions within the last 12-18 months

4.3 Source of Wealth and Funds Verification

5. Ongoing Monitoring and Review

5.1 Periodic Review Schedule

5.2 Transaction Monitoring and Behavioral Analysis

• Real-Time Monitoring: Continuous analysis of all transactions and activities
• Pattern Recognition: AI-powered detection of unusual transaction patterns
• Velocity Checks: Monitoring of transaction frequency and volume changes
• Geographic Analysis: Tracking of cross-border and high-risk jurisdiction activities
• Counterparty Analysis: Assessment of transaction counterparties and their risk profiles
• Behavioral Scoring: Dynamic risk scoring based on customer behavior changes

5.3 Information Updates and Maintenance

6. Record Keeping and Data Management

6.1 Global Record Retention Standards

6.2 Data Security and Privacy

• Encryption Standards: AES-256 encryption for data at rest and in transit
• Access Controls: Role-based access with multi-factor authentication
• Audit Logging: Comprehensive logging of all data access and modifications
• Data Minimization: Collection and retention of only necessary information
• Privacy Rights: Support for GDPR, CCPA, and other privacy regulation rights
• Secure Disposal: Certified destruction of records at end of retention period

6.3 Cross-Border Data Transfers

• Adequacy Decisions: Transfers to countries with adequate data protection
• Standard Contractual Clauses: EU-approved clauses for international transfers
• Binding Corporate Rules: Internal data transfer frameworks for multinational operations
• Certification Schemes: Compliance with recognized international certification programs
• Local Data Residency: Compliance with local data localization requirements

7. Training and Competency

7.1 Comprehensive Training Program

7.2 Competency Assessment and Certification

• Initial Certification: Mandatory certification before handling customer onboarding
• Annual Recertification: Yearly competency testing and knowledge updates
• Role-Specific Assessment: Tailored testing based on job responsibilities
• Continuous Learning: Ongoing education on regulatory changes and best practices
• Performance Monitoring: Regular assessment of KYC decision quality and accuracy

8. Technology and Innovation

8.1 Digital KYC Infrastructure

8.2 Artificial Intelligence and Machine Learning

• Document Analysis: AI-powered document authenticity verification and data extraction
• Risk Scoring: Machine learning models for dynamic customer risk assessment
• Fraud Detection: Behavioral analytics and anomaly detection algorithms
• Identity Matching: Advanced algorithms for identity verification and deduplication
• Predictive Analytics: Forecasting of customer risk changes and compliance issues
• Natural Language Processing: Automated analysis of adverse media and regulatory updates

8.3 Emerging Technologies

• Blockchain Identity: Decentralized identity verification and self-sovereign identity
• Zero-Knowledge Proofs: Privacy-preserving identity verification techniques
• Digital Identity Wallets: Secure storage and sharing of verified identity credentials
• Quantum-Resistant Cryptography: Future-proof security for identity data protection
• IoT Integration: Device-based identity verification and authentication

9. Governance and Oversight

9.1 KYC Governance Structure

9.2 Quality Assurance and Control

• Dual Control: Independent review of high-risk customer onboarding decisions
• Quality Sampling: Regular sampling and review of KYC decisions and documentation
• Performance Metrics: KPIs for accuracy, timeliness, and compliance effectiveness
• Continuous Improvement: Regular process review and enhancement based on findings
• External Validation: Independent third-party assessment of KYC program effectiveness

9.3 Regulatory Reporting and Communication

• Regulatory Updates: Regular communication with relevant regulatory authorities
• Compliance Reporting: Periodic reports on KYC program effectiveness and metrics
• Incident Reporting: Prompt notification of significant compliance issues or breaches
• Examination Support: Cooperation with regulatory examinations and audits
• Best Practice Sharing: Participation in industry forums and working groups

10. Contact Information and Support