YOB Pay

nexa05710_96119_Pen__Shield_--ar_34_--sref_httpss.mj.runbbI56_85665171-8298-4d67-b7dd-48ca4f88672d_2-Photoroom

AML / CFT Policy (Anti-Money Laundering & Counter-Terrorist Financing)

Last Updated: November 20, 2025

NEXA PAYMENTS INC. (operating as YOB Pay) is committed to preventing its platform from being used for money laundering, terrorist financing, or any form of illicit financial activity. This AML/CFT Policy establishes the framework and controls used to ensure robust compliance with applicable regulations and industry standards.

Policy Purpose

The purpose of this policy is to ensure that NEXA PAYMENTS INC. (YOB Pay) operates in full compliance with AML/CFT laws, maintains strong internal safeguards, and actively identifies, mitigates, and reports risks associated with illicit financial activities. It protects the company, its clients, and the financial system by establishing clear procedures, responsibilities, and controls.

1. KYC / KYB Processes

Individual Clients (KYC)

  • Collection and verification of identity documents (passport, national ID, driver’s license).
  • Verification of personal details: full name, date of birth, address, nationality.
  • Source of funds verification where required.
  • Enhanced due diligence for higher-risk individuals.

Corporate Clients (KYB)

  • Verification of company registration documents.
  • Identification and verification of directors and UBOs.
  • Assessment of business activity and ownership structure.
  • Enhanced due diligence – Nexa Pay requesting additional supporting documents for corporate clients like: Recent balance sheet, proof of company address, recent invoices or contracts to verify the operational and financial profile

2. Risk Scoring

  • Clients are assigned risk levels (low/medium/high) based on jurisdiction, industry, transaction behaviour, and onboarding information.
  • Higher-risk clients undergo enhanced checks and more frequent reviews.

3. Transaction Monitoring (Know Your Transaction – KYT & Blockchain Analytics)

Know Your Transaction (KYT) and blockchain analytics controls as an integral part of its AML/CFT framework to identify, assess, monitor, and mitigate risks related to money laundering, terrorist financing, sanctions, and other illicit financial activity.

Transaction monitoring is conducted in accordance with the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA), applicable FINTRAC guidance, and relevant Financial Action Task Force (FATF) Recommendations.

  • All customers using YOB Pay services.
  • All supported digital assets and blockchain networks.
  • All inbound, outbound, and internal transactions processed through the platform.
  • All wallet addresses interacting with YOB Pay.

 

Regulatory & Standards Alignment

  • Registered as a Money Services Business (MSB) with the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) and is subject to Canadian AML/CTF obligations.
  • Transaction monitoring controls are designed to comply with the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and associated regulations and guidance issued by FINTRAC.
  • The KYT framework is aligned with the Financial Action Task Force (FATF) Recommendations applicable to virtual asset service providers, supporting effective management of cross-border and digital asset risks.

 

Risk-Based Monitoring

  • Transactions are monitored on an ongoing, risk-based basis using automated systems and blockchain analytics tools.
  • Monitoring considers factors including transaction size, frequency, velocity, asset type, blockchain network, source and destination wallet exposure, geographic risk indicators, and consistency with the customer’s risk profile.

 

Blockchain Transaction Monitoring

  • All blockchain transactions processed through YOB Pay are subject to continuous monitoring as they occur or shortly after they are recorded on the blockchain.
  • Blockchain analytics are used to identify direct and indirect exposure to illicit activity, including links to sanctioned entities, prohibited jurisdictions, and high-risk services.
  • Transactional behaviour is continuously analysed over time to detect emerging risks and evolving typologies.

 

Wallet Address Screening

  • Wallet addresses are screened before and after transaction execution.
  • Screening assesses exposure to sanctioned persons and entities, darknet marketplaces, ransomware and cybercrime-related activity, fraud and scam typologies, terrorist financing indicators, stolen or misappropriated funds, and obfuscation mechanisms such as mixers or tumblers (risk-based).

