---
title: Urgent Compliance Updates
description: Critical compliance changes requiring immediate action including mandatory terms of service acceptance for all customers, enhanced KYC requirements with selfie verification, and updated country restrictions for high-risk jurisdictions.
date: 2025-10-06
category: Compliance
categoryType: improvement
isChangelog: true
---

These compliance updates take effect on **October 15, 2025** and require action across your customer onboarding and terms of service flows.

<!--more-->

## TL;DR

- New terms of service available (breaking changes)
- Customer creation updates (breaking changes)

## New terms of service version available

All your customers will be required to accept the new version of our terms of service. This is necessary to allow BlindPay to issue virtual accounts, create wallets and process payments on behalf of them.

Every time you try to create a quote, an error message `please_accept_terms_of_service` will show up. When you see that, you should pop up the terms of service link and make your customer accept. Consult the [terms of service guide](/docs/essentials/terms-of-service#accepting-a-new-version) for integration details.

You will also receive updated `tos.accept` webhook events—review the [webhook documentation](/docs/essentials/webhooks) to handle them correctly.

## Customer creation updates

The following fields are now updated:

- The fields `phone_number` and `selfie_file` are now mandatory for individuals. This is necessary because our US banking partner will require them in the future, so we're already anticipating this.
- The field `individual_holding_doc_front_file` is deprecated for enhanced KYC because of the addition of `selfie_file`.
- The field `website` is now mandatory for businesses.
- The [prohibited and high-risk countries list](/knowledge-base/guides/supported-countries) was updated. All customers from high-risk countries must go through enhanced KYC verification.
- We're adding new fraud checks when analyzing customer data. If the KYC is rejected, you'll see details in `fraud_warnings`.

Update your onboarding forms and validation logic ahead of the deadline to avoid interruptions.
