← Governance framework
Financial & Anti-Fraud

Fraud, Abuse and Misuse Policy

Prohibited behaviours, detection controls and response actions for fraudulent, abusive or manipulative use of the platform.

Version
v1.0
Effective
2026-07-19
Last reviewed
2026-07-19
Next review
2027-07-19
Owner
Head of Trust & Safety
Approver
Executive Team

Applies to

  • All users and organisations

Jurisdictions

  • Hong Kong (PDPO, IRD s.88)
  • United Kingdom (UK GDPR, DPA 2018)
  • European Union (GDPR)
  • Singapore (PDPA)
  • Australia (Privacy Act 1988)
  • Japan (APPI)
  • Wider APAC per country taxonomy

How this is applied in-product

  • Velocity and anomaly checks on participation and donation flows
  • Duplicate-evidence detection on activity uploads
  • Reach-reward discounting for non-genuine traffic

1. Prohibited

  • Manufactured or duplicated evidence of impact.
  • Collusion to inflate IMI or leaderboard standing.
  • Bot-driven amplification of verified shares.
  • Misrepresentation of charitable status or use of funds.

2. Response

  • Warning, suspension, credential revocation or account termination depending on severity.
  • Financial recovery pursued where feasible.
  • Regulator or law-enforcement referral where required.
Questions or concerns about this policy? Contact the DPO.

Related policies