What is AML and how does it apply to crypto?

The definition

AML — Anti-Money Laundering — is the set of laws, procedures and technical controls designed to stop criminals from turning illegal proceeds into money that looks legitimate. Banks have lived with these rules for decades. Since crypto became a real payment rail, exchanges, custodians, payment processors and even some merchants fall under the same expectations.

Money laundering classically has three stages: placement (getting dirty money into the system), layering (moving it through many transactions to break the trail) and integration (spending it as apparently clean funds). Blockchains are unusually good at layering — thousands of hops cost cents — but unusually bad at hiding, because every hop is permanently public.

What regulated companies must do

Any Virtual Asset Service Provider (VASP) operating legally is expected to build a programme around a few pillars:

• KYC — verify who the customer actually is before serving them.
• Transaction monitoring — watch flows continuously for anomalies, not just at sign-up.
• Sanctions screening — block addresses and people on OFAC, EU and UK lists.
• The Travel Rule — pass originator and beneficiary data alongside transfers above a threshold.
• Reporting — file suspicious activity reports with the local financial intelligence unit.
• Record keeping — usually five years of customer and transaction history.

Why it matters to an individual holder

You do not need to be a compliance officer to be affected. If coins with a bad history land in your wallet, the exchange you later deposit them into can freeze the balance and demand a source-of-funds explanation. Unfreezing takes weeks, sometimes never. That is why an address check before accepting a payment costs far less than an investigation after it.

A screening report does not accuse anyone. It measures exposure — how close, in transaction hops and in value, an address sits to clusters known for ransomware, darknet trade, sanctioned entities or fraud.