Compliance

Know Your Customer, Done Properly.

Tonstarter's KYC process is designed for the DIFC and VARA regulatory context. Identity verification confirms who you are — it is not investment approval and it is not financial advice.

DIFC context
Operated from Gate Avenue, Level 14, DIFC, Dubai
DFSA & VARA awareness
Platform design informed by both regulatory regimes
Single-step KYC + whitelist
On-chain whitelist activation on KYC approval
Process

Five-Stage KYC Flow

Step-by-step KYC flow diagram showing wallet connection, identity verification, UAE compliance check, and whitelist approval on TON network
1
Connect TON Wallet
Link your self-custodied TON wallet (Tonkeeper or TON Wallet). This is the address that will be registered on-chain if your KYC is approved. One wallet per application only.
2
Identity Document Upload
Submit a government-issued photo ID (passport, national ID, or driving license) and proof of address dated within 3 months. Documents must be clear, unexpired, and in English or Arabic — or with a certified translation.
3
AML & Sanctions Screen
Applicants are screened against OFAC, UN, and EU consolidated sanctions lists, plus PEP (politically exposed person) databases. Source-of-funds attestation may be requested for higher-risk profiles. This screen is non-negotiable under the DIFC-context AML framework.
4
Review and Decision
Manual review typically completes within 24 hours. Decisions are communicated by email. If additional documentation is needed, you will receive a specific request — not a rejection.
5
On-Chain Whitelist Activation
On approval, the connected wallet address is written to the project's whitelist contract. This happens automatically — no further action required from the applicant.
Timeline: Acknowledgment within 24 hours of submission. Decision typically within 24–48 hours. Appeals may take up to 5 business days.
Regulatory

DIFC and VARA Regulatory Context

UAE has two separate virtual-asset regulatory regimes — DFSA (within DIFC) and VARA (mainland UAE). Understanding which applies to your project requires knowing where you are incorporated and what your token does. This is factual context, not legal advice. For FATF travel rule obligations on transactions exceeding $1,000, consult qualified AML legal counsel for your specific structure.

DFSA — DIFC Financial Services Authority

The DFSA governs financial services activity within the Dubai International Financial Centre (DIFC) — a special economic zone with its own legal system based on English common law. Tonstarter is incorporated and operates within DIFC.

The DFSA introduced a virtual asset regulatory framework covering the offering, admission, and trading of virtual assets within DIFC. Projects incorporated within DIFC or offering tokens to DIFC-based investors may need to notify or register with the DFSA depending on the nature of the token and the amount raised. Founders should consult legal counsel on whether DFSA registration applies to their specific structure.

VARA — Virtual Assets Regulatory Authority

VARA governs virtual asset activities on the UAE mainland — outside DIFC and ADGM (Abu Dhabi Global Market). VARA was established in 2022 and has issued frameworks covering virtual asset service providers (VASPs), including exchanges, custodians, and token issuers operating from or into mainland UAE.

Projects targeting UAE-mainland participants in a public token sale may need to notify or register with VARA before opening the sale to UAE-resident investors. The threshold for mandatory registration depends on the total offering size, token classification, and marketing approach. Founders should obtain independent legal advice on VARA applicability to their structure.

Four Statements Every Project Founder Must Understand

Tonstarter is a technology platform. We are not a financial adviser, broker, or regulator. We do not provide legal advice on regulatory compliance for your specific token structure.
KYC pass on Tonstarter confirms identity for compliance purposes. It does not constitute investment approval, financial advice, or an assessment of the project's token utility, team quality, or product viability — those are the project's representations, not ours.
Token sales conducted through this platform are not offers of securities. Participation does not constitute the purchase of a financial instrument. This determination may differ in your specific jurisdiction.
Tonstarter operates from a DIFC business address. DIFC registration means Tonstarter operates from a regulated jurisdiction. It does not mean every project listed is endorsed by, reviewed by, or registered with the DFSA. Each project is responsible for its own regulatory filings.
FAQ

KYC Questions

Most nationalities are accepted for KYC. Participation may be restricted for individuals from jurisdictions subject to comprehensive international sanctions (e.g. OFAC-designated countries). Each project's specific sale page lists any additional nationality or residency restrictions beyond the platform baseline. Restrictions vary by project depending on the project team's own legal review of their distribution obligations.
Accepted ID documents: passport (most common), national identity card, or government-issued driving license — provided the document includes a photograph and date of birth. Accepted proof of address: utility bill, bank statement, or official government correspondence dated within the last 3 months. The document must show your name and residential address clearly. PO Box addresses are not accepted as proof of address.
Approved KYC status is valid for 12 months from the date of approval. After 12 months, or if your documents have expired, you will need to complete a re-verification. Re-verification requires re-submitting current documents and completing a new liveness check. The process is identical to the initial KYC submission. Your existing wallet remains linked unless you request a change.
If your KYC application is rejected, you will receive an email specifying the reason (where permissible by sanctions screening rules — some rejections cannot specify the exact reason). You may appeal by emailing [email protected] within 5 business days. Appeals are reviewed manually and typically resolved within 3–5 business days. You may also resubmit with clearer documentation if the rejection was due to document quality.
Personal data submitted for KYC is processed by Tonstarter and its KYC service provider under written data processing agreements. Data is used only for identity verification and compliance purposes — not for marketing or resale. Identity documents are retained for the legally required retention period and deleted thereafter. See our Privacy Policy for full details.
No. Participation requires a self-custodied TON wallet (Tonkeeper, TON Wallet, or equivalent). Exchange wallets cannot be KYC-verified individually because the exchange controls the keys. Additionally, token sale contracts often cannot distribute directly to exchange deposit addresses. You must hold your own private keys to participate.

Ready to Launch Your Project?

Submit your project application. Our team reviews compliance readiness and TON contract details.

Apply Your Project Ask a Question