The ID you submit when registering on an exchange, the source-of-funds statement required at withdrawal, the popup telling you your account is restricted — these aren't the platform "giving you a hard time"; they are the AML (anti-money laundering) compliance system in motion. This article explains AML/KYC rules thoroughly: what financial institutions and exchanges actually check, which compliance actions ordinary traders encounter, which trading behaviors get flagged as suspicious, and how to handle tax filing.
⚠️ Risk Warning
This article is an objective compilation of public knowledge, for study and research only, and does not constitute legal or tax advice. AML regulations, national enforcement practices, and platform risk-control rules change frequently — defer to the latest regulations and professional advice for specific actions.
1. Basic Concepts: AML and KYC
1.1 The Three Stages of Money Laundering
Money laundering is typically broken into three stages:
| Stage | English | Meaning | Typical Operations |
|---|---|---|---|
| Placement | Placement | Getting illicit funds "into the financial system" | Depositing large cash in batches, buying assets |
| Layering | Layering | Making the funds' origin hard to trace | Repeated transfers, cross-border flows, trading different assets, swapping currencies |
| Integration | Integration | Bringing funds back "looking legitimate" | Buying property/luxury cars, investing, consuming |
Regulators and platform risk controls watch exactly these traces: abnormal large inflows/outflows, rapid pass-throughs, unexplained origins, lightning cross-border transfers.
1.2 KYC: Know Your Customer
KYC (Know Your Customer) is AML's first line of defense — fundamentally "know who you are before allowing you to trade":
- Identity verification: ID/passport/facial recognition, confirming "a real person stands behind the account";
- Proof of address / risk questionnaires: some platforms or high-limit scenarios require residence proof, income sources, investment experience;
- Continuous updates: expired documents trigger re-verification requests, otherwise features get limited.
📖 One-sentence understanding
KYC isn't "the platform wants your privacy" — regulation requires platforms to answer "whose account is this, where did the money come from, where is it going". If the platform can't answer, the platform pays the fine.
2. AML Obligations of Financial Institutions and Exchanges
2.1 Obligated Entities and Core Actions
Regulated institutions (banks, brokers, crypto exchanges/VASPs etc.) have AML duties that boil down to "four things":
| Obligation | Meaning | How It Feels to You |
|---|---|---|
| Customer Due Diligence (CDD) | Identifying customer identity and risk at onboarding | Real-name verification when signing up |
| Enhanced Due Diligence (EDD) | Tighter review of high-risk customers/businesses | Large/cross-border/non-resident cases often need extra documents |
| Ongoing monitoring | Real-time and retrospective monitoring of account activity | Unusual operations trigger risk popups/freezes |
| Suspicious Transaction Reports (STR/SAR) | Reporting suspicions to regulators | You usually never know you were reported |
2.2 High-Risk Scenarios: Common EDD Triggers
- Non-resident / high-risk jurisdiction (e.g., some offshore domiciles) account opening;
- Large cash deposits or deposits of unverifiable origin;
- Frequent cross-border fund shuttling across multiple accounts and platforms;
- Accounts related to politically exposed persons (PEPs);
- High-frequency two-way conversion between crypto and fiat.
💡 Note for ordinary traders: cooperating unfreezes faster than fighting
If asked to provide source-of-funds proof, cooperating with documents usually unfreezes faster than pushing back; refusing cooperation often leads to long-term restrictions or even closure.
3. Special Rules for Crypto and Virtual Assets
3.1 Why Crypto Gets Extra Scrutiny
Virtual currencies naturally feature "cross-border speed, strong anonymity potential, on-chain traceability that's hard to map to real identities" — precisely a convenient layering tool in money laundering's second stage. Hence global regulators (led by FATF) brought virtual asset service providers (VASPs) into the AML framework.
3.2 FATF Recommendations and the Travel Rule
- FATF Recommendation 15: VASPs must fulfill AML obligations just like traditional financial institutions;
- FATF Recommendation 16 (the Travel Rule): transfers between VASPs must carry originator and beneficiary information along with the transaction (usually above a threshold around USD/EUR 1,000; thresholds vary by country).
Impact on ordinary users: when transferring between compliant platforms, your verified identity information travels with the transaction to the receiving platform; small opaque platforms and mixing services often refuse Travel Rule compliance — a strong signal they are non-compliant.
3.3 On-Chain Monitoring and Address Risk Controls
Compliant platforms use on-chain analytics tools (Chainalysis-type) to flag address risk:
- Addresses linked to mixers, darknet markets, ransomware, sanctioned entities get flagged as high-risk;
- Transferring to high-risk addresses can freeze your account or trigger explanations;
- Receiving funds from high-risk addresses (even if you're just the recipient) may also trigger review.
⚠️ Red line: refuse any request to run money through your account
Participating in mixing, proxying payments for others, or lending your account to receive funds are the behaviors most easily judged as "assisting money laundering" — at best account bans, at worst criminal liability. Any request to "run one transfer through your account" — refuse outright.
