KYC Policy

AccsMarkets is an escrow marketplace. Buyers pay before an account changes hands, so they need confidence that the person selling is real and accountable. Identity verification (KYC — "Know Your Customer") also helps us meet our obligations under our AML Policy, and it reduces fraud and disputes.

Sellers are asked to complete identity verification. Buyers browsing the marketplace are not required to upload identity documents.

To verify an individual seller we ask for three images:

• ID front — the front of a valid government-issued photo ID or passport
• ID back — the back of the ID (if it has one)
• Selfie — a photo of you holding the same ID, so we can match you to it

Accepted formats are JPG, PNG and WebP up to 10 MB each. We check that every upload is genuinely an image before accepting it. We use these documents only to verify your identity and to meet legal and anti-fraud obligations — never for marketing.

• Encrypted at rest. Each file is encrypted with AES-256-GCM (an authenticated encryption standard) before it is written to storage. Only the encrypted form is ever saved, and each file is cryptographically bound to your account, so it can't be swapped into another user's record or silently altered.
• Private storage, no public links. Documents are not stored on a public URL or a public file host. They can only be retrieved through an authenticated request that checks who is asking.
• Keys kept separate from data. The encryption key lives in our server configuration, not in the database and not alongside the files, and the key used for identity documents is derived separately from our other encryption keys.
• Encrypted in transit. Your upload travels over HTTPS (TLS) between your browser and our servers.
• Not shown to anyone else. Your documents are never displayed to buyers, other sellers or any other user, and never appear on your public profile. Only the resulting verified badge is visible.

Only authorized AccsMarkets staff with user-management permission can open a submitted document, and only in order to review it. Our review tools decrypt the file at the moment it is opened. Every time a staff member views one of your documents, that access is written to an audit log recording who viewed it and when.

We do not sell your documents or share them with advertisers or data brokers. We may disclose them if we are legally required to, for example in response to a valid request from a regulator or law enforcement.

Anti-money-laundering rules require us to keep verification records for a minimum period — our AML Policy sets this at five years. Beyond what the law requires, we don't keep your documents longer than needed.

You can ask us to erase your personal data at any time from your privacy settings. Our compliance team reviews each request. When a request is approved, your verification records are removed from our systems and the encrypted document files are permanently deleted. If we're legally required to keep certain records, we'll tell you why rather than ignore your request.

• Upload only your own, genuine, unexpired documents.
• Never upload someone else's identity documents or edited/forged images.
• Make sure the images are clear and all four corners are visible; blurry uploads may be rejected.
• Keep your account password and two-factor authentication secure.

Submitting forged or misused documents can result in an immediate permanent ban, freezing of funds pending investigation, and a report to the relevant authorities.

We take these protections seriously, but no system is perfectly secure and we won't claim otherwise. Encryption at rest means the files are unreadable if storage were accessed directly, but it is not end-to-end encryption — our review process can decrypt them, which is what allows us to verify you. If we ever discover an incident that affects your documents we will notify you and the relevant authorities as the law requires.

For questions about this policy or how your documents are handled, contact [email protected]. When you upload documents you are asked to confirm that you have read and agree to this policy; we record that agreement against your account.