Crypto has two reputations, and both are earned. It’s a genuine financial innovation that moves value across the world in minutes without a bank in the middle. It’s also a magnet for fraud and illicit finance, for many of the same reasons. Those two facts aren’t in tension; they’re the same property seen from different angles, and any crypto business serious about lasting has to hold both in view at once.
This document deals with two related issues which are frequently conflated. The first is crypto fraud (the scams that criminals run on individuals and businesses). The second is AML and CTF compliance (the controls that crypto businesses are required to have in order to prevent their platforms being used to launder the proceeds of crime or to fund terrorism). CTF for those unfamiliar with the term is counter-terrorist financing (the counterpart to AML). The common thread between the two is a single very fundamental question that pseudonymity is intended to hide: who is actually behind that wallet, that counterparty, that business?
What is AML in crypto?
AML in crypto means the same thing it means anywhere else, applied to a new kind of money. Anti-money-laundering is the body of laws, rules, and controls designed to stop criminals turning illicit funds into seemingly legitimate ones, and in the crypto context it’s the work a crypto business does to keep its platform from being used for exactly that. It travels with a twin, CTF, or counter-terrorist financing, which targets the funding of terrorism rather than the laundering of crime, and the two are almost always addressed together as AML/CTF.
What makes crypto AML special isn’t the objective per se but the terrain. The funds are digital, pseudonymous and extremely fast. The standard AML tools of the trade (customer due diligence, transaction monitoring, sanctions screening, suspicious activity reporting) all have to be rethought and rebuilt for a world where value is moving peer to peer across borders in seconds. The underlying principles are very much the same as in traditional finance, it’s just that the application of those principles is entirely different in the context of the technology.
Why AML compliance matters in crypto
It’s easy to read crypto AML as just another box that regulators are going to make you tick. The reality is however that the stakes are far higher and far more practical. Compliance is increasingly the price of simply existing as a legitimate crypto business at all and it’s not just about avoiding the stick. There are real benefits to compliance.
There’s the legal survival aspect: an uncompliant regulated crypto business is simply going to get fined, have its registration/licence revoked and in the most serious cases face criminal liability. So without AML there is no lawful business to run. There’s the trust and access aspect: banks and payment processors and the institutional clients that you need to get your business going are simply not going to do business with you if you’re seen as a laundering risk. AML is what enables you to get that banking and partnership access. And then there’s the health of the entire ecosystem: crypto’s future as a mainstream technology is predicated on it no longer being seen as the domain of the criminal. Every compliant business helps to build that credibility and every single scandal is a blow to the sector’s reputation. For a sector which is maturing and trying to win over the institutional and mainstream world, AML isn’t a tax on legitimacy; it’s the very foundation of it.
What is crypto fraud?
Crypto fraud is any scheme which uses crypto to defraud people out of their money or assets. The technology is new, the scams themselves are not. The scams are just the old ones in new guises. The various types that keep reappearing are worth knowing the look of:
- Investment and ‘pig-butchering’ scams. The fraudster builds up a relationship over weeks (often a fake one) and then lures the victim into a fraudulent crypto investment which takes ever increasing amounts of money before it disappears completely.
- Rug pulls. Developers launch a token/project, get the investment, and then just up and vanish with the money, leaving you with a total write-off.
- Phishing and wallet draining via fake websites, apps and messages which trick the user into giving up their seed phrase or approving a malicious transaction which then drains their wallet.
- Fake exchanges and apps. Platforms that are very convincing in their operation but are in fact fraudulent and take your money in and never let you withdraw it.
- Ponzi and high yield schemes. Empty operations promising ridiculous returns, paying off the early investors out of the money of the later investors until they all go belly up.
- Impersonation and address poisoning. Posing as a trusted brand or person, or planting lookalike wallet addresses in a victim’s history so a payment goes to the fraudster.
The common thread is familiar from every other kind of fraud: manufactured trust, urgency, and the promise of a return too good to be true. What crypto adds is speed and finality, because once funds move, they’re very hard to claw back.
What are the red flags of crypto fraud and money laundering?
Spotting trouble early is a core compliance skill, and certain patterns recur often enough to be worth memorising. Any one may have an innocent explanation; several together rarely do.
- Transactions deliberately structured to stay just below the reporting or verification thresholds.
- Funds passed through mixers, tumblers or privacy coins designed to break the audit trail.
- Rapid movement across many wallets or across multiple chains with no apparent economic purpose (the classic case of layering).
- Links to wallet addresses associated with known scams, darknet markets, or sanctioned entities.