4. Compliance Actions Ordinary Traders Encounter
| Scenario | What You'll Face | Suggested Response |
|---|---|---|
| Registration | Identity verification, facial recognition | Use real information; keep documents consistent |
| Large deposits | Source-of-funds selection, statement submission | Answer truthfully; keep receipts |
| Frequent small in/out flows | Risk prompts / manual review | Explain purpose (e.g., daily trading) |
| Withdrawals | Secondary verification, arrival-time limits | Bind common addresses early; complete the verification flow |
| Account anomalies | Withdrawal limits, address freezes, video re-KYC | Contact official support and follow procedure — never trust "unfreezing agents" |
| Unknown inbound funds | Account flagged, source explanations demanded | Keep full chat/transfer records; explain the true source |
⚠️ Key principle: your account serves only you, carrying only money you can vouch for
Your account belongs to you alone and should touch only money whose origin you know. Once funds appear whose source even you cannot explain, platforms and regulators will assume there's a problem first.
💀 Refuse any request to run money through your account
Your account belongs to you alone and should touch only money whose origin you know. Mixing, proxy payments, lending accounts — these are the easiest ways to be judged an AML accomplice: account bans at best, criminal charges at worst; any "run one transfer through your account" request gets refused outright.
5. Suspicious Transaction Checklist (Behaviors That Get Flagged)
Combining laundering stages with platform risk rules, these patterns most often trigger STR/SAR filings:
- Structuring (Smurfing): splitting large amounts into multiple sums just under reporting thresholds, repeatedly;
- Rapid pass-through: funds out within minutes of arriving, leaving no balance;
- Origin inconsistent with profile: ordinary income levels but frequent large flows;
- Multi-account round-tripping: shuttling funds between your own accounts/platforms;
- Frequent currency hopping: fiat → stablecoin → altcoin → fiat with complex paths and no trading purpose;
- Off-hours bursts: concentrated activity outside trading hours to evade surveillance;
- High-risk address exposure: mixers, sanctioned parties, darknet-linked addresses;
- Refusing cooperation: deleting records, switching accounts, hostile attitudes when questioned.
Note: being flagged ≠ being guilty — platforms merely "report suspicion", not conviction. But if you recognize yourself in many of these patterns long-term, audit your own sources and uses of funds — better to earn less than to end up unable to explain yourself.
6. Tax Filing Essentials
Trading compliance isn't just AML — it also covers "how to declare what you earned":
| Region | Common Treatment (changes with law; always check latest) | Key Points |
|---|---|---|
| United States | Crypto taxed as property; sale spreads are capital gains; file Form 8949 | Every sale is a taxable event; trend toward 1099-DA reporting |
| Japan | Gains taxed as miscellaneous income at high progressive rates | Losses deductible against similar income (capped) |
| Germany | Tax-free after holding over 1 year; short-term trades taxed as regular income | Holding period matters greatly |
| EU/UK | Mostly capital gains tax with varying thresholds per country | UK has an annual exemption |
| China | Domestic platforms wound down; offshore income reporting subject to latest policy | Gray zone; never trust "all-taxes-handled" intermediaries |
Universal compliance practices:
- Keep records: export trade history + automated bookkeeping tools (Kline Buty supports pair/watchlist/position records); retain fill time, price, quantity, fees for every trade;
- Compute cost basis: consolidate same-coin positions across platforms; apply cost-flow rules on disposal;
- Declare: report honestly where thresholds are met; retain detailed records for years;
- Don't evade: major platforms already share data with tax authorities (US, EU, etc.) — "not declaring" keeps getting harder in the data age.
7. Violation and Penalty Cases (Illustrative)
The following are common penalty types from public reporting, offered only to understand "what gets punished, how severely":
| Penalty Type | Target | Common Consequences |
|---|---|---|
| Missing AML systems | Exchanges/banks | Tens of millions to hundreds of millions in fines, forced remediation, business restrictions |
| Travel Rule failures | VASPs | Suspension of transfer services, license restrictions |
| Assisting money laundering | Individuals/institutions | Account freezes, asset forfeiture, criminal prosecution |
| Tax non-filing | Individuals | Back taxes + interest + penalties; serious cases criminal |
Lesson for ordinary people: institutions bear most AML fines, but once an individual is found "assisting money laundering" or evading taxes, consequences include frozen accounts, forfeited funds, even criminal liability — more expensive than any single trading loss.
Summary
💡 Summary: hold four bottom lines
AML compliance boils down to "enabling the financial system to answer where money came from, where it went, and whom it belongs to". As an ordinary trader you don't need to master every law — hold four bottom lines: real identity, only your own money, accounts never lent out, transactions always recorded. Treat any offer of "borrowed accounts", "tax handled", or "unfreezing agents" as a risk signal.
In one sentence: compliance isn't the platform's burden — it's your talisman: true identity, clear funds, complete records, and your trading stands in daylight.
Content Conventions
- Amount thresholds mentioned here (Travel Rule, reporting thresholds) vary by country/platform; defer to the latest regulations and platform rules.
- Penalty cases are illustrative only, explaining penalty logic without pointing to any specific institution or individual.
- Tax treatments change extremely fast; consult licensed tax professionals before filing.