This policy is part of the Terms and applies to everyone using veilnebu.la. Breaching it is grounds for immediate suspension without notice.
We do not verify who you are. That makes this policy more important, not less: it is the substantive constraint on what the Service may be used for, and the fact that we did not check your identity at signup is not a defence to breaching it.
1. Prohibited activities
The list is not exhaustive. Where something is illegal where you are, where your customers are, or where we are, it is prohibited here whether or not it appears below.
- Transacting with, or on behalf of, a sanctioned person, entity, vessel or address.
- Laundering the proceeds of crime, or structuring payments to stay under a threshold.
- Financing terrorism or proliferation.
- Evading sanctions, capital controls, or export controls on behalf of anyone.
- Operating or feeding a mixer, tumbler, or chain-hopping service.
- Deliberately fragmenting payments to defeat screening or analysis.
- Presenting the Service to your own users as an anonymising or privacy layer. It is not one.
- Phishing, spoofing, or impersonating a person, business, or us.
- Accepting payment for goods or services you do not intend to deliver.
- Ponzi and pyramid schemes, high-yield investment programmes, and guaranteed-return offers.
- Trafficking in stolen funds, stolen cards, stolen credentials, or stolen data.
- Ransomware, extortion, sextortion, or payment for any of them.
- Child sexual abuse material — reported without exception, wherever we are permitted to report it.
- Human trafficking, forced labour, and non-consensual sexual content.
- Controlled substances and precursors, unless you hold every licence required.
- Weapons, ammunition, explosives, and their components, outside a licensed trade.
- Counterfeit goods, and material that infringes someone else’s intellectual property.
- Endangered wildlife and protected cultural property.
- Malware, exploit kits, botnets, DDoS-for-hire, and credential-stuffing tools.
- Gambling, betting, lotteries and prediction markets without authorisation for every market you serve.
- Money transmission, remittance, exchange or brokerage without registration where it is required.
- Securities offerings, token sales, funds, and investment advice outside an applicable exemption.
- Lending, credit, and debt collection outside the rules that govern them where you operate.
- Pharmacy, prescription medicines, and unapproved medical claims.
- Circumventing, probing or degrading screening, rate limits, or security controls.
- Creating a new account to escape a suspension, or splitting activity across accounts to avoid limits.
- Reselling or sublicensing access, or sharing API keys outside your organisation.
- Automated traffic that materially degrades the Service for others.
- Presenting sandbox activity to anyone as a real payment.
2. Restricted jurisdictions
The Service is not offered to residents of, or for transactions ordinarily connected with, the following:
- Cuba
- Iran
- North Korea
- Syria
- Any territory subject to a comprehensive sanctions programme at the time you transact, including occupied or disputed regions designated under one.
- Anywhere the activity you are using the Service for is unlawful, or requires an authorisation you do not hold.
Sanctions programmes change, sometimes quickly and sometimes in the direction of being relaxed. The list above reflects the operator’s configuration and is not a legal opinion on any country’s current status. Determining your own position at the moment you transact is your obligation, not ours.
3. How this is enforced — and how it is not
Being able to reach this Service from somewhere is not permission to use it from there. We want to be exact about the mechanism, because a jurisdiction list on a legal page usually implies a technical control behind it:
- There is no IP-based country blocking in operation. Nothing checks where your request came from and refuses it. The restriction in §2 is contractual.
- Payout and refund destinations are screened against sanctions data, and a match is a hard refusal. That is the one automated control that bites — see the AML and sanctions policy.
- Everything else is manual. We act on reports, on patterns we notice, and on demands from authorities. We may suspend a project, disable API keys, refuse a payout, or terminate the account.
Nothing here obliges us to monitor, and no failure to detect a breach is a waiver of our right to act on it later.
4. What happens when we act
Depending on severity we may warn you, suspend a project, hold a payout pending review, or terminate immediately. Where we suspend rather than terminate, we will tell you what triggered it and what would resolve it, unless a legal restriction stops us from saying. Where the law requires a report, we make it, and we may be prohibited from telling you that we have.
Suspension does not forfeit your balance. You remain entitled to withdraw your available balance, subject to screening and to any hold we are legally required to apply.
5. If you think we got it wrong
Reply to the notice, or write to [email protected]. A person will look at it. Screening refusals in particular can be reviewed and overridden by an administrator, with the reason recorded.
6. Reporting abuse
If you believe someone is using veilnebu.la for anything on this page, tell us at [email protected] with the transaction hash, the invoice reference or the merchant name if you have them. Security vulnerabilities go to /security, which has a disclosure process built for them.