AML Policy

Version 1.0. – 25/06/2025

TABLE OF CONTENT

  1. Company Policy. Objectives 3
  2. Definitions 6
  3. Principles 8
  4. Roles and Responsibilities 11
  5. Training 13
  6. Sanctions and PEPs screening 13
  7. Client Due Diligence 14
  8. Risk Profiling 19
  9. Enhanced Due Diligence (EDD) 24
  10. Transaction Monitoring 29
  11. Suspicious Activity Reporting 30
  12. Validity Date and Periodic Review 34
  13. ANNEX 1-A. KNOW YOUR CLIENT FORM (LEGAL ENTITIES) 35
  14. ANNEX 1-B. KNOW YOUR CLIENT FORM (NATURAL PERSONS) 39
  15. ANNEX 2. LIST OF PROHIBITED AND VERY HIGH-RISK COUNTRIES 42
  16. ANNEX 3. INTERNAL SUSPICIOUS ACTIVITY REPORT FORM 44
  17. ANNEX 4. SUSPICIPUS ACTIVITY REPORT FORM – MLRO RESOLUTION 45
  1. Company Policy. Objectives

Money Laundering is the process of disguising the origin of the proceeds of crime. Terrorist financing provides funds for terrorist activity. The use of products and services by money launderers and terrorists exposes METASWAP SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (METASWAP) to significant criminal, regulatory and reputational risk.

This Anti-Money Laundering and Countering Terrorism Financing Policy (hereinafter referred to as the "AML Policy" or the “Policy”) is designed to provide direction to staff on the approach and management of Anti-Money Laundering (AML) and Counter-Terrorist Financing (CTF) within METASWAP. This Policy supports management’s objective of mitigating the following risks:

  • Money laundering;
  • Terrorist financing;
  • Sanctions;
  • Politically exposed persons (PEPs);
  • Legal and regulatory risk.

This Policy applies to all individuals working at all levels of METASWAP, including senior managers, officers, directors, employees, consultants, contractors, trainees, homeworkers, part- time and fixed-term workers, casual and agency staff, all of whom are collectively referred to as

„staff‟ in this document.

Senior management of METASWAP will provide direction to, and oversight of, the AML and CTF strategy as well as apply a risk-based approach across the business.

METASWAP will enforce a strict anti-money laundering policy with zero tolerance for money laundering activities. METASWAP defines money laundering as any activity that is carried out in an attempt to misrepresent the source of funds actually acquired through illegal processes as funds that were acquired through lawful sources/activities.

All METASWAP’s partners will be obligated to comply with METASWAP’s Policy and with all applicable anti-money laundering laws. Failure to comply can result in severe consequences such as criminal penalties and heavy fines.

The purpose of this Policy is (i) to establish the principles and standards that must be adhered to by METASWAP in relation to the prevention of money laundering and terrorist financing and compliance with international sanction programs, (ii) to define roles and responsibilities of the Company’s officers and employees in this area, (iii) to establish the procedures that must be undertaken by the Company, and (iv) to define the essential features of the governance.

This Policy is enacted and maintained by the director of METASWAP (the “Director”).

The METASWAP’s AML/CTF procedures will be in line with the requirements of the Republic of Poland and EU:

  • Polish Anti-Money Laundering and Counter-Terrorism Financing Act,
  • Act on Counteracting Money Laundering and Terrorism Financing (Ustawa o przeciwdziałaniu praniu pieniędzy oraz finansowaniu terroryzmu),
  • 5th Anti-Money Laundering Directive (5AMLD),
  • 6th Anti-Money Laundering Directive (6AMLD),
  • General Data Protection Regulation (GDPR),
  • Financial Action Task Force (FATF) Recommendations.
  1. Money Laundering

In the context of AML compliance, it is essential for METASWAP to be aware of and actively avoid involvement in three primary categories of offenses related to money laundering. These offenses not only carry severe legal consequences but also pose significant risks to the firm's reputation and operational integrity. The three broad groups of offenses are as follows:

  • knowingly assisting (in a number of specified ways) in concealing, or entering into arrangements for the acquisition, use, and/or possession of, criminal property;

Description: This offense occurs when an individual or entity knowingly participates in activities that assist in concealing the origin, nature, location, disposition, movement, or

ownership of criminal property. This can include aiding in the acquisition, use, or possession of such property with the knowledge that it represents the proceeds of criminal conduct.

Examples: Common forms of knowingly assisting include engaging in transactions that help launder money, setting up complex structures to hide the true ownership of assets, or facilitating the movement of funds through multiple jurisdictions to obscure their origins.

  • failing to report knowledge, suspicion, or where there are reasonable grounds for knowing or suspecting, that another person is engaged in money laundering;

Description: This offense involves the failure to report to the relevant authorities when an individual or firm has knowledge or suspicion, or there are reasonable grounds to suspect, that another person is engaged in money laundering. The obligation to report such activities is a fundamental requirement of AML regulations.

Examples: Failure to report might include ignoring clear signs of suspicious activity, such as large cash transactions, sudden changes in behavior, or the use of offshore accounts without a legitimate business purpose. It can also involve overlooking discrepancies in the information provided by clients that raise red flags about the legitimacy of their funds.

  • tipping off, or prejudicing an investigation;

Description: Tipping off refers to the act of informing someone who is the subject of a money laundering investigation that they are being investigated, thereby potentially compromising the investigation. Prejudicing an investigation involves any action that could obstruct or hinder the investigative process, including the destruction of relevant documents or alerting third parties.

Examples: This could include an employee warning a client that their transactions are under scrutiny, thereby giving them the opportunity to alter or destroy evidence. It could also involve sharing confidential information about an ongoing investigation with unauthorized individuals.

  1. Terrorist Financing

There can be considerable similarities between the movement of terrorist property and the laundering of criminal property, as both processes involve the concealment of the origin, destination, or purpose of funds to evade detection by authorities. In many cases, terrorist groups maintain close connections with organized criminal networks, leveraging these relationships to generate or move funds through illegal activities such as drug trafficking, smuggling, or fraud. These overlapping strategies make it challenging for financial institutions and law enforcement agencies to distinguish between the two types of financial flows.

However, there are two significant differences between terrorist property and criminal property that pose unique challenges for detection and prevention:

  • small transaction amounts;

Description: Unlike large-scale criminal enterprises that often deal with substantial sums of money, terrorist activities can be financed with relatively small amounts of money. For instance, the funds required to carry out a single terrorist act can be minimal, making these transactions less likely to raise red flags within financial systems. This presents a significant challenge in tracking terrorist property because it requires institutions to be alert to even the most minor and seemingly innocuous transactions, which can easily be overlooked amidst the vast volume of daily financial activity.

Examples: Terrorists may utilize low-value transactions or a series of small payments to accumulate the necessary resources for an attack. These transactions can be spread across multiple accounts, jurisdictions, or financial instruments, further complicating detection efforts. Microfinancing of terrorism can also involve everyday consumer purchases, making it indistinguishable from normal financial behavior.

  • legitimate sources of funding;

Description: One of the most challenging aspects of combating the financing of terrorism is that terrorist organizations can be funded through legally obtained income. This includes revenues from legitimate businesses, salaries, and, critically, charitable donations. Funds raised for humanitarian or religious purposes can be diverted to finance terrorist activities,

often without the donors’ knowledge. This makes it incredibly difficult to pinpoint the exact moment when these legitimate funds cross the line and become terrorist property.

Examples: Charitable organizations, especially those operating in conflict zones or regions with weak governance, are particularly vulnerable to exploitation. Terrorist groups may establish or infiltrate charities to funnel funds toward their operations. In some cases, donors may be unaware that their contributions are being misused, while in other instances, fundraising campaigns may be designed to appear entirely legitimate, masking their true intent. This complicates the task of financial institutions and regulators, as distinguishing between legitimate charitable activity and terrorist financing requires in-depth knowledge and sophisticated monitoring techniques.

