Payment Policy
Effective date: February 17, 2026 | Version: 2026.02-global
This Payment Policy defines controls for balances, payouts, refunds, chargebacks, and financial risk handling to protect publishers, advertisers, and platform operations.
Financial operations may vary by jurisdiction and payment provider constraints.
Scope and Applicability
- Applies to all earnings, invoice adjustments, payout requests, and settlement records.
- Applies to advertiser charges and publisher disbursements across supported markets.
- Applies to payment method onboarding, verification, and method changes.
- Applies to anti-fraud checks, sanctions screening, and suspicious transaction review.
- Applies to chargeback handling, dispute resolution, and refund workflows.
- Applies to third-party payment processors used for fund collection or payout.
Mandatory Requirements
Settlement and Reconciliation
- Payout-eligible earnings must reconcile with validated impression and click records.
- Settlement schedules and cutoffs must be clearly documented.
- Manual ledger adjustments require approval and written reason codes.
- Pending balances remain subject to fraud and compliance review.
Payout Method Security
- Payout account holder details must match verified account identity.
- Bank or UPI changes require step-up verification before activation.
- Sensitive payment data must be masked or tokenized in user interfaces.
- Default payout methods must be visible and revocable by account owners.
Fraud and Financial Crime Controls
- Payment activity must be monitored for anomalies and abuse signals.
- Sanctions and restricted-party screening applies where legally required.
- Suspicious transactions may trigger temporary payout holds.
- Chargeback trends must be tracked with threshold-based escalation.
Prohibited Practices
- Using stolen payment credentials or unauthorized third-party payout accounts.
- Submitting false identity, tax, or banking information.
- Manipulating traffic metrics to inflate payable balances.
- Routing funds through prohibited entities or sanctioned channels.
- Attempting duplicate withdrawals through UI or API abuse patterns.
- Tampering with financial records to hide improper adjustments.
- Refusing required cooperation in dispute or fraud investigations.
- Bypassing required approval controls for high-risk payment actions.
Governance, Monitoring, and Enforcement
- Finance, risk, and security owners jointly review critical payment controls.
- Segregation of duties is required for initiation, approval, and reconciliation tasks.
- Payment-method changes and payout events must be fully audit logged.
- High-risk payout requests require enhanced due diligence before release.
- Material incidents trigger holds, investigation, remediation, and formal closure records.
- Policy exceptions require written approval, compensating controls, and expiry dates.
- User-facing status updates must communicate payout state and resolution path.
- Policy updates are versioned and announced before enforcement where feasible.
Operational Interpretation and Regional Mapping
These requirements should be interpreted as global baseline controls for a live ad operations platform. Teams must map each requirement to local legal obligations, contractual duties, and traffic-source constraints before enabling production delivery at scale.
When regional regulations impose stricter standards, the stricter standard applies. Where legal ambiguity exists, operations should default to least-risk handling and documented escalation to legal or compliance owners.
Policy-to-Workflow Mapping
- Map each policy control to one concrete workflow checkpoint.
- Define accountable owner, review cadence, and evidence source.
- Link policy failures to clear remediation and rollback actions.
- Track policy exceptions with expiry and approval metadata.
Evidence and Audit Quality
- Keep verifiable logs for approvals, enforcement, and account state changes.
- Maintain immutable records for policy acceptance and version changes.
- Preserve incident evidence with timestamp accuracy and actor context.
- Support regulator and partner audits with structured evidence retrieval.
Release and Change Governance
- Run policy impact review before major workflow or billing changes.
- Gate high-risk releases behind compliance and security readiness checks.
- Document rollback criteria for policy or abuse regressions.
- Communicate material policy updates with effective-date clarity.
Extended Compliance Checklist
- Confirm access controls for admin, publisher, advertiser, and support roles.
- Verify domain ownership, sitemap coverage, and install-code integrity before launch.
- Validate ad creatives, landing behavior, and category eligibility rules.
- Ensure budget, spend, and settlement paths align with billing model selection.
- Run fraud and abuse controls for both ad-serving and click attribution pathways.
- Confirm user data handling for consent, retention, and rights-response timelines.
- Check payout safeguards, webhook integrity, and transaction audit visibility.
- Review security events, incident triage flow, and postmortem documentation quality.
- Ensure policy pages remain reachable, indexable, and version-consistent in sitemap.
- Require periodic policy refresh training for operational and support teams.
Policy FAQ for Operations Teams
How often should this policy be reviewed?
Review before each major release and at recurring governance intervals, especially when billing logic, targeting controls, or verification workflows change.
What happens if live behavior conflicts with policy text?
Live enforcement should default to safer behavior immediately, then trigger incident review and documented correction to either implementation or policy wording.
How should teams handle partner-specific requirements?
Apply partner requirements as stricter overlays where needed, while preserving baseline platform controls and maintaining auditable policy-to-process mapping.