Disclosure report — lumenpay.io
This is a fictitious example, built to show the shape and depth of an OCR.LEGAL report. No claim in this document describes a real company.
Lumenpay presents itself as a stablecoin payment processor for online merchants. Its public-facing pages disclose a verification process at signup, a named operating entity, and a published privacy policy. Two areas fall short of what we'd expect from a fully transparent platform: the site does not state which regulator, if any, oversees its payment activity, and its terms of service reference a jurisdiction that doesn't match the entity address in its footer.
None of this means Lumenpay is non-compliant — only that these gaps aren't resolved by what's publicly visible. We'd flag both for follow-up before relying on the platform for anything regulated.
KYC & onboarding
FoundIdentity verification is required before a user can move funds, not just before signup — a stronger pattern than sites that gate KYC only at withdrawal.
- Government ID and a selfie match are requested during account creation.Confirmed on signup flow, step 2 of 3
- Business accounts require a second tier of verification, including proof of incorporation.Confirmed on /business/onboarding
- No stated verification exemption for small transaction volumes.No threshold language found in terms
Licensing & registration signals
PartialThe site states that Lumenpay "complies with applicable financial regulations" but does not name a specific license, registration number, or regulator.
- No money transmitter license number, EU e-money license, or equivalent is listed anywhere on-site.Checked footer, about page, terms, and FAQ
- A compliance page references "ongoing engagement with regulators" without naming one.Found on /compliance
- Comparable services in this category typically publish a license number or regulator name; its absence here is the primary gap in this report.
Jurisdiction & entity disclosure
PartialThe footer names a registered entity and address, but the terms of service specify a different governing jurisdiction for disputes.
- Footer entity: "Lumenpay Technologies Ltd," registered address listed in one jurisdiction.Found in site footer
- Terms of service clause 14 designates a different jurisdiction's courts for dispute resolution.Found in /legal/terms, clause 14
- No explanation on-site for the mismatch, such as a separate operating subsidiary.
Terms & risk disclosures
FoundRisk language is consistent between marketing pages and the terms of service — a common point of divergence we check for specifically.
- Marketing copy describes the product as "fast, low-cost payments," without guarantee language.Homepage and /product
- Terms of service separately state that transaction times and fees are estimates, not guarantees.Found in /legal/terms, clause 6
- Stablecoin de-peg risk is disclosed in a dedicated risk section, which is not universal in this category.Found in /legal/risk-disclosure
Data handling & privacy
FoundA privacy policy is published and specifies retention periods, which many comparable platforms leave vague.
- KYC documents are stated to be retained for five years post account closure.Found in /legal/privacy, section 4
- Third-party data sharing is limited to a named identity-verification vendor and payment rails.Found in /legal/privacy, section 6
- No mention of data sale to advertisers or unrelated third parties.
Summary
| Area | Status | Note |
|---|---|---|
| KYC & onboarding | Found | Verification gates fund movement, not just signup. |
| Licensing & registration | Partial | No named license or regulator anywhere on-site. |
| Jurisdiction & entity | Partial | Footer entity and terms jurisdiction don't match. |
| Terms & risk disclosures | Found | Consistent between marketing and legal copy. |
| Data handling & privacy | Found | Retention periods and sharing scope are specified. |
This is research, not a legal opinion.
OCR.LEGAL is not a law firm and does not provide legal advice. This report — including the fictitious example above — reflects our reading of what's publicly disclosed. It doesn't assess whether a company actually holds a license, only whether it says so on its own site.
Use it as a starting point for your own diligence, or hand it to a lawyer who can take it further.