  1. Definitions

The following definitions are established for the purposes of this Policy:

  • Counterterrorism fighting (CTF): financial countermeasures against the illegal smuggling of cash to terrorist organizations.
  • European supervisory authorities: the European Banking Authority established under Regulation (EU) No 1093/2010 of the European Parliament and of the Council of 24 November 2010 establishing a European Supervisory Authority (European Banking Authority), amending Decision No 716/2009/EC and repealing Commission Decision 2009/78/EC (OJ 2010 L 331, p. 12), the European Insurance and Occupational Pensions Authority established under Regulation (EU) No 1094/2010 of the European Parliament and of the Council of 24 November 2010 establishing a European Supervisory Authority (European Insurance and Occupational Pensions Authority), amending Decision No 716/2009/EC and repealing Commission Decision 2009/79/EC (OJ 2010 L 331, p. 48), and the European Securities and Markets Authority established under Regulation (EU) No 1095/2010 of the European Parliament and of the Council of 24 November 2010 establishing a European Supervisory Authority (European Securities and Markets Authority), amending Decision No 716/2009/EC and repealing Commission Decision 2009/77/EC (OJ 2010 L 331, p. 84).

International sanction and programs: Instruments of a political, diplomatic and economic nature used by international institutions and countries to exert influence in areas such as the prevention and pursuit of terrorism, support and defense of human rights and civil liberties, deterrence of possible armed conflicts or the prohibition of the development of weapons of mass destruction.

  • Money laundering (ML): Participation in any activity that has the aim of acquiring, possessing, controlling, using, converting, transferring, concealing or disguising the nature, source, location, disposition, movement or rights with respect to, or ownership of, criminal property in the knowledge that that property is the proceeds of criminal activity or participation in such activity.
  • Terrorist financing (TF): The provision, deposit, distribution or collection of any property, in any means, directly or indirectly, with the intention that the property be used, or knowing that the property will be used, in whole or in part, to commit a terrorist act.

General Inspector of Financial Information (GIIF): The Polish national Financial Intelligence Unit (FIU), responsible for implementing measures to prevent money laundering and terrorist financing, aimed at creating an effective national anti-money laundering system and ensuring its proper functioning. The GIIF also conducts pre-trial investigations related to the legalization of funds and property derived from criminal activities. The GIIF is the main state institution responsible for coordinating the cooperation of institutions involved in the implementation of anti-money laundering prevention measures.

  • The Financial Action Task Force (FATF): an inter-governmental body established in 1989 by the Ministers of its Member jurisdictions. The objectives of the FATF are to set standards and promote effective implementation of legal, regulatory and operational measures for combating money laundering, terrorist financing and other related threats to the integrity of the international financial system. The FATF is therefore a “policy-making body” which works to generate the necessary political will to bring about national legislative and regulatory reforms in these areas.
  • The Office of Foreign Assets Control (OFAC) of the US Department of the Treasury: a governmental body of the US government that administers and enforces economic and trade sanctions based on US foreign policy and national security goals against targeted foreign countries and regimes, terrorists, international narcotics traffickers, those engaged in activities related to the proliferation of weapons of mass destruction, and other threats to the national security, foreign policy or economy of the United States. OFAC acts under Presidential national emergency powers, as well as authority granted by specific legislation, to impose controls on transactions and freeze assets under US jurisdiction. Many of the sanctions are based on United Nations and other international mandates, are multilateral in scope, and involve close cooperation with allied governments.

Virtual currency: a value represented in the digital form, which is digitally transferable, preservable or tradable and which natural persons or legal persons accept as a payment instrument, but that is not the legal tender of any country or funds for the purposes of Article 4(25) of Directive (EU) 2015/2366 of the European Parliament and of the Council on payment services in the internal market, amending Directives 2002/65/EC, 2009/110/EC and 2013/36/EU and Regulation (EU) No 1093/2010, and repealing Directive 2007/64/EC (OJ L 337, 23.12.2015, pp 35-127) or a payment transaction for the purposes of points (k) and (I) of Article 3 of the same Directive.

Money laundering and terrorist financing are universal globalized phenomena that take advantage of the international economy and the gradual elimination of barriers to trade globally, calling for a coordinated global response by the international community and the financial sector to prevent the sector being used for illicit purposes. The Company recognizes the importance of the fight against money laundering and terrorist financing as it affects essential aspects of social life. METASWAP will always fully cooperate with the relevant authorities in this area.

This Policy has been adopted to ensure that METASWAP complies with the rules and regulations set out in Polish Anti-Money Laundering and Counter-Terrorism Financing Act, in European Banking Authority (the “EBA”), and other international and local Laws and regulations.

  1. Principles

The following principles reflect the minimum METASWAP’s expectations of the Policy as a whole. These principles are mandatory and must always apply.

  • Assessment and management of business risks: All METASWAP’s branches and/or departments, if any, will be classified by levels of risk for the purposes of designing and implementing measures and controls to mitigate such risks, and for applying greater supervision to high-risk areas of business, products and channels. This acknowledges that the risk of involvement in money laundering or terrorist financing is directly related to the type of business carried on by METASWAP or their branches, the products they distribute, and the channels used. It also considers that this threat may be managed more efficiently if there is prior knowledge of the potential risk concerning the various types of business and products.
  • Client risk segmentation and Identification: Clients of METASWAP must be classified by risk level for the purposes of designing and implementing measures and controls to mitigate these risks, and for applying greater control over high-risk clients and transactions. This acknowledges that the risks inherent to money laundering may be managed more efficiently if there is prior knowledge of the potential risk concerning the various types of clients and transactions.
  • Know Your Client: Know Your Client obligations (the “KYC”) to identify and know your client and their activities must be established by appropriate due diligence. This obligation will be met in accordance with the provisions made by the applicable legislation and the risk level in areas of business, activities, products, services, distribution or sales channels, countries of operation and transactions carried out.
  • Prohibited counterparties with enhanced acceptance measures:

METASWAP will not accept counterparties where the necessary data is not available, or which fall into one of the METASWAP’s agreed categories of prohibited counterparties. Prohibited counterparties are as follows:

  • Persons on official sanctioned lists or persons that are related to1 countries prohibited by METASWAP in the terms determined.
  • Persons where information is available to suggest that they may be involved in criminal activities.

1 That have a link to the prohibited country or to individuals or legal resident or incorporated in the prohibited country or are related to the government or the official institutions of the state (even if they are resident outside the prohibited country).

  • Persons with businesses the nature of which makes it impossible to verify the legitimacy of the activities or the origin of funds.
  • Persons who refuse to provide the information or documentation required.
  • Legal entity where the shareholder structure or control structure of the entity cannot be determined.
  • Casinos or gambling companies that are not officially authorized.
  • Unlicensed financial institutions or entities providing money transfer services.
  • Counterparties on the list of prohibited clients in the METASWAP 's corporate policies.
  • Entities providing pornography, violent, or obscenity content or services.
  • Counterparties involved in the production or distribution of weapons and other military products.

The following categories of clients will only be accepted with prior authorization by the senior management of METASWAP:

  • Casinos or gambling companies officially authorized.
  • Foreign exchange companies, money transmission companies or similar.
  • Financial institutions that are registered in countries or territories in which they do not have a physical presence (also known as "shell banks").
  • Transaction monitoring and analysis: Ongoing monitoring of a business relationship with all types of clients must be conducted, controlling and analyzing sensitive or high-risk transactions in connection with money laundering and terrorist financing, in order to detect suspicious transactions.
  • Suspicious transaction reporting and systematic reporting: METASWAP must fulfil the obligation of reporting and cooperate with the relevant authorities.
  • METASWAP ensures that all employees are aware of their obligations to immediately report potentially suspicious transactions to the internal AML function in accordance with the law, make the necessary reviews, and report or notify suspicious transactions to the authorities if required by the law.
  • METASWAP ensures that all employees are aware of their obligations when reporting a potentially suspicious transaction or activity.
  • METASWAP ensures that the blocking of transactions and movement of funds and/or the prohibition of opening accounts is executed in line with local law and regulation.
  • Recordkeeping: METASWAP ensures that robust record-keeping is maintained and that, as a minimum, documents listed below are kept for a period of at least five (5) years as required by the law or any longer periods where applicable:
  • Documentation regarding identifying and knowing your clients/counterparties.
  • Reports submitted to the authorities concerning the suspicious activities of clients/counterparties in connection with potential money laundering and/or terrorist financing, along with any supporting documentation.
  • Registers of training on money laundering and terrorist financing.
  • Any other documents or registers that must be kept by applicable legislation of anti-money laundering or terrorist financing.
  • AML/CTF Training: All employees receive ongoing training on the obligations arising from regulations on the anti-money laundering and terrorist financing. This is facilitated through:
  • Annual trainings to managers and employees and specifically staff performing those jobs that, by nature, are suitable for detecting any events or transactions that may be related to money laundering or terrorist financing, enable the employees to carry out detection and know how to proceed in such cases.
  • The registration of all trainings with a description of the main characteristics and content thereof.
  • Continual sharing of information to all those responsible for anti-money laundering in all business of any regulatory changes in this area, as well as any new systems, techniques or procedures detected that may be used for money laundering or terrorist financing.
  • Sanction programs: METASWAP has effective policies and procedures in place in order to effectively comply with the restrictions under sanction programs and international financial countermeasures.