- A customer or counterparty reluctant to complete identity verification, or supplying inconsistent information.
- Sudden high-value activity that doesn’t fit a customer’s stated profile or history.
- Large transfers through newly created wallets or accounts with no prior activity.
- Connections to high-risk jurisdictions or to entities already under sanctions.
Red flags are signals to investigate, not conclusions to act on blindly. The job of a compliance programme is to surface them reliably, then establish whether there’s an innocent explanation or a real problem behind each one.
Why crypto appeals to money launderers and terrorist financiers
The same features that make crypto useful make it attractive to those moving dirty money. It’s worth being clear-eyed about why, because the regulatory response only makes sense in that light.
Crypto is pseudonymous not anonymous. The transactions are all public on the blockchain but the real world identity behind an address is not (unless you’ve linked the two). It’s fast and it’s borderless, enabling value to move across jurisdictions in minutes without any traditional intermediary doing due diligence. A whole toolkit has evolved to break the trail from mixers and tumblers that just pool and scatter funds, through to chain hopping across different blockchains, to the exploitation of DeFi and cross chain bridges. That doesn’t make crypto in itself a criminal activity (the vast majority of activity is perfectly legitimate) but it does explain why it’s viewed as such a high risk for money laundering and terrorist financing and why the compliance regime has been so dramatically tightened.
How money laundering works in crypto
The classic three stages of money laundering (placement, layering and integration) all map onto crypto with just the mechanics changed. Placement is the stage of getting the illicit funds into the crypto ecosystem (typically via an on-ramp to convert cash to crypto). Layering is the obfuscation stage and this is where crypto really has the tools to do it (moving funds through mixers, moving across chains, splitting the funds across many wallets, routing through various decentralised protocols to break the link to the source). Integration is the stage of taking the funds out again in a clean form, either back into the traditional financial system or into assets.
The on-ramps and off-ramps are the bottlenecks, the points at which crypto comes into contact with a regulated business that can verify identity. That’s precisely why exchanges and other service providers have the most onerous compliance obligations. If you want to understand the wider mechanics of laundering beyond the crypto space then our guide to the stages of money laundering will walk you through the underlying playbook that these crypto techniques are just a modern manifestation of.
Key trends in crypto fraud and money laundering in 2026
The crypto crime landscape shifts quickly, and a handful of trends stand out heading through 2026, all of them pointing in the same worrying direction.
- AI-enabled fraud. Deepfakes and AI-generated content are supercharging scams, from fake video endorsements by public figures to synthetic identities convincing enough to defeat basic verification.
- The rise of pig-butchering. Long-con investment scams that blend a fake relationship with a bogus crypto platform have become one of the costliest categories of fraud worldwide.
- Laundering through DeFi and bridges. Criminals increasingly exploit decentralised protocols and cross-chain bridges to move and obscure funds beyond the reach of simple tracing.
- Stablecoins in the spotlight. As stablecoins become a dominant medium of exchange in crypto, they’ve attracted both heavy legitimate use and illicit flows, drawing growing regulatory attention.
- Professionalised laundering services. Specialised, for-hire laundering operations now cater to crypto criminals, industrialising what used to be improvised.
The common direction is sophistication. Both the fraud and the laundering are becoming more professional, more AI-assisted, and harder to catch with yesterday’s tools, which is pushing compliance toward continuous, multi-layered defences rather than single-point checks.
Who has to comply? The VASP perimeter
AML and CTF compliance are the controls a crypto business puts in place to prevent, detect and report money laundering and terrorist financing. In practice that means knowing who your customers and counterparties are, watching what they do, screening them against sanctions and watchlists and reporting any suspicion to the regulator, all of it properly documented and governed so that the regulator can see that it works.
The businesses that are caught are generally what the international standards would refer to as Virtual Asset Service Providers (VASPs) i.e. crypto exchanges, custodial wallet providers and the like. In the EU context the equivalent term is Crypto-Asset Service Providers (CASP). If your business enables people to buy, sell, swap, transfer or store crypto then the safe assumption is that you are somewhere in the AML/CTF sphere and the trend is very much towards broader coverage rather than narrower.
What is a crypto AML policy?
A crypto AML policy is the formal document which sets out how that particular business is going to meet its AML/CTF obligations. It’s both an internal playbook and the very first thing a regulator will ask to see so it has to be real and genuinely implemented, not some shelfware that’s been written just to pass an audit.
