Guidelines for Law Enforcement Agencies

Purpose of this Document

This document explains how Kriptomat works with law enforcement authorities. Its aim is to help officials understand what information is needed in a request, how to contact us securely, and what they can expect in terms of response and cooperation

About Kriptomat

Kriptomat, operating under FintechX OÜ, is a licensed virtual asset service provider (VASP) based in Estonia. We provide crypto exchange, wallet, transfer, and portfolio management services. Kriptomat complies with AML/CTF, GDPR, and MiCAR requirements.

Please see FintechX OÜ official Registry Extract: (LINK).

Our Legal Obligations and Cooperation Framework

We cooperate with law enforcement agencies and competent authorities where:

• A valid legal basis is presented (e.g. a court order, warrant, or official request);
• The request is lawfully issued under applicable jurisdiction and Estonian laws.
• The request relates to Kriptomat clients or services.

Kriptomat may reject or require clarification for requests that are vague, overly broad, or outside legal scope.

Our Privacy Commitment

Kriptomat is committed to protecting the privacy of its clients and will only respond to law enforcement requests that are duly authorised, properly formatted, and submitted through official channels.

All disclosures are limited to the minimum data necessary to fulfil the lawful request.

Kriptomat will not notify clients of law enforcement requests if notification is prohibited by law.

Submitting a Request

Requests for information should be:

• Submitted in writing, on official letterhead or via verifiable email;
• Signed and include the name, title, and contact details of the requesting officer;
• Include a clear legal basis (e.g. reference to specific law or regulation);
• Include sufficient detail to identify the subject of the request (e.g. full name, email address, transaction IDs, wallet addresses, etc.); 
• Minimum mandatory information is:  full name – provided in the Latin alphabet. Requests in other scripts must be transliterated into Latin characters to ensure correct identification.
• Include date range, case reference number, and jurisdictional authority.
• Be submitted in English or the Estonian language.

Contact Information for Law Enforcement Requests

All law enforcement inquiries should be directed to:

Legal & Compliance Department

Kriptomat / FintechX OÜ

Osmussaare tee 8

13811 Tallinn, Estonia

Email: [email protected]

Kriptomat may request additional documentation to validate the identity and authority of the requesting party.

Response Time

We aim to respond to law enforcement requests promptly, typically within 5 business days. Urgent requests related to imminent threats to life, safety, or major financial crime may be prioritised — please indicate URGENT in the subject line and provide justification.

Emergency Requests

In case of an emergency involving immediate danger to a person or the risk of substantial financial harm, contact our Compliance Department at: [email protected]

Please include:

• “EMERGENCY REQUEST” in the subject line
• A description of the nature of the emergency
• Specific data requested and why immediate disclosure is necessary

Additional Notes

• We reserve the right to seek legal counsel and/or validation before disclosing any data.
• Requests for account closure or funds freeze require a valid court or regulatory order.

For more information or to discuss a law enforcement cooperation matter, please contact us at: [email protected]