What is AML in crypto?
AML stands for anti-money laundering: the laws, checks and reporting duties that stop criminals from using crypto exchanges, banks and brokers to clean up illicit funds. In crypto, AML is why exchanges verify your identity, ask where your money comes from, and sometimes pause a withdrawal to ask questions. For EU residents, it’s not optional: every licensed crypto platform must follow these rules.
What is AML in crypto?
AML in crypto means applying the same anti-money laundering rules that banks follow to crypto exchanges, brokers and other crypto businesses. The aim is to prevent money laundering, terrorist financing and other financial crimes such as fraud, sanctions evasion and tax evasion.
Anti-money laundering (AML) is the umbrella. Know your customer (KYC) is one part of it: the identity verification at sign-up. AML covers everything after that, including transaction monitoring, risk assessments and reporting suspicious transactions to the authorities.
Money laundering usually happens in three stages:
- Placement: bringing criminal money into the financial system, for example by buying crypto.
- Layering: moving it around to hide where it came from, through many wallets, coins or platforms.
- Integration: cashing out as funds that look legitimate.
Crypto transactions are public on the blockchain, but wallet addresses don’t show names. AML rules connect the two at the point where crypto meets regular money: the exchange.
How AML works on crypto exchanges
On crypto exchanges, AML compliance works as a continuous process, from the moment you open an account to every withdrawal you make. The core building blocks of an AML program are the same across the crypto industry:
- Customer identification. The exchange confirms the customer’s identity with an ID document and a selfie. This is KYC.
- Customer due diligence (CDD). It asks what you plan to do and where your money comes from, and checks you against sanctions lists.
- Risk scoring. Each customer gets a risk level. Higher risk customers, such as politically exposed persons, get enhanced due diligence with more documents.
- Ongoing transaction monitoring. Software checks deposits, trades and withdrawals for patterns that look like money laundering activity, including crypto received from addresses linked to hacks, scams or darknet markets.
- Reporting. If something looks wrong, the AML compliance officer files a suspicious activity report with the national financial intelligence unit and may freeze the funds.
A practical example: you deposit €500 a month from your salary, and nobody asks anything. Then you suddenly deposit €40,000. The exchange’s compliance teams will probably ask for proof of where it came from, such as a house-sale contract or bank statement, before you can trade or withdraw. That’s the AML process doing its job.
AML regulations for crypto in the EU
AML regulations for crypto in the European Union rest on four layers. Together, they make crypto firms follow much the same AML obligations as traditional financial institutions.
| Rule | What it does for crypto | Since |
|---|---|---|
| EU anti-money laundering directives | Made crypto exchanges and custodial wallet providers “obliged entities” with AML requirements | 2020 |
| MiCA | Requires a licence for crypto-asset service providers, including sound AML controls | 30 December 2024 |
| Transfer of Funds Regulation (travel rule) | Sender and receiver data must travel with every crypto transfer between providers | 30 December 2024 |
| Anti-money laundering regulation (AMLR) | One EU rulebook, bans anonymous crypto accounts at regulated platforms | July 2027 |
The travel rule
Travel rule compliance is the part you notice most. When you send crypto from one exchange to another, the sending platform must pass on who you are and who receives the funds, with no minimum amount. If you send more than €1,000 to your own self-custody wallet, the exchange must check that the wallet really belongs to you.
MiCA and the new EU AML authority
Under MiCA, an exchange only gets and keeps its licence if its AML processes are in order. Since 1 July 2026 the transition period has ended everywhere in the EU, so only MiCA-authorised platforms may serve EU residents. A new EU authority, AMLA, will directly supervise a small group of the largest and riskiest financial firms, and crypto companies can be among them.
AML requirements outside the EU
Outside the EU, AML requirements for crypto follow the global standards of the Financial Action Task Force (FATF). The FATF calls crypto businesses virtual asset service providers (VASPs) and expects countries to apply the same rules to virtual assets as to money, including the travel rule.
In the United States, the Bank Secrecy Act is the main federal regulatory framework. Crypto exchanges count as money services businesses, register with the Financial Crimes Enforcement Network (FinCEN), run a customer identification program and file suspicious activity reports. Banks there also keep records for funds transfers of $3,000 or more, which is the “$3,000 rule” people search for.
What crypto AML compliance means for you
For you, crypto AML compliance mostly means a few extra steps and a bit less privacy, in exchange for a platform that a regulator watches. Here is what to expect:
- Questions about your money. Source-of-funds questions are normal, especially for larger deposits. Answer honestly and keep documents ready.
- Delayed withdrawals. An unusual transfer can be held for review. Annoying, but it’s also how stolen funds get stopped.
- Travel-rule forms. When you withdraw, you may need to say who owns the receiving wallet.
- Closed accounts. Using mixers, receiving crypto from flagged addresses or refusing to answer questions can lead to an account being restricted.
Why this protects you
AML rules also protect ordinary users. A platform with strong AML controls is less likely to be shut down by regulators overnight, less attractive to criminals, and better able to work with banks for euro deposits. Offshore platforms that skip these checks often skip consumer protection too.
KYC and AML: what’s the difference?
KYC and AML are closely linked, but they’re not the same. KYC is the identity verification at the start, while AML is the full set of rules that includes KYC plus ongoing monitoring and reporting obligations.
| KYC | AML | |
|---|---|---|
| What it is | Checking the customer’s identity | The full framework against financial crime |
| When | At customer onboarding, and when details change | Throughout the relationship |
| Includes | ID, selfie, address, source of funds | KYC, risk assessments, monitoring, reports |
For the details of the identity check, read what KYC is in crypto and our guide to KYC verification. For the wider picture, see crypto regulation, compliance and how we weigh licences in our methodology.
The bottom line
AML is the rulebook that keeps criminal money out of crypto exchanges, and in the EU every licensed platform must follow it. The trade-off is less privacy and the occasional question about your money, but you get a platform that answers to a regulator.
Related terms
Questions people ask
How does AML work in crypto?
A crypto exchange checks who you are when you sign up, scores how risky your account is, and then monitors your deposits, trades and withdrawals. If something looks like money laundering, it can ask questions, freeze funds and report the activity to the national financial intelligence unit.
What are the three stages of money laundering?
Placement, layering and integration. Criminal money is first brought into the financial system, then moved around to hide its origin, and finally returned as funds that look legitimate. AML rules try to catch it at each stage.
Is KYC mandatory for crypto?
Yes, at every licensed crypto exchange in the EU, the UK and the US. KYC is the identity check at the start of AML compliance, and you can't deposit euros or withdraw without it.
How can I check if a crypto wallet is AML compliant?
A wallet you control yourself isn't AML compliant or non-compliant; the rules apply to the companies that serve you. What you can check is whether your exchange holds a MiCA licence in the ESMA register, because licensed platforms must run full AML checks.
What is AML in banking?
In banking, AML is the same set of rules: banks verify customers, monitor payments and report suspicious transactions. Crypto exchanges in the EU have followed the same type of rules since 2020.