Compliance & AML

1. Our role

OrangeRamp is a non-custodial technology service. We compare offers from independent Providers and connect you to the Provider you choose. We do not hold, transfer or exchange customer funds or crypto assets, and we are not a party to your transaction.

Providers are responsible for complying with the anti-money-laundering, counter-terrorist-financing and licensing rules that apply to them in the places they operate. We work only with Providers that represent to us that they hold the registrations or licences their activities require, and that operate risk-based customer due diligence and transaction monitoring programmes.

2. Anti-money-laundering and counter-terrorist financing

Although Providers carry out customer due diligence, we take our own steps to keep the Service from being used for financial crime:

• we screen each wallet address submitted with an order against sanctions lists and blockchain risk indicators before the order is passed to a Provider;
• we monitor activity on accounts and API integrations for patterns associated with fraud, scams and money laundering;
• we refuse to pass orders to Providers, and may suspend accounts, where we identify an unacceptable risk;
• we share relevant information with Providers so they can meet their own obligations, as described in our Privacy Policy;
• we require businesses that integrate our API to meet the obligations in our API & Partner Terms; and
• we keep records of orders and screening results for five years.

Our compliance programme is overseen by a designated compliance officer, is reviewed at least once a year, and staff with access to customer data are trained on it.

3. Sanctions

We comply with economic sanctions laws administered by the US Office of Foreign Assets Control, and we also apply the sanctions regimes of the United Nations, the European Union and the United Kingdom. We do not provide the Service to sanctioned persons, to anyone owned or controlled by them or acting on their behalf, or to people in the restricted locations below. We block access based on location, and we screen wallet addresses against published sanctions lists.

4. Restricted locations

OrangeRamp is not available to people located in, or ordinarily resident in:

• Belarus
• Cuba
• Iran
• North Korea
• Russia
• Syria
• The Crimea, so-called Donetsk People’s Republic and so-called Luhansk People’s Republic regions of Ukraine, and other areas of Ukraine under Russian occupation

Individual Providers may not be available in other countries, US states or territories, or for particular payment methods. The widget shows only the Providers and payment methods available to you. Using a VPN or other means to disguise your location is a breach of our Terms of Service.

5. Identity verification

Whether you need to verify your identity, and what you need to provide, is decided by the Provider according to the law that applies to it, the amount and type of your transaction, and your location. Providers commonly require more information for larger amounts, for sales and for certain payment methods. Splitting orders or using multiple accounts to avoid verification is prohibited and may lead to your account being closed.

6. Prohibited activity

The Service must not be used for illegal activity, including dealing in the proceeds of crime, fraud, terrorist financing, sanctions evasion, darknet markets, illegal gambling, or the exploitation of people. The full list is in Section 11 of our Terms of Service.

7. If you think you are being scammed

8. Law enforcement and regulatory requests

We cooperate with law enforcement and regulatory authorities in accordance with applicable law. Requests for information should be sent to compliance@orangeramp.io from an official government email address and should include:

• the requesting agency, officer’s name, badge or ID number, and contact details;
• the legal process or authority under which the request is made (such as a subpoena, court order or warrant); and
• the specific identifiers concerned, such as an email address, wallet address, order reference or transaction hash.

We disclose information only when we receive valid legal process, except in an emergency involving an imminent risk of death or serious physical harm, where we may disclose information voluntarily. Because we do not hold funds, we cannot freeze or seize crypto assets; requests to freeze funds should also be directed to the relevant Provider, and we can help identify the Provider involved in a specific order. Where permitted, we notify affected users before disclosing their information.

9. Complaints

If you are unhappy with our Service, we want to know so we can put it right.

1. Contact support@orangeramp.io. Most problems, including delayed orders, can be resolved quickly by our support team.
2. If you are not satisfied, email complaints@orangeramp.io with your name, the email address on your account, any order reference, a description of the problem, and what you would like us to do.
3. We will acknowledge your complaint within 2 business days and send a full response within 15 business days. If we need more time because the complaint is complex or involves a Provider, we will explain why and respond within 35 business days.
4. Our response will explain our findings, what we will do, and, where relevant, how to escalate the complaint to the Provider or to any authority or dispute resolution scheme available to you.

Complaints about how a Provider handled your payment, verification or delivery can also be raised directly with that Provider under its complaints procedure. Depending on where the Provider is licensed, you may be able to refer an unresolved complaint to its regulator or ombudsman.

10. Reporting security issues

If you believe you have found a security vulnerability in OrangeRamp, please email security@orangeramp.io with enough detail for us to reproduce it. Please give us reasonable time to fix the issue before disclosing it publicly, and do not access other users’ data, disrupt the Service or move funds while testing. We will not take legal action against researchers who act in good faith and follow these guidelines.

11. Contact

• Compliance and law enforcement: compliance@orangeramp.io
• Complaints: complaints@orangeramp.io
• Security: security@orangeramp.io