Statutory Framework, Regulatory Mandates & Risk-Based Approach
Zero-tolerance anti-financial crime posture, FATF recommendations, universal scope, and the Risk-Based Approach (RBA).
ZyroPilot enforces an uncompromising zero-tolerance policy against money laundering, terrorist financing, proliferation financing, sanctions evasion, and illicit capital flows. Accounts attempting to exploit the platform for financial crime will face immediate asset freezing, permanent blacklisting, and criminal referral.
1.1Institutional Purpose & Statutory Commitment
ZyroPilot Technologies Ltd. ('ZyroPilot', 'the Company', 'we', 'us', or 'our') is resolutely committed to maintaining the highest institutional standards of Anti-Money Laundering (AML), Counter-Terrorist Financing (CTF), and Know Your Customer (KYC) compliance. This Policy delineates the mandatory standards, algorithmic surveillance mechanisms, and verification procedures enforced across the ZyroPilot trading ecosystem.
1.2Adherence to International Regulatory Frameworks
ZyroPilot formulates its compliance architecture in strict alignment with the Financial Action Task Force (FATF) 40 Recommendations, the European Union Anti-Money Laundering Directives, the UK Money Laundering Regulations, and applicable international sanctions protocols (including OFAC, United Nations Security Council, and EU restrictive measures).
1.3Universal Scope of Application
This Policy applies comprehensively to all registered traders, evaluation challenge applicants, funded account holders, institutional partners, affiliate marketers, and cryptocurrency payment rails interfacing with ZyroPilot. No individual or corporate entity is exempt from these compliance mandates.
1.4The Risk-Based Approach (RBA)
ZyroPilot implements a structured Risk-Based Approach. The depth, intensity, and frequency of customer due diligence, blockchain forensic telemetry, and transaction surveillance are directly proportional to the risk classification of the trader, geographic origin, payment rail, and transactional volume.
Compliance Lexicon, Typologies & Statutory Definitions
Formal definitions of money laundering stages, CTF, CIP, CDD, EDD, PEPs, SARs, UBOs, and FATF classifications.
2.1Money Laundering & The Three Classical Stages
Money laundering is the illicit process of concealing the origin, ownership, or control of proceeds derived from criminal conduct to create the appearance of legitimate capital. ZyroPilot's surveillance engines actively detect all three recognized operational stages:
- Placement: Introducing illicit physical currency or tainted digital assets into the financial system via micro-deposits or multiple wallets.
- Layering: Executing rapid conversion sequences, internal wash trades, or cross-chain transfers to obscure audit trails.
- Integration: Re-extracting laundered capital as legitimate platform withdrawals or challenge performance profit-split distributions.
2.2Counter-Terrorist Financing (CTF)
The provision, collection, or transmission of monetary instruments or digital assets with the intention or knowledge that they be utilized in whole or in part to support terrorist acts, organizations, or individual actors.
2.3Due Diligence & Oversight Lexicon
Core operational classifications utilized by ZyroPilot compliance moderators:
- CIP (Customer Identification Program): Initial intake validation of legal identity credentials prior to financial feature access.
- CDD (Customer Due Diligence): Ongoing screening of profile credentials, residence status, and watchlist checks.
- EDD (Enhanced Due Diligence): Deepened forensic scrutiny applied to elevated-risk profiles, high-volume participants, and PEPs.
- PEP (Politically Exposed Person): Natural persons entrusted with prominent public functions and their immediate families or close business associates.
- SAR (Suspicious Activity Report): Statutory disclosure dispatched to sovereign Financial Intelligence Units (FIUs) regarding anomalous behavior.
- UBO (Ultimate Beneficial Owner): Natural persons who ultimately control, direct, or benefit from an account.
Customer Identification Program (CIP) & Verification Dossiers
Mandatory pre-withdrawal identification, zero-anonymous accounts policy, approved documents, and 3D liveness.