A good policy will cover the business’s money laundering and terrorist financing risk assessment, its customer due diligence and KYC processes, its approach to sanctions and watchlist screening, its transaction monitoring rules, how it deals with the Travel Rule, its procedure for identifying and reporting suspicious activity, its record keeping, its staff training and the governance that underpins it (this will typically involve a designated compliance officer). The purpose of having it all in writing is to ensure the controls are consistent and repeatable across the business and to provide evidence to a regulator that compliance is a properly designed and governed process rather than something that’s just winged. There’s a catch though. A policy that’s just sitting on the shelf is actually worse than useless as it creates a benchmark against which the business can be shown to have failed. The policy and the practice have to be in line.
Core components of a crypto AML/CTF programme
Whatever the jurisdiction, a credible crypto AML/CTF programme is built from a consistent set of parts:
- KYC and customer due diligence. Verifying who customers are at onboarding and assessing the risk they pose, the foundation everything else rests on.
- The Travel Rule. Collecting and transmitting required originator and beneficiary information when crypto moves between service providers.
- Sanctions and PEP screening. Checking customers, counterparties, and where possible wallet addresses against sanctions lists and politically exposed person data.
- Transaction monitoring. Watching activity for suspicious patterns, typically combining on-chain analytics with the context of who the customer is.
- Adverse media screening. Searching for negative news tying a customer or counterparty to fraud, crime, or other red flags.
- Suspicious activity reporting. Filing reports with the relevant financial intelligence unit when something crosses the threshold of suspicion.
- Ongoing monitoring. Keeping all of the above current over the life of the relationship, rather than checking once at onboarding and stopping.
The important point is that these parts split into two families: the on-chain side, which follows the money across the blockchain, and the off-chain side, which establishes and tracks the identities and entities behind it. A strong programme needs both, and weakness in either leaves a gap.
Global AML regulations for crypto in 2026 and 2027
There’s no one global rulebook for crypto AML but the major frameworks have all converged on a very similar core. The international baseline is of course the FATF and their Recommendation 15 which brings the AML regime to virtual assets and VASPs. Their Travel Rule guidance is that you have to carry the sender and recipient identification information with a crypto transfer just as you do with a bank wire.
National and regional regimes are all built on that foundation. In the EU the Markets in Crypto-Assets Regulation (MiCA) provides a harmonised regime for crypto asset service providers with its rules coming into effect at the end of 2024. The AML regime and the EU version of the Travel Rule are delivered via the Transfer of Funds Regulation and the EU’s wider AML regime. In the US FinCEN treats a large number of crypto businesses as money services businesses under the Bank Secrey Act (i.e. they are subject to registration, AML programmes and reporting) and OFAC applies sanctions in the crypto space (including designating specific wallet addresses) which is an area that is both legally contentious and rapidly evolving. In the UK crypto firms are required to register with the FCA under the Money Laundering Regulations and there is a wider cryptoasset regime on top of that.
2026 and 2027 are going to be key years. In the EU the new AMLR comes into force in July 2027 and will bring all crypto-asset service providers fully into the EU’s harmonised AML regime as ‘obliged entities’ with much more onerous due diligence and oversight by the new AMLA. The UK is rolling out its wider FCA regime for cryptoassets (beyond the current AML registration) with authorisation requirements due to come into force in the 2026/2027 timeframe. The US framework is still in flux with ongoing debate about crypto-specific legislation and a very much shifting enforcement stance. Globally FATF is continuing to push jurisdictions to implement the Travel Rule and that adoption remains very patchy. The trajectory is the same everywhere really: crypto is being pulled firmly into the same AML perimeter as the rest of regulated finance and the next two years will see much of that settled. The detail is still moving so anyone relying on the specifics should check with the relevant regulator to confirm the current position.
The risk of non-compliance
The consequences of failing at crypto AML are severe and growing, as regulators lose patience with a sector they once watched from a distance. The downside is no longer theoretical, and it comes in several forms at once.
- Financial penalties. Regulators have imposed very large fines on crypto businesses for AML failures, reaching into the hundreds of millions in the most serious cases.
- Loss of registration or licence. Failing AML requirements can cost a business the registration or licence it needs to operate legally at all.
- Criminal liability. In serious cases, individuals as well as companies can face criminal prosecution, not just corporate fines.
- Banking and partner exclusion. A compliance failure can see banks and payment partners cut ties, which can be fatal to a crypto business even without a formal penalty.
- Reputational damage. Enforcement is public, and the loss of customer and investor trust can outlast any fine by years.
