Built for the scrutiny of banks, auditors and regulators.

1 · Who we serve

Businesses only.

NEO Collect is offered to incorporated businesses that have completed our know-your-business (KYB) process. We do not open accounts for individuals and we do not market to consumers. Where a client's own end users are consumers, for example a licensed gaming operator's players, the client remains the contracting party and account holder of record, and every end user passes the client's own verification before a deposit IBAN is created.

We do not serve businesses in prohibited industries, and restricted industries are accepted only after enhanced due diligence. The full list is in our Acceptable Use Policy.

2 · Onboarding (KYB)

Every client is verified before any IBAN exists.

• Company registry checks against the official registry of the jurisdiction of incorporation.
• Ultimate beneficial owner identification for every natural person holding 25% or more, or exercising control by other means.
• Director verification with document and liveness checks.
• Source of funds and source of wealth questionnaires, with supporting evidence where the risk rating requires it.
• Risk rating based on industry, jurisdiction, ownership structure, expected volumes and corridors. The rating sets the monitoring intensity and review cycle.

Verification is performed with independent KYB, identity verification, sanctions screening, device intelligence and blockchain analytics providers. The names of our providers are shared with clients and banking partners under NDA as part of the compliance pack.

3 · Ongoing monitoring

Verification does not stop at onboarding.

• Transaction monitoring rules on amount, velocity, corridor, payer concentration and behaviour change, tuned per risk rating.
• Periodic reviews every 12 months for standard-risk clients and every 6 months for higher-risk clients, with event-driven reviews on material change.
• Daily re-screening of all clients, beneficial owners, directors and active payers against updated sanctions and PEP lists.

4 · Shield

Controls on every inbound credit.

Shield checks the payer name against the account holder, screens the payer, and applies amount, velocity, country and first-party rules before any credit reaches a balance. Third-party and high-risk payments are returned to source with a full audit trail. It is included on every plan and cannot be switched off. Read about Shield →

5 · Recalls and fraud

A dedicated recall team.

6 · Data protection

Client data stays with the client.

We comply with the EU and UK General Data Protection Regulations and with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Production data is hosted in the European Union, with encrypted backups in Canada. Customer data is never shared beyond what the law requires. Where a banking partner requests information about end customers, we respond with anonymised reporting, an attestation from our MLRO, or review under NDA, rather than raw customer files. See our Privacy Policy.

7 · Governance

Policies, ownership and independent review.

Our Money Laundering Reporting Officer (MLRO) reports directly to the board and owns the following policies, each reviewed at least annually and subject to an annual independent review by an external firm:

• Anti-Money Laundering and Counter-Terrorist Financing
• Transaction Monitoring
• Fraud Prevention and Recalls
• Sanctions and PEP Screening
• Vulnerable Customers
• Record Keeping and Data Retention
• Outsourcing and Third-Party Risk
• Complaints Handling

8 · Security

Security controls that match the money.

Encryption in transit (TLS 1.2+) and at rest (AES-256), single sign-on and mandatory two-factor authentication for the console, role-based access control, immutable audit logs, scoped and rotatable API keys, annual penetration testing and a responsible disclosure programme. Read the security overview →