Section 5. AML / KYC / CFT POLICY

Effective Date: May 10, 2026

5.1 Policy Statement

While FutureFunding is currently not a "reporting entity" under Section 2(1)(wa) of the PMLA, 2002, given that it does not carry on a "financial business" as defined, it voluntarily aligns with the spirit of PMLA, FATF, and FIU-IND best practice. In the event that the activity is brought within the PMLA reporting ambit by notification or regulatory clarification, FutureFunding shall register with FIU-IND and operate as a reporting entity from such date.

5.2 KYC — Mandatory Onboarding Documents

PAN

  • Verification Method: NSDL/UTIITSL real-time validation
  • Storage: Encrypted vault

Aadhaar

  • Verification Method: Offline XML / OTP-based eKYC under UIDAI rules; masked storage
  • Storage: Reference + last-4 only

Bank account

  • Verification Method: Penny-drop verification
  • Storage: Account number + IFSC

Liveness

  • Verification Method: Selfie + face-match against KYC photo
  • Storage: Hash + reference

Address

  • Verification Method: As per Aadhaar / passport / DL
  • Storage: Document image

5.3 Customer Due Diligence

Standard CDD: Identity verification + sanctions screening + PEP screening (against UN, OFAC, EU, MEA, MHA lists).

Enhanced Due Diligence (EDD) is applied when:

  • (a) User triggers any sanction/PEP/adverse-media match;
  • (b) Aggregate annual Stipend exceeds INR 25 lakh;
  • (c) Anomalous behaviour: rapid pass-and-stipend cycles, multiple challenge attempts funded from third-party UPIs, mismatched IP geography vs declared residence;
  • (d) Account linkage indicators: shared device, shared bank, shared address with other Users.

5.4 Transaction Monitoring & Red Flags

Automated and manual monitoring captures:

  • Velocity of Challenge Fee payments from same instrument across distinct accounts;
  • Unusual stipend-versus-effort ratios;
  • Round-tripping patterns (deposit → pass → stipend → outflow to high-risk geographies);
  • Reuse of bank/UPI/device across putatively distinct identities;
  • Stipend disbursement to accounts inconsistent with declared geography;
  • Pattern matching against typologies published in FIU-IND's strategic-analysis reports.

5.5 Reporting

Internal Suspicious Transaction Report (STR) templates are maintained. Where reporting becomes statutorily required, STRs shall be filed within the prescribed timeline; tipping-off is prohibited under Section 10 of PMLA. Records of suspicions, whether reported or not, are preserved for 10 years.

5.6 Sanctions & PEP Screening

Daily re-screening against:

  • UN Security Council Consolidated List;
  • MHA Banned Organizations & Individuals lists (UAPA);
  • SEBI Debarred Persons list;
  • Adverse-media checks (commercial provider).

5.7 Training & Audit

  • Annual mandatory AML training for all staff;
  • Independent internal audit every 12 months;
  • Board-level reporting via the Compliance Committee.