METASWAP identifies and follows sanction programs and financial countermeasures, monitors the international sanction programs issued by the Republic of Poland, UN, EU and OFAC that might affect the activities of METASWAP.

METASWAP assesses risks and manages to determine the extent to which a business relationship or activity may be affected by international restrictions, and approach must be taken into account in risk assessment methodology.

METASWAP refrains from conducting business relationships with restricted persons and no direct or indirect relations shall be established with persons who are subject to international restrictions. To this end, appropriate and up to date knowledge of counterparties, their activity, and other persons and carrying on relationships with METASWAP should be obtained.

  1. Roles and Responsibilities

METASWAP senior management will allocate a senior individual to be the Money Laundering Reporting Officer (MLRO) as required by the Money Laundering Regulations (MLR).

The MLRO will have overall responsibility for the establishment and maintenance of the METASWAP’s AML/CTF systems and controls and will report to the METASWAP’s senior management.

METASWAP has an appointed MLRO who reports directly to the senior management.

The MLRO, with the support of the senior management, is responsible for ensuring that METASWAP meets the AML compliance requirements and forms the second line of defense. The MLRO oversees the AML systems and controls.

The main activities of the MLRO comprise, but are not limited to, the following:

  • Monitor the compliance of this Policy and other internal and external policies of METASWAP with the AML Law and other applicable AML and data processing legislation and, if necessary, report policies non-compliance with the law to the senior management and suggest appropriate amendments to Policy and other policies of METASWAP
  • Conduct internal AML/CTF training for other officers and employees of METASWAP
  • Communicate with GIIF and other supervisory authorities, which includes obligation to file relevant reports, including reports about suspicious and, if necessary, other transactions
  • Analyze and identify the main ML/TF risk factors applicable to the business activities of METASWAP and elaborate measures preventing or minimizing the identified risk factors
  • Supervise the activities of other officers and employees responsible for the implementation and application of the compliance procedures
  • Directly manage the duties of other senior officers and employees of METASWAP forming the second line of defense
  • Communicate with the clients of METASWAP on the issues related to AML/CTF or data processing
  • Resolve complaints with the clients of METASWAP on the issues related to AML/CTF or data processing
  • Manage the internal KYC system and risks classification applicable to all the clients of METASWAP
  • Manage the transactions monitoring system of METASWAP
  • Manage the system of exchanging information about cryptocurrency transactions and parties to such cryptocurrency transactions with other cryptocurrency operators and

financial institutions

  • Identify incidents indicating non-compliance with the AML Law and other applicable AML/CTF legislation and take measures in respect of the identified incidents
  • Report to the senior management of METASWAP about the identified incidents indicating non-compliance with the AML Law and other applicable AML/CTF legislation, as well as about the identified and analyzed ML/TF risk factors, identified suspicious transactions, classifying the clients of METASWAP, and conducting internal AML/CTF training at METASWAP
  • Supervise the activities of junior officers and employees responsible for the implementation and application of the compliance procedures
  • Take appropriate measures ensuring the compliance of junior officers and employees with the AML Law and other applicable AML/CTF legislation
  • Take appropriate measures aimed at identifying suspicious transactions and other transactions that shall be reported with GIIF or other supervising authorities
  • Identify any breaches in the security system of METASWAP (including breaches which grant third parties illegal access to personal data of Company’s clients) and report such breaches to the senior management of METASWAP

As long as METASWAP does not appoint (hire) other senior officers and employees responsible for implementation and application of compliance procedures at METASWAP and subordinate to MLRO, all the duties and obligations of such senior officers and employees within the first and the second line of defense shall be directly enforced by the MLRO and the Director.

The internal and external audit of METASWAP’s activities forms the third line of defense.

As long as METASWAP does not hire an internal auditor, the audit function in respect of METASWAP shall be performed by an external auditor engaged by the Director of METASWAP.

The external auditor shall be appointed in any cases prescribed by the AML Law or other applicable legislation.

The role of the auditor is conducting independent analysis of METASWAP’s policies and procedures for the purpose of identifying possible or actual violations of legislation and suggesting amendments which would make METASWAP’s activities and documents compliant with the law.

  1. Training

The MLRO shall organize internal and external AML/CTF trainings for the employees responsible for the AML/CTF compliance at METASWAP.

The MLRO shall take reasonable measures and ensure that at least once a year the employee complete an external educational course or program related to AML/CTF issues. If necessary, the MLRO shall ensure that METASWAP covers the educational expenses of the employees related to completion of such educational courses and programs.

The choice of the particular course or program is made by the MLRO in accordance with the areas of study covering AML/CTF training provided in this Section of the Policy. The chosen course or program shall not duplicate the course or program completed by the employees in the previous year.

The course or program chosen by the MLRO shall prescribe at least 30 academic hours of study.

The completion of the course or program shall be confirmed by the respective certificate issued by the educational organization.

The Director shall take reasonable measures and ensure that at least once a year the MLRO of METASWAP conducts an internal AML/CTF training for all other employees and officers of METASWAP responsible for the compliance issues at METASWAP.

The subjects of the internal AML/CTF training shall be chosen by the MLRO of METASWAP in accordance with the approved areas of study covering the AML/CTF training.

The internal training carried out by the MLRO of METASWAP shall provide for at least 20 academic hours of study.

The MLRO shall at least twice a year provide the Director of METASWAP with the list of the upcoming educational courses and programs related to AML/CTF and together with the Director approve the educational plan for the upcoming half-year.

  1. Sanctions and PEPs screening

METASWAP may make use of an external service provider to screen applicants against recognised Sanctions Lists and Politically Exposed Persons (PEPs) lists. Individuals will be screened on on-going basis as well as on initial sign up.

METASWAP will take all required steps to ensure that all customers with whom a business relationship is established are screened against relevant notices published by:

  • the Office of Foreign Assets Control (OFAC)
  • European Union sanctions (EU)
  • United Nations sanctions (UN)

Information leading to “fuzzy matches” will be investigated further, for example where the match was related to a name which can be deemed as popular, and this will be compared against the other information that is collected at point of registration. The full evaluation of the customer’s data will provide a result. Any confirmed matches to sanctions lists will be declined or closed.

METASWAP will screen customers against PEP lists that will help to structure information about PEPs.

The definition of a 'PEP' is an individual that:

  • is or has, at any time in the preceding year, been entrusted with prominent public functions;
  • is an immediate family member of such a person;
  • is a known associate of such a person;
  • is an immediate family member or a known close associate of a person referred to in the paragraph immediately above.

The company does not onboard PEPs due to the increased risk they represent in terms of potential involvement in bribery, corruption, and other financial crimes.

  1. Client Due Diligence

METASWAP establishing a relationship with any client (or any other counterparty) shall apply the following procedures:

  1. Obtain sufficient information about the client to identify who is the actual beneficial owner or on whose behalf transaction is conducted.
  2. Verify the client's identity using reliable and independent source, document, data, or information.

