Legal

Anti-Money Laundering and Counter-Terrorist Financing Policy

How Monerails prevents money laundering, terrorist and proliferation financing, and applies international financial sanctions.

Last updated: November 3, 2026Version 1.0
In short. Monerails runs a risk-based compliance programme aligned with the FATF Recommendations. Every business is verified before it can go live, its beneficial owners are identified, activity is monitored continuously and sanctions lists are screened. Payment services are executed by regulated partner institutions, which apply their own obligations in addition to ours.

{{ s.n }}{{ s.t }}

{{ para }}

  • {{ it.h }} {{ it.t }}

{{ para }}

Related documents
Legal

Anti-Money Laundering and Counter-Terrorist Financing Policy

How Monerails prevents money laundering, terrorist and proliferation financing, and applies international financial sanctions.

Last updated: November 3, 2026Version 1.0
In short. Monerails runs a risk-based compliance programme aligned with the FATF Recommendations. Every business is verified before it can go live, its beneficial owners are identified, activity is monitored continuously and sanctions lists are screened. Payment services are executed by regulated partner institutions, which apply their own obligations in addition to ours.

01Purpose and commitment

This policy sets out the principles and controls Monerails applies to prevent its services from being used for money laundering, terrorist financing, financing the proliferation of weapons of mass destruction, bribery, fraud or sanctions evasion (together, "financial crime").

Monerails has zero tolerance for the use of its services for these purposes. We would rather decline a business relationship than accept a risk we cannot manage.

    02Scope and status

    Monerails is operated by Rollo Technologies Inc., a Delaware corporation (United States). Monerails is a technology company: it is not a bank, a payment institution or an electronic money institution, and it does not hold customer funds.

    Collections, payouts, balances, foreign exchange and card issuing are executed by regulated partner institutions in the countries concerned. These partners remain subject to their own anti-money laundering and counter-terrorist financing (AML/CTF) obligations and to the supervision of their authorities. Monerails applies this programme in addition to those obligations, not instead of them.

    This policy applies to every Monerails business customer, their directors, beneficial owners, users and cardholders, and to all Rollo Technologies Inc. staff and contractors who work on Monerails.

      03Reference framework

      Our programme is built on international standards and takes into account the regional frameworks of the countries where our customers operate:

      • International standards. the Financial Action Task Force (FATF) Recommendations, in particular the risk-based approach (R.1), customer due diligence (R.10), record keeping (R.11), politically exposed persons (R.12), targeted financial sanctions (R.6 and R.7) and wire transfers (R.16).
      • Central Africa (CEMAC). the CEMAC regulation on the prevention and suppression of money laundering, terrorist and proliferation financing, the work of GABAC and the COBAC requirements that apply to our partners.
      • West Africa (WAEMU and ECOWAS). the WAEMU uniform AML/CFT/CPF law, BCEAO instructions and the work of GIABA, which also covers Ghana, Nigeria, The Gambia and Guinea.
      • East Africa. the work of ESAAMLG and national laws, notably in Kenya, Tanzania, Uganda and Rwanda.
      • United States. as a US company, Rollo Technologies Inc. complies with OFAC sanctions regulations and follows the compliance programme expectations of the Bank Secrecy Act.

      Listing these frameworks describes the references of our programme. It does not mean that Monerails or Rollo Technologies Inc. is licensed, registered or supervised by any of these authorities.

      04Governance and responsibilities

      The management of Rollo Technologies Inc. approves this policy and provides the resources needed to apply it.

      A Compliance Officer, appointed by management, runs the programme, approves high-risk onboarding decisions, reviews alerts and unusual activity, decides on reports and reports regularly to management. The Compliance Officer has the independence and access to information the role requires.

      Every member of staff must follow this policy and report any suspicious situation to the Compliance Officer without delay.

        05Risk assessment

        We assess and document the financial crime risks Monerails is exposed to, and we scale the intensity of our controls to the level of risk. This assessment is reviewed at least once a year and whenever we launch a new product, country or channel.

        Each customer is given a risk rating (low, standard or high) that takes into account, among other factors:

        • The customer. legal form, transparency of the ownership structure, length of trading and any politically exposed persons.
        • The business. sector, business model, expected volumes and consistency with observed activity.
        • Geography. countries of incorporation and operation, and of counterparties and recipients, including jurisdictions identified by the FATF as having strategic deficiencies.
        • Products and channels. collections, payouts, cards, conversions, and access through the API or AI agents.

        The risk rating determines the depth of checks, the limits applied, how often the relationship is reviewed and the level of approval required.

        06Customer due diligence (KYB and KYC)

        No business can go live before its verification is complete. Depending on the country and the activity, we collect and verify in particular:

        • Company. legal name, registration number, registered address, articles or certificate of incorporation, trade register extract and tax identifier where applicable.
        • Business. description of the activity, website or online presence, countries served, type of customers, expected volumes and amounts, source of funds.
        • Directors. identity of every director and of the legal representative, with a valid government-issued identity document.
        • Beneficial owners. every natural person who owns or controls, directly or indirectly, 25% or more of the shares or voting rights, or who exercises control by other means; failing that, the senior managing official(s).
        • Licences. where the activity is regulated (financial services, gambling, healthcare, passenger transport and so on), the relevant licence or authorisation and the authority that issued it.
        • Cardholders. where cards are issued in the name of individuals, the identity information required by the issuing institution.

        We may ask for any additional document, a video verification or a signed declaration. Information must be accurate and kept up to date; any material change (directors, shareholders, activity, address) must be reported to us within thirty days.

        07Enhanced due diligence

        Enhanced due diligence applies to higher-risk relationships, in particular:

        • Politically exposed persons (PEPs). directors or beneficial owners who hold, or have held, a prominent public function, and their family members and close associates.
        • High-risk countries. links with a jurisdiction subject to a FATF call for action or under increased monitoring, or with a sanctioned country.
        • Sensitive sectors. activities on the restricted list, complex or opaque ownership structures, and cash-intensive businesses.

        Enhanced due diligence may include evidence of source of funds and source of wealth, additional checks on directors and shareholders, lower limits, more frequent monitoring and prior approval by the Compliance Officer.

        08International financial sanctions

        Monerails is committed to not providing any service, directly or indirectly, to or for the benefit of any person, entity or vessel subject to sanctions. We screen our customers, their directors and beneficial owners, and payout recipients against the following lists:

        • United Nations. the UN Security Council Consolidated List.
        • United States. OFAC lists, including the Specially Designated Nationals (SDN) List.
        • European Union. the EU Consolidated Financial Sanctions List.
        • United Kingdom. the UK Consolidated List of Financial Sanctions Targets.
        • Regional and national lists. asset-freezing measures that apply in the countries where our customers operate.

        Screening takes place at onboarding, whenever lists are updated and on relevant transactions. A potential match blocks the transaction until it has been reviewed. A confirmed match leads to the relationship being declined or suspended, transactions being frozen where the law requires it, and the competent authorities or partners being informed.

        We do not accept relationships with persons resident, established or operating in a country or territory subject to comprehensive sanctions, or transactions designed to evade sanctions.

        09Ongoing monitoring

        We monitor activity throughout the relationship to detect transactions that are unusual, inconsistent with the customer’s profile or potentially suspicious. Our monitoring includes:

        • Limits. per-transaction and 24-hour limits, set according to the customer’s risk rating and the product used.
        • Alerts. alerts on unusual amounts, sudden changes in volume, repeated or declined attempts and atypical patterns, including for cards and AI agents.
        • Reconciliation. systematic reconciliation of transactions with the statements of our regulated partners.
        • Periodic reviews. refreshing verification information at a frequency that depends on the risk rating, and after any material event.

        We may at any time ask for supporting evidence for a transaction (invoice, contract, source of funds) and hold the transaction in the meantime.

        10Suspicious activity and reporting

        Any suspicious transaction or situation is reviewed by the Compliance Officer, who documents the decision. Where there are reasonable grounds for suspicion, Monerails promptly informs the regulated partner institutions concerned and, where the law provides for it, the competent authorities, including financial intelligence units.

        We may suspend a transaction, freeze a card, block a payout or restrict an account while the review is under way.

          11No tipping-off

          No one working on Monerails may tell a customer, or any third party, that a review is under way, that a report has been or will be made, or that an investigation is being considered. As a result, we may decline or suspend a service without giving a reason.

            12Record keeping

            We keep verification documents and information, relevant correspondence and transaction records for at least five years after the end of the business relationship or after the transaction, in line with FATF Recommendation 11, and for up to ten years where applicable local regulation requires it.

            These records are stored securely with restricted access, and may be provided to competent authorities as permitted by law. How we process personal data is described in our Privacy Policy.

              13Training and awareness

              Relevant staff receive AML/CTF and sanctions training when they join and at least once a year, tailored to their role. Training covers the regulations, red flags specific to mobile money payments and cards, and internal reporting procedures.

                14Testing and independent review

                The effectiveness of the programme is tested on an ongoing basis and subject to an independent review, internal or external, at a frequency proportionate to the risks. Findings are tracked in an action plan followed by management.

                This policy is reviewed at least once a year, and whenever there is a material change in regulation, in our products or in our countries.

                  15Refusal, suspension and termination

                  Monerails and its regulated partners may at any time, and without giving reasons where the law prohibits it:

                  • decline a relationship or a transaction;
                  • ask for additional information or documents;
                  • apply limits, hold funds or suspend cards;
                  • end the relationship, in particular in case of inaccurate information, refusal to cooperate or prohibited activity.

                  16Cooperation with authorities

                  Monerails cooperates with the competent judicial, administrative and supervisory authorities, and with its regulated partners, in accordance with applicable law. We respond to lawful requests for information within the required time.

                    17Contact us

                    For any question about this policy, or to report suspicious activity linked to Monerails: compliance@monerails.com. Post: Rollo Technologies Inc., 1111B S Governors Ave, Suite 59264, Dover, DE 19904, United States.