Anti-Money Laundering

The regime is a set of duties on the business, not on you: monitor transactions, keep records, report suspicion to the authorities, and never tell the customer that a report was filed. Binance paid more than 4.3 billion dollars in November 2023 for failing at exactly this. Penalties of that size are why an exchange now asks questions that feel disproportionate to a 200 dollar purchase.

How it works

An anti-money-laundering programme is five moving parts, and a regulator will test each of them separately.

The first is a written risk assessment: which customers, products, countries and channels expose the firm, and what it does about each. The second is customer due diligence, the verification most people experience at signup, plus enhanced checks for higher-risk cases. The third is transaction monitoring, a rules engine that flags patterns rather than individual payments. The fourth is reporting: when a flag survives human review, the firm files a suspicious activity report with a national financial intelligence unit, and in almost every jurisdiction it is a criminal offence to tell the customer, which is why support staff genuinely cannot explain what happened. The fifth is governance, meaning a named compliance officer, staff training, independent audit and record retention.

The foundations are older than bitcoin. The US Bank Secrecy Act dates from 1970, and the global standard-setter has been extending the same architecture to crypto since it amended its virtual asset recommendation in October 2018. National law does the rest, which is why the details differ across the 231 countries covered here while the shape is identical everywhere.

Monitoring is mostly automated and mostly pattern based. Rapid buy and immediate withdrawal, deposits from a payment account in someone else's name, transaction sizes that sit just under a reporting threshold, and inbound coins that blockchain analytics associates with a darknet market or a sanctioned entity all generate alerts. Most alerts are noise. The firm still has to look at each one.

Why this matters when you buy bitcoin

The place anti-money-laundering rules touch an ordinary buyer is the frozen account, and it usually arrives without explanation.

A hold typically follows one of four triggers: a deposit from a bank account that is not yours, coins arriving from a peer-to-peer trade or a mixing service, activity that jumps far beyond the volume you declared at signup, or a name match on a sanctions screen. The account is restricted first and reviewed afterwards, because the legal exposure runs the other way.

What actually works is documentation. Bank statements showing where the money came from, a payslip or invoice for the income, screenshots of the trade that produced an inbound transfer. What does not work is arguing about principle in a support chat, or opening a second account, which reads as evasion and gets both closed.

The site's own records show how much this shapes the market. Paxful Holdings pleaded guilty on December 9, 2025 to operating an unlicensed money transmitting business and to anti-money-laundering failures, paying a 4 million dollar penalty. Changelly applies risk-based checks that can hold a swap mid-flight from a customer who never opened an account. Luno is winding down its European business while remaining fully active in Kenya, Nigeria, South Africa, Indonesia and Malaysia. Compliance cost is now a major reason exchanges enter and leave countries, which changes which platforms you can even use.

There is a fair reading of all this. The same obligations that produce a frozen withdrawal are what let an exchange hold a banking relationship, accept a bank transfer, and still exist in five years. Choosing a licensed venue means accepting the friