Know Your Customer Policy · effective 6 July 2026

Proving who you are , once and properly.

Written under the Prevention of Money Laundering Act, 2002, the RBI Master Directions on KYC and the Information Technology Act, 2000. It covers what we accept as proof, what each status on your account means, how the documents are stored, and what to do if a submission is rejected.

What my status means
5
Accepted verification paths
9
Status states your account can show
256-bit
AES encryption at rest
5yr
Minimum retention after closure
0
KYC data sold or traded, ever
12h
Support, every day of the week
How verification runs

From upload to verified, and what happens either way

Verification runs on automated real-time API loops connecting directly to government endpoints. Where those are down or come back inconclusive, a compliance desk takes over by hand.

Stage 1

You upload your documents

Through the app, the web dashboard, a B2B distribution system or a developer portal. You must supply true, exact and clear information, and confirm every uploaded document belongs to your legal identity.

Stage 2

Automated screening

Technical screening layers and anti-fraud tools check file clarity, database matches and device history. Real-time API loops validate against government endpoints — PAN records, OVDs, bank penny-drops.

Stage 3

Fraud and sanctions checks

The threat evaluation layer looks for duplicate PAN registrations, matching mobile clusters, device risk parameters, IP routing anomalies, behavioural patterns and document alteration indicators. Under PMLA, 2002 the profile is cross-checked against national and international financial crime databases, global sanctions lists and politically exposed persons ledgers.

Stage 4

Manual review where needed

Where automated services are unavailable or inconclusive, internal compliance desks perform thorough manual record tracking. Every manual decision is documented in the database with explicit reasons noted by the handling administrator.

Stage 5

A status, and a notification

Your account shows one of nine states. Updates are shared instantly through the in-app dashboard and registered notification pipelines. A rejection does not bar a clean resubmission, unless the logs indicate intentional fraud.

Stage 6

Re-KYC, when something changes

You must verify again if your legal profile data changes, documents expire, security monitors flag high-risk anomalies, or central banking partners adjust their compliance criteria. Failure to provide updated records within the set window causes partial service blocks and account deactivation.

Why this exists

Two things worth stating plainly

1

What KYC is for

To create a secure payment environment, mitigate identity fraud, prevent the configuration of simulated or shell profiles, and insulate the network from money laundering or illegal trade. Identity screening runs in strict alignment with central Indian banking requirements, corporate laws, and the contractual requirements of integrated payment gateway aggregators, retail clearing banks and the central Bharat Connect grid.

2

What being verified does not grant

Completion of identity verification is an assessment gate, not unconditional approval for all transaction volumes. Anpay holds the absolute, unilateral right to decide when KYC must be triggered for any customer, Anpay Coin velocity or specific utility payment — and is not legally required to disclose its internal fraud detection patterns or risk logic thresholds to the public.

Where it applies

Every channel, every tier of account

The policy applies across all digital applications — web domains, customer dashboards, native Android and iOS packages, B2B distribution systems and developer portals — and works in tandem with our Terms & Conditions, Privacy Policy, Information Security Policy and AML Framework.

Every account registration tier
High-value Anpay Coin transactions
High-risk utility routing
B2B merchant setups
Developer API allocation
Promotional reward programmes

When KYC becomes mandatory

Standard low-risk features may run under minimal onboarding. Advanced transactional tools, cashbacks and high-velocity channels demand completed KYC before the platform unlocks access. The company maintains the absolute right to evaluate and decide when verification must be triggered.

What counts as proof

Five accepted verification paths

Processed through secure digital interfaces, API validation hubs and verified third-party data layers.

1

PAN verification

Permanent Account Number checked in real time against government tax record databases, cross-checking names and registration statuses.

2

Officially Valid Documents

Legally accepted records including valid Indian passports, driving licences and voter identity cards.

3

Aadhaar-based verification

Executed strictly where legally permitted. Every automated database record, system log, text dump and staging screenshot processes Aadhaar indicators through secure masking pipelines, replacing the identity sequence with the placeholder [Aadhaar Redacted] to prevent raw exposure.

4

DigiLocker integration

Secure retrieval of authorised electronic documents from national digital vaults, via your explicit authorisation.

5

Supplementary checks

Real-time mobile OTP validation, active bank account penny-drop checks, email confirmations, full name matching and geotagged user photographs.

+

Third-party verification gateways

Authorised digital verification vendors handle real-time tax record validation, PAN authenticity checks and banking penny-drop routing. Aadhaar data passes through automated encryption layers that replace raw numbers with secure hashes or the standard [Aadhaar Redacted] placeholder across all application logs and database fields.

Your responsibility on upload

You must supply true, exact and clear personal information, and confirm that every uploaded document belongs to your legal identity. The upload of altered records, forged files or third-party identities is a major contract breach — causing instant account termination, forfeiture of platform rewards, and a permanent ban from our platforms.

Your verification status

Nine states, and what each one means

Whatever your account shows, it is one of these. Updates arrive instantly through the in-app dashboard and your registered notification pipelines.

Not Started · nothing submitted yet
Pending · received, queued
Under Review · being checked
Additional Information Required · something is missing
Verified · checks passed
Rejected · resubmit cleanly
Suspended · access restricted
Expired · documents out of date
Re-KYC Required · verify again

Why a submission is rejected

  • Blurred or incomplete uploadsThe screening layer cannot read what it cannot see.
  • Expired documentsValidity windows are tracked; an expired record fails automatically.
  • Structural profile conflictsDetails that do not reconcile with the rest of your profile.
  • Indicators of transaction fraudFlagged by the automated anti-fraud tools during screening.

Rejection does not bar you from submitting a clean application — unless the system logs indicate intentional fraud.

If checks are not completed

  • Account options limitedFeatures that require verification stay locked.
  • Lower velocity capsTransactional limits are reduced to defend the network.
  • Promotional coins frozenAnpay Coin accruals are held.
  • Settlements delayedClearing settlements are slowed pending verification.
  • Login access suspendedIn the last resort, system access is suspended entirely.
How your documents are held

Encrypted, access-controlled, and never for sale

Datasets are processed exclusively for identity verification, transaction security monitoring, compliance reports and automated fraud prevention — nothing else.

256-bit AESData at rest
TLSData in transit
PMLA 2002Screening alignment
DPDP Act 2023Data governance
Shared on a strict need-to-know basis with
Verification partnersCore clearing banksPayment gateways Bharat Connect nodesStatutory regulatorsLaw enforcement

Regulators and law enforcement receive data only when served with valid data preservation mandates. The company contractually binds itself never to sell or trade customer KYC data.

  • Encrypted cloud storage

    All digital identity records are held inside secure, encrypted cloud environments operated by the company or its authorised data repository partners.

  • Role-based access and MFA

    Strict Role-Based Access Control, with mandatory Multi-Factor Authentication for administrative panels.

  • Automated audit trails

    Every internal access request is logged automatically, so who looked at what is always a matter of record.

  • Retained for five years, minimum

    Identity verification histories, reference tokens and submitted document profiles are retained for at least five years following the complete termination of the customer relationship, to fulfil anti-money-laundering laws and internal corporate audit rules.

Administration and audit

What administrators can do, and what gets written down

Administrative powers

Authorised personnel, internal compliance desks and verified automated API layers are empowered to:

  • Review submissionsInspect incoming document uploads and screening output.
  • Approve or rejectDecide a profile log either way, with the reason recorded.
  • Demand missing documentsAsk for what the file needs before it can proceed.
  • Reopen for internal auditsBring a closed application back for review.
  • Trigger Re-KYC sweepsRequire re-verification across affected profiles.
  • Freeze transactionsHold activity pending the verification result.

Immutable audit logging

All tracking parameters are written to write-once-read-many (WORM) log repositories. Every event records:

  • KYC Request ID and Customer IDThe two identifiers that tie an event to a person and a case.
  • Verification method and status tagHow it was checked, and what the outcome was.
  • Explicit time stampWhen the event happened, to the second.
  • Handling Admin IDFor every manual decision — a name behind the call.
  • Target API provider flagsWhich verification endpoint answered.
  • Structural notesThe explicit reasons the handling administrator recorded.

These records are held in strict alignment with our Data Retention Policy.

What is prohibited

Five things that end an account immediately

Any of these is an immediate material breach of contract. Suspected violations trigger asset freezing, profile deactivation, and formal legal reporting to cyber-crime units and federal enforcement directorates.

Immediate material breach

The platform strictly prohibits any form of system manipulation or identity abuse:

  • Using another person's identity — someone else's identification details, or operating under fictional records.
  • Forged or altered documents — uploading forged, digitally manipulated, cropped or altered identity documents.
  • Impersonation and identity theft — impersonating corporate staff, using stolen credentials, or running identity theft scams.
  • Multiple profiles for rewards — setting up several profiles under alternative identification combinations to harvest rewards.
  • Helping others bypass screening — assisting secondary users or network nodes in bypassing our identity screening gates.
Accountability

Who this policy answers to

VD
Vaskar Das
Founder & Director

Signs off on the identity framework and the compliance desks that operate it.

"Verification exists to keep the bad actors out, not to make honest people prove themselves twice."

Anpay institutes this policy to define the operational workflows, identity evaluation frameworks and system controls used to verify individual consumers, commercial merchants, enterprise distributors and integrated API channel partners.

It functions in tandem with our Terms & Conditions, Corporate Privacy Policy, Information Security Policy and Anti-Money Laundering & Fraud Prevention Framework — and every manual decision inside it carries the name of the administrator who made it.

Effective 6 July 2026PMLA 2002RBI Master DirectionsIT Act 2000DPDP Act 2023
Appeal or ask about your status

If a rejection was a system error

You retain full rights under data privacy laws to request correction of profile anomalies or check your verification status logs. Appeals go through a manual compliance review — submission does not guarantee automatic approval.

What an appeal must carry

Customer IDFrom your app profile
Registered credentialsThe mobile and email on the account
Clean supporting documentsUnaltered, legible, in date
What you believe went wrongSo the reviewer knows where to look

Where to reach us

General bureauinfo@anpay.in
Support operationssupport@anpay.in
Commercial partnershipsbusiness@anpay.in
Disputed transactionsdispute@anpay.in
Voice support011 6929 0388
WhatsApp gateway+91 94341 16115
Operational hours11:00 AM to 11:00 PM IST, every day
JurisdictionCourts at Dakshin Dinajpur, West Bengal
Tell us your name as registered
Enter the 10-digit number on your account
Enter an email we can reply to
An appeal cannot be opened without your Customer ID
Pick the one that fits best
0 / 1000
A few lines, please — enough for a reviewer to act on

Attach clean, unaltered documents to the reply. Never send your OTP, MPIN, card CVV, full card number or UPI PIN.

The legal terms

Amendments, jurisdiction and how this binds

Stuck on a verification?

The support desk can see your status log and tell you exactly which check is holding things up.

Corporate KYC Policy · effective 6 July 2026 · the current version always lives here and in the app