The pattern across all of these is that non-compliance is no longer a cheap risk to run. As the regulatory regimes mature, the cost of getting AML wrong has risen to the point where, for a serious crypto business, robust compliance is simply cheaper than the alternative.
The challenges unique to crypto
Crypto AML is in fact far harder than its traditional finance equivalent and it’s worth explaining why rather than just pretending it isn’t. Pseudonymity is the fundamental problem: the entire game is about linking a blockchain address to a real person or a real business and that’s deliberately made very difficult. DeFi and non-custodial services add another layer of complexity in that there may be no obvious intermediary at all through which you can apply the usual checks.
On top of that funds move across chains and through the protocols at a speed and with a degree of finality that traditional systems simply can’t match so there’s very little time to act before the value is gone. The fraud and laundering typologies are also constantly evolving with new schemes emerging faster than the rules can be written to deal with them. The end result is that crypto compliance teams are chasing a target that is not only faster but better at hiding than the one their banking counterparts have to deal with. That’s why the industry standard is now to combine tools rather than rely on any one tool in particular.
How technology enables AML in crypto
Crypto AML is, more than most compliance fields, a technology problem, because the volume, speed, and complexity of crypto activity are simply beyond manual review. The good news is that technology is also the answer, and a modern crypto AML stack leans heavily on it.
Blockchain analytics tools will of course trace funds through the chain, score addresses for risk and flag any links to known bad activity. Automated KYC and identity verification can be used at scale to onboard customers, with document checks, biometrics and data checks all being part of the process. Sanctions and adverse media screening tools will be used to continuously screen customers and counterparties against sanctions and adverse media lists rather than just doing a one-off check. Travel Rule solutions will be used to pass on the required sender and receiver information between the various service providers. And increasingly AI and machine learning are being used to improve transaction monitoring, helping to filter out the massive number of false positives that plague a purely rules-based system. The point is that no single tool does it all. Effective crypto AML is about orchestrating a number of tools, using the on-chain view in conjunction with off-chain identity and entity intelligence so that they work together rather than with gaps between them.
Best practices for crypto AML compliance in 2026
Build a crypto AML/CTF programme that actually works rather than one that just exists on paper. It comes down to a few principles really. Take a risk based approach and focus your efforts where the risk is highest rather than spread it out and thin. Make it a continuous monitoring exercise rather than a one off onboarding check as the risk in crypto is going to change very rapidly. Invest in governance and documentation so that you can actually demonstrate to a regulator what you’ve done. And of course the key thing is to integrate the two halves of the problem.
That last point is the one teams most often get wrong. Blockchain analytics tells you what a wallet is doing, its transaction history, its links to known illicit addresses, its risk score. Entity and identity intelligence tells you who is behind the business or counterparty you’re dealing with, their ownership, their sanctions exposure, their adverse media. Each answers half the question. A crypto business that has excellent on-chain analytics but weak entity due diligence can trace a suspicious flow and still have no idea who it’s actually transacting with, and vice versa. The strongest programmes pair the two deliberately, and treat 2026’s more sophisticated threats as a reason to deepen both rather than lean on either alone.
Where Beady fits
To be precise about this, Beady is the off-chain, entity-and-people half of that pairing. It is not a blockchain analytics tool, and it doesn’t trace on-chain transactions; it answers the other half of the question, the who rather than the what, which is exactly the half pseudonymity is built to hide.
For a crypto business that means KYB automation for institutional clients, B2B partners and corporate counterparties behind the wallets (i.e. resolving the beneficial ownership behind the company rather than just taking the company’s paperwork at face value). It means screening those entities and the people who control them against sanctions and watchlists and adverse media with every finding traceable back to its source so that a decision can be evidenced to a regulator. It means ongoing monitoring so that a counterparty or owner who becomes a problem after onboarding is picked up when it happens. Used in conjunction with blockchain analytics it closes the gap between what the chain shows and who is actually on the other end. It works alongside the on-chain tools, it doesn’t replace them and a complete crypto AML stack needs both.
New rails, same question
All the crypto has done is changed the rails that value moves on. It’s made them faster, more global and much harder to trace. The fundamental question of financial crime remains the same though: who is actually on the other end of that transaction and can you trust them? Blockchain analytics can tell you where the money went. The tougher half of the puzzle, who sent it and who it went to, is still about identity and entity intelligence. That’s the bit that criminals work so hard to hide and that’s the bit you need to be able to see through.
If you’d like to see how Beady handles that off-chain half, verifying who really sits behind a crypto counterparty or partner and keeping watch after onboarding, book a Beady demo and we’ll walk through it on a company of your choosing.