ZyroPilot strictly prohibits anonymous accounts for live financial transfers. No balance withdrawal or performance-fee distribution will ever be approved or broadcast until Level 2 (Standard) KYC verification is verified and approved by the compliance team.
3.1Mandatory Identity Verification Requirement
Every user must undergo formal identity verification before live balance withdrawals or challenge evaluation payouts can be authorized. ZyroPilot strictly prohibits shell accounts, anonymous registrations, and pseudonymous withdrawal routing.
3.2Baseline Intake Data Collection
During registration and profile setup, ZyroPilot captures and validates the applicant's full legal name, date of birth (verifying age majority of 18+), sovereign country of residence, and primary email address. This intake metadata must align 1:1 with subsequently submitted government documents.
3.3Approved Photographic Identity Documents
To successfully satisfy CIP requirements, users must upload official, unexpired government-issued identification in high-resolution, unedited color:
- International Passport (biographical machine-readable data page).
- National Identity Card (both primary and reverse sides required).
- Driver's License (both primary and reverse sides; must display legal birth date and photograph).
3.4Automated Biometric Liveness & Depth Telemetry
Alongside the physical document, the applicant must complete an automated 3D biometric liveness scan. This captures micro-depth facial contours, eye tracking, and skin reflectivity vectors to prove physical presence and prevent injection attacks, AI impersonation, or stolen identity presentation.
3.5Definitive Document Rejection Grounds
Submissions will be rejected immediately if credentials are expired, cropped at the edges, presented in black-and-white, obscured by glare, exhibiting digital manipulation or Photoshop tampering, or failing legal name alignment.
Progressive KYC Verification Tiers & Account Capabilities
Three-tier verification structure: Basic Registration, Standard Identity, and Enhanced High-Value Due Diligence.
4.1Tier 1: Basic Profile Verification
Applied automatically upon registration. Encompasses email verification, age majority confirmation, and residential screening against restricted jurisdictions. Entitles users to explore terminal features and make initial challenge entry fee payments.
4.2Tier 2: Standard KYC Verification
Mandatory condition precedent for initiating balance withdrawals or receiving funded account profit splits. Involves government ID validation and biometric liveness verification. Validates withdrawal rights across all cryptocurrency rails.
4.3Tier 3: Enhanced Due Diligence (EDD) Verification
Applied to institutional accounts, high-cumulative-volume participants, and profiles triggered by risk surveillance. Requires proof of residential address dated within 90 days, source of funds documentation, and compliance officer review.
ZyroPilot Tiered Verification Matrix
| Verification Tier | Verification Requirements | Turnaround Target | Platform Capabilities |
|---|---|---|---|
| Tier 1 (Basic) | Email confirmation, legal name, country, age 18+ | Instantaneous | Evaluation challenges, terminal access, assessment fees |
| Tier 2 (Standard) | Government photo ID (both sides) + 3D liveness scan | 1 to 3 Business Days | Real balance withdrawals, Master Account profit payouts, funded capital |
| Tier 3 (Enhanced) | Tier 2 + Proof of address (<90 days) + Source of funds | 3 to 7 Business Days | Unlimited withdrawal velocity, high-tier allocations |
Customer Due Diligence (CDD) & Watchlist Surveillance
Continuous automated sanctions screening, international blacklist matching, and ongoing behavioral monitoring.
5.1Continuous Automated Sanctions Screening
ZyroPilot cross-references all registered users against global sanctions databases, including the United States Office of Foreign Assets Control (OFAC) Specially Designated Nationals (SDN) list, the United Nations Security Council Consolidated List, the European Union Sanctions Map, and the UK HM Treasury Financial Sanctions registry. Positive matches trigger immediate account quarantine.
5.2Dynamic Ongoing Account Surveillance
Customer Due Diligence is an active, continuous protocol. ZyroPilot continuously monitors account activity to verify that deposit velocity, trading frequency, and withdrawal patterns remain fully consistent with the user's declared profile and risk category.
