Limits and validations

Invitation code

Required to register. It must be available or sent; an already-used code is rejected.

Registration fields

Only code, email, password and acceptance of the terms. Name and account type are not asked for here.

Password

At least 8 characters with uppercase, lowercase, a number and a symbol.

Login

Max. 5 attempts per minute per email + IP.

Account type

Chosen once, after registration. Only compliance can undo it.

Steps

KYC: 5 steps (Documents → Personal → Address → Employment → PEP), no skipping ahead. KYB: 7 steps (Company → Addresses → Activities → UBOs → Documents → Optional → Review), with free navigation.

Document photos (KYC)

Taken with a phone via a QR code. There is no file upload from a computer.

QR capture link

Valid for 20 minutes; the whole capture session, 40 minutes.

Automatic photo check

Rejects anything that is not an identity document, that cannot be read (focus, light, glare), that does not show the holder's portrait, or where any of the four corners falls outside the frame.

Document scan

Fills blank fields only; it never overwrites what you typed. "Start over" deletes photos and answers.

Document expiry date

Optional. If the document does not expire (e.g. a Bolivian ID card for someone over 60 = valid indefinitely), leave it blank. If entered, it must be today or later. Applies equally to the individual KYC and to each related person (UBO) in the KYB.

Identification number / issuing country

Both required.

Social Security Number (SSN)

Only asked if the nationality is US; it is optional.

Back of the document

Required, except when the type chosen is a passport.

Documents (format and size)

PDF, JPG, JPEG, PNG · max. 16 MB per file · stored encrypted · uploading the same type replaces the previous one.

Related people (KYB step 4)

There must be ≥1 Controller and ≥1 Authorized Signatory (can be the same person) to move on.

Sole proprietorship (KYB)

Exempt from the constitution and the internal regulations. Only the tax ID and commerce registry enrollment remain.

SEPREC prefill (KYB step 1)

Optional: searches the registry for the company and fills the data in. Anything prefilled can be corrected.

Who completes the KYC/KYB

Only the team Owner. Other roles see "Only the team owner can access this section."

Form after approval

Locked: "Your KYC/KYB has already been approved and cannot be edited."

Saving

Auto-saved as a draft between steps; required fields are only enforced on Submit/Finish.

"Observed" status

The name shown when the verification was internally rejected.

BOB deposit

Minimum 100 BOB · date no earlier than today · generates a reference code (3 letters + 3 numbers) · stays "Pending" · cancellable until it enters bank authorization.

BOB withdrawal

Minimum 1 BOB · cannot exceed the available balance · may be processed automatically against the bank (BCP) during banking hours; outside those hours, or on failure, it goes to manual processing.

Crypto buy/sell quote

Valid for 120 seconds. Very large amounts may go to manual processing.

Crypto withdrawal to an external wallet

The wallet must be "Approved" (whitelisted) · minimum amount 0.01 · cannot exceed the balance · stablecoins (USDC, USDT) pay a percentage fee by amount range, deducted from the amount withdrawn; other assets pay none.

Invalid wallet address

Rejected on adding if it is not valid for the network/asset.

Note on a crypto transaction

Up to 500 characters.

Rails

ACH and Wire (US)

SEPA (euro area)

Deposit fee

0.3%

0.5%

Minimum deposit

100 USD

100 EUR

Credited in

1–2 business days

1–2 business days

Monthly maintenance

Free

Free

Requirements

Verification approved + an active USDC wallet. A deactivated account can only be reactivated by support.

Amount

Minimum 0.01 · cannot exceed the balance (when the fee is added on top, amount + fee ≤ balance). Error: "The amount exceeds your source wallet balance."

Quote

Valid for 30 minutes.

Fee

Percentage by amount range (above the highest range, that range's percentage applies) + fixed fee per rail. Shown broken down before you confirm, and exactly what is charged.

Custom rate

Replaces the standard percentage on every rail; the rail's fixed fee still applies. A rate set by a dealer has a minimum of 0.8%. It cannot be changed by the client.

