Last updated January 1, 2025
v2.0Prohibited Activities Policy
1. INTRODUCTION AND SCOPE
1.1 Overview. To ensure the integrity, legality, and security of its platform, BUYEASY TECHNOLOGY CO., LTD, a company incorporated in Ontario, Canada (together with its subsidiaries and affiliates, collectively "BUYEASY," "Mosta," "Company," "we," "us," or "our"), maintains this Prohibited Activities Policy ("Policy"). This Policy sets forth the types of businesses, transactions, jurisdictions, and activities that are prohibited or restricted on the Platform, including the website at https://mosta.io (the "Site"), mobile application (the "App"), and all services provided or facilitated thereby (collectively, the "Platform" or "Services").
1.2 Applicability. This Policy applies to all users, businesses, and transactions conducted on or through the Platform. Users are responsible for ensuring that their activities comply with this Policy and all applicable laws and regulations in their respective jurisdictions.
1.3 Partner Requirements. The Platform facilitates access to financial services through multiple partner institutions across different currencies and product lines (including USD, EUR, GBP, AED accounts, and card services (Puerto Rico)). Each partner imposes its own compliance requirements. This Policy consolidates the restrictions applicable across all partners to provide a comprehensive and unified compliance framework. Where a restriction applies to a specific service channel, it is noted accordingly.
1.4 Policy Updates. This Policy is subject to change based on regulatory, legal, and operational requirements, including updates from international bodies such as the Financial Action Task Force (FATF), the U.S. Office of Foreign Assets Control (OFAC), the European Union, and other relevant regulatory authorities. We reserve the right to update this Policy at any time without prior notice.
2. PROHIBITED BUSINESS TYPES
2.1 Universally Prohibited Businesses. The following categories of businesses or activities are strictly prohibited from accessing or using the Platform across all service channels and partner institutions: (a) any business engaged in illegal activities or the sale of illegal products or services under applicable law; (b) production, distribution, or sale of controlled substances without valid licensing from the appropriate governmental authority; (c) human trafficking, forced labor, prostitution, escort services, or similar exploitative businesses; (d) manufacturing, distribution, or sale of counterfeit goods, pirated software, music, movies, or other intellectual property violations; (e) deceptive, misleading, or predatory business models, including pyramid schemes, Ponzi schemes, multi-level marketing schemes, get-rich-quick schemes, or fund aggregation and factoring services; (f) activities involving illegal content, including child sexual abuse materials (CSAM) or any form of exploitation of minors; (g) businesses promoting unlawful violence, terrorism, or extremism; and (h) shell banks or entities designed to obscure the beneficial ownership of funds.
2.2 Prohibited Businesses — USD Accounts. In addition to the universally prohibited categories, the following businesses are prohibited from accessing USD account services: (a) gambling, betting, fantasy sports, and cash-intensive businesses; (b) firearms, weapons, ammunition, explosives, and dangerous materials dealers; (c) dealers in precious metals, gems, or high-value commodities; (d) high-risk financial services operating without appropriate licensing; (e) adult content and services, including pornography, escort services, and adult live chat; (f) certain legal services as determined by enhanced due diligence; and (g) marijuana dispensaries, cannabis-related businesses, and related products.
2.3 Prohibited Businesses — EUR and GBP Accounts. In addition to the universally prohibited categories, the following business types are prohibited from accessing EUR and GBP account services: (a) charitable organizations; (b) decentralized finance (DeFi) exchanges; (c) cryptocurrency miners; (d) non-fungible token (NFT) projects; (e) money services businesses (MSBs); (f) token projects and initial coin offerings; (g) cryptocurrency ATM operators; and (h) trust corporations and personal trusts.
2.4 Prohibited Businesses — AED Accounts. In addition to the universally prohibited categories, the following businesses are prohibited from accessing AED account services: (a) weapons and war materials; (b) atomic power businesses; (c) unlicensed businesses of any type; (d) unauthorized resale of branded products; (e) gambling and betting services; (f) marijuana dispensaries and drug paraphernalia; (g) tobacco, e-cigarettes, and e-liquid products; (h) online pharmacies; (i) age-restricted goods sold without proper verification; (j) explosives, fireworks, toxic, flammable, or radioactive materials; (k) pornography and sex-related services; (l) substances mimicking illegal drugs, including salvia and kratom; (m) mugshot removal sites and no-value-added services; and (n) businesses promoting unlawful violence.
