Source of funds and monitoring
A provider may ask how funds were acquired, particularly when transactions do not match the expected profile. Evidence might relate to employment income, savings or the sale of an asset; the provider should specify what is necessary.
AML/CTF monitoring can involve reporting obligations that limit what an organisation may disclose about a review. No representative should ask you to bypass identity checks or disguise who owns a transfer.
Third-party data handling
A verification supplier may receive identification images, extracted document fields, device information or a facial comparison where the provider uses that method. Request the supplier’s identity, location, retention policy and alternatives before submitting sensitive information.
These provider-level records are separate from this website’s enquiry data. Our Privacy Policy describes the site’s form handling; the provider’s notice governs its own collection and disclosures.
Security during recovery
The same care applies if identity checks are used to recover a lost account. Never share a one-time code or seed phrase as proof of identity, and ask whether recovery temporarily restricts withdrawals.
For current regulatory context, see AUSTRAC’s 2026 transitional rules. A provider must determine which obligations apply to its circumstances.