Fiat Provider Compliance Documentation
Overview
Nova Wallet integrates with 5 licensed third-party fiat on-ramp/off-ramp providers to enable users to buy and sell cryptocurrency using traditional payment methods. All providers are fully licensed and regulated financial services companies that handle their own KYC/AML compliance. Important: Nova Wallet does not process payments directly. All fiat transactions are handled by the third-party providers via their hosted checkout flows.Fiat Providers
| Provider | Website | Licenses | Services |
|---|---|---|---|
| MoonPay | moonpay.com | FCA (UK), FinCEN (US), AUSTRAC (AU) | Buy & Sell |
| Mercuryo | mercuryo.io | Estonian FIU | Buy & Sell |
| Transak | transak.com | FinCEN (US) | Buy & Sell |
| Banxa | banxa.com | AUSTRAC (AU), FINTRAC (CA), FCA (UK), MiCA (EU) | Buy & Sell |
| Paybis | paybis.com | FinCEN (US), Poland VASP | Buy (Not yet integrated) |
- Identity verification (KYC)
- Anti-money laundering (AML) checks
- Transaction monitoring
- Sanctions screening
Country Availability by Provider
MoonPay (169 Supported Countries)
Supported Countries:| Country | Country | Country | Country | Country |
|---|---|---|---|---|
| Andorra | United Arab Emirates | Antigua and Barbuda | Albania | Armenia |
| Angola | Argentina | Austria | Australia | Azerbaijan |
| Bosnia and Herzegovina | Belgium | Bulgaria | Bahrain | Burundi |
| Benin | Brunei | Bolivia | Brazil | Bahamas |
| Bhutan | Botswana | Belize | Canada | Central African Republic |
| Republic of the Congo | Switzerland | Chile | Cameroon | Colombia |
| Costa Rica | Cape Verde | Cyprus | Czech Republic | Germany |
| Djibouti | Denmark | Dominica | Dominican Republic | Algeria |
| Ecuador | Estonia | Egypt | Eritrea | Spain |
| Ethiopia | Finland | Fiji | Micronesia | France |
| Gabon | United Kingdom | Grenada | Georgia | Ghana |
| Gibraltar | Gambia | Guinea | Equatorial Guinea | Greece |
| Guatemala | Guyana | Hong Kong | Honduras | Croatia |
| Hungary | Indonesia | Ireland | Israel | India |
| Iceland | Italy | Jordan | Kenya | Kyrgyzstan |
| Cambodia | Kiribati | Comoros | Saint Kitts and Nevis | South Korea |
| Kuwait | Cayman Islands | Kazakhstan | Laos | Saint Lucia |
| Liechtenstein | Sri Lanka | Lesotho | Lithuania | Luxembourg |
| Latvia | Monaco | Moldova | Montenegro | Marshall Islands |
| North Macedonia | Mali | Mauritania | Malta | Mauritius |
| Maldives | Malawi | Mexico | Mozambique | Namibia |
| Niger | Netherlands | Norway | Nepal | Nauru |
| New Zealand | Oman | Other Territories | Peru | Papua New Guinea |
| Philippines | Poland | Portugal | Palau | Paraguay |
| Qatar | Romania | Serbia | Rwanda | Saudi Arabia |
| Solomon Islands | Seychelles | Sweden | Singapore | Slovenia |
| Slovakia | Sierra Leone | San Marino | Suriname | São Tomé and Príncipe |
| El Salvador | Eswatini | Chad | Togo | Thailand |
| Tajikistan | Timor-Leste | Turkmenistan | Tunisia | Tonga |
| Turkey | Trinidad and Tobago | Tuvalu | Taiwan | Tanzania |
| United States | Uruguay | Uzbekistan | Vatican City | Saint Vincent and the Grenadines |
| Vietnam | Vanuatu | Samoa | South Africa | Zambia |
| Country | Reason |
|---|---|
| Afghanistan | OFAC sanctions / Armed conflict |
| Barbados | Regulatory restrictions |
| Bangladesh | Regulatory restrictions |
| Burkina Faso | Compliance requirements |
| Belarus | OFAC sanctions |
| DR Congo | Armed conflict / Compliance requirements |
| Côte d’Ivoire | Compliance requirements |
| China | Regulatory restrictions |
| Cuba | OFAC comprehensive sanctions |
| Western Sahara | Disputed territory |
| Guinea-Bissau | Compliance requirements |
| Haiti | Compliance requirements |
| Iraq | OFAC sanctions |
| Iran | OFAC comprehensive sanctions |
| Jamaica | Regulatory restrictions |
| Japan | Regulatory restrictions |
| North Korea | OFAC comprehensive sanctions |
| Lebanon | Partial OFAC sanctions |
| Liberia | Compliance requirements |
| Libya | OFAC sanctions |
| Morocco | Regulatory restrictions |
| Madagascar | Compliance requirements |
| Myanmar | OFAC sanctions |
| Mongolia | Regulatory restrictions |
| Malaysia | Regulatory restrictions |
| Nigeria | Regulatory restrictions |
| Nicaragua | OFAC sanctions |
| Panama | Regulatory restrictions |
| Pakistan | Regulatory restrictions |
| Palestine | Restricted territory |
| Russia | OFAC sanctions (2022+) |
| Sudan | OFAC sanctions |
| Senegal | Compliance requirements |
| Somalia | OFAC sanctions |
| South Sudan | OFAC sanctions |
| Syria | OFAC comprehensive sanctions |
| Ukraine | Regulatory restrictions |
| Uganda | Compliance requirements |
| Venezuela | OFAC sanctions |
| Kosovo | Disputed territory |
| Yemen | Armed conflict / OFAC sanctions |
