Hurupay applies Know Your Customer (KYC) protocols to verify user identity, assess risk, and comply with anti-money laundering (AML) regulations. These best practices ensure the platform remains secure and legally compliant across all operating jurisdictions.
1. Identity Verification
All users must verify their identity before accessing USD transfer services.
Requirements:
A valid government-issued ID (passport, driver’s license, national ID)
A selfie or live facial scan to confirm that the document belongs to the user
Name on the ID must match the name used to register the Hurupay account
Verification is required before enabling deposits, withdrawals, or large transaction volumes.
2. Address Verification
To confirm user residency and comply with location-specific regulations, address verification may be required.
Accepted documents (not older than 90 days):
Utility bill
Bank statement
Government-issued correspondence
These documents must display the user’s name and residential address.
3. Risk-Based User Tiers
Hurupay applies tiered risk levels during onboarding and ongoing use.
Tier assignment is based on:
Transaction volume and frequency
Country of origin or residence
Nature of account activity (e.g., business vs. personal use)
High-risk users (e.g., politically exposed persons or users from high-risk regions) are subject to enhanced due diligence procedures, including deeper documentation checks.
4. Ongoing Monitoring
Hurupay continuously monitors user behavior to detect potential compliance risks.
Monitoring includes:
Reviewing abnormal transaction patterns
Identifying sudden increases in transfer volume
Flagging unexpected third-party activity
Accounts showing suspicious activity may be temporarily restricted pending review.
5. Data Protection
User data collected through KYC is handled in compliance with data protection laws.
Data security policies include:
Encrypted storage of ID documents and verification records
Access control limited to trained compliance officers
Adherence to international privacy standards (e.g., GDPR, local data protection regulations)