Compliance

What OnlyFlow will never do.

Every line below is a refusal, not a policy. A policy is a sentence somebody can decide not to follow this once. These are in the software.

Before you hand anyone a mandate

What we will not do with your money.

We never hold it Money moves between your account and theirs. It does not pass through a balance we control, at any point. INV-NO-CUSTODY

Somebody licensed moves it We send the instruction. A licensed payment company actually moves the money and holds every permission that requires — so the part that is regulated belongs to the party regulated to do it. Link Money

They see the amount before it moves An email with the exact figure, that they keep. If it did not get delivered, the transfer does not happen — the software refuses it. INV‑NOTICE

We never ask for an OnlyFans login No password, no two‑factor code, no session cookie. We watch a bank account, and nothing else. No credential is stored

The creator is charged nothing Not a fee, not a percentage, not a deduction. Our bill goes to the agency, at month end, on its own line. $0.00, always

Thirty-two refusals, no override There is no setting that turns one off, and no version of this software where somebody senior can wave one through. Press one and watch it refuse. 3,900+ automated checks

OnlyFlow LLC, a Florida limited liability company. Terms · Privacy

Where each refusal comes from

The rules underneath.

Four of them, and every one is somebody else’s rule that we chose to enforce rather than argue with.

The notice is not optional Ours will not fire unless a delivered notice exists for that exact amount. Not queued, not sent — confirmed delivered by the provider. That is our rule, and the software is where it lives. INV‑NOTICE

Email only counts if they agreed to email Written means a form they can keep. Somebody has to consent to being told that way before it is, so we ask, and we record what they were shown when they answered. E‑SIGN Act

The right to stop it cannot be signed away We refuse to STORE an authorization that says otherwise — irrevocable, perpetual, or waiving the right. The check runs before the record exists, not before the money moves. INV‑NO‑WAIVER

A business account is not a consumer one Which one it is decides the entry type, the notice window and whether Reg E applies at all. Unanswered reads as consumer, which is the answer that refuses. INV‑SEC‑CODE

Before anybody makes us

We restrict an account
well inside the line.

Unauthorized returns are measured against the originator, not against one agency — so somebody else’s bad month lands in our number, and ours in theirs. We act far below the line that matters.

Rate	What happens	Whose line
0.10%	Somebody is told. Nothing changes yet.	ours
0.20%	The agency goes to review and stops collecting until it is answered.	ours
0.35%	Suspended.	ours
0.50%	The violation threshold. Our own ceiling sits a third below it.	Nacha

The two things that actually cause an unauthorized return are a name they did not recognize on their statement and an amount nobody warned them about. Both are prevented upstream of the debit, which is why the descriptor and the notice are guards rather than settings.

What we hold

What is stored, and what
there is nowhere to put.

No OnlyFans credential, ever No password, no two‑factor code, no session cookie. There is no field in this system that accepts one. We watch a bank account instead. Nothing to leak

The exact words they agreed to The authorization text is stored with a hash of the document that was on the screen, so the record cannot describe words other than the ones they read. Produced on request

Every notice, and whether it landed Not "we sent it" — the provider’s own confirmation. A debit is refused when that confirmation is missing. Delivery, not intent

A link that even we cannot read An access link for a creator is held as a hash, like a password. Nobody can read one out of our database, including us. Shown once

Every refusal, by name

Thirty-two things
this system will not do.

Each one stops the money and says which rule stopped it. None can be switched off — there is no setting, no admin override, and no version of this software where somebody senior waves one through.

INV-ACCOUNT-RECONCILE INV-AUTH-TEXT INV-AUTHORIZED INV-BANK-ACTIVE INV-CAP-PCT INV-CHECKING-ONLY INV-CONTRACT INV-DISBURSE-COVERAGE INV-DOWNSTREAM-COVERAGE INV-ENGAGEMENT INV-FRESH-KEY INV-MATCHED-DEPOSIT INV-MIN-DEBIT INV-MODEL-NOT-LIABLE INV-MODEL-SHARE INV-NEVER-STRAND INV-NO-CUSTODY INV-NO-DEAD-END INV-NOT-DISPUTED INV-NOTICE INV-ORIGINATOR INV-PARENT-SETTLED INV-PAYEE-ACCOUNT INV-PER-TXN-LIMIT INV-RISK-GATE INV-NO-WAIVER INV-SCOPE INV-SEC-CODE INV-TAA-CALIFORNIA INV-TERMINAL

Every one of these exists because the failure it prevents happened to somebody, on a real payments platform. Where an older system had an override, the override was the incident. Press one on how it works and watch it refuse.

Who we are

The honest version.

Not live yet. We are in integration with our banking partner — no customer money has moved, and we would rather say so than imply otherwise.

The company

OnlyFlow LLC, a Florida limited liability company.

A licensed payment company moves the money. We send the instruction and never hold a cent of anybody’s.

What we are not

We are not a bank, and not a money transmitter. Funds move between the two parties’ own accounts and never through a balance we control.

Not affiliated with, endorsed by, or connected to OnlyFans or Fenix International Limited.

Ask us anything

Underwriting, diligence, or a question about a specific control — support@onlyflow.pro.

Every refusal on this page has a name and a test behind it, and we will show you either one.

The full list of refusals, all thirty-two of them, is on how it works. None of them has an override.