Legal and risk policy

Restricted jurisdictions and parties

CryptPays applies service restrictions arising from different sources. A business-policy exclusion is not the same as a sanctions designation, and a country list does not replace screening of designated persons or transactions.

Last updated: September 29, 2026

1. How this policy works

CryptPays may refuse service based on applicable law or sanctions, a provider requirement, security or fraud concerns, or CryptPays’ own business and risk policy. Those grounds are distinct. Inclusion below means CryptPays will not knowingly provide the relevant service; it does not state that every person in a location is sanctioned under every legal regime.

This page is a product-access policy, not a complete statement of sanctions law. Sanctions programs vary in scope, can target conduct or sectors, and often apply to people and entities regardless of location. Applicable official rules and designations control if they are broader than this page.

2. Prohibited-service jurisdictions and territories

CryptPays does not knowingly provide service involving a person ordinarily resident or established in, an organization formed under the laws of, or a transaction originating from or intended for the benefit of the following locations:

  • Cuba
  • Iran
  • North Korea (Democratic People's Republic of Korea)
  • Crimea and Sevastopol
  • Non-government-controlled areas of Ukraine in the Donetsk, Luhansk, Zaporizhzhia, and Kherson regions

These location-based service restrictions are informed by broad sanctions and territorial measures across relevant regimes and by CryptPays’ decision not to serve transactions with those locations. The precise legal obligations can depend on the operator, transaction, persons involved, and law that applies.

3. CryptPays business and risk-policy exclusions

CryptPays also chooses not to provide service involving the following jurisdictions under its business and risk policy:

  • Belarus
  • Russia
  • Syria
  • United Arab Emirates
The United Arab Emirates is a CryptPays policy exclusion.

CryptPays does not label the UAE as sanctioned. It is excluded by a CryptPays business and risk decision.

Russia and Belarus are subject to extensive but legally varied sanctions and sectoral measures. Syria continues to involve targeted restrictions even though the United States ended its comprehensive country sanctions in 2025. CryptPays’ broader decision not to serve these jurisdictions is a business and risk-policy rule and should not be read as a claim that each is under an identical comprehensive embargo.

4. Sanctioned and designated persons or entities

CryptPays will not knowingly provide service to, for, or for the benefit of a person, organization, wallet, transaction, vessel, or other party that is blocked, designated, or otherwise prohibited under sanctions or other restrictions applicable to CryptPays, its operator, or a required service provider.

This restriction applies regardless of where the party is located. It can also apply to entities owned or controlled by a designated party where the relevant law requires that treatment, even if the entity is not named separately.

5. Additional legal, provider, and transaction restrictions

CryptPays may restrict another jurisdiction, sector, merchant, wallet, asset, counterparty, or transaction where reasonably necessary to comply with applicable law, a binding order, provider terms, fraud or abuse controls, security requirements, or a documented risk decision.

The absence of a location from this page does not guarantee service availability or mean every person or transaction involving that location is permitted. This list is intentionally not represented as legally exhaustive. Restrictions and official designations can change faster than a website page.

6. Information requests and refusal

CryptPays may request information about identity, residence, business, ownership, licensing, transaction purpose, source of funds, destination of funds, counterparties, or related circumstances where reasonably necessary to evaluate a restriction. CryptPays may refuse, delay, suspend, or terminate activity when information is not provided, cannot be verified, or indicates prohibited or elevated-risk activity.

This does not mean that routine KYC or KYB currently applies to every normal keyless Merchant API request. It means CryptPays does not promise permanent anonymous, no-KYC, or no-KYB access.

7. No circumvention

You must not evade or help another person evade a restriction through false information, a VPN or proxy, a nominee, an intermediary, an alternate entity or wallet, transaction splitting, routing through another jurisdiction, or any other concealment method. Attempted circumvention is independently prohibited and may result in refusal or suspension.

8. Questions

For a question about this policy, use the CryptPays contact form. CryptPays cannot provide legal advice about your own sanctions, licensing, or compliance obligations.