What is the difference between KYC and AML?

KYC (Know Your Customer) is the process of verifying a user's identity at onboarding. AML (Anti-Money Laundering) is the broader regulatory framework that includes KYC but also covers ongoing transaction monitoring, risk scoring, and reporting suspicious activity to the government.

How do exchanges monitor crypto transactions?

Exchanges use blockchain analytics software (like Chainalysis, Elliptic, or TRM Labs). These tools map the blockchain and assign risk scores to wallets. If you deposit funds that previously passed through a known darknet market, mixer, or sanctioned address, the software flags your deposit.

What happens if an exchange flags my transaction?

The exchange will usually freeze the transaction or your entire account pending review. They may ask you for 'Proof of Source of Funds' (e.g., bank statements or trade history showing how you legally acquired the crypto). If they suspect criminal activity, they file a Suspicious Activity Report (SAR) with regulators and may close your account.

What is the FATF Travel Rule for crypto?

The FATF Travel Rule requires Virtual Asset Service Providers (exchanges) to collect and share originator and beneficiary information when transferring crypto above a certain threshold (often $1,000 or €1,000) between each other, mirroring rules for traditional bank wire transfers.

Guides · AML

What Is AML in Crypto?

Anti-Money Laundering (AML) is the reason your account might get frozen and why exchanges use blockchain analytics to trace your deposits. Here is how it works.

By Ashir Khan3 min read

Ashir Khan writes about cryptocurrency security, self-custody, macro market analysis, and regulatory policy at CryptoBeacon.

Last updated: September 1, 2026

AML vs KYC

KYC (Know Your Customer) is verifying *who* you are. AML (Anti-Money Laundering) is verifying *what you are doing*. KYC is just the first step in a broader AML program. Once an exchange knows who you are, AML rules require them to monitor your ongoing behaviour to ensure you aren't using their platform to clean dirty money, fund terrorism, or bypass international sanctions.

How crypto AML works in practice

Exchanges implement AML through several mechanisms:

Transaction Monitoring: Using software like Chainalysis to scan every incoming deposit. If funds originated from a sanctioned entity, a darknet market, a known hack, or a crypto mixer (like Tornado Cash), the deposit is flagged.
Source of Funds (SOF): If you deposit an unusually large amount of fiat or crypto, the exchange may freeze your account and demand proof of how you earned it (payslips, tax returns, trading history).
Suspicious Activity Reports (SARs): If an exchange suspects illegal activity, they are legally obligated to file a secret report with government agencies (like FinCEN in the US) without informing you.

The FATF Travel Rule

The Financial Action Task Force (FATF) is the global money laundering and terrorist financing watchdog. They implemented the "Travel Rule" for crypto.

What the Travel Rule requires:

When User A sends crypto from Exchange X to User B on Exchange Y (above a certain threshold, usually $1,000), Exchange X must automatically send User A's identifying information to Exchange Y, and Exchange Y must verify User B's information. It mirrors the system used for traditional bank SWIFT wires.

Implementing this for crypto has been technically difficult, leading to fragmented adoption globally and occasional friction when transferring between different regulated exchanges.

Why innocent users get caught in AML nets

Because blockchains are public ledgers, funds have a permanent history. If you sell an NFT to someone who previously interacted with a sanctioned address, and you then deposit those funds to a regulated exchange, the exchange's analytics software might flag *your* deposit due to the "taint" a few hops back in the transaction history.

This results in frozen accounts and frustrating, weeks-long support tickets where innocent users must prove they are not money launderers. To minimise this risk, avoid interacting directly with known mixers or high-risk offshore platforms with the same wallet you use for your regulated exchange deposits.