AML and KYC policy

1. Our approach

FixedFloat is a non-custodial exchange and does not require KYC for the vast majority of swaps. We rely on industry blockchain analytics to detect funds connected to a small set of high-risk categories: sanctioned wallets, confirmed darknet markets, ransomware payouts, and proceeds of public hacks. The overwhelming majority of users will never encounter our compliance flow — it is an exception path, not a rule.

2. When an order is paused

An order is automatically paused if the deposit comes from an address that scores above our internal risk threshold. The order page will show a status of under review and our compliance team will reach out via the order chat within a short time.

3. Information that may be requested

If a paused order is to be released, we may request information including:

• The original source of the funds (e.g. an exchange withdrawal, a salary payment, a sale).
• Supporting documents — a screenshot of the source transaction, an invoice, a sale receipt.
• In rare cases involving sanctioned jurisdictions, a government-issued photo ID.

All information is transmitted via an encrypted upload form and is never used outside the specific compliance review.

4. Possible outcomes

• Release. If the explanation and supporting documents are satisfactory, the order is released and processed normally.
• Refund. If the user prefers, the deposit can be returned to the original source address minus the on-chain network fee.
• Reject. In limited cases — e.g. funds traced directly to a sanctioned address — the platform may be legally required to freeze the funds and report to relevant authorities.

5. Sanctioned countries and persons

FixedFloat does not provide service to users in jurisdictions subject to comprehensive sanctions, nor to persons listed on OFAC, EU or UN sanctions lists. Geographic blocks may be applied at the network or product level.

6. Cooperation with law enforcement

FixedFloat cooperates with legitimate law enforcement requests that are properly served. We do not share user data outside of legally compelled requests, and we publish a transparency report annually summarising volume of requests handled.

7. Your privacy in this process

Information you provide as part of an AML review is stored separately from product analytics and is not used for marketing. See the privacy policy for full data-handling details.

8. Contact

For compliance questions, contact compliance@ff-io.io.