Compliance & Verification

How Cartaro verifies users before enabling controlled services

This page explains how Cartaro reviews users, businesses, and authorised representatives before enabling restricted services. At this time, verification is handled manually through Cartaro support tickets and supporting documents.

Last updated: March 2026

What verification covers

Cartaro may verify the account holder, authorised representative, business entity, ownership or beneficial-owner details, operating activity, storefront, and the specific use case before enabling a controlled feature.

What verification can unlock

Approved verification may unlock specific Cartaro services, including collection or settlement-related workflows carried out on the user's behalf, partner onboarding, risk-reviewed feature access, or other higher-trust account operations. Approval is feature-specific and may include limits or conditions.

What verification does not mean

Verification does not guarantee permanent approval, banking acceptance, regulatory approval, or uninterrupted access. It also does not by itself mean that Cartaro is acting as a licensed payment gateway, bank, or regulated financial institution for every use case. Cartaro may request updated information, impose conditions, or suspend access if risk or legal requirements change.

Review flow

Verification steps used today

01

1. Support ticket submission

The user submits a request describing the account, business activity, requested feature, jurisdictions served, and the reason access is needed. Cartaro may also request storefront URLs, social channels, expected order volumes, settlement information, and customer-support contacts.

02

2. Identity and authority review

Cartaro may ask for government-issued identification, trade-license records, proof of authority, authorised-signatory evidence, and other records showing that the requester is legally entitled to act for the account or business.

03

3. Risk, suitability, and compliance review

Cartaro reviews the stated business model, goods or services, ownership structure, consumer-facing disclosures, complaint channels, geography, fraud or chargeback risk, and any legal or partner rules that may apply to the requested service.

04

4. Decision, activation, and monitoring

Cartaro may approve the request, approve it with conditions, request more information, or decline it. Access may be limited by scope, transaction type, geography, manual review, or later re-verification if the account profile changes.

User duties after approval

  • All submitted information and documents must be complete, accurate, current, and not misleading.
  • The user must have the legal right to submit documents and to instruct Cartaro to act on the account or on the business's behalf.
  • Material changes to ownership, authorised signatories, licensing status, business model, goods or services, control structure, or settlement instructions must be reported promptly, and where UAE law requires, should not be delayed beyond fifteen working days.
  • Cartaro may reopen verification whenever the account activity, risk profile, complaints, or legal requirements materially change.

How verification data may be used

Cartaro may use verification information to review eligibility, document decisions, protect users and consumers, meet legal and contractual obligations, investigate suspicious activity or complaints, support audits, and share necessary data with relevant service providers, partners, competent authorities, or advisers where legally permitted and reasonably required.

Information & documents

What Cartaro may request

Identity and authority

  • Government-issued identification for the person acting on the account, when required.
  • Proof that the requester is the owner, authorised signatory, or properly appointed representative.
  • Operational contact information for compliance, service, and escalation follow-up.

Business and licensing records

  • Trade license, commercial registration, free-zone license, or equivalent formation records where applicable.
  • Trade name, legal name, address, licensing authority, and the exact business activity being carried on.
  • Ownership, control, or beneficial-owner information where the structure, service, or risk profile requires it.

Operational evidence

  • Storefront, website, app, catalog, social channels, or product listings showing the actual business activity.
  • Customer-facing policies or disclosures, including terms, returns, complaint channels, and Arabic-facing information where required for UAE consumer activity.
  • Expected order profile, settlement structure, fulfilment model, and any third-party involvement relevant to the requested service.

Additional due diligence

  • Further explanations, invoices, sample transactions, source-of-authority evidence, or supporting records for higher-risk requests.
  • Clarifications where there is a mismatch between documents, stated business activity, or the way the account intends to use the service.
  • Updated records whenever ownership, signatories, licensing status, or control arrangements change.

What can lead to enhanced review

Regulated, restricted, high-risk, or approval-based products and services.
A mismatch between the stated activity and the submitted license, website, onboarding details, or public presence.
Requests involving collection, settlement, or operational handling on behalf of another person or business.
Opaque or changing ownership, nominee structures, or missing beneficial-owner information.
High expected volumes, unusual geographies, complaint or chargeback risk, or signs of fraud, sanctions exposure, or misuse.

UAE alignment

Legal standards this process is designed to support

Modern technology-based trade

Cartaro reviews whether the user appears to have legal capacity, the required approvals or licenses, technically safe operating processes, clear pricing and contracting information, and compliant digital-service controls where the requested use case falls within UAE modern technology-based trade rules.

Consumer protection and Arabic disclosures

For UAE-facing consumer activity, Cartaro may require true business information, licensing details, payment or contracting disclosures, complaint channels, and Arabic or bilingual consumer-facing content where UAE law requires consumer data, advertising, or contracts to appear in Arabic.

Data protection

Verification information is collected for defined review and compliance purposes, handled with access controls, and retained only to the extent reasonably needed to assess eligibility, document decisions, monitor access, and respond to legal or operational obligations.

AML, beneficial ownership, and ongoing monitoring

Where the requested service creates fraud, collection, or financial-crime risk, Cartaro may apply customer due diligence, beneficial-owner review, source-of-authority checks, ongoing monitoring, and escalation controls in line with applicable UAE obligations and relevant partner requirements.

Possible outcomes

Review decisions

Approved

The requested feature is enabled for the verified account, sometimes with scope limits, transaction limits, geography limits, or onboarding conditions.

Approved with conditions

Cartaro may require additional policies, Arabic disclosures, feature restrictions, reserve periods, manual review, or later re-verification before broader access is granted.

More information required

Activation is paused until the user provides clarifications, corrected documents, or additional supporting evidence.

Declined or suspended

Cartaro may refuse or later suspend access when the request is inconsistent, unsupported, prohibited, misleading, unusually risky, or non-compliant with applicable law, partner rules, or platform policy.

Important legal note

This page describes Cartaro's current platform policy and operational controls. It is not legal advice to any user, does not replace direct advice from UAE counsel or a regulator, and does not waive any additional requirements imposed by a bank, partner, competent authority, free-zone authority, or other regulated counterparty.

Need to start or update a verification request? Contact support