Client Due Diligence Process includes the following specific parameters:

  1. Clients Acceptance Procedures
  1. Risk Based Approach
  1. Client Identification Procedure
  1. Client classification based on risk category

Client Acceptance Procedures

METASWAP adheres to the following principles in deciding whether a client of METASWAP shall be accepted (approved):

  1. Do not accept clients with identity matching persons known to have criminal background: METASWAP inquires the clients whether they have a criminal background or are not banned in any other manner, whether in terms of criminal or civil proceedings or by any enforcement/regulatory agency worldwide. If yes, such clients are not accepted.
  2. Do not accept clients with identity matching with banned person/entity as per relevant stock exchanges in the capital market in any jurisdiction where METASWAP has its business: METASWAP checks whether the client’s identity matches with persons debarred/banned by any stock exchange before any business relations. If yes, such counterparties are not accepted.
  3. Accept clients/counterparties on whom METASWAP can apply appropriate KYC procedures:
  • METASWAP shall obtain complete identification information from the client. It should be ensured that the initial forms taken by the client are filled in completely.
  • All photocopies submitted by the client should be checked against original documents without any exception.
  • 'Know Your Client' guidelines should be followed without any exception.
  • Where possible, METASWAP identifies the ultimate beneficial owners of the counterparties. The identification procedure includes obtaining reliable data on persons who are the final beneficiaries and exercising control and/or ownership of assets/shares/corporate rights of legal entities directly or via the chain of mediated owners.
  • Do not compromise on submission of mandatory information/documents: business relationships should be started only upon receipt of all mandatory information along with authentic supporting documents as per the regulatory guidelines. Where the counterparty refuses to provide information/documents business relationships should not be continued.
  • Check if the client's identity is in the national ban list or lists of FATF or/and OFAC. METASWAP should try to match the name/identity number with the available information from these lists. If METASWAP finds any client name in these lists, METASWAP should inform the supervising authority in the relevant jurisdiction immediately & do not start cooperation with such a client as a requirement for security dealers.

Client Due Diligence (CDD) measures are required for verifying the identity of a new or existing client as a well-performing risk-based ongoing monitoring of the business relationship with the client. The CDD measures consist of 3 levels: simplified, standard, and enhanced due diligence measures, as specified below.

The CDD measures are taken and performed to the extent necessary considering the client's risk profile and other circumstances in the following cases:

  • upon establishment of the business relationship and ongoing monitoring of the business relationship
  • upon verification of information gathered while applying due diligence measures or in the case of doubts as to the sufficiency or truthfulness of the documents or data gathered earlier while updating the relevant data
  • upon suspicion of money laundering or terrorist financing, regardless of any derogations, exceptions or limits provided for in these Guidelines and applicable legislation

Achieving CDD is a process that starts with the CDD measures implementation. When that process is complete, the client is assigned with a documented individual risk level which shall form the basis for follow-up measures, and which is followed up and updated when necessary.

METASWAP has applied CDD measures adequately if METASWAP has the inner conviction that they have complied with the obligation to apply due diligence measures. The principle of reasonability is observed in the consideration of inner conviction.

This means that METASWAP must, upon the application of CDD measures, acquire the knowledge, understanding and assertation that they have collected enough information about the client, the client's activities, the purpose of the business relationship and of the transactions carried out within the scope of the business relationship, the origin of the funds etc., so that they understand the client and the client's (business) activities, thereby taking into account the client's risk level, the risk associated with the business relationship, and the nature of such relationship.

Such a level of assertation must make it possible to identify complicated, high-value, and unusual transactions and transaction patterns that have no reasonable or obvious economic or legitimate purpose or are uncharacteristic of the specific features of the business in question.

  1. Individual customers

At point of registration within the website or mobile application, METASWAP will capture the following customer information of an individual:

  1. First and last name(s) of the client.
  1. Personal identification code, if applicable.
  1. Date of birth which can be used as an alternative to personal identification code in respect of the clients who are foreigners.
  2. Information about the client’s place of residence or seat.
  1. Information about economic or professional activity of the client.
  1. Information about the expected turnover of the client.
  1. Contact details of the client.

At this stage, METASWAP will screen applicants against sanctions and PEP lists.

METASWAP will only permit one e-wallet per person and so the details provided will be checked against the existing customer database to confirm that they do not already hold an account, and they were not previously unsuccessful.

In order to identify the client, the client shall provide METASWAP with a valid identity document. If the client refuses to provide a valid identity document, the client shall not be accepted.

The following valid identity documents may be used as the basis for the identification of an individual:

  1. Passport
  1. Identity card
  1. Residence permit card, if not used as a proof of address document
  1. Driving permit issued in a EU country
  1. Driving permit issued in a foreign country if the document includes user's name, photograph or facial image, signature or image of a signature, and date of birth or personal identification code.

The first credible and independent source used for the identification of the client is always an identity document specified above or a colored and legible copy/image of such a document.

The following information obtained is the second reliable and independent source used for the identification of the client:

✔ the client's photo (selfie) with an identity document;

✔ proof of address

✔ information for checking the data directly associated with the person (e. g. place of work, residence, or study).

The following documents can be used as the proof of address:

  1. Bank statement or utility bill (including apartment bills issued by a company managing the residential complex (condominium) of the client’s apartment) containing the name of the client and his residential address issued no earlier than 3 months before the client establishes the business relationship with the Company.
  2. Valid driving permit if such driving permit contains the name of the client, the facial image of the client, signature or image of the signature of the client, and the residential address of the client, and such document was not used as the basis for the identification of the client as a natural person.
  3. Registration at place of residence certificate or another similar document issued by a government authority no earlier than 6 months before the client establishes the business

relationship with METASWAP which contains the full name of the client and his full residential address.

  1. Tax ID certificate issued by a government authority no earlier than 12 months before the client establishes the business relationship with METASWAP which contains the full name of the client and the full residential address of the client.
  2. Lease agreement valid for at least 12 months, subject that such lease agreement is registered (certified) with a government authority or notarized by a notary of the client’s country of residence and the client provides the letter (certificate, notification) from a government authority or a notary issued no earlier than 3 months before the client establishes the business relationship with METASWAP which confirms the existence and validity of the lease agreement, or subject that such lease agreement is supported by a utility bill no older than 3 months or an apartment bill no older than 3 months issued by a company managing the residential complex (condominium) of the client’s apartment.

The name and address of the client shall be clearly visible on a document provided by the client as a proof of address.

METASWAP shall not accept screenshots and photos of the monitor screen.

  1. Legal entities

METASWAP identifies the client which is a legal entity and their representative and retains the following data on the client:

  1. Business name or name (with the legal form);
  1. Registry code or registration number and date of registration;
  1. Name and date(s) of birth of the director(s) or member(s) of the management board or member(s) of another equivalent body;
  2. Address;
  1. Place of business;
  1. Area of activity;
  1. Business trading name if different;
  1. Main business partners;
  1. Information about expected turnover when using METASWAP 's services; 10.Purpose and nature of establishing the business relationships;
  1. Names of all beneficial owners who own or control more than 25% of its shares or voting rights.
  1. Contact details.

METASWAP verifies the correctness of the client's data specified above using information originating from a credible and independent source for that purpose. Where METASWAP has access to the commercial register, register of non-profit associations and foundations or the data of the relevant registers of a foreign country, the submission of the documents specified does not need to be demanded from the Client.

The identity of the legal entity and the right of the legal entity's representation can be verified on the basis of a document specified above, which has been authenticated by a notary or certified by a notary or officially, or on the basis of other information originating from a credible and independent source, including means of electronic identification and trust services for electronic transactions, thereby using at least two different sources for verification of data in such an event.

The representative of the legal entity shall be identified as the client who is a natural person in accordance with the Policy. METASWAP must also identify and verify the nature and scope of the right of representation.

The name, date of issue and name of issuer of the document that serves as a basis for the right of representation must be ascertained and retained, except in case, when the right of representation was verified using information originating from the relevant register (e. g. the commercial register, register of non-profit associations and foundations or the relevant register of a foreign country).

METASWAP must observe the conditions of the right of representation granted to the legal entity's representatives and provide services only within the scope of the right of representation.

  1. Risk Profiling

METASWAP should accept the clients/counterparties based on the risk they are likely to impose. The aim is to identify clients who are likely to bear a higher-than-average risk of money laundering or terrorist financing.

For this purpose, METASWAP classifies the clients into three categories:

  1. Low Risk Clients

  1. Medium Risk Clients

  1. High Risk Clients

Depending on the classification of the client, the appropriate due diligence process shall apply. That is, for High Risk clients a higher degree of due diligence shall apply.

The risk profiling is not a static element of the AML/CTF procedures of METASWAP. After METASWAP makes the on-board risk assessment of the client, the client can further be assigned to another risk category.

For instance, a client that has been classified as a Low Risk client during onboarding process may further be assigned to Medium or even High Risk client.

