Anti-Money Laundering & KYC Compliance Policy

ZyroPilot formulates its compliance architecture in strict alignment with the Financial Action Task Force (FATF) 40 Recommendations, the European Union Anti-Money Laundering Directives, the UK Money Laundering Regulations, and applicable international sanctions protocols (including OFAC, United Nations Security Council, and EU restrictive measures).

This Policy applies comprehensively to all registered traders, evaluation challenge applicants, funded account holders, institutional partners, affiliate marketers, and cryptocurrency payment rails interfacing with ZyroPilot. No individual or corporate entity is exempt from these compliance mandates.

ZyroPilot implements a structured Risk-Based Approach. The depth, intensity, and frequency of customer due diligence, blockchain forensic telemetry, and transaction surveillance are directly proportional to the risk classification of the trader, geographic origin, payment rail, and transactional volume.

The provision, collection, or transmission of monetary instruments or digital assets with the intention or knowledge that they be utilized in whole or in part to support terrorist acts, organizations, or individual actors.

Core operational classifications utilized by ZyroPilot compliance moderators:

• CIP (Customer Identification Program): Initial intake validation of legal identity credentials prior to financial feature access.
• CDD (Customer Due Diligence): Ongoing screening of profile credentials, residence status, and watchlist checks.
• EDD (Enhanced Due Diligence): Deepened forensic scrutiny applied to elevated-risk profiles, high-volume participants, and PEPs.
• PEP (Politically Exposed Person): Natural persons entrusted with prominent public functions and their immediate families or close business associates.
• SAR (Suspicious Activity Report): Statutory disclosure dispatched to sovereign Financial Intelligence Units (FIUs) regarding anomalous behavior.
• UBO (Ultimate Beneficial Owner): Natural persons who ultimately control, direct, or benefit from an account.

During registration and profile setup, ZyroPilot captures and validates the applicant's full legal name, date of birth (verifying age majority of 18+), sovereign country of residence, and primary email address. This intake metadata must align 1:1 with subsequently submitted government documents.

To successfully satisfy CIP requirements, users must upload official, unexpired government-issued identification in high-resolution, unedited color:

• International Passport (biographical machine-readable data page).
• National Identity Card (both primary and reverse sides required).
• Driver's License (both primary and reverse sides; must display legal birth date and photograph).

Alongside the physical document, the applicant must complete an automated 3D biometric liveness scan. This captures micro-depth facial contours, eye tracking, and skin reflectivity vectors to prove physical presence and prevent injection attacks, deepfakes, or stolen identity presentation.

Submissions will be rejected immediately if credentials are expired, cropped at the edges, presented in black-and-white, obscured by glare, exhibiting digital manipulation or Photoshop tampering, or failing legal name alignment.

Mandatory condition precedent for initiating balance withdrawals or receiving funded account profit splits. Involves government ID validation and biometric liveness verification. Validates withdrawal rights across all cryptocurrency rails.

Applied to institutional accounts, high-cumulative-volume participants, and profiles triggered by risk surveillance. Requires proof of residential address dated within 90 days, source of funds documentation, and compliance officer review.

Customer Due Diligence is an active, continuous protocol. ZyroPilot continuously monitors account activity to verify that deposit velocity, trading frequency, and withdrawal patterns remain fully consistent with the user's declared profile and risk category.

Users must inform ZyroPilot compliance within fourteen (14) days of any material change in legal name, residential country, tax citizenship, or Politically Exposed Person status. Failure to report modifications may result in withdrawal suspension.

When EDD is initiated, the ZyroPilot compliance desk may require the user to provide: proof of residential address (utility bill or bank statement under 90 days), certified source of funds documentation, wealth origin declarations, and participation in a real-time compliance video interview.

If an applicant fails to furnish requested EDD documentation within seven (7) business days, or if submitted records fail to satisfactorily resolve compliance concerns, ZyroPilot reserves the absolute right to refuse service, freeze associated balances, and terminate the account relationship.

