AML and KYC policy

Know Your Customer (KYC), Anti-Money-Laundering (AML) and counter-terrorist financing measures form one connected system. Verification procedures establish who you are; monitoring procedures watch for activity that does not fit what is known about you; reporting duties pass concerns to the authorities when the rules require it. This page describes each part as it works on this platform, in language free of legal jargon wherever possible.

KYC is the process of confirming your identity and the genuineness of the details you give us. When you register, you claim a name, a date of birth, an address and a phone number; verification checks those claims against documents and databases so the account belongs to a real, identifiable person. Identification happens at onboarding and is refreshed when documents expire or when information you have provided changes.

AML covers the measures that prevent the platform from being used to disguise the origin of criminal money. In practice this means assessing the risk each account brings, monitoring transactions for patterns associated with laundering, holding activity that cannot be explained, and reporting justified suspicions through the channels the applicable Zambian requirements establish. An account that behaves consistently with its profile rarely notices any of this happening.

Verification serves four purposes. It blocks fraudsters from opening accounts in other people's names, it protects your account from takeover by someone impersonating you, it keeps the platform compliant with the requirements applicable to our activity, and it reduces the financial risk that unverified flows would create for every honest user. Without it, a stolen identity would be enough to move money, and recovery after incidents would be guesswork.

Identity is confirmed with a government-issued document: a Zambian National Registration Card, a passport or a driving licence. Address is confirmed with a recent utility bill, a bank statement or a formal letter showing your name and residential address. Where a check requires it, we also ask for a short selfie or a live liveness capture to prove the document holder is the person present. We do not request documents we cannot process, and you will always see the reason attached to each request in the dashboard.

1. Registration. You create the account with your basic details, exactly as on the registration form.
2. Submission. You upload the requested documents and confirm your details in the verification section.
3. Automatic check. Our systems compare the documents with the details on file and with available registries; most files clear at this stage.
4. Manual review. Files the automatic stage cannot resolve, such as slightly mismatched surnames after marriage, go to a specialist who examines them by hand.
5. Result. The outcome appears in your dashboard, with the reason stated and the next step explained if anything further is needed.

Some situations call for a deeper look before activity can continue: unusually large first deposits relative to the declared profile, structures involving third parties who fund an account, connections to higher-risk countries, or occupations whose income pattern does not match the account's behaviour. Enhanced due diligence may add a source-of-funds declaration, proof of wealth such as employment or business records, or an interview with a compliance specialist. It is a proportionality mechanism, not an accusation, and most enhanced files conclude normally.

Standard checks conclude within one business day of receiving clear documents, and most finish faster. Cases needing manual review typically resolve within three business days, while enhanced due diligence depends on the complexity of the questions and the speed of your responses. Public holidays, illegible scans and expired documents are the three most common reasons for delay, and each is avoidable on your side.

A file can be rejected when a document is expired, cropped or unreadable, when the name on the document differs from the account name without an explanation, when an image shows signs of editing, when requested information is not provided within the stated period, or when checks reveal a sanctions or adverse-media match that must be resolved first. Pauses are used while a question is open; declines are used only when the question has been answered against the file. Every decline states its reason and, where possible, the correction that would allow a fresh attempt.

Once an account is active, our systems compare activity against its verified profile: deposit and withdrawal sizes, frequency, counterparties and the routes used. Patterns that suggest layering of funds, rapid pass-through of money, or activity inconsistent with the declared source of funds trigger review. Where a review cannot close the gap, functions on the account may be limited while questions are put to the account holder, and obligations to report to the authorities are honoured where the applicable requirements demand it. We do not announce investigations in advance and we do not tip off subjects of a report; both would defeat the purpose.

You are responsible for giving accurate, current and genuine information, for updating details that change, and for using only accounts, cards and wallets in your own name. Depositing funds that belong to third parties without declaring it, or splitting deposits to stay under thresholds, breaches this policy. False information can lead to suspension, termination of the account and, where required, reporting to the authorities.

Identity documents and verification records are stored with the protections described on the privacy page: encrypted storage, access restricted to roles that need it, and retention limited to the periods the applicable requirements set for AML records, after which data is deleted or anonymised. Verification data is never used for marketing, and it is kept separate from the systems that run trading.

To operate these checks, some information reaches providers who perform them: identity-verification services, the exchanges the platform connects to, IT providers operating infrastructure under contract, and regulators or other state authorities where a lawful requirement exists. Each recipient receives only what its function needs, under agreements that bind it to confidentiality and to processing solely for the stated purpose.

Zing markbit conducts its activity in line with the Zambian requirements applicable to its operations, including those governing client onboarding, identity verification, suspicious-activity handling and record keeping, and it adjusts its procedures when those requirements change. Where a specific activity calls for confirmation of a registration or licence, details are confirmed with the relevant provider on request rather than asserted on this page.

Questions about verification, documents or this policy go to [email protected], which reaches the team that handles these files during Monday to Friday, 08:00 to 17:00 (CAT). If a verification of yours is paused, the fastest route is always the dashboard item, since it carries the file reference our specialists need.