2.5 Prohibited Businesses — Card Services (Puerto Rico). In addition to the universally prohibited categories, the following businesses are prohibited from accessing card services (Puerto Rico): (a) illegal or unlicensed drug-related activities; (b) human exploitation and adult-service activities; (c) political fundraising or campaign-related financial activity; (d) digital-asset transactions, including cryptocurrency purchases; (e) dark-web, hacking, or cybercrime-related payments; (f) weapons, ammunition, or explosive-related activities; (g) hazardous or restricted materials without required governmental clearance; (h) unlicensed or illicit auction or trading platforms; (i) unregulated lending or high-risk financial services; and (j) unauthorized data collection or data-brokerage activity.
3. RESTRICTED BUSINESS ACTIVITIES
3.1 Enhanced Due Diligence. Certain types of businesses may be permitted to use the Platform only after enhanced due diligence and formal approval by the Company’s Compliance Team. These include, but are not limited to: (a) money services businesses (MSBs); (b) cryptocurrency exchanges, wallets, brokers, or other digital asset service providers; (c) gambling, betting, fantasy sports, and skill-based gaming platforms; (d) charities, foundations, or other non-profit organizations; (e) adult content services, online tipping, or fan monetization platforms; (f) dealers in precious metals, gems, or high-value commodities; and (g) businesses operating in industries with elevated regulatory or financial crime risk.
3.2 Requirements. Entities in the restricted categories must demonstrate: (a) full licensing and registration with all applicable regulatory authorities; (b) compliance with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations; (c) robust risk management protocols, including customer due diligence programs; (d) audited financial statements or equivalent documentation; and (e) a clean compliance history with no unresolved regulatory actions.
3.3 Ongoing Monitoring. Restricted businesses that are approved for access to the Platform are subject to ongoing monitoring, periodic reviews, and enhanced transaction surveillance. The Company reserves the right to revoke access at any time if compliance standards are not maintained.
4. PROHIBITED TRANSACTIONS AND USAGE
4.1 Prohibited Transactions. The following types of transactions are not permitted on the Platform: (a) purchase or sale of illegal drugs, narcotics, or controlled substances without proper authorization from the relevant governmental authority; (b) use of stolen, forged, or unauthorized financial instruments, identification documents, or credentials; (c) funding or engagement in cybercrime, malware distribution, hacking services, or dark-web-related payments; (d) purchase, sale, or distribution of weapons, ammunition, or explosives for unauthorized purposes; (e) operation of unlicensed online pharmacies or participation in illicit pharmaceutical trade; (f) unlawful access to, trafficking in, or sale of personally identifiable information (PII) or sensitive data; (g) offering payday loans, high-interest unlicensed lending, or debt collection without applicable licensing and compliance; (h) trade or sale of endangered species or products derived from them; (i) drug-related purchases, including drug paraphernalia and substances mimicking illegal drugs; and (j) any transaction designed to circumvent sanctions, export controls, or other regulatory restrictions.
4.2 Structuring and Evasion. Users are prohibited from structuring transactions to avoid reporting thresholds, circumventing internal controls, or engaging in any activity intended to evade compliance with applicable laws, regulations, or this Policy.
4.3 Sanctions Compliance. Users shall not engage in any transaction or activity involving: (a) individuals or entities designated on sanctions lists maintained by OFAC, the United Nations, or the European Union; (b) individuals or entities owned or controlled by sanctioned parties; or (c) any activity that would cause the Company to violate applicable sanctions laws.
5. GEOGRAPHIC RESTRICTIONS
5.1 Overview. The Company restricts access to its Services in jurisdictions subject to sanctions, regulatory restrictions, or elevated financial crime risks. Restrictions vary by service channel and partner institution. The table below consolidates all restricted jurisdictions by service type. A check mark (✓) indicates that the jurisdiction is restricted for that service; a dash (—) indicates no restriction specific to that service. “Cards (PR)” refers to card services issued through Puerto Rico.
