AML Policy
AML / CTF Policy | Effective: 20 July 2026

AML, CTF &
Anti-Fraud Policy

Official public statement of financial crime prevention commitments by Vestigo Insurance Brokers Pvt. Ltd. in accordance with AML, CTF and Anti-Fraud regulatory requirements.

IRDAI RegistrationNo. 1131 (Direct Broker (General & Life))
Registration Validity15 January 2026 to 14 January 2029

Corporate Identity

CIN: U66220GJ2025PTC166605

Vestigo Insurance Brokers Pvt. Ltd.

Corporate Office

SF 201, Status Complex, Opp. Amrapali Complex, Pani Tanki Road, Karelibaug, Vadodara - 390018, Gujarat, India

AML & Fraud Reporting Desk

enquiry@vestigoinsurance.com

www.vestigoinsurance.com

Clause 01

01. Purpose and Zero-Tolerance Commitment

Vestigo is committed to preventing its services, personnel, systems and relationships from being used for money laundering, terrorist financing, proliferation financing, sanctions evasion, premium diversion, insurance fraud, bribery or other financial crime. Vestigo will not knowingly facilitate unlawful funds, fictitious insurance, false claims, identity misuse or concealment of beneficial ownership.
Clause 02

02. Legal and Regulatory Framework

This Policy is informed by applicable Indian law and regulatory requirements, including the Prevention of Money-laundering Act, 2002 and rules made under it, the Unlawful Activities (Prevention) Act, 1967, applicable sanctions and counter-proliferation requirements, IRDAI anti-money laundering and counter-terrorist financing guidelines and amendments, IRDAI’s insurance fraud monitoring framework, the Insurance Regulatory and Development Authority of India (Insurance Brokers) Regulations, 2018, and other binding directions as amended from time to time.
Clause 03

03. Role of Vestigo and Insurers

Insurers are reporting entities for insurer-side obligations under the applicable AML/CFT framework and are responsible for their statutory customer-due-diligence, monitoring and reporting decisions. As a regulated insurance broker, Vestigo supports lawful KYC, identity, authority, beneficial-ownership, sanctions, source-of-funds and fraud-prevention processes; transmits relevant information to insurers; maintains required records; and complies with obligations that apply directly to Vestigo.
Vestigo’s controls do not replace an insurer’s underwriting, KYC, transaction-monitoring, suspicious-transaction reporting or claim-investigation responsibilities. Vestigo will cooperate with the insurer and competent authorities and may apply stricter controls where risk, contract or law requires.
Clause 04

04. Risk-Based Approach

Vestigo applies a proportionate and risk-based approach considering customer, beneficial owner, business activity, insurance product, premium, payment method, geography, distribution channel, ownership structure, transaction pattern, claim circumstances, and sanctions exposure. Higher-risk cases require enhanced information, senior review, or refusal of the relationship.
Clause 05

05. Customer Identification, Authority and Beneficial Ownership

Before or during an insurance transaction, Vestigo may obtain and verify information necessary to establish:
The identity and address of the proposer, policyholder, insured, payer, claimant or authorised representative.
The legal existence, registration, ownership and control of an organisation.
The authority of a person acting on behalf of another person or entity.
The natural person or persons who ultimately own or control an entity or arrangement, where applicable.
The purpose and expected nature of the insurance relationship.
The legitimacy and consistency of premium, refund, claim and banking information.
Any additional information requested by the insurer or required by law.

Vestigo will not knowingly proceed on the basis of an anonymous, fictitious, materially misleading or unauthorised identity. Documents and information must be genuine, current and complete. Material changes in ownership, control, authority, address, business or risk must be disclosed promptly.

Clause 06

06. Sanctions, Politically Exposed Persons and High-Risk Relationships

Where required by law, insurer requirements or risk assessment, Vestigo may screen persons, entities, beneficial owners, vessels, locations, countries or transactions against applicable sanctions, terrorist-designation, adverse-information or politically exposed person sources. A match or heightened risk does not automatically establish wrongdoing, but may require verification, enhanced due diligence, insurer referral, senior approval, delay, restriction or refusal.
Clause 07

07. Premium, Refund and Claim Payment Integrity

Premiums should be paid only through lawful and authorised channels in accordance with insurer instructions. No client should transfer premium, refund, claim proceeds or other insurance money to a personal account of a director, employee, representative or third party unless the insurer has lawfully authorised the arrangement in writing and it is permitted by regulation.
Vestigo may seek clarification or documents concerning third-party payments, cash, multiple instruments, unusual refunds, changes in beneficiary or bank account, overpayment, rapid cancellation, premium-source inconsistency or payment from an unrelated person. Refund and claim proceeds should ordinarily be directed to the legitimate policyholder, insured, claimant or other person entitled under the policy and law.
Clause 08