 

Transaction Risk Assessment & Scoring

  • Transactions are assessed using automated and rule-based indicators to determine their relative risk level.
  • Risk assessment factors may include source and destination wallet risk, transaction value, frequency and velocity, asset type, blockchain network characteristics, known typologies and red flags, and consistency with expected customer behaviour.
  • Each transaction is categorised according to a risk level (e.g. low, medium, or high) to determine the appropriate level of monitoring, review, escalation, or control measures.

 

Ongoing Monitoring & Pattern Analysis

  • Continuous analysis is conducted to identify unusual or suspicious patterns, including structuring, rapid movement of funds, layering, circular flows, or activity inconsistent with the customer’s stated purpose or expected behaviour.
  • Cross-border digital asset transactions are subject to enhanced monitoring based on jurisdictional and transactional risk indicators.

 

Alerts, Review & Escalation

  • Transactions generating elevated risk alerts are reviewed manually by the Compliance function.
  • Alerts may be escalated to the MLRO for further assessment and decision-making.
  • Where elevated risk is identified, Enhanced Due Diligence measures may be applied, including additional information requests, increased monitoring, temporary restrictions, or other risk mitigation actions.

 

Enhanced Due Diligence (EDD)

  • Where elevated transaction risk is identified, Enhanced Due Diligence measures may be applied.
  • EDD measures may include manual review of transactions and wallet exposure, requests for source of funds or transaction purpose information, additional documentation or explanations, increased monitoring, or temporary transaction restrictions.

 

Controls & Confidentiality

  • NEXA PAYMENTS INC. may delay, reject, restrict, suspend, or freeze transactions or accounts where required by law or where risk is deemed unacceptable.
  • The methodologies, rules, thresholds, and tools used for transaction monitoring are confidential and are not disclosed to customers.

 

Suspicious Transaction Reporting

  • Where suspicious activity is identified, internal investigations are conducted.
  • Where required under Canadian law, Suspicious Transaction Reports (STRs) or other applicable reports are submitted to FINTRAC within prescribed timelines.

 

Record Keeping

  • Records related to transaction monitoring activities are maintained in accordance with Canadian regulatory requirements.
  • Records include transaction data, KYT alerts, risk assessments, investigation notes, and supporting documentation.
  • Such records are retained for a minimum of five (5) years, or longer where required by applicable law or regulatory obligations.

 

Use of Third-Party Analytics Providers

  • To support effective transaction monitoring, NEXA PAYMENTS INC. may use reputable third-party blockchain analytics providers.
  • Such providers are subject to appropriate due diligence and ongoing oversight.

 

Sanctions Compliance

  • Transactions are screened for exposure to applicable sanctions regimes, including Canadian sanctions, United Nations sanctions, and other relevant international sanctions lists.
  • Transactions involving sanctioned wallets, entities, or jurisdictions are prohibited.

 

Governance & Review

  • This transaction monitoring framework is reviewed periodically to ensure continued effectiveness and alignment with FINTRAC guidance, FATF recommendations, emerging risks and typologies, and changes in applicable laws or supervisory expectations.

4. Red Flags & Suspicious Activity Reporting (SAR)

  • Identification of potential ML/TF indicators such as inconsistent behaviour, high-risk jurisdictions, or abnormal transaction patterns.
  • Investigation of flagged transactions.
  • Filing of SARs with FINTRAC when suspicion is confirmed.

5. PEP & Sanctions Screening

  • Screening at onboarding and on an ongoing basis.
  • Checks against PEP lists, sanctions list (UN, OFAC, EU, UK HMT), and other restricted entities.
  • Enhanced due diligence for any positive match.

6. Internal Controls

  • Segregation of duties and clear compliance oversight.
  • Regular audits, system testing, and staff training.
  • Use of secure technology for monitoring, screening, and maintaining records.