Asino KYC: verify who receives your documents

Create friction before an irreversible step

Safety is a chain, and the weakest link controls the outcome. Domain authenticity, account access, payment recipient, data handling and complaint recourse must all line up. A padlock or quick support reply can verify one small part while leaving the rest unresolved.

This file treats “Ask what is required” as the main failure mode. The response is deliberately conservative: pause, verify through a channel you found independently and preserve the original evidence before contacting the party named in the message.

If money has already moved, speed matters. Contact the bank or payment provider, secure the connected email and device, and report suspected fraud. Never send an additional payment described as tax, insurance or verification in order to unlock a withdrawal.

Bottom line: Identity checks can be legitimate, but the recipient must be legitimate first. Use only a verified secure portal, understand the stated purpose, and never send a full identity pack through social messaging.

1. Controller identity
2. Secure upload domain
3. Document list
4. Retention policy
5. Deletion and complaint route

Complete the list using sources you reached independently. If a material answer is missing, the absence is part of the conclusion; it is not a reason to guess.

Do not rationalise these away.

• Selfies holding card details
• Documents over Telegram or WhatsApp
• Remote desktop “verification”
• Paying for KYC approval

If a warning appears after money or documents have moved, preserve the URL, messages, transaction references and terms before closing the session. Secure the connected email account and contact the payment provider promptly when fraud is suspected.

Trace the conclusion.

Sources are listed by the role they play. Government and regulator records establish Australian legal context; other material is explicitly labelled when it is used only for discovery or product detail.