At the same time, a client that has been classified as a Medium Risk client can further be assigned to the group of Low Risk clients if, for example, the client changes the country of residence or the transactions of the client pose no ML/TF threat to METASWAP.

The following factors indicate that a client is a Low Risk client:

  1. The client is a permanent resident of the EU country, or the client is a legal entity registered in the EU country, subject that the legal entity is managed from the EU territory.
  2. Information on a client’s identity is publicly accessible.

  1. Client’s activities and their accounting methods are clear and comprehensible.

  1. The activities are limited to transactions with a limited number of customers, and the value of such transactions does not exceed EUR 1,000 or an equivalent in another currency.
  2. The client declares its turnover from financial activities over a calendar year at up to EUR 30,000 or an equivalent in another currency.

At the same time, the following factors indicate that a client is a High Risk client:

  1. At the time of identification, the client is reluctant to perform the actions necessary for identification.

  1. A client who is a natural person is a permanent resident of a country that is not a member of the Financial Action Task Force (FATF) on Money Laundering2 or of an international organization with an observer status at FATF.
  2. Unusual client’s activities (more frequent payments in cash, increasing sums involved in monetary operations, payment for products or services that are not related to the client’s main activities etc.)
  3. Client’s age, job position, and financial standing (client’s income is small compared to the scope of his financial activities) are objectively inconsistent with the financial activities performed by the client.

2 https://www.fatf-gafi.org/en/countries/fatf.html

METASWAP takes into account the following factors in determining the risk class of the client at the time of the acceptance procedures:

  1. Client’s country of residence: country of residence of a client who is a natural person, country of registration and actual place of business of a client that is a legal entity, country of residence of persons acting as directors or/and UBOs of the client that is a legal entity.
  2. Description of the client’s activities: information about the job/profession/business of the client, information about the intended use of the account, information about the planned turnover and volume of the transactions per month/per year, information about the client’s customers and counterparties and their countries of residence.
  3. Age, professional experience, and financial standing of the client.

  1. Client’s behavior during onboarding process (the speed with which the client uploaded the documents and passed identification procedures, willingness to cooperate with customer support etc.).
  2. Technical information about the IP addresses used by the client for onboarding and information about any discrepancies regarding the IP addresses (abnormal or abrupt change of IP address, IP addresses registered in various jurisdictions etc.).

METASWAP also matches the location(s) of IP addresses used by the client with the location claimed by the client as a place of his residence.

Upon the verification of the client’s information, the client is classified as a Low Risk client if all the following factors are in place:

  1. The client who is a natural person is a resident of European Economic Area (EEA), Switzerland, the United Kingdom of Great Britain and Northern Ireland, the United States of America (USA), Canada, Australia, New Zealand, or Japan OR the client that is a legal entity is registered in European Economic Area (EEA), Switzerland, the United Kingdom of Great Britain and Northern Ireland, the United States of America (USA), Canada, Australia, New Zealand, or Japan and has the actual place of business in one of these jurisdictions, and the UBOs and directors of the legal entity are also residents of one of these jurisdictions.
  2. The client’s age, professional experience, and financing standing match the provided description of the client’s activities OR based on the provided information, the client is intending to perform only a limited number of transactions with a limited number of customers, and the value of such transactions will not exceed EUR 1,000 or an equivalent in another currency.
  3. The customers (counterparties) of the client are the residents of one of the following jurisdictions: European Economic Area (EEA), Switzerland, the United Kingdom of Great Britain and Northern Ireland, the United States of America (USA), Canada, Australia, New Zealand, or Japan.
  4. The client rapidly complied with the onboarding process and was always ready to cooperate with the customer support (it took the client a short amount of time to pass the identification procedures and the client did not have to log in the account several times for completing the identification process).
  5. During the onboarding process the client entered the account from the same IP address or from various IP addresses that are originating from the same country and the same city (region) of the country.

The client is classified as a Medium Risk client if the following factors are in place:

  1. The client who is a natural person is not a resident of European Economic Area (EEA), Switzerland, the United Kingdom of Great Britain and Northern Ireland, the United States of America (USA), Canada, Australia, New Zealand, or Japan, however, such client is a resident of the country that is a member of the Financial Action Task Force (FATF) on Money Laundering and is not included in the list of banned jurisdictions provided by this Policy.
  2. The client that is a legal entity is registered in European Economic Area (EEA), Switzerland, the United Kingdom of Great Britain and Northern Ireland, the United States of America (USA), Canada, Australia, New Zealand, or Japan, however, the actual place of business of the legal entity is in another country not listed here which is a member of the Financial Action Task Force (FATF) on Money Laundering and is not included in the list of banned jurisdictions provided by this Policy.
  3. The directors or/and UBOs of the client that is a legal entity are not the residents of European Economic Area (EEA), Switzerland, the United Kingdom of Great Britain and Northern Ireland, the United States of America (USA), Canada, Australia, New Zealand, or Japan, however, such persons are the residents of the countries that are members of the Financial Action Task Force (FATF) on Money Laundering and are not included in the list of banned jurisdictions provided by this Policy.
  4. The customers (counterparties) of the client are not the residents of European Economic Area (EEA), Switzerland, the United Kingdom of Great Britain and Northern Ireland, the United States of America (USA), Canada, Australia, New Zealand, or Japan, however, they are the residents of the countries that are members of the Financial Action Task Force (FATF) on Money Laundering and are not included in the list of banned jurisdictions provided by this Policy.

  1. The client’s age, professional experience, or financing standing do not fully match the provided description of the client’s activities; however, METASWAP does not identify any substantial inconsistency.
  2. It took the client a substantial amount of time to complete the onboarding process or/and the client entered the account several times for passing the identification procedures or/and it took the client several attempts to complete the identification process; however, all the documents of the client are in place, and there were no inconsistency with the client’s IP address (the client entered the account

from the same IP address or from various IP addresses originating from the same city which match the city of client’s place of residence).

The client is classified as a High Risk Client if the following factors are in place:

  1. The client who is a natural person is a resident of a banned jurisdiction provided in this Policy or/and a resident of a country that is not a member of the Financial Action Task Force (FATF) on Money Laundering.
  2. The client (or the director/UBO of the client-legal entity) is PEP, or a family member or associate of PEP, or a person included in sanctions list, or a person included in the terrorists list, or a person that is subject to international search, or a person with other criminal background.
  3. The client that is a legal entity is registered or has place of business in a banned jurisdiction provided in this Policy, or/and in a country that is not a member of the Financial Action Task Force (FATF) on Money Laundering.
  4. The director or the UBO of the client that is a legal entity is a resident of a banned jurisdiction provided in this Policy or/and a resident of a country that is not a member of the Financial Action Task Force (FATF) on Money Laundering.
  5. The client’s age, professional experience, or financing standing are objectively inconsistent with the provided description of the client’s activities.
  6. The description of the client’s activities is vague or unclear OR the description provided by the client leads to the conclusion that the client needs a license to perform the described type of activities while the client does not have a license OR the provided description leads to the conclusion that the described activities can be claimed illegal.
  7. The client requested/claimed the abnormal number of transactions or turnover volume per month/per year.
  8. The customers (counterparties) of the client are the residents of banned jurisdictions provided in this Policy or/and residents of countries that are not members of the Financial Action Task Force (FATF) on Money Laundering.
  9. It took the client a substantial amount of time to complete the onboarding process or/and the client entered the account several times for passing the identification procedures or/and it took the client several attempts to complete the identification process AND the Company noticed inconsistency with the client’s IP address (the client entered the account from different IP address originating from different countries, or from different regions of the same country but the IP address changed within short periods of time).
  10. The client rapidly complied with onboarding process, however, the Company noticed inconsistency with the client’s IP address – the client entered the account from various IP addresses

originating from different countries, and the time frames between each login were so short that the client objectively could not move from one country to another within such a time frame.

If the client is classified as a Low Risk client, the client has the full access to the services of METASWAP and is subject to standard due diligence and transactions monitoring. All the transactions performed by such a client are presumed to be not suspicious unless METASWAP notices any suspicious changes in the behavior of the client or receives information about the illegal activities of the client.

If the client is classified as a Medium Risk client, the client has the full access to the services of METASWAP, however, such client is subject to enhanced due diligence (EDD) which requires METASWAP to conduct thorough monitoring of the client’s transactions. No presumption applies to the transactions of such a client, all his or her transactions are subject to close analysis. If METASWAP has any suspicions in relation to the respective transaction, METASWAP will immediately request the client to provide the supporting documents and information.