A PEP cannot be onboarded without the formal written authorization of the ZyroPilot Chief Compliance Officer (CCO). Such approval is contingent upon comprehensive Source of Wealth (SoW) validation proving that trading capital is legitimate and unassociated with public corruption.

Active PEP accounts are subject to intensified ongoing transaction monitoring. Former PEPs remain categorized under heightened scrutiny for a minimum of twelve (12) consecutive months following the formal termination of their public office.

Traders must substantiate capital legitimacy by submitting one or more of the following official documents:

• Official salary payslips or certified employment agreements from an active employer.
• Bank or regulated cryptocurrency exchange statements detailing capital accumulation.
• Audited financial statements, dividend distributions, or documented corporate business income.
• Official tax returns, wealth assessments, or government tax receipts from the preceding tax year.
• Notarized documentation substantiating inheritance, legal settlements, real estate sales, or gift deeds.

Failure to substantiate the legitimate economic origin of funds will result in the immediate revocation of withdrawal privileges, suspension of terminal access, and potential filing of a statutory SAR with supervisory authorities.

ZyroPilot strictly prohibits deposits originating from or withdrawals directed to cryptocurrency privacy mixers (e.g. Tornado Cash, Wasabi Wallet, Blender.io) or privacy-focused coins. Any deposit linked to mixing infrastructure will be quarantined immediately with zero balance credit.

To prevent the platform from acting as a third-party money mule conduit, withdrawals must be directed to a cryptocurrency address owned exclusively by the verified account holder. If the deposit wallet and withdrawal destination wallet differ, the user must prove exclusive ownership of both addresses before payout release.

In compliance with FATF Recommendation 16 ('Travel Rule'), ZyroPilot collects and transmits originator and beneficiary identification metadata when processing virtual asset transfers to or from regulated Virtual Asset Service Providers (VASPs).

Depositing cryptocurrency funds followed by immediate withdrawal requests without active trading activity is classified as illicit pass-through money laundering. ZyroPilot reserves the right to withhold pass-through funds pending comprehensive source of funds audits.

Deliberately executing multiple small deposits or split withdrawals designed to stay below internal threshold review limits triggers immediate compliance flags for smurfing and structuring.

The law strictly prohibits 'tipping off' any subject under investigation. ZyroPilot will neither confirm nor deny the existence of an ongoing investigation or report to the account holder or any unauthorized third party.

ZyroPilot, its officers, employees, and authorized compliance representatives are protected by statutory legal safe harbor provisions. Submitting a SAR in good faith creates zero legal or civil liability toward the reported individual.

Retained records comprise: all submitted photo IDs, biometric verification reports, proof of address utility bills, blockchain transaction hashes, internal balance ledger audits, compliance moderator notes, and statutory filings.

Where ZyroPilot is notified of an active law enforcement subpoena, regulatory audit, or judicial inquiry, relevant compliance files are placed under an indefinite legal hold, overriding all standard disposal schedules.

All archived identity files are isolated in encrypted compliance vaults utilizing AES-256-GCM standards with automated key rotation. Access is strictly audited and limited to authorized compliance supervisors.

Engaging in money laundering, identity fraud, or synthetic arbitrage constitutes a fundamental breach of contract resulting in total forfeiture of challenge entry fees, evaluation balances, and unpaid performance splits without right of reimbursement.

ZyroPilot reserves the sovereign prerogative to refuse account creation, block cryptocurrency deposits, reject withdrawal requests, or terminate business relationships without disclosing internal risk metrics or compliance scoring.

Our compliance frameworks, algorithmic surveillance heuristics, and biometric verification workflows are subjected to annual independent audits conducted by certified external anti-financial crime assessors.

All ZyroPilot compliance personnel, moderators, and support engineers undergo continuous anti-financial crime training, including bi-annual certification in recognizing modern crypto typologies, sanctions evasion, and deepfake identification.