5.3Trader Obligation of Timely Disclosure
Users must inform ZyroPilot compliance within fourteen (14) days of any material change in legal name, residential country, tax citizenship, or Politically Exposed Person status. Failure to report modifications may result in withdrawal suspension.
Enhanced Due Diligence (EDD) Triggers & Scrutiny Protocols
Triggers for deepened scrutiny, investigative documentation requirements, and compliance refusal authority.
6.1Compulsory EDD Trigger Conditions
Enhanced Due Diligence protocols are triggered automatically under any of the following operational conditions:
- The applicant is identified as a Politically Exposed Person (PEP) or immediate associate of a PEP.
- The user accesses the terminal from or resides in a FATF-designated high-risk or grey-listed jurisdiction.
- Cumulative deposit or withdrawal volume significantly exceeds platform statistical thresholds.
- The account demonstrates abnormal velocity (rapid deposit followed by immediate withdrawal without active trading).
- Blockchain forensic screening flags inbound or outbound cryptocurrency addresses with elevated risk scores.
6.2Investigative Inquiries & Evidence Requirements
When EDD is initiated, the ZyroPilot compliance desk may require the user to provide: proof of residential address (utility bill or bank statement under 90 days), certified source of funds documentation, wealth origin declarations, and participation in a real-time compliance video interview.
6.3Conclusive Refusal Authority
If an applicant fails to furnish requested EDD documentation within seven (7) business days, or if submitted records fail to satisfactorily resolve compliance concerns, ZyroPilot reserves the absolute right to refuse service, freeze associated balances, and terminate the account relationship.
Politically Exposed Persons (PEPs) & High-Risk Profiling
Classification of domestic and foreign PEPs, mandatory executive onboarding approval, and 12-month de-escalation.
7.1Statutory Classification of PEPs
ZyroPilot classifies as a PEP any natural person entrusted with prominent public functions, including: Heads of State, ministers, senior judicial officers, senior military commandants, high-ranking executives of state-owned commercial entities, ambassadors, and their immediate family members (spouses, children, parents, siblings).
7.2Mandatory Senior Compliance Officer Approval
A PEP cannot be onboarded without the formal written authorization of the ZyroPilot Chief Compliance Officer (CCO). Such approval is contingent upon comprehensive Source of Wealth (SoW) validation proving that trading capital is legitimate and unassociated with public corruption.
7.3Continuous Enhanced Monitoring & Former PEP Rule
Active PEP accounts are subject to intensified ongoing transaction monitoring. Former PEPs remain categorized under heightened scrutiny for a minimum of twelve (12) consecutive months following the formal termination of their public office.
Source of Funds (SoF) & Source of Wealth (SoW) Verification
Verification criteria for capital origin, qualifying evidentiary documentation, and non-compliance consequences.
8.1Circumstances Mandating SoF Verification
ZyroPilot requests verifiable proof regarding the origin of deposited capital whenever: individual or cumulative deposits exceed high-value thresholds, deposit activity is inconsistent with declared occupation, or funds arrive from complex, fragmented cryptocurrency wallets.
8.2Acceptable Corroborating Documentation
Traders must substantiate capital legitimacy by submitting one or more of the following official documents:
- Official salary payslips or certified employment agreements from an active employer.
- Bank or regulated cryptocurrency exchange statements detailing capital accumulation.
- Audited financial statements, dividend distributions, or documented corporate business income.
- Official tax returns, wealth assessments, or government tax receipts from the preceding tax year.
- Notarized documentation substantiating inheritance, legal settlements, real estate sales, or gift deeds.
8.3Consequences of Unsatisfactory Disclosure
Failure to substantiate the legitimate economic origin of funds will result in the immediate revocation of withdrawal privileges, suspension of terminal access, and potential filing of a statutory SAR with supervisory authorities.
Blockchain Forensics, Travel Rule & Wallet Consistency
On-chain heuristics, bans on mixers and privacy coins, strict single-wallet consistency rule, and Travel Rule protocols.