If the client is classified as a High Risk client, such client is denied access to the services of METASWAP unless the MLRO of METASWAP approves such a client and allows him to use the services of METASWAP. The MLRO Officer shall not approve the High Risk client if such client is a person included in sanctions list or terrorists list, or a person with a criminal background. If MLRO approves such High Risk client as the client of the Company, such client is subject to EDD which provides for thorough monitoring of all the client’s transactions. In this case, METASWAP applies the presumption that all the transactions of the client are suspicious unless the client proves otherwise.

  1. Enhanced Due Diligence (EDD)

Enhanced due diligence is required in circumstances giving rise to an overall higher risk.

Customers subject to EDD are required to provide additional documentary evidence and information.

As a result, the MLRO of METASWAP will take a decision to continue or terminate business relations with the respective client as well as to continue or terminate business relations with other clients who have the same beneficiaries or who conduct transactions on behalf of the same third persons.

  1. Source of Wealth and Source of Funds

Understanding the distinction between a customer's Source of Wealth and Source of Funds iscrucial for evaluating the legitimacy of their financial activities. METASWAP implements the following detailed procedures to assess these elements effectively:

Source of Wealth refers to the origin of the customer's overall wealth. This includes the various meansthrough which the customer has accumulated their wealth over time. Information Collection:

Employment: Gather details about the customer's employment history, including job titles, salary levels, and employers.

Business Activities: Collect information on any businesses the customer owns or is involvedin, including business type, financial performance, and ownership structure.

Investments: Obtain records of significant investments made by the customer, including realestate, stocks, bonds, and other assets.

Inheritance: If applicable, verify the source and amount of inherited wealth, including detailsof the estate or will.

Verification:

Consistency Check: Ensure that the reported Source of Wealth aligns with the customer's overall financial profile and declared income sources.

Documentation Review: Analyze provided documentation (e.g., employment contracts, business registration documents, investment portfolios) to validate the claimed Source of Wealth.

Source of Funds -pertains to the origin of the specific funds used in a particular transaction. It ensures that these funds are legitimate and consistent with the customer's Source of Wealth. Verification Procedures:

Transaction Analysis: Examine the details of individual transactions to determine the origin of the funds. This includes reviewing the source accounts and transaction history.

Supporting Documentation: Request and review relevant documents such as bank statements,financial records, and proof of transaction sources to verify the legitimacy of the funds.

Consistency Check:

Alignment with Wealth Profile: Confirm that the Source of Funds is consistent with thecustomer's declared Source of Wealth and business activities.

Transaction Patterns: Identify any unusual or inconsistent transaction patterns that may indicate discrepancies or potential red flags.

High-Risk Situations. Enhanced Due Diligence:

Additional Documentation: In cases deemed high-risk, request further documentation such astax returns, detailed bank statements, or comprehensive financial records to corroborate the Source of Funds and Source of Wealth.

Ongoing Monitoring: Continuously monitor the customer's transactions and financial activities for any discrepancies or unusual patterns that may arise.

Red Flags:

Inconsistencies: Look for inconsistencies between the Source of Wealth and Source of Funds,such as large transactions that cannot be explained by the customer's declared wealth.

Unusual Activity: Investigate any unusual or atypical transactions that deviate from the customer’s normal financial behavior.

  1. High-Risk Jurisdictions

METASWAP identifies certain jurisdictions as high-risk based on various factors, including weak Anti-Money Laundering (AML) and Countering the Financing of Terrorism (CFT) controls, high levels of corruption, or the imposition of international sanctions. To manage the risks associated with transactions or relationships involving these jurisdictions, METASWAP implements the following enhanced due diligence (EDD) measures:

Enhanced Scrutiny

Detailed Verification: All transactions involving high-risk jurisdictions undergo rigorous scrutiny. This includes thorough verification of:

Customer Identity: Confirm the identity of the customer through reliable and independent

sources.

Business Activities: Assess the legitimacy and nature of the customer’s business activities, including the origin and destination of funds.

Purpose of Transaction: Examine the purpose of the transaction to ensure it is consistent withthe customer’s known business profile and the nature of their operations.

Risk Assessment: Evaluate the specific risks associated with each transaction or customer relationship linked to high-risk jurisdictions. This includes analyzing factors such as the natureof the transaction, the customer’s risk profile, and the jurisdiction's AML/CFT environment.

Additional Documentation

Requirements: In transactions involving high-risk jurisdictions, METASWAP may request additional documentation to verify the legitimacy of the funds and the transaction itself. This documentation may include:

Detailed Financial Statements: Provide comprehensive financial records to substantiate the source of funds.

Proof of Transaction Origin: Include evidence of the origin of funds, such as bank statementsor transaction records.

Supporting Documentation: Submit additional documents that provide context and verification for the transaction, such as contracts, invoices, or correspondence.

Verification Procedures: Ensure that all additional documentation is reviewed carefully to confirm its authenticity and relevance to the transaction.

Ongoing Monitoring

Continuous Oversight: The Company conducts ongoing monitoring of customers and transactions associated with high-risk jurisdictions. This includes:

Transaction Monitoring: Regularly review transactions for any signs of suspicious activity ordeviations from normal behavior.

Customer Profile Updates: Continuously update and reassess customer profiles to reflect anychanges in their risk status or the risk environment of the high-risk jurisdiction.

Risk Mitigation: Implement measures to address any identified risks promptly. This may include adjusting the level of scrutiny, requesting further documentation, or taking other actions to mitigate risk.

Updating Risk Assessments

Regular Reviews: METASWAP maintains an updated list of high-risk jurisdictions based onguidance from international bodies such as the Financial Action Task Force (FATF). This listis reviewed and updated regularly to reflect changes in the risk landscape.

Procedural Updates: Regularly review and revise EDD procedures to ensure they align with the latest risk assessments and regulatory requirements.

  1. Transaction Monitoring

METASWAP will use a combination of system alerts and blocks in order to facilitate effective transaction monitoring. METASWAP will regularly review the parameters to ensure they remain relevant. METASWAP will conduct ongoing monitoring of the business relationship which includes:

  • Scrutinising transactions, including source of funds;

  • Keeping up to date documents held by METASWAP or a third party client merchant on the customer

Monitoring is designed to identify unusual activity which may be indicative of money laundering or terrorist activity. Monitoring undertaken by METASWAP will:

  • Flag up transactions for further examination;

  • Be reviewed promptly;

  • Lead to appropriate action.

  • Where monitoring is undertaken by a third party, the process is to be checked and approved by METASWAP.

After a corporate customer has been approved and brought on board, METASWAP performs a comprehensive process of transaction monitoring.

Key transaction monitoring data points include, but are not limited to:

  • abnormal transaction volume growth or decline;
  • growth or decline in relevant ratios such as returns and credits;
  • growth or decline in transaction average size; METASWAP will carry out the following checks:
  • Bank account loads – incoming transfer must come from a bank account registered under the customers' name. In order to validate that the customer is in fact the bank account holder, METASWAP requires the customer to submit a copy of their current bank statement (dated within the past 3 months) for the first load.
  • P2P loads – subject to internal transaction monitoring rules.

  • Credit/debit cards loads - verification code on the descriptor for the initial transaction in the customer’s card statement used for loading the account where customer is asked to confirm that code prior to any further funding.
  1. Suspicious Activity Reporting

When any employee either knows, suspects or has reasonable grounds for knowing or suspecting that a money laundering offence has been or is being committed they must make a suspicious activity report (SAR) to the MLRO.

If an employee becomes aware of, or suspect that, such offences are occurring during the course of their normal duties then they shall make a SAR to the MLRO.

METASWAP has made a SAR template available to the employees, all reports must be made using this template to ensure consistency. All reports must be fully documented and must include at a minimum the following information:

  • Name and contact details of person making the report
  • The customers personal details
  • The suspicious transaction details; date, amount and transaction identifier.
  • Details of any related transactions (as above)
  • The reasons for the suspicions.

The fact that a report has been made and the content of the report must remain confidential at all times. The employee who forms or is aware of a suspicion of money laundering shall not discuss it with any outside party or any other member of staff unless directly involved in the matter causing suspicion.

