Why we ask for ID

Guap is required by law to verify who you are before facilitating virtual asset transactions. The checks protect you and the system from fraud, theft, and financial crime — and they're what let us operate openly, under real oversight.

Guap is licensed

Guap operates under a Certificate of Acceptance in the Trinidad and Tobago Securities and Exchange Commission (TTSEC) Virtual Asset Regulatory Sandbox, granted under the Virtual Assets and Virtual Asset Service Providers Act, 2025. Our certificate: TTSEC-VASP-CoA-KG-26/04/07|003.

• Guap is the first Bitcoin ATM operator licensed in Trinidad and Tobago under the VASP framework
• TTSEC supervises us for anti-money laundering and counter-financing of terrorism (AML/CFT)
• Your transactions sit under formal regulatory oversight

More on the framework in regulatory status.

What each tier collects

Verification comes in tiers. Each one asks for a little more and unlocks higher limits — the numbers live in limits and verification tiers.

How verification works

Identity checks run through Didit, a certified identity verification provider — you'll find it listed as a processor in our privacy policy.

1. Open Settings → Verification in the Guap App.
2. Have your government ID ready and follow the prompts — a photo of your ID and a short selfie check.
3. When the check clears, you move up a tier. See limits for what that unlocks.

What we screen for

• Sanctions and PEP (politically exposed persons) lists
• Adverse media
• Continuous monitoring — if a customer's status changes, we're alerted

What happens to your data

• Encrypted in transit and at rest
• Used only for KYC, AML, and regulatory reporting
• Never sold

You can request a copy of your data, or ask for deletion — subject to the record-keeping periods AML law requires. The full detail is in the privacy policy.