| Jurisdiction | USD | EUR | GBP | AED | Cards (PR) |
|---|---|---|---|---|---|
| Abkhazia | — | ||||
| Afghanistan | — | ||||
| Albania | — | ||||
| Angola | — | ||||
| Belarus | |||||
| Bosnia and Herzegovina | — | ||||
| Burundi | — | ||||
| Central African Republic | — | ||||
| China | — | ||||
| Crimea (Ukraine) | — | — | |||
| Cuba | |||||
| Democratic People’s Republic of Korea (North Korea) | |||||
| Democratic Republic of the Congo | — | ||||
| Eritrea | — | ||||
| Ethiopia | — | ||||
| Georgia | — | — | |||
| Guinea | — | ||||
| Guinea-Bissau | — | ||||
| Haiti | — | ||||
| Hong Kong | — | — | |||
| India | — | ||||
| Iran | |||||
| Iraq | — | ||||
| Israel | — | ||||
| Ivory Coast (Côte d’Ivoire) | — | ||||
| Kazakhstan | — | — | |||
| Kosovo | — | ||||
| Lebanon | — | ||||
| Liberia | — | ||||
| Libya | — | ||||
| Mali | — | ||||
| Myanmar (Burma) | |||||
| Nagorno-Karabakh | — | ||||
| Nepal | — | ||||
| Nicaragua | — | ||||
| North Macedonia | — | ||||
| Northern Cyprus | — | ||||
| Pakistan | — | ||||
| Republic of the Congo | — | — | |||
| Russia | |||||
| Sahrawi Arab Democratic Republic | — | ||||
| Serbia | — | ||||
| Sierra Leone | — | ||||
| Somalia | — | ||||
| Somaliland | — | ||||
| South Ossetia | — | ||||
| South Sudan | — | ||||
| Sudan | — | ||||
| Syria | |||||
| Turkey | — | ||||
| Ukraine | |||||
| United States | — | — | |||
| Venezuela | |||||
| Vietnam | — | ||||
| Yemen | — | ||||
| Zimbabwe | — |
5.2 Ukraine — Specific Regions. For all service channels where Ukraine is listed as restricted, restrictions specifically include the Crimea, Donetsk, and Luhansk regions. Certain service channels may restrict all of Ukraine; others may restrict only these specific regions. Users should contact the Compliance Team for clarification regarding permissible activity involving Ukrainian counterparties.
5.3 Changes to Restricted Jurisdictions. The Company reserves the right to add or remove jurisdictions from this list at its sole discretion, including in response to updates from FATF, OFAC, the European Union, the Central Bank of the UAE, or other relevant regulatory authorities. Users will be notified of material changes to the restricted jurisdictions list through Platform notifications or email.
5.4 User Responsibility. Users are responsible for ensuring that they do not use the Platform in violation of geographic restrictions applicable to their accounts. The Company reserves the right to immediately suspend or terminate any account that is found to be operating from, or facilitating transactions to or from, a restricted jurisdiction.
6. ENFORCEMENT AND MONITORING
6.1 Monitoring. The Company employs automated and manual monitoring systems to detect potential violations of this Policy. Monitoring includes, but is not limited to: (a) transaction monitoring for suspicious activity; (b) sanctions screening of users, counterparties, and transactions; (c) periodic reviews of user accounts and business activities; and (d) analysis of usage patterns for potential circumvention of restrictions.
6.2 Investigation and Remediation. The Company reserves the right to investigate any suspected violation of this Policy. During an investigation, the Company may: (a) suspend the user’s account and freeze funds; (b) request additional documentation or information from the user; (c) restrict access to certain features or services; and (d) engage external counsel or forensic specialists as necessary.
6.3 Consequences of Violation. Violations of this Policy may result in: (a) immediate suspension or termination of the user’s account; (b) forfeiture of funds in accordance with applicable law and the Company’s Terms and Conditions; (c) reporting to applicable regulatory bodies, law enforcement authorities, or financial intelligence units; and (d) pursuit of civil or criminal remedies as appropriate.
6.4 Cooperation with Authorities. The Company cooperates fully with law enforcement agencies, regulatory authorities, and judicial bodies in connection with investigations of violations of this Policy, applicable laws, or regulations. The Company shall provide information as required by lawful requests, court orders, and regulatory inquiries.
7. USER OBLIGATIONS
7.1 Compliance. Users are required to: (a) comply with this Policy and all applicable laws and regulations; (b) provide accurate and complete information to the Company during onboarding and throughout the relationship; (c) promptly notify the Company of any changes to their business activities, ownership structure, or regulatory status; and (d) cooperate with the Company’s compliance inquiries and requests for information.
7.2 Reporting. Users who become aware of any activity on the Platform that may violate this Policy are encouraged to report such activity to the Compliance Team at info@buyeasy.it.com. Reports may be made confidentially.
8. CONTACT INFORMATION
Compliance Inquiries:
Email: info@buyeasy.it.com
General Support:
Email: info@buyeasy.it.com
For questions regarding permitted business models, specific service channel restrictions, or compliance inquiries, please contact the BUYEASY TECHNOLOGY CO., LTD. Compliance Team using the contact information above.