No employee shall at any time disclose a money laundering suspicion to the person suspected. If circumstances arise that may cause difficulties with a client contact, the member of staff must seek and follow the instructions of the MLRO.

No copies or records of money laundering suspicion reports are to be made, except by the MLRO who will keep such records secure, and separate.

All the employees, anywhere within METASWAP, shall respond in full to all enquiries made by the MLRO for the purposes of evaluating a SAR. Information provided to the MLRO in response to such enquiries does not breach client confidentiality or professional privilege, and no member of staff shall withhold information on those grounds.

In some circumstances it may be necessary to obtain information from the customer before deciding whether or not to make a disclosure to the GIIF. In these cases the MLRO may request an appropriate person (such as a Fraud and Security, Marketing or Customer Services Supervisor) to make discreet enquiries of a customer. In such circumstances care will be taken to ensure that the offence of „tipping-off‟ will be avoided.

Under Section 7 of the Data Protection Act (DPA) a customer can request information regarding any of their personal information held or processed by an organisation – a Subject Access Request.

Section 29 of the DPA provides some exemption from responding to such a request when a SAR has been made, whether or not it has been reported to the GIIF.

Where a Subject Access Request is received and it is established that a SAR has been issued then the authority of the MLRO must be sought before any information relating to the SAR is released to the customer. The MLRO will keep a record of all such referrals. customer’s normal financial behavior.

  1. External Reporting

The MLRO (or, if absent, the named deputy) shall receive and evaluate internal suspicion reports and decide whether a formal disclosure is to be made to the authorities. If so deciding, the MLRO will make the formal disclosure on behalf of METASWAP using the Suspicious Activity Report Form (see Appendix 14.2.).

Prior to making any such report the MLRO will undertake internal enquiries to satisfy themselves that, based on the information in the report and the result of their enquiries, they know or suspect, or have reasonable grounds to know or suspect, an offence of

money laundering. External reports will not be made until all available information has been considered by the MLRO, unless this would render such reports untimely. Such information includes:

  • The financial circumstances of a customer or any person on whose behalf the customer has been acting
  • The features of all transactions that the firm has entered into with or for the customer or any person on whose behalf the customer has been acting.

Where the MLRO does not have immediate access to such information it will be provided as soon as is practicable by any relevant employee of the firm or any relevant employee of any organisation that provides outsourced services on behalf of METASWAP.

The decision whether or not there is knowledge, suspicion or reasonable grounds for knowledge or suspicion of a money laundering offence will rest with the MLRO or their delegated representative alone. Such a decision will not be subject to the consent of any other person within METASWAP.

From the moment a suspicion of money laundering arises, no further work will be carried out on the matter that gave rise to the suspicion. Neither commercial considerations nor the difficulty in responding to the clients enquiries on the matter shall be permitted to take precedence over METASWAP’s legal obligations in this regard.

The GIIF has up to seven (7) days to confirm whether or not the transaction, for which a consent has been requested, can proceed – until the GIIF gives consent, the transaction cannot proceed – it is frozen. In these circumstances, the staff member must be very careful that they do not „tip off‟ the customer about the reason for the delay in processing the transaction.

Where the GIIF gives notice that consent to a transaction is refused, a further thirty one

(31) day period (the “Moratorium”) commences on the day that notice is given. The thirty one (31) days include Saturdays, Sundays and public holidays. It is an offence to undertake the transaction during this period as the participant would not have the appropriate consent. If the Moratorium period expires and no such action has been taken, the reporter is free to proceed with the act(s) detailed in the initial disclosure.

It is METASWAP policy that all requests for consent must be processed through the MLRO – it is expressly forbidden for employees to make a „consent‟ request direct to the GIIF.

  1. Reporting Transactions Over 15,000.00 EUR
  1. Any employee for the AML/CTF compliance at METASWAP shall, upon the receipt of the respective information, notify the MLRO about all the performed virtual currency exchange transactions or transactions in virtual currency, if the value of such monetary transaction is equal to or exceeds EUR 15,000 or an equivalent amount in foreign or virtual currency, regardless of whether the transaction is concluded by performing one or several interrelated monetary transactions. For the purposes of this paragraph of Reporting transactions over EUR 15,000 procedure, several interrelated monetary transactions are considered to be several virtual currency exchange transactions or transactions in virtual currency in funds performed during the day, when the total amount of transactions and transactions in funds is equal to or exceeds 15,000 euros or an equivalent amount in foreign or virtual currency.
  2. The MLRO shall notify the GIIF about all the transactions described in the preceding paragraph of the Reporting transactions over EUR 15,000 within 7 working days from the date of execution of the monetary transaction or conclusion of the transaction.
  3. In determining whether the several monetary transactions are interrelated and in total amount to or exceed the sum of EUR 15,000, METASWAP shall take into account the following factors:
    1. All the transfers are received by the client from the same person/entity, the group of affiliated persons/entities, or the same crypto wallet/account.
    2. All the withdrawals are made by the client to the same crypto wallet or bank account, or in favor of the same person/entity or affiliated persons/entities.
    3. The client received funds from several unrelated crypto wallets/accounts, but the time period between the first and the last transaction is less than 5 minutes.
    4. The payers of the client are the parties to the same contract concluded with the client.

  1. The payees of the client are the parties to the same contract concluded with the client.

  1. The payer of the client has appointed a third party to pay to the client under the contract concluded between the payer and the client, and both the payer and the third party made the payment under the contract concluded between the payer and the client.
  1. Validity Date and Periodic Review

This Policy is effective on METASWAP’s wide basis from the date of its publication.

Its contents will be reviewed periodically, and any changes or modifications will be made as appropriate.

VERSION CONTROL TABLE

Version

Approval date

Changes description

Director’s signature confirming

approval

MLRO’s

signature confirming approval

1.0

25.05.2025

First issue

Denys Makhno

Denys Makhno

ANNEXES

  1. ANNEX 1-A. KNOW YOUR CLIENT FORM (LEGAL ENTITIES)

COMPANY BASIC INFORMATION

Company name:

Registration number:

Date of Formation:

Registered Company Address (Street, House Number, Postcode/ Zip Code, City,

Country):

Address of Business (if different from Registered Company Address):

TIN (number, country):

Website:

Telephone:

Email:

Industry:

Goods and Services:

Describe in detail the business

processes of the company:

Describe the purposes for which you

plan to use the services of METASWAP:

Names of the director, members of the management board, or other body

replacing the management board, and their authorization in representing the

legal person:

BUSINESS DESCRIPTION

Business structure of the company:

Business description:

In which countries Business is run?

Describe the primary focus of the

Business’s business line:

Top 5 business partners and jurisdictions in which they reside:

Annual turnover:

DIRECTOR

First Name:

Last Name:

Passport/ID number:

Date of Issue:

Date of Expiration:

Nationality (Citizenship):

Adress of residence:

Date of Birth:

Place of Birth:

Sex

Male/Female

PEP

YES / NO

Tax Residency (country, tax number):

SHAREHOLDER-LEGAL ENTITY

Legal Name of the entity:

Incorporation Date:

Registration Number:

TAX Identification No:

Registered Company Address

(Street, House Number, Postcode/ Zip Code, City, Country):

Place of business (if different from

Registered Company Address):

Director (name, surname, ID):

SHAREHOLDER-NATURAL PERSON

First Name:

Last Name:

Passport/ID number:

Date of Issue:

Date of Expiration:

Nationality (Citizenship):

Adress of residence:

Date of Birth:

Place of Birth:

Sex

Male/Female

PEP

YES / NO

Tax Residency (country, tax number):

BENEFICIAL OWNER

First Name:

Last Name:

Passport/ID number:

Date of Issue:

Date of Expiration:

Nationality (Citizenship):

Adress of residence:

Date of Birth:

Place of Birth:

Sex

Male/Female

PEP

YES / NO

Tax Residency (country, tax number):

SOURCE OF FUNDS

Please specify the source of funds

Name:

Signature:

Title:

Date:

LIST OF REQUIRED DOCUMENTS

Please provide all available company documents as listed below. Once approved we will finalize your application.

Type of document

1.

Proof of ID (International passport, EU ID card)

2.

Selfie with the Document

3.

Proof of Address

Beneficial Owner (UBO) ONLY, repeat steps above and include:

4.

Current CV (containing experience, education, occupation)

5.

Source of wealth and funds

6.

Certificate of incorporation

7.

Memorandum of Association

8.

Articles of Association

9.

Certificate of Shareholders

10.

Certificate of Registered address

11.

Reference letter from the bank confirming company bank account details

12.

List of directors

  1. ANNEX 1-B. KNOW YOUR CLIENT FORM (NATURAL PERSONS)

This document describes list of information shall be obtained when METASWAP applies CDD measures and criteria for information requested. This list is non-exhaustive and sets minimal requirements for information collected. Additional information may be requested by the decision of METASWAP’s employee, if it´s necessary for adequate performing of CDD measures.

Please note! All the information should be filled out in English language as well as provided documents.

KYC QUESTIONNAIRE

Full name:

Date of birth:

Residential Address:

Nationality:

Passport / ID number:

Date of Issue:

Date of Expiration:

Country of issue of Passport / ID number:

Email:

Phone number:

Purpose of the business relationship:

Source of Wealth declaration:

Verification if the Customer is a PEP, their family member or close associate: YES/NO

Name:

Signature:

Date:

LIST OF REQUIRED DOCUMENTS

Please provide all available documents as listed below. Once approved we will finalize your application.

Type of document

1.

Proof of ID (International passport, EU ID card)

2.

Selfie with the Document

3.

TIN (tax identification number)

4.

Proof of Address

5.

Source of wealth / Funds declaration

PROOF OF SOURCE OF WEALTH AND FUNDS

Source of Wealth (SoW)

SoW refers to the origin of the customer’s entire body of wealth (i.e., total assets). SoW explains the activities the customer participates in and their geographical location. This information will usually indicate as to the volume of wealth the customer could be expected to have, and a picture of how the customer acquired such wealth.

Examples of SoW: ownership of business, employment, inheritance, investments.

Source of Funds (SoF)

SoF refers to the origin of funds being deposited, received, or transferred with the financial institution. SoF tells where the money is coming from, which can be proven through bank statements, tax returns etc.

Examples of SoW and SoF and supporting documentation required:

Income category

Documents required

Income from salary

  • Pay slips for the past 3 months and bank statement showing the salary being paid into this bank

account

  • Audited personal tax statement
  • Income tax declaration

Inheritance

  • Grant of Probate (with a copy of the Will) clearly showing the amount of inheritance and a bank

statement showing these funds being deposited into the account

  • Signed letter from a licensed solicitor or estate trustees on letter-headed paper indicating the amount of inheritance, accompanied by updated proof of solicitor’s regulated status and a bank

statement showing these funds being deposited

into the account

Gift/Donation

  • Notarized gift/ donation letter and a bank

statement showing these funds being deposited into the account

  • Gift agreement and a bank statement showing these funds being deposited into the account

Scholarship

  • Documents confirming received scholarship and a bank statement showing these funds being deposited into the account
  • Scholarship award letter and a bank statement showing these funds being deposited into the account
  • Scholarship contract/agreement and a bank

statement showing these funds being deposited into the account

Savings/deposits

  • Savings statement

  • Bank statement

Divorce Settlement

  • Copy of court order indicating the amount of settlement and a bank statement showing these funds being deposited into the account
  • Letter detailing divorce settlement as well as indicating the amount of settlement and signed by a licensed solicitor on letterheaded paper accompanied by updated proof of solicitor’s

regulated status and a bank statement showing these funds being deposited into the account

Government grants (retirement income, grants for veterans, research grants, etc.)

  • Type of received grant and a bank statement showing these funds being deposited into the account
  • Documents confirming/ proving received grant and a bank statement showing these funds being deposited into the account

The company profit/dividends

  • Dividend contract note or equivalent and a bank statement showing these funds being deposited into the account
  • Copy of latest audited financial statements
  • Tax declaration form

Sales (of property, goods, shares etc.)

  • Copy of contract of buy/sale/production and a bank statement showing these funds being deposited into the account
  • Prove of e-shop sale report (screenshot) with the list of items sold and a bank statement showing these funds being deposited into the account
  • Shipping documents and a bank statement showing these funds being deposited into the account
  • Proof of delivery and a bank statement showing these funds being deposited into the account
  • Customs declaration
  • Audited financial report
  • Tax report
  • PayPal statement evidencing the money and a

bank statement showing these funds being deposited into the account

Loan or investment

  • Loan/Investment agreement or other documents

confirming the agreement and a bank statement showing these funds being deposited into the

account

  1. ANNEX 2. LIST OF PROHIBITED AND VERY HIGH-RISK COUNTRIES

Prohibited and very high-risk countries list

Afghanistan

Prohibited

Bahamas

Prohibited

Barbados

Prohibited

Belarus

Prohibited

Botswana

Prohibited

Burundi

Prohibited

Cambodia

Prohibited

Cayman Islands

Prohibited

Central African Rep

Prohibited

Comoros

Prohibited

Congo, the Democratic Republic

Prohibited

Cuba

Prohibited

El Salvador

Prohibited

Eritrea

Prohibited

Gaza Strip

Prohibited

Guinea Bissau

Prohibited

Haiti

Prohibited

Iran, Islamic Republic of

Prohibited

Iraq

Prohibited

Jamaica

Prohibited

Jordan

Prohibited

Lao People's Democratic Republic

Prohibited

Lebanon

Prohibited

Libya

Prohibited

Mali

Prohibited

Mongolia

Prohibited

Morocco

Prohibited

Mozambique

Prohibited

Myanmar

Prohibited

Nicaragua

Prohibited

North Korea

Prohibited

Pakistan

Prohibited

Panama

Prohibited

Russian Federation

Prohibited

Senegal

Prohibited

Somalia

Prohibited

South Sudan

Prohibited

Sudan

Prohibited

Syria

Prohibited

Trinidad & Tobago

Prohibited

Turkmenistan

Prohibited

‍‍

Uganda

Prohibited

Ukrainian territories of Crimea, Donetsk, Luhansk, Sevastopol, Zaporizhzhia and Kherson

Prohibited

Uzbekistan

Prohibited

Vanuatu

Prohibited

Venezuela

Prohibited

West Bank (Palestinian Territory)

Prohibited

Western Sahara

Prohibited

Yemen

Prohibited

Zimbabwe

Prohibited

Albania

Very High

Algeria

Very High

Angola

Very High

Belize

Very High

Benin

Very High

Bolivia

Very High

Burkina Faso

Very High

China

Very High

Cote D'Ivoire

Very High

Kenya

Very High

Kyrgyzstan

Very High

Madagascar

Very High

Mauritania

Very High

Nigeria

Very High

Philippines

Very High

Sierra Leone

Very High

Sint Maarten

Very High

Tajikistan

Very High

Turkey

Very High

Vietnam

Very High

METASWAP must ensure that sanctions screening is performed according to the company mandatory lists: EU, UN and US Department of Treasury - Office of Foreign Assets Control (“OFAC”)

EU

https://www.sanctionsmap.eu/#/main OFAC

https://www.treasury.gov/resource-center/sanctions/SDN-List/Pages/default.aspx United Nations

United Nations Security Council Consolidated List | United Nations Security Council

  1. ANNEX 3. INTERNAL SUSPICIOUS ACTIVITY REPORT FORM

To: Money Laundering Reporting Officer

From (name of employee)

Date:

This SAR is (circle which applies):

  1. A request for consent for a transaction which is not yet completed

  1. A report on a transaction which has taken place which I consider suspicious

  1. Report on other business related activity which I consider suspicious

I consider the following transaction suspicious and report to you under the internal reporting procedure:

  1. Date of transaction:

  1. Amount:

  1. Customer name/ID:

  1. Transaction number:
  2. Reason for suspicion:

Signature of reporting staff

  1. ANNEX 4. SUSPICIPUS ACTIVITY REPORT FORM – MLRO RESOLUTION

Private and Confidential

From: Money Laundering Reporting Officer Transaction number:

Customer:

Amount:

Internal SAR received from:

Date SAR received:

I confirm that I have reviewed the internal SAR and customer ID for this customer plus transaction history (all documents attached)

I confirm that, based on the information received and reviewed, I have:

  1. submitted a Consent request to GIIF

  1. submitted a post transaction SAR to GIIF

  1. decided not to submit any kind of SAR to GIIF for the following reason: