Identity and financial-crime controls

KYC and AML procedures for Canadian accounts

These procedures help confirm who controls an account, reduce misuse of financial services and support applicable Canadian recordkeeping and reporting duties. Review intensity depends on the service, client and activity.

1. Introduction

Know Your Client, anti-money-laundering and anti-terrorist-financing procedures are part of responsible account operation. They help identify clients, understand the intended use of an account and detect activity that may involve fraud, laundering, sanctions evasion or another prohibited purpose.

The process is risk based. A routine case may be completed with standard identity and address checks, while inconsistent or higher-risk information can require additional evidence and human review. Completing a check does not imply that every later transaction is accepted automatically.

2. What KYC means

KYC is the process of identifying the individual who opens or controls an account and checking that the supplied information is credible. It can include legal name, date of birth, residential address, contact details, occupation and the purpose of the relationship. Where a person acts for an organization or another individual, authority and beneficial ownership may also need to be established.

Information must be current enough to support account servicing and risk assessment. A client can be asked to update a document after it expires or when address, ownership, occupation or transaction behaviour changes materially.

3. What AML and ATF mean

AML controls are designed to deter and identify attempts to disguise criminal proceeds as legitimate funds. Anti-terrorist-financing controls address the collection or movement of value for prohibited organizations or activities. Relevant procedures can include client risk classification, sanctions screening, transaction monitoring, record retention and legally required reporting.

Monitoring does not mean every unusual transaction is unlawful. It means the circumstances may need explanation before the activity can continue. Information is assessed in context, including amount, frequency, destination, source of funds and whether behaviour is consistent with the stated account purpose.

4. Why identity verification is required

Verification helps stop impersonation, account takeover, payment fraud and use of stolen identity details. It also supports legal duties that may apply to a transaction provider and gives support a safer basis for handling recovery or a sensitive account change.

A client who declines required verification may be unable to activate or use particular functions. The restriction is not a judgement about the individual; it reflects the fact that the service cannot proceed safely or lawfully without adequate evidence.

5. Documents and evidence

Depending on the case, acceptable evidence may include a current government-issued photo identity document and a recent statement or official record showing the residential address. The requested document types and acceptable age are explained through the secure verification process. A clear image must show the full document without obstruction or alteration.

A selfie, liveness check or additional image may be requested when the verification provider needs to compare the presenter with the document. Source-of-funds evidence can include a bank statement, employment record, sale document or other material appropriate to the stated source. Only provide evidence through the identified secure channel.

6. Verification process

The process normally begins after registration. The client provides basic information, then submits required evidence through the verification interface. Automated checks assess document integrity, consistency and available reference data. A successful result can allow the account to move to the next activation stage.

If the automated result is inconclusive, a trained reviewer examines the case and may request clarification. The reviewer records the reason for the request and the outcome. The account is confirmed, limited or declined based on the evidence and applicable risk rules.

7. Enhanced due diligence

Additional review may apply when risk indicators are higher, ownership is complex, a person has a prominent public function, a transaction involves a higher-risk geography, or activity differs materially from the stated purpose. Enhanced review can ask for source-of-wealth context, source-of-funds evidence, organizational documents or an explanation of related parties.

The scope should be proportionate to the identified concern. Clients receive instructions about what is required, but some monitoring criteria cannot be disclosed because doing so could weaken the control or conflict with legal restrictions.

8. Verification timing

There is no single completion time for every case. Clear, current documents with matching information may be assessed quickly, while manual review, translation, provider downtime or a request for more evidence can extend the process. Weekends and public holidays can affect human review.

Submitting the same material repeatedly does not accelerate the decision and can create duplicate work. Respond to the latest secure request and contact [email protected] if the stated review period passes without an update.

9. Reasons for rejection or suspension

A check can fail when a document is expired, cropped, unreadable, altered or inconsistent with account details. It can also be paused when the applicant cannot be matched to the document, the address cannot be supported, beneficial ownership is unclear or requested information is not provided.

Other reasons can include suspected impersonation, sanctions concerns, prohibited geography, evidence of account sharing or a source of funds that cannot be reasonably explained. Where permitted, the client is told what can be corrected. Some legal or investigative restrictions may prevent a detailed explanation.

10. Transaction monitoring

Selected deposits, withdrawals and account events may be evaluated against risk indicators. Reviews can consider unusual size or frequency, rapid movement of value, inconsistent destinations, linked accounts, chargeback history and activity that does not match the account profile.

A function may be limited while information is checked. The client can be asked to confirm a payment method, destination, relationship or economic purpose. A temporary limit protects the review process; it does not establish wrongdoing.

11. Client responsibilities

Clients must provide accurate, complete and authentic information, use the account only for themselves unless an authorized arrangement is approved, and update material changes promptly. Documents must not be edited to hide information or create a false impression.

False information can lead to delayed activation, restrictions, termination and reporting where legally required. Clients must also protect access credentials and should not allow another person to pass verification or operate the account in their place.

12. Storage and protection of KYC data

Identity material is restricted to personnel and providers who need it for verification, compliance, security or a valid legal purpose. Technical and organizational safeguards are used for transmission, storage and access logging. No storage system can be described as risk free, so data is minimized and retained only for specified needs.

Retention can continue after account closure where Canadian law, dispute management or fraud prevention requires it. The Privacy Policy explains categories, purposes, service providers, retention factors and individual rights in more detail.

13. Data sharing

Information may be shared with identity-verification providers, secure hosting and IT providers, payment or transaction providers, professional advisers, affiliated operations supporting the service and competent government or regulatory authorities. Each disclosure must have an operational, contractual or legal basis.

Providers receive only the information reasonably needed for their role and are subject to appropriate confidentiality or data-handling terms. We do not publish KYC material or sell identity documents to data brokers.

14. Canadian compliance context

Controls are designed to support applicable Canadian requirements, including obligations that can arise under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act and related regulations for an entity or provider within scope. FINTRAC administers relevant federal compliance and reporting frameworks.

The exact obligation depends on the activity and legal entity. A reference to Canadian law does not imply that every platform function has the same regulatory classification. Provider and dealer status should be confirmed for the particular service.

15. Contact and support

Questions about a verification request can be sent to [email protected]. Include the account email and a short description, but do not attach identity documents unless support has directed you to a confirmed secure channel. Never send a password, one-time code or recovery phrase.

If you believe a request is fraudulent, stop and verify it independently. Open https://adroite-capitorc.org directly rather than using the message link, then contact Client Support & Compliance. Suspected misuse of the brand can also be reported through the Fraud Warning process.

Verification protects the account relationship

The goal is not to collect documents without purpose. It is to establish who controls the account, whether the activity makes sense and which safeguards are needed.

Prepare before submission

  • Use a current, legible document.
  • Match the account name exactly.
  • Show the full document edges.
  • Use the secure upload channel.
  • Answer follow-up questions promptly.