AML & KYC Policy

1. Introduction and Purpose

Secure Chain is committed to the highest standards of compliance against money laundering (AML) and terrorist financing (CTF). Operating in the digital asset and blockchain forensics space requires rigorous protocols to ensure our services are not exploited by malicious actors to launder illicit funds or legitimize fraudulent transactions.

This Anti-Money Laundering (AML) and Know Your Customer (KYC) Policy outlines the procedures we enforce to verify our clients' identities and ensure the legitimacy of the assets we are tasked with tracing and recovering.

2. Know Your Customer (KYC) Procedures

Before entering into any formal engagement or initiating a blockchain investigation, Secure Chain requires all prospective clients to undergo a comprehensive KYC verification process. This ensures that we are assisting the rightful owners of the compromised digital assets.

2.1 Identity Verification

Clients are required to provide valid, government-issued documentation to establish their identity. This may include:

• A clear copy of a valid Passport, National Identity Card, or Driver’s License.
• A recent (within the last 3 months) Proof of Address, such as a utility bill or bank statement.
• In some cases, a live biometric verification or a "liveness check" (e.g., a selfie holding the provided ID and a dated piece of paper).

2.2 Corporate Clients

For businesses and institutional clients, we require official corporate documentation, including Certificate of Incorporation, Memorandum and Articles of Association, and the identification of Ultimate Beneficial Owners (UBOs) holding 25% or more of the company's shares.

3. Anti-Money Laundering (AML) & Source of Funds

To prevent the processing or tracing of illicit funds, Secure Chain conducts a "Source of Funds" (SoF) and "Source of Wealth" (SoW) assessment as part of our due diligence.

• Wallet Verification: Clients must prove ownership and control of the source wallets from which the lost or stolen funds originated.
• Transaction History: We may request screenshots, exchange transaction logs, or bank statements demonstrating the initial fiat-to-crypto purchase.
• Risk-Based Approach: We apply enhanced due diligence (EDD) for clients originating from high-risk jurisdictions, or for cases involving high-value assets with complex, obfuscated on-chain histories (e.g., use of coin mixers or tumblers prior to the theft).

4. Ongoing Monitoring and Reporting

4.1 Suspicious Activity Reports (SARs)

Secure Chain continuously monitors active cases for red flags. If our forensic analysis uncovers that a client is attempting to use our services to trace assets related to ransomware operations, darknet markets, or organized crime, we are legally obligated to terminate the engagement immediately.

In such instances, Secure Chain reserves the right, and may be mandated by law, to file a Suspicious Activity Report (SAR) with the relevant financial intelligence units (FIUs) and law enforcement agencies globally (such as the NCA in the UK or FinCEN in the US).

4.2 Sanctions Screening

All clients are cross-referenced against global sanctions lists, including those maintained by the UN, EU, UK Treasury (OFSI), and US OFAC. We cannot and will not provide services to sanctioned individuals, entities, or wallets associated with sanctioned jurisdictions.

5. Data Privacy and Security

All KYC documents and sensitive AML data collected during the onboarding process are handled with the utmost confidentiality and stored using military-grade encryption. Access to this data is strictly limited to our compliance and legal teams. For more detailed information on how we protect your data, please refer to our Cybersecurity Policy and Privacy Policy.

6. Contact the Compliance Team

If you have any questions regarding our KYC requirements or AML procedures, please contact our Compliance Department before submitting your documents.

Email: support@chainanalytik.com (Please use the subject line "Compliance Inquiry")

Last Updated: March 2026