Legal

AML and KYC Policy

Last updated: October 3, 2026

How P2PLY verifies who you are, what that unlocks, how your documents are protected, and how we keep the marketplace free of fraud and money laundering.

What the identity check unlocks

Signing up never needs an identity check, and anyone can deposit and see their balance. What needs an approved check is anything that creates new financial exposure: opening an order, posting an ad, converting and requesting a withdrawal. Once approved, onboarding sets no amount limit.

What we ask for

  • One document: a national ID card, a driving licence or a passport.
  • Photos of its front and back (a passport needs only the photo page).
  • A selfie of you holding that ID next to your face, so the face and the document can be compared.
  • A confirmation that the ID is genuine and yours.

How it is reviewed

A person on our team reviews every submission and approves or rejects it. If it is rejected, we tell you what to fix and you can submit again. A fake, altered, borrowed or someone else's ID closes the account.

How documents are stored

ID photos and selfies are stored encrypted (AES-256) in private storage, opened only through short-lived links, and every view is logged. They are never used for marketing.

Anti-money-laundering

  • One person, one account, in their own name. Payments must come from and go to accounts in the trader's own verified name.
  • Withdrawals with a risk flag (first withdrawal, new device or payment method, new address, recent password or 2FA change, open dispute) are reviewed by a person before they are sent.
  • USDT received from P2P cannot be withdrawn or converted for 24 hours, which leaves time to catch a reversed or fraudulent payment.
  • We may ask for more information, hold a withdrawal, or freeze an account while we review suspicious activity, and we report to authorities when the law requires it.

How long records are kept

Identity, trade and anti-money-laundering records, including the documents, are kept permanently, also after an account is deleted.