| Zimbabwe | Compliance requirements |
- Sanctions Compliance: Countries under OFAC (Office of Foreign Assets Control) sanctions including Iran, North Korea, Syria, Cuba, Russia, Belarus
- Regulatory Restrictions: Countries where cryptocurrency regulations prohibit or restrict fiat on-ramp services (China, Bangladesh, Pakistan)
- Compliance Requirements: Countries where MoonPay cannot meet local regulatory requirements or lacks necessary licenses
- Risk Management: Countries with high financial crime risk or unstable regulatory environments
Mercuryo (199 Supported Countries)
Supported Countries: Mercuryo supports a comprehensive list of 199 countries and territories. Availability is determined dynamically based on real-time compliance checks. Generally supported regions include:| Region | Countries Included |
|---|---|
| Europe | All EU/EEA member states, United Kingdom, Switzerland, Norway, and most European countries |
| Americas | United States, Canada, Mexico, most Latin American and Caribbean countries |
| Asia-Pacific | Australia, New Zealand, Japan, South Korea, Hong Kong, Singapore, most Southeast Asian countries, India |
| Middle East | United Arab Emirates, Saudi Arabia, Qatar, Kuwait, Bahrain, and most Middle Eastern countries |
| Africa | South Africa, Kenya, Ghana, and most African countries (subject to real-time sanctions screening) |
- OFAC and EU sanctions compliance
- Local regulatory requirements
- Risk assessment and AML policies
- Real-time sanctions list updates
Banxa (Dynamic Country List)
Banxa supports approximately 100+ countries and determines availability dynamically based on:- User’s IP address geolocation
- Payment method availability
- Local regulatory requirements
- Europe (EU/EEA)
- United Kingdom
- Australia & New Zealand
- Canada
- United States (select states)
- Southeast Asia
- Latin America
- State-Level Regulations (US): Different US states have varying cryptocurrency regulations, affecting availability
- Payment Method Restrictions: Some payment methods (credit cards, bank transfers) may not be available in all countries
- Regulatory Compliance: Banxa must comply with local financial services regulations in each jurisdiction
- Licensing Requirements: Availability depends on Banxa’s licensing status in each country
Transak (Dynamic Country List)
Transak supports approximately 150+ countries with real-time availability checks based on:- User location
- Cryptocurrency type
- Payment method
- Europe (EU/EEA)
- United Kingdom
- United States (select states)
- India
- Southeast Asia
- Latin America
- Africa
- Cryptocurrency-Specific Restrictions: Some cryptocurrencies may be restricted in certain countries due to regulatory concerns
- Payment Method Availability: Different payment methods have different country coverage
- Real-Time Compliance: Transak performs real-time checks against sanctions lists and regulatory requirements
- State-Level Regulations: US state regulations affect availability within the United States
Paybis (Hardcoded Country List)
Supported Countries (180+): Paybis supports over 180 countries and territories worldwide. Generally supported regions include:| Region | Countries Included |
|---|---|
| Europe | All EU/EEA member states, United Kingdom, Switzerland, Norway, and most European countries |
| Americas | United States, Canada, Mexico, most Latin American and Caribbean countries |
| Asia-Pacific | Australia, New Zealand, Japan, South Korea, Hong Kong, Singapore, China, most Southeast Asian countries, India, Pakistan |
| Middle East | United Arab Emirates, Saudi Arabia, Qatar, Kuwait, Bahrain, and most Middle Eastern countries |
| Africa | South Africa, Kenya, Ghana, Nigeria, and most African countries (excluding conflict zones) |
| Country | Reason |
|---|---|
| Afghanistan | Armed conflict / OFAC sanctions |
| Belarus | OFAC sanctions |
| DR Congo | Armed conflict |
| Central African Republic | Armed conflict |
| Cuba | OFAC comprehensive sanctions |
| Western Sahara | Disputed territory |
| Ethiopia | Armed conflict |
| Iraq | OFAC sanctions |
| Iran | OFAC comprehensive sanctions |
| North Korea | OFAC comprehensive sanctions |
| Lebanon | Partial OFAC sanctions |
| Libya | OFAC sanctions |
| Mali | Armed conflict / sanctions |
| Myanmar | OFAC sanctions |
| Nicaragua | OFAC sanctions |
| Palestine | Restricted territory |
| Russia | OFAC sanctions (2022+) |
| Sudan | OFAC sanctions |
| Somalia | OFAC sanctions |
| South Sudan | OFAC sanctions |
| Syria | OFAC comprehensive sanctions |
| Yemen | Armed conflict / sanctions |
- OFAC Sanctions: Countries subject to US Treasury Department sanctions (Iran, North Korea, Syria, Cuba, Russia, Belarus, etc.)
