Compliance
Our regulatory status
We would rather tell you exactly where we stand than imply more than we can evidence. Midas Exchange S.R.L. is a Costa Rican company. We do not hold a financial-services licence or registration in any jurisdiction, and we do not open new accounts in markets where operating would require one. Below is our full status, the markets we serve, and the compliance programmes we run.
Costa Rica
Incorporated
None
Licences held
Didit
Identity verification
Real-time
Sanctions screening
Status
What we are, and what we are not
Stated plainly, because a claim you cannot verify is worth less than a fact you can.
The company
Midas Exchange was incorporated in Costa Rica on 3 February 2026 as a sociedad de responsabilidad limitada (S.R.L.). That is the entity behind this platform.
Licences and registrations
We hold none. We are not registered under MiCA, not registered with the UK Financial Conduct Authority, not licensed by the Monetary Authority of Singapore, and not registered with AUSTRAC, FINTRAC or the Japan Financial Services Agency. Any statement to the contrary is wrong, wherever you encountered it.
How we handle that
Rather than operate in regulated markets without authorisation, we have closed new account opening across those markets. Where we do operate, we run the compliance programmes described below because they are the right controls — not because a regulator currently requires them of us.
Where we operate
Account opening by jurisdiction
Derived from the country register that the platform actually enforces at signup — not a marketing summary. Existing account holders in wind-down markets retain access to their accounts and their funds.
| Jurisdiction | New accounts | Why |
|---|---|---|
| European Union (27), Iceland, Liechtenstein, Norway, Switzerland | Closed | Operating here would require MiCA authorisation or a national equivalent. We hold neither. |
| United Kingdom, Andorra, Monaco, San Marino, Vatican City | Closed | We are not registered with the FCA as a cryptoasset firm. |
| United States, Canada | Closed | We hold no federal or state money-transmitter registration, and no FINTRAC MSB registration. |
| Singapore | Closed | We are not licensed by MAS under the Payment Services Act. |
| Ukraine, Moldova, Serbia, Montenegro, North Macedonia, Albania, Bosnia and Herzegovina | Closed | Closed alongside the wider European market pending a licensing route. |
| North Korea, Iran, Syria, Cuba, Crimea | Prohibited | Comprehensive international sanctions. Identity verification and withdrawals are blocked for these jurisdictions. |
| Russia, Belarus | Restricted | Restricted under evolving international sanctions. |
| All other jurisdictions | Open | Subject to sanctions screening, our country risk register, and per-product availability. |
Our programmes
The controls we run
These are implemented and enforced on the platform today.
Identity verification
Tiered verification powered by Didit, with automated document checks, biometric matching and liveness detection. Verification level determines your limits.
AML / CFT programme
Risk-based customer due diligence, ongoing monitoring, and internal escalation of suspicious activity, with enhanced due diligence and PEP screening at the highest verification tier.
Sanctions screening
Screening against OFAC, UN, EU and HMT sanctions lists at onboarding and on an ongoing basis, applied to users and counterparties.
Travel Rule
Originator and beneficiary information is transmitted with qualifying virtual asset transfers between VASPs, following the FATF Travel Rule standard.
Data protection
Personal data is collected for a stated purpose, retained under documented schedules, and access-controlled. Identity documents are held by our verification provider and are not used for anything other than verification.
Transaction monitoring
Blockchain analytics and rule-based monitoring flag high-risk deposits, withdrawals and patterns for compliance review before funds move.
Verification tiers
Limits by verification level
Platform defaults, in USD. Your account's live limits are shown in your account settings and may differ where an individual limit has been set.
| Level | Requirements | Daily withdrawal | Daily deposit | Monthly volume |
|---|---|---|---|---|
| Level 0 · Unverified | Registered account only | $100 | $1,000 | $5,000 |
| Level 1 · Basic | Email and phone verified | $5,000 | $10,000 | $50,000 |
| Level 2 · Intermediate | Government ID and selfie | $50,000 | $100,000 | $500,000 |
| Level 3 · Advanced | Proof of address and enhanced due diligence | $500,000 | $1,000,000 | $5,000,000 |
Product availability
Availability varies by product
Account opening is only the first gate. Individual products carry their own eligibility rules.
Per-product eligibility
Some products are unavailable in jurisdictions where the account itself can be opened. Eligibility is checked when you use the product, and the reason is shown to you when access is declined.
Leveraged products carry risk of total loss
Futures, margin and options can lose more than your initial outlay and are not suitable for every user. Read the risk disclosure before trading them.
Your residence governs your access
Eligibility follows your verified country of residence, not your connection location. Using a VPN or misstating residence to access restricted products is a breach of the terms of service.
Working with authorities
Law enforcement requests
How we handle lawful requests from law enforcement and regulatory agencies.
Request received
Formal requests are received through our compliance channel and logged for tracking and accountability.
Legal review
Each request is evaluated for validity, jurisdictional authority and compliance with applicable law. Only lawful, properly scoped requests are processed.
Data preservation
Relevant account and transaction records are preserved under legal hold, with audit logging of every access.
Disclosure
Where legally required, information is disclosed to the authorised agency through secure channels. Users are notified where we are legally permitted to do so.
Your data
Exercising your data rights
Requests are handled by our compliance team at compliance@midas.exchange. We are building self-serve tooling for these; until it ships, every request is handled manually and we will confirm receipt.
Access your data
Request a copy of the personal data we hold about you, including account information, transaction history and verification records.
Deletion
Request deletion of your personal data. Records we are required to retain for AML and financial record-keeping obligations will be kept for the applicable retention period and then deleted.
Portability
Request an export of your data in a structured, machine-readable format so you can move it to another provider.
Marketing consent
Manage how your data is used for marketing and analytics, and withdraw consent at any time from your account settings.
Questions about any of this
If something here is unclear, or you believe you have seen a claim about our regulatory status that contradicts this page, tell us. We would rather correct it than let it stand.