Question 1

What is Freemarket's risk appetite?

Accepted Answer

Freemarket’s risk appetite is the aggregate level of risk that it is willing to assume within its risk capacity and in line with the business model, culture and ethics. Freemarket takes an appropriate risk-based approach to achieve its strategic and commercial objectives. The aim of this document is to provide guidelines on what types of business and associated risks the company would find acceptable and unacceptable.

Within the overall risk framework, Freemarket has robust systems and controls that are proportionate to the nature and scale of the business, and which continually evolve to mitigate financial crime. With these systems and controls, Freemarket aims to Deter, Detect and Disrupt financial crime. Maintaining these and treating customers fairly, is at the heart of Freemarket and such standards are expected from all stakeholders. Freemarket has stringent procedures regarding the governance of its risk framework and strict policies in relation to PEP’s, illegal activity, sanctioned counterparties, criminals, and individuals associated with terrorism. In recognition of the scale and extent of the business’s systems and policies, Freemarket prohibits payments from the following activities:

Understanding what’s prohibited

In recognition of the scale and extent of the business’s systems and policies, Freemarket prohibits engaging or pursuing clients that fall within the following set of criteria.

Prohibited Locations

Onboarding of a company with any UBO’s, Directors or Operations resident in or websites targeting the following sanctioned countries: Iran, North Korea, Syria, Cuba, Venezuela, Russia.

You can view our unsupported jurisdictions list for a full list of countries we do not do business in or with.

Prohibited Businesses

The following list of categories of businesses and business practices are explicitly prohibited from using our services and platform:

Businesses operating or running Hawala (informal banking system)
Companies engaged in or providing illegal drugs and / or unlicensed drug related activity
Unregulated pharmaceuticals / food supplement companies (nutraceuticals)
Activities relating to defence and munitions, including dual use
Adult websites or services with prostitution, and the broadcasting/publication of pornography
Binary Options or unregulated investment and / or payment services activities
Companies formed of bearer shares
Company structures which include solely nominee directors; there must always be individual directors
Companies dealing in counterfeit goods
Cultural artefacts, ivory or other items related to protected species, or archaeological, historical, and religious significance, or of rare scientific value
Companies structured and operating on Piracy or illegal streaming
Political / religious organisations engaged in hate speech
Pyramid Schemes / multi-level marketing (MLM)
Companies dealing in non-electronic funds
Unregulated or Shell Banks
Shell companies (a company having no physical presence, no employees or no commercial activity in its registered jurisdiction)
‘Get rich quick’ schemes (proposal to pay high rates of return over a small period in return for a small investment)
Unregulated charities
Banks not located/domiciled onshore

Additional requirements for the following industries

Clients who fall into any one of the four verticals identified below must meet an initial set of criteria and further set of vertical specific criteria to onboard with Freemarket.

Initial risk assessment criteria

Must have no AML/CTF failings/fines that have not been sufficiently remediated
Must adhere to Freemarket’s Industry specific policies i.e. FI Control Framework, Gambling Policy, Crypto Policy
Must adhere to regulatory limitations applicable to the jurisdiction of their client-base

Further risk assessment criteria by vertical

The following are the additional risk assessment criteria to evaluate prospective clients by.

Question 2

How can I change my name and password?

Accepted Answer

The platform allows you to change your name and password on the top right corner once you’ve logged in. Following this, your user details will appear on the screen, and you’ll be able to edit your username, email address and phone number. If you wish to amend your password, you’ll need to know the existing password in order to change it. If you don’t know your password, then you can receive an email link resetting your password to the registered email address. Once done, you’ll be ready to use the platform for all your payment solutions.

Question 3

How do I spot a fake, fraudulent or phishing email or website?

Accepted Answer

Phishing is a type of email attack in which a fraudster sends you an email while impersonating a person, business, or reliable website in order to obtain your passwords or other sensitive information or gain complete control of your computer.

The majority of phishing efforts take place via email, but fraudsters will use every method they can think of to get you to give them your information or money, including:

Fraudulent emails and other messages that look like they're from legitimate companies
Fake invoices saying you’ve missed a payment
Misleading pop-ups and ads that say your device has a security problem
Scam phone calls or voicemails that impersonate employees at companies
Fake promotions that offer free products and prizes

It’s best to be vigilant at all times, fraudsters want your personal details for a number of reasons. Freemarket will never ask you for any personal data. If you receive a message and are unsure it’s really from Freemarket, check to see if it does any of the following:

Uses generic, impersonal greetings like "Dear user" or "Dear [your email address]." We'll always refer to you in our correspondence by your first and last name or by your company name. Greetings like "Dear user" or "Hello Freemarket member" are never used by us.
Requests that you click on links that lead to phoney websites. Before clicking any links in emails, always double-check them. A link can have a secure appearance, such as www.wearefreemarket.com/SpecialOffers. To view the actual location, be sure to hover your cursor over the link. Don't click on the link if you aren't sure.
Has unidentified attachments. Open an attachment only if you are certain it is trustworthy and safe. Pay particular attention to invoices from businesses and contractors you are unfamiliar with. Some attachments contain viruses that install themselves when opened.
Projects a false feeling of urgency. Phishing emails frequently use alarmist language and urge you to update your account right away. They're hoping you'll be swayed by their haste and disregard red flags that the email is a scam. If there’s an urgent need for you to complete something on your account, you can find this information by logging into Freemarket directly.

You can find some more information, tips, how to spot phishing attempts and best practices from Apple, Santander, Microsoft, and Which.

Question 4

I am entering the correct OTP but it still says incorrect OTP?

Accepted Answer

Freemarket sends a one-time password (or OTP) to authenticate customers. You can receive OTP on mobile or email based on your preference. OTP is used to add extra layer of security during the sign in process or during delivery of certain orders. OTPs are unique and should not be shared with anyone.

If you have tried to access your login page multiple times, every new click on “Resend an OTP” will generate a new OTP. You should enter the latest OTP that you have received based on your preferences.

If you are still having trouble with the code, contact your Relationship Manager or email support@wearefreemarket.com.

Question 5

What is One Time Password (OTP)?

Accepted Answer

A one-time password (OTP) is a randomly generated string of letters, numbers, and/or symbols that is delivered to a user to be used for just one login or transaction. An OTP is more secure than a static password, particularly one that was established by the user and may be insecure or used on several accounts.

What are the benefits of OTPs?

OTPs reduce the risk around passwords.

Multi-factor authentication: OTPs can add an additional layer of authentication. Using security tokens, OTPs can be generated for users to provide as an additional form of authentication, which increases security and reduces the risk of a breach.
Time-based OTP (TOTP): this type of OTP is time-based, in that it provides a window of time within which the OTP code will be valid. In general, timesteps are 30-60 seconds in length. If the user does not enter the OTP code within the specified timestep, they must request a new one.

Read more on Twilio, Transmit Security, and Entrust.

Question 6

What security procedures will you require when I instruct you to send money from my account?

Accepted Answer

For each transaction we will ask you the destination of the funds i.e. where the funds are going, the beneficiary details, and to pass all the necessary compliance checks and transaction monitoring. Once approved, we will proceed with authorising your instruction and making the payment.