ZyroPilot strictly enforces wallet ownership consistency. The external cryptocurrency wallet used to receive withdrawals must be demonstrably owned and controlled by the verified account holder who completed KYC. Payouts to third-party addresses, friends, or unverified secondary wallets are strictly prohibited.
9.1Automated On-Chain Risk Heuristics
ZyroPilot deploys automated blockchain analytics systems to evaluate all incoming and outgoing cryptocurrency transactions across TRON, BSC, Ethereum, and Bitcoin networks. Transactions are screened for direct or indirect exposure to darknet marketplaces, ransomware clusters, sanctioned addresses, stolen funds, and mixer protocols.
9.2Absolute Ban on Mixers & Anonymity Tools
ZyroPilot strictly prohibits deposits originating from or withdrawals directed to cryptocurrency privacy mixers (e.g. Tornado Cash, Wasabi Wallet, Blender.io) or privacy-focused coins. Any deposit linked to mixing infrastructure will be quarantined immediately with zero balance credit.
9.3Rigorous Wallet Ownership Consistency Policy
To prevent the platform from acting as a third-party money mule conduit, withdrawals must be directed to a cryptocurrency address owned exclusively by the verified account holder. If the deposit wallet and withdrawal destination wallet differ, the user must prove exclusive ownership of both addresses before payout release.
9.4FATF Travel Rule Compliance
In compliance with FATF Recommendation 16 ('Travel Rule'), ZyroPilot collects and transmits originator and beneficiary identification metadata when processing virtual asset transfers to or from regulated Virtual Asset Service Providers (VASPs).
Continuous Transaction Surveillance & Red Flag Indicators
Algorithmic anomaly detection, anti-structuring protocols, pass-through fund movement bans, and investigation triggers.
10.1Real-Time Algorithmic Surveillance Engine
Every deposit, withdrawal, and trade order on ZyroPilot is monitored by automated real-time compliance engines. The platform detects transactional anomalies, rapid multi-wallet rotations, velocity spikes, and geographically improbable session handoffs.
10.2Prohibition on 'Pass-Through' Fund Routing
Depositing cryptocurrency funds followed by immediate withdrawal requests without active trading activity is classified as illicit pass-through money laundering. ZyroPilot reserves the right to withhold pass-through funds pending comprehensive source of funds audits.
10.3Anti-Structuring ('Smurfing') Detection
Deliberately executing multiple small deposits or split withdrawals designed to stay below internal threshold review limits triggers immediate compliance flags for smurfing and structuring.
AML Red Flag Typology Catalog & Compliance Actions
| Red Flag Typology | Behavioral Indicator | Compliance Risk Score | Enforcement Protocol |
|---|---|---|---|
| Pass-Through Routing | Deposit followed by immediate withdrawal with zero trades | High Risk (Critical) | Immediate freeze & Source of Funds audit |
| Mixer / Tumbler Exposure | Inbound transfer from privacy pool (Tornado, etc.) | High Risk (Critical) | Quarantine transfer & file immediate SAR |
| Wallet Name Discrepancy | Withdrawal destination address belongs to third party | Elevated Risk | Halt withdrawal pending proof of wallet ownership |
| Smurfing / Structuring | Repetitive deposits just below verification thresholds | Elevated Risk | Consolidate account & trigger compulsory Tier 3 EDD |
| Velocity & Geo Anomaly | Logins across divergent continents within minutes | Medium Risk | Enforce 2FA reset & temporary withdrawal delay |
Suspicious Activity Reporting (SAR) & Anti-Tipping-Off
Statutory reporting to Financial Intelligence Units (FIUs), strict anti-tipping-off laws, and good-faith legal immunity.
Under binding international law, ZyroPilot compliance personnel, moderators, and support representatives are strictly prohibited from disclosing to any user or third party that an account is under review or that a Suspicious Activity Report (SAR) has been filed.
11.1Mandatory Filing with Financial Intelligence Units (FIUs)
Where ZyroPilot knows, suspects, or has reasonable grounds to suspect that funds, deposits, or trade patterns are connected to money laundering, terrorism, cybercrime, or fraud, ZyroPilot will lodge an official Suspicious Activity Report (SAR) or Suspicious Transaction Report (STR) with competent authorities.
11.2Absolute Anti-Tipping-Off Mandate
The law strictly prohibits 'tipping off' any subject under investigation. ZyroPilot will neither confirm nor deny the existence of an ongoing investigation or report to the account holder or any unauthorized third party.
11.3Statutory Safe Harbor & Legal Immunity
ZyroPilot, its officers, employees, and authorized compliance representatives are protected by statutory legal safe harbor provisions. Submitting a SAR in good faith creates zero legal or civil liability toward the reported individual.
Statutory Records Retention & Cryptographic Archival
Mandatory 5-year retention lifecycle, indefinite legal hold extensions, and air-gapped AES-256 compliance vaults.
12.1Mandatory Five-Year Statutory Retention Lifecycle
In strict conformity with international AML and financial audit directives, ZyroPilot securely archives all compliance-relevant documentation for not less than five (5) consecutive years following the date of account closure or the final financial transaction, whichever is later.
12.2Classes of Retained Compliance Dossiers
Retained records comprise: all submitted photo IDs, biometric verification reports, proof of address utility bills, blockchain transaction hashes, internal balance ledger audits, compliance moderator notes, and statutory filings.
12.3Indefinite Legal Hold for Active Proceedings
Where ZyroPilot is notified of an active law enforcement subpoena, regulatory audit, or judicial inquiry, relevant compliance files are placed under an indefinite legal hold, overriding all standard disposal schedules.
12.4Cryptographic Vault Security Architecture
All archived identity files are isolated in encrypted compliance vaults utilizing AES-256-GCM standards with automated key rotation. Access is strictly audited and limited to authorized compliance supervisors.
Enforcement Mechanisms, Account Termination & Forfeiture
Sanctions for AML breaches, immediate freezing of illicit balances, challenge fee forfeiture, and unilateral refusal of service.
13.1Immediate Asset Freezing & Account Liquidation
If a user is determined to have violated AML/CTF laws, falsified identification documents, or engaged in fraudulent activity, ZyroPilot will instantly freeze the account, cancel pending transactions, and revoke all trading privileges.
13.2Contractual Forfeiture of Balances & Fees
Engaging in money laundering, identity fraud, or latency arbitrage and market manipulation constitutes a fundamental breach of contract resulting in total forfeiture of challenge entry fees, evaluation balances, and unpaid performance splits without right of reimbursement.
13.3Unilateral Right to Refuse Service
ZyroPilot reserves the sovereign prerogative to refuse account creation, block cryptocurrency deposits, reject withdrawal requests, or terminate business relationships without disclosing internal risk metrics or compliance scoring.
Compliance Governance, MLRO Oversight & Annual Auditing
Designated Money Laundering Reporting Officer (MLRO), independent audits, and mandatory compliance staff training.
14.1Designated Money Laundering Reporting Officer (MLRO)
ZyroPilot maintains an independent compliance department led by a designated Money Laundering Reporting Officer (MLRO). The MLRO maintains direct supervisory oversight of all verification pipelines, blockchain analytics, and regulatory filings. Contact: compliance@zyropilot.com.
14.2Annual Independent Compliance Audits
Our compliance frameworks, algorithmic surveillance heuristics, and biometric verification workflows are subjected to annual independent audits conducted by certified external anti-financial crime assessors.
14.3Compulsory Staff & Moderator Anti-Crime Certification
All ZyroPilot compliance personnel, moderators, and support engineers undergo continuous anti-financial crime training, including bi-annual certification in recognizing modern crypto typologies, sanctions evasion, and AI media spoofing identification.