SEPA description

6–140 characters; letters, numbers, spaces and . - / ( ).

ACH / same-day ACH description

At least 1 character; letters, numbers and spaces only (no maximum set by Prismapay).

Wire description

1–140 characters; letters, numbers, spaces and line breaks (Fedwire).

SWIFT description

No automatic format validation (manual process).

Eligible destination accounts

Only those in "Registered" status (SWIFT: manually enabled).

Attached document

PNG, JPG or JPEG · max. 10 MB · one per transfer (a new one replaces the previous).

Transfer note

Up to 5,000 characters; saved separately from the document.

Sender details on the certificate

Name required (up to 150 characters). Editable only until the certificate is generated; frozen afterwards.

Rules

By amount range: how many approvals and at what level; they may require a prior review or designate direct approvers.

Approver levels

1 to 5, assigned by the Owner. A Company Admin with the approve capability is a wildcard (any level).

Who can review

The Controller (Fund Controller) role, or a Company Admin with the review capability enabled.

2FA

Mandatory to approve and to review: a 6-digit code on each action.

Review

Once per transfer: forwarding or rejecting closes the review stage.

Rejection

Cancels the transfer for good.

Account holder name

3–35 characters · cannot contain a double underscore __.

Routing number (ACH/Wire)

Exactly 9 digits · validated in real time against external databases (existence + rail support). If the external service is down, it does not block you.

Currency

USD for ACH/same-day ACH/Wire · EUR for SEPA · EUR or USD (your choice) for SWIFT.

Address (ACH/Wire)

Must be a valid US postal address format (number + street, or "P.O. Box").

Editing

Not editable: delete and register again. National accounts, by contrast, can be edited.

SWIFT

Manual enablement by the team (not automatic).

Amount

Minimum 0.01 USDC · type buy or sell.

Quote

Valid for 5 minutes to create the ticket.

Hours the price is locked for

Between 1 and a configured maximum (normally up to 5 hours); the clock restarts when the team approves it.

Approval

Every ticket needs manual review/approval by the team (Created → Accepted).

Executing without balance

The ticket returns to Accepted so you can retry.

Expiry

If not executed in time, it moves to Expired (timeout).

Yield

Up to 3% APY · credited daily · the on-screen balance refreshes every few minutes.

Deposit

Minimum 1,000 USDC · as many times as you like · can take a few minutes to show up · adding to an open position does not restart the 30 days.

Minimum holding period

30 days, counted from when the position is opened; closing it resets the clock.

Early withdrawal fee

10 USDC when withdrawing before the 30 days are up.

Withdrawal

Full balance only — you cannot take out part of it, and withdrawing closes the position.

Where it is

In the same Wallets section as your other wallets, as one more block.

Mandatory 2FA

Approver and Reviewer roles (forced redirect) and a 6-digit code when approving or reviewing. Other roles: recommended.

2FA recovery codes

Format XXXX-XXXX.

Legal name

Not editable from the profile: it comes from the KYC/KYB.

Account email

Not editable by self-service (support only).

Team member invitation

Password setup link valid for 24 hours (can be resent).

Roles assignable in a team

Approver, Generator, Controller (Fund Controller) and Company Admin. The role cannot be changed afterwards: delete and recreate.

Profile photo

JPG/PNG, max. 1 MB.

Proof of residence

Requires an approved verification + a saved address + a pinned location, with no unsaved changes.

Invitation codes (referrals)

Default limit of 10 per user.

Languages

Spanish and English.

Authentication

Bearer token issued by Prismapay, delivered through a one-time link (test and production environments).

Token permissions

create, read, update, delete. Missing permission → 403.

Rate limit

60 per minute per partner account → 429 when exceeded.

Idempotency

The Idempotency-Key header is required on creates. A retry with the same key returns the original response with Idempotency-Replayed: true.

Duplicate email

409 if that email already exists in your partner account.