08. Red Flags

Examples that may require additional review include:
Inconsistent, forged, altered, incomplete or unverifiable identity, KYC, financial, medical, policy or claim documents.
Unexplained use of nominees, intermediaries, shell entities, complex ownership or unrelated third-party payers.
Reluctance to disclose the beneficial owner, source of funds, business purpose or authority.
Premium or coverage that appears materially inconsistent with the customer’s known business, income, assets or risk.
Frequent purchase and cancellation, unusual overpayment, refund requests to a different account or rapid movement of funds.
Sanctions, terrorist-financing, proliferation-financing or high-risk jurisdiction concerns.
Collusion, staged loss, inflated invoice, duplicate claim, false hospitalization, fabricated asset or employee, identity theft or impersonation.
Premium diversion, fake policy, unauthorised collection, phishing, account substitution or manipulation of bank details.
Pressure to omit information, bypass insurer controls, backdate records, split transactions or avoid documentation.
Conduct, transaction or claim circumstances that have no reasonable economic, insurance or lawful purpose.

Red flags are indicators requiring assessment and do not by themselves establish guilt.

Clause 09

09. Internal Escalation, Reporting and No Tipping-Off

Personnel must promptly and confidentially escalate suspicious activity, document irregularity, sanctions concern, premium diversion or fraud through Vestigo’s designated internal channel. They must not warn a person that a matter is under review, that a report may be made, or that an authority or insurer is investigating, where doing so is prohibited or could prejudice the process.

Vestigo may share information with the relevant insurer, reinsurer, bank, service provider, IRDAI, FIU-IND, police, CERT-In, court or other competent authority where required or permitted. Where a statutory report is directly required from Vestigo, it will be made through the prescribed channel. Insurer-side suspicious-transaction reporting remains the insurer’s responsibility where the insurer is the reporting entity.
Clause 10

10. Anti-Fraud Controls

Vestigo maintains a zero-tolerance approach to proposal, policy, premium, claims, procurement, accounting, employee, intermediary, cyber and identity fraud. Controls may include document verification, maker-checker review, segregation of duties, approved payment channels, bank-detail verification, access controls, audit trails, exception review, training, conflict disclosure, vendor due diligence, incident investigation and cooperation with insurers and authorities.
Clause 11

11. Refusal, Restriction or Termination

Vestigo may decline, pause, restrict or terminate an enquiry, transaction or relationship where information is not provided, identity or authority cannot be established, a sanctions or legal prohibition applies, the purpose appears unlawful, the risk is outside Vestigo’s acceptance or capability, or continuing would expose Vestigo, a client, insurer or stakeholder to unacceptable legal, regulatory, ethical or reputational risk. Vestigo may be unable to disclose detailed reasons where confidentiality, reporting or law-enforcement requirements apply.
Clause 12

12. Record Keeping and Confidentiality

KYC, due-diligence, instruction, transaction, communication, policy, claim, red-flag and investigation records will be maintained securely for at least the period applicable to insurance brokers and for any longer period required by AML/CFT law, insurer arrangement, litigation, investigation or regulatory direction. Access is limited to authorised persons. Financial-crime information is confidential and must not be disclosed except for an authorised or legally permitted purpose.
Clause 13

13. Training, Monitoring and Review

Relevant personnel will receive risk-appropriate training on KYC, beneficial ownership, sanctions, red flags, premium integrity, claims fraud, cyber-enabled fraud, escalation and confidentiality. Vestigo may monitor compliance through reviews, audit, exception analysis and management reporting and will improve controls based on law, regulation, incidents and emerging risk.
Clause 14

14. Cooperation and Client Responsibilities

Clients and representatives must provide accurate, complete and timely information; disclose the true proposer, insured, beneficial owner, payer and beneficiary; use authorised payment channels; and promptly report suspected fraud, phishing, fake policies or premium diversion. Vestigo will cooperate with insurers and lawful authorities, while respecting applicable privacy, confidentiality and procedural rights.
Clause 15

15. Reporting a Concern

A suspected AML/CFT, sanctions, premium-diversion or insurance-fraud concern may be reported to enquiry@vestigoinsurance.com with the subject “Confidential AML/Fraud Concern”. The report should provide factual details and available documents. Immediate threats or criminal activity may also be reported to the appropriate law-enforcement or emergency authority. Reports made in good faith will be handled in accordance with the Code of Ethics and Speak-Up Policy.
Clause 16

16. Policy Review

This Policy may be amended to reflect changes in law, IRDAI or Government directions, insurer requirements, fraud typologies, sanctions or Vestigo’s operations. The current website version will state its effective or last-updated date.

Report a Concern or Suspicious Activity

If you suspect money laundering, premium diversion, identity misuse, fake policy issuance, or insurance fraud, report it immediately to our compliance desk.

• Include "Confidential AML/Fraud Concern" in the email subject line.

• Provide factual details and attached documents to assist investigation.

• Reports made in good faith are handled strictly under our Code of Ethics.

Insurance is a subject matter of solicitation | Vestigo Insurance Brokers Pvt. Ltd. | IRDAI Regn. No: 1131 (Direct Broker (General & Life)) | CIN: U66220GJ2025PTC166605