- Armed Conflicts: Countries experiencing active armed conflicts that pose compliance and operational risks
- Disputed Territories: Regions with unclear sovereignty or territorial disputes
- Regulatory Compliance: Paybis blocks these countries to comply with international sanctions and maintain regulatory compliance
Swap/DEX Feature Restrictions
For decentralized exchange (DEX) swaps, the app restricts access only from OFAC-sanctioned countries:| Country | Sanctions Level |
|---|---|
| North Korea | OFAC Comprehensive Sanctions |
| Iran | OFAC Comprehensive Sanctions |
| Syria | OFAC Comprehensive Sanctions |
| Cuba | OFAC Comprehensive Sanctions |
- OFAC Compliance: US Treasury Department sanctions prohibit US persons and entities from engaging in financial transactions with these countries
- Apple App Store Guidelines: Compliance with Apple Guideline 3.1.5 regarding financial services and regional restrictions
- Regulatory Requirements: Ensuring compliance with international sanctions regimes
How Restrictions Are Enforced
1. IP-Based Geolocation
- User’s IP address is detected on API requests
- Backend determines country via IP geolocation service
- Providers check if country is in their allowed list
2. Provider-Level Enforcement
Each provider maintains their own country allowlist and blocklist, which is checked before allowing any transaction to proceed.3. Per-Asset Restrictions
Some cryptocurrencies have additional country restrictions beyond the provider level, based on regulatory concerns or licensing requirements.4. Real-Time Sanctions Screening
All providers perform real-time sanctions screening during:- Account creation
- Each transaction
- Periodic re-verification
KYC/AML Compliance
All KYC/AML verification is handled by the third-party providers:| Provider | KYC Level | Documents Required |
|---|---|---|
| MoonPay | Tiered | ID + Selfie (for higher limits) |
| Mercuryo | Full | ID + Selfie + Proof of Address |
| Transak | Tiered | ID + Selfie (for higher limits) |
| Banxa | Full | ID + Selfie |
| Paybis | Full | ID + Selfie + Proof of Address |
- FATF (Financial Action Task Force) recommendations
- Local AML/CFT regulations in their jurisdictions
- Sanctions screening against OFAC, UN, EU, and other sanctions lists
- Transaction monitoring for suspicious activity
Error Messages
Users in restricted regions see appropriate error messages:| Error Code | Message |
|---|---|
UnsupportedCountry | ”Service not available in your country” |
UnsupportedCountryAsset | ”This cryptocurrency is not available in your country” |
FiatSellNotAllowed | ”Selling crypto is not available in your region” |
SwapRestricted | ”Swaps are not available in your region due to regulatory restrictions” |
Compliance Verification
Provider Licenses & Registrations
MoonPay:- FCA (Financial Conduct Authority) - UK: FCA Register
- FinCEN (Financial Crimes Enforcement Network) - US: MSB Registration
- AUSTRAC (Australian Transaction Reports and Analysis Centre) - Australia: Registration
- Estonian FIU (Financial Intelligence Unit) - Estonia: Mercuryo Licenses
- FinCEN (Financial Crimes Enforcement Network) - US: MSB Registration
- Transak Compliance
- AUSTRAC (Australian Transaction Reports and Analysis Centre) - Australia: Registration
- FINTRAC (Financial Transactions and Reports Analysis Centre) - Canada: Registration
- FCA (Financial Conduct Authority) - UK: Registered as BNXA UK VASP
- MiCA (EU) - Netherlands: EU Internet Ventures B.V.
- FinCEN (Financial Crimes Enforcement Network) - US: MSB Registration #31000224635628
- Poland VASP - Revenue Administration Chamber in Katowice: RDWW-805
- Paybis Regulatory Info
Regulatory Compliance
All providers comply with:- Anti-Money Laundering (AML) regulations in their jurisdictions
- Know Your Customer (KYC) requirements
- Counter-Terrorism Financing (CFT) regulations
- International sanctions (OFAC, UN, EU)
- Data protection regulations (GDPR, CCPA, etc.)
Contact Information
For compliance inquiries:- MoonPay: [email protected]
- Mercuryo: [email protected]
- Transak: [email protected]
- Banxa: [email protected]
- Paybis: [email protected]
Version History
| Version | Date | Changes |
|---|---|---|
| 1.0 | Jan 2026 | Initial documentation |

