AML / KYC policy
Know Your Client (KYC) and Anti-Money Laundering (AML) procedures protect you and the integrity of the platform. This page explains exactly what we check, which documents we ask for, how long verification takes, and what we can and cannot do with your information.
1. Introduction
Pepperstone AI applies KYC and AML procedures to every client, without exception, before an account can be funded and activated. The purpose is threefold: preventing the platform from being used to launder money or finance crime, protecting clients from fraud and account takeover, and meeting the Australian requirements applicable to a technology and information-services business of our kind.
2. What KYC is
KYC means identifying who our clients are and confirming the details they give us are genuine. In practice: your name, date of birth and address are matched against official documents, and the account is linked to one verified person. This stops accounts being opened under borrowed or invented identities.
3. What AML is
AML covers the ongoing side of prevention: assessing the risk a client or transaction pattern presents, monitoring activity for signs consistent with money laundering or terrorism financing, and reporting through the required channels where Australian law obliges us to. Verification is a one-time gate; monitoring continues for the life of the account.
4. Why identity verification is required
Verification protects you as much as us. It prevents someone else from opening an account in your name, ensures withdrawals can only go to destinations that belong to you, keeps the platform unattractive to criminal funds, and keeps Pepperstone AI compliant with the Australian requirements we operate under. Without it, we could not offer withdrawals to Australian bank accounts at all.
5. Documents we ask for
We only ask for documents we actually use, and nothing more.
| Check | Accepted documents | Notes |
|---|---|---|
| Identity | Australian passport, driver licence, or proof of age card | Full name, date of birth, photo and expiry date must be visible |
| Address | Utility bill, bank statement, or rates notice issued in the last 3 months | Must show your name and residential address |
| Liveness | Short selfie video or photo captured during verification | Used only to match you to your identity document |
| Source of funds | Bank statement or pay summary, only where a larger deposit makes it applicable | Requested case by case, never by default |
6. The verification process, step by step
Registration creates the account immediately; verification follows. First you provide your personal details and upload your documents. An automated check then matches the documents against the details you entered. Straightforward cases are approved automatically; anything the automation cannot confirm goes to a manual reviewer. You are notified by email of the result either way, and your personal manager can see the status and help you fix a rejected upload.
7. Enhanced due diligence
Some situations call for enhanced due diligence (EDD): politically exposed persons, clients with complex ownership structures, deposits well beyond typical retail levels, or patterns that raise questions. EDD may add requests for source-of-wealth evidence or an explanatory call. It is not an accusation, and most EDD checks finish with a normal approval.
8. How long verification takes
Clean, readable documents with matching details are usually verified within minutes during business hours. Manual review cases are normally resolved within one business day. Delays almost always come from one of three causes: a cropped or blurry document, a name that differs between documents (for example after marriage), or an address document older than three months.
9. Why verification can be declined
Verification fails when documents are expired, unreadable or altered; when the details on them do not match the account; when a document shows signs of tampering; or when required information is not provided after reminders. A failed check suspends funding and trading on the account until it is resolved. You can re-submit corrected documents, and your manager will tell you exactly what fell short.
10. Transaction monitoring
Deposits, withdrawals and trading patterns are monitored for activity inconsistent with a client's profile, for example rapid pass-through of funds or deposit sizes sharply out of step with the verified profile. Where activity raises a concern, features such as withdrawals may be limited while the situation is clarified with the client. We would rather ask an awkward question than let a client's account become a conduit.
11. Your responsibilities as a client
You commit to providing accurate, current and genuine information, and to updating it when it changes. Registering under someone else's identity, using the account for third-party payment flows, or splitting deposits to stay under thresholds are breaches of this policy. Consequences range from verification failure to account closure and, where Australian law requires it, reporting to the relevant authorities.
12. Storage and protection of verification data
Identity documents and verification records are encrypted at rest, access is restricted to the compliance and support staff who need it, and retention follows the periods described in our Privacy Policy. The same data is never exposed to other clients or used for marketing. Verification data and account records are logically separated, so a compromise of one does not hand over the other.
13. Who verification data can be shared with
Only where it is necessary or legally required: the identity-verification provider that processes document checks, IT providers operating our infrastructure under confidentiality obligations, the execution venues involved in servicing your account, and Australian regulators or law-enforcement bodies where the law compels disclosure. We do not sell verification data to anyone, full stop.
14. Compliance with Australian requirements
Pepperstone AI operates as a technology and information-services platform and complies with applicable Australian requirements for client onboarding, identity verification, monitoring and complaint handling. We are transparent that we are not an Australian financial services licensee, and this policy describes what we actually do, not credentials we do not hold. The licensing and regulation page sets out the same position in full.
15. Questions and contact
Anything about this policy, a stuck verification, or a document you would rather explain before submitting: write to [email protected] or raise it with your personal manager. The Client Support & Compliance team answers KYC and AML questions Monday to Friday, 9:00–17:30 AEST (excluding public holidays), and no question about your own verification status is ever treated as a nuisance.