
AML & KYC Policy
> last updated 29.09.2026
purpose
Rift (DEK KEY OÜ, Registry Code 17506258) runs a marketplace where you can top up a wallet by card, buy items and — after selling your own items — withdraw the proceeds. This policy describes the identity checks and controls we apply so the platform cannot be used for money laundering or terrorist financing. It lists only checks we actually perform.
two kinds of balance
Money added by card top-up can be spent on items but is not withdrawable as cash. Only proceeds from selling your own items are withdrawable. The split is enforced by the wallet itself: a withdrawal can never exceed your withdrawable amount, so money added by card cannot be cashed out. See the Payment Policy.
identity verification (KYC)
Before your first payout you must complete identity verification: your full legal name, residential address, a photo of a government-issued identity document (JPG, PNG or WEBP) and your payout details (card — only the last 4 digits are kept — or IBAN). A payout cannot be requested until the verification is approved. The document image is stored privately and only authorised reviewers can open it; see the Privacy Policy for retention.
payout screening
Every payout request is reviewed by our team before it is paid. We may refuse, suspend, hold or reverse a payout, and ask for further documents, where verification is incomplete or we reasonably suspect fraud, money laundering, sanctions evasion or a breach of our Terms of Service. Payouts are made only to a payout method in the name of the verified account holder.
sanctioned countries
We do not accept new sign-ups from Russia, Belarus, Iran, North Korea, Syria or Cuba (checked by IP country and by email address), and we do not accept cards with a billing address in those countries. Existing account holders keep access to their account and balance.
records and reporting
We keep transaction and verification records for the period required by applicable law and cooperate with lawful requests from competent authorities, including reporting to the Estonian Financial Intelligence Unit where we are legally required to do so.
contact
Questions about this policy: use our contact form or email support@rift.army.