Compliance

Last reviewed: July 27, 2026

This page sets out what Arabia Pay is, what it is not, and the controls that sit behind an Arabia Pay merchant account. It is written for merchants, for partners, and for anyone assessing us.

1. What we are

Arabia Pay is the trading name of Arabia Transfer, LLC, a limited liability company formed in the State of Delaware, United States, on 23 March 2026.
We are a software company. We build checkout, invoicing, reporting, and merchant-onboarding software.
We are not a bank, not a licensed money transmitter, not an acquirer, and not a payment institution.
We never take custody of merchant or shopper funds. Money moves from the licensed Processing Partner directly to the merchant's own bank account. Arabia Pay has no ability to hold, direct, or withdraw it.
All regulated activity — acquiring, processing, settlement, dispute handling, and the customer due diligence required for it — is performed by licensed, PCI DSS certified Processing Partners under their own agreements with the merchant.

2. Who we accept

We onboard a deliberately narrow population: e-commerce stores built on Lightfunnels selling physical products. The full eligibility and exclusion list is published at restricted businesses.

Fulfilment is part of that standard, not an afterthought. Every merchant must ship through an established third-party logistics provider that issues a tracking number for each shipment, and must be able to produce proof of delivery for any order on request. A merchant who cannot evidence delivery is not a merchant we can support.

3. How an application is reviewed

Every applicant completes a structured application covering their identity, their address, their contact details, their business, their expected volume, and their processing history.

The application is then checked automatically. Each check produces a signal, never a decision:

Duplicate application — one applicant, one live application.
Email quality — disposable and throwaway addresses are refused, because a merchant has to be reachable permanently.
Device and browser marker — detects application farms and coordinated submissions.
Form behaviour — how long the form took and which fields were pasted rather than typed.
Sanctions screening — the applicant and the business are matched against the OFAC Specially Designated Nationals list and the UN Security Council Consolidated List.
Website age — the applicant's domain is checked against public registry records, because a days-old site behind a large volume claim is worth a closer look.

A named member of our team then reviews the application and decides. No application is approved or declined solely by automated means. The reviewer records the outcome against a fixed vocabulary of reasons together with the signals as they stood at that moment, so the record cannot drift after the fact.

Identity verification of the approved merchant is then performed by the licensed Processing Partner, to its own standard, before the merchant can take a single payment.

4. Sanctions and financial crime

Applicants are screened against OFAC and UN sanctions lists before approval, and possible matches are reviewed by a person.
We refuse any business owned or controlled by a sanctioned party, and any business operating from a comprehensively sanctioned territory.
Money transfer, remittance, currency exchange, lending, gambling, and cryptocurrency are prohibited categories. We do not board them.
Processing on behalf of an undisclosed third party — transaction laundering — is prohibited and is grounds for immediate closure.
Anti-money-laundering monitoring of transactions, and any regulatory reporting arising from it, is performed by the licensed Processing Partner, which holds the relevant licences. We cooperate fully with its requests.

5. Ongoing monitoring

Merchants must tell us before they change what they sell, who owns the business, or the website the account trades under.
We act on reports from card networks, the Processing Partner, banks, and the public.
Accounts presenting unacceptable risk are suspended. Reserves, settlement holds, and processing limits are the Processing Partner's to apply under its agreement with the merchant.

6. Card network obligations we pass on

Our merchants are contractually required to:

display their legal business name, address, and contact details to their customers;
publish a refund, return, and delivery policy and honour it;
state the transaction currency clearly before checkout;
describe goods accurately and ship what was sold;
ship through a third-party logistics provider that issues a tracking number, and retain proof of delivery for the life of the dispute window;
use a card descriptor their customers will recognise;
respond to disputes with evidence, including proof of delivery.

7. Data protection and security

Card data is captured and held end to end by PCI DSS certified Processing Partners. It never reaches Arabia Pay's servers.
The platform is built to PCI DSS standards. Traffic is encrypted in transit with TLS, and data at rest is encrypted by our infrastructure provider.
Access to merchant data is restricted to staff who need it, is authenticated individually, and is logged.
What we collect, why, how long we keep it, and the rights you have over it are set out in the Privacy Policy, including the right to have any automated check reviewed by a person.

8. Complaints and escalation

Merchants and shoppers may complain to legal@arabia-transfer.com. We acknowledge within two business days and answer substantively within fifteen.
A declined applicant may ask for the decision to be reconsidered by a person, may explain their circumstances, and may contest the outcome, by writing to privacy@arabia-transfer.com.
Complaints about payment processing, settlement, or a dispute outcome are referred to the licensed Processing Partner, and we tell you when we refer them.

9. Contact

Arabia Transfer, LLC (d/b/a Arabia Pay)
2810 N Church St, STE 89929, Wilmington, DE 19802, United States
Compliance and legal: legal@arabia-transfer.com
Data protection: privacy@arabia-transfer.com