Payment institutions, e-money issuers and fintechs

Turn the alert backlog into case files the MLRO can sign.

Marqib helps your team review unusual deposits and withdrawals with the related customer records and a documented decision trail. Reporting outputs are drafts. Refunds, chargebacks and merchant-network monitoring are planned extensions.

Capabilities and roadmap →

Synthetic example · not a live run · MQB-260926-002 · STRUCTURINGSCORE 0.97
00:00Nightly scan — 83,410 transactions, 12,780 wallets
00:02Rule hit — 14 deposits of 9,400–9,900 in 9 days, 5 cards + 2 on-ramps
00:03Activity — no purchases, no transfers out
00:04Client — Mostafa El Sayed · merchant · EG · turnover 30k
00:05⚑ Exit — USDT withdrawal 130,000 pending
00:06Internal hold — marked held in Marqib; external payment action requires integration
→ Case file ready. Draft cites E1–E15; two questions for the client listed.
Why payment firms

Three things the backlog does to a payment firm.

Reviewers spend the day assembling, not deciding.

For every alert someone opens four systems, copies transactions into a sheet and writes the story. Marqib assembles the file; the reviewer reads and decides.

Low-risk alerts crowd out the real ones.

Configured low-risk patterns can close with a recorded rationale. Reviewers still check the source records and the remaining cases; an internal hold does not execute an external payment restriction.

The regulator wants evidence, not a paragraph.

Keep the supporting records, reasons and reporting draft together. Evidence-reference checks do not prove that a sentence is correct. Your authorised reviewer verifies the content, the applicable report and local format, and submits through the authority’s system.

Coverage

Coverage for payment and wallet flows.

Run Marqib's rules overnight, or send transactions to the real-time decision API before they are processed: Marqib builds the case file either way.

AMLStructuringRepeated deposits just under the enhanced-due-diligence threshold, across cards and on-ramps, followed by a withdrawal.
AMLThird-party fundingA payer-name difference is a review signal. A shared first name or surname does not establish identity or a verified relationship.
AMLDormant reactivationIdle wallet, new device or country, bank-detail change and a withdrawal in the same hour.
AMLRapid pass-throughFunds in and out within hours with no commercial activity between.
AML / TFSanctions screeningClients and payment counterparties against UN, OFAC, EU and UK lists; UAE and MASAK lists by upload. PEP results can be imported from the firm's KYC provider.
Due diligenceActivity beyond declared profileCard loads or deposits far above the turnover the customer declared; an STR is recommended only when the money then leaves to a destination that never funded the account.
PlannedMerchant collusionMerchant, refund and chargeback network checks are planned. They are outside the current deposit-and-withdrawal monitoring scope.
Connector (beta)Crypto wallet exposureFor stablecoin flows screened in KYTGate: sanctioned wallets, wallets frozen by the issuer and transfers KYTGate blocks open a case in Marqib. Screening and the release of funds stay in KYTGate.
Data

Files, connectors or the API.

Marqib reads end-of-day exports the firm already produces from the ledger, the card processor and the KYC system, uploaded or pulled nightly from S3-compatible storage, Azure Blob Storage, HTTPS or SFTP. Praxis Cashier and B2Core (beta) add payer names, masked cards and pending withdrawals; the real-time decision API checks a transaction before it is processed.

  • transactions.csv deposits, withdrawals and transfers with channel, counterparty name and reference, status.
  • clients.csv KYC extract: type, country, beneficial-owner reference, occupation, expected turnover.
  • logins.csv · bank_changes.csv optional; enable dormant-reactivation and bank-change rules.
  • File drop optional; the same files pulled every night from the firm's storage with read-only credentials, instead of uploads.
  • Praxis Cashier · B2Core optional, beta; payer name, masked card, KYC level and withdrawal requests still pending.

All integrations and their status →

01

Morning queue

Cases ranked by severity; configured low-risk alerts can close with a recorded rationale. Holds are internal records; the payment system must apply any external restriction. Optional notifications carry identifiers and a link.

02

Case file

Why it was flagged, every evidence row, the subject's recent transactions, the questions still open, and the draft narrative. Each reviewer works in English, Arabic or Turkish; the case record itself stays as it was recorded.

03

Filing

Evidence pack and hash-chained decision log, with goAML XML and MASAK ŞİB export drafts. Local schema, indicator codes and sector fields require validation. Submission and receipt reconciliation are outside this workflow.

04

Real-time decision

A transaction sent to the decision API before it is processed gets allow, review or hold, with reasons and evidence, in the same request. Every decision is stored; review and hold open a case. API keys are managed by an MLRO.

Pilot programme

Agree a bounded pilot on your records.

Agree the use case, source fields, reporting jurisdiction and named reviewers before starting. Validate connections and deployment with your team. Timing and acceptance measures are set in the pilot proposal; the example tour is not a performance result.

Scope and fee agreed before starting
Timing and commercial terms are set in the written pilot proposal.