1. Scope and status
These proposed rules cover merchant accounts, invoices, payment links, product content, API integrations and activity carried out through the service. They are review drafts pending the operator's legal and risk assessment. A merchant should accurately disclose its business and use the service only for the approved purpose. Activation of an account should not be interpreted as approval of undisclosed activities or as proof of the merchant's own regulatory compliance.
2. Illegal activity and financial crime
The proposed service prohibits using payments to commit, facilitate or conceal unlawful activity. This includes laundering criminal proceeds, financing terrorism, fraud, theft, extortion, ransomware, handling stolen payment credentials or assets, and evading legally applicable sanctions. Merchants must not disguise the true payer, seller or beneficiary to evade a legal duty or use another merchant's account to process an undisclosed business.
3. Prohibited goods, services and content
Goods, services and content must be lawful where they are offered and supplied. The intended restrictions include the categories below. The final operator must assess additional sector-specific requirements and publish the scope of its supported business activities.
- Child sexual abuse material, sexual exploitation, trafficking or services that facilitate abuse.
- Stolen goods or data, counterfeit products and infringement of another party's intellectual property rights.
- Malware, credential theft and tools or services offered to enable unauthorised system access.
- Weapons, controlled substances, pharmaceuticals or other regulated goods supplied unlawfully or without required permission.
- Deceptive investment offers, Ponzi or pyramid schemes and knowingly fraudulent fundraising.
4. Restricted businesses requiring a separate decision
Some lawful activities can still create licensing, partner or operational requirements that the operator may not be able to support. The proposed approach requires an explicit eligibility decision before onboarding businesses in gambling, adult services, financial or investment services, money transmission, crypto exchange, token offerings and other regulated or elevated-risk sectors. This is not a promise that these categories will be accepted. Their final eligibility, evidence requirements and geographic limits remain to be determined.
5. Honest merchant and payment information
Do not impersonate another person, falsify ownership or registration details, conceal a material change in business activity or submit fabricated verification documents. Products, invoice descriptions and customer communications should identify what is actually being purchased and must not mislead the payer about the merchant, price, delivery or refund rights. Do not split or route payments for the purpose of bypassing applicable verification requirements or limits.
6. Platform, API and account security
Do not obtain unauthorised access, steal credentials, interfere with another merchant, bypass access controls, forge notifications or deliberately disrupt service availability. Use integrations within documented permissions and limits. Security testing that could affect other users or infrastructure requires an agreed scope. If you discover a vulnerability, contact support with enough information to investigate while avoiding unnecessary access to other people's data or disclosure of secret credentials.
7. Jurisdictions and sanctions
The operator must confirm where the service may lawfully be offered and which sanctions regimes apply to its activities. Merchants should not provide false location information or use third parties to bypass lawful restrictions. A published list of supported or restricted locations must be reviewed separately from this draft; no country-specific authorisation or worldwide availability is established here.
8. Review and proportionate action
The final terms may allow requests for information, rejection of merchant applications, removal of unlawful content, restrictions or account closure where justified by the facts and applicable law. Where lawful, affected merchants should be told how to respond, correct inaccurate information or seek review. Urgent action may be necessary for a security threat or binding legal requirement. A policy concern does not itself create a right to confiscate a balance or eliminate valid payment and refund obligations.
9. Reporting misuse and details to complete
Contact support to report suspected misuse, identifying the merchant, invoice or relevant activity and the reason for concern. Avoid including unnecessary personal information. Before publication, the operator must approve permitted customer types, business restrictions, jurisdictional limits, assessment responsibilities, notice and appeal procedures and the handling of remaining funds after a restriction or closure. Read this draft together with the Terms, AML / KYC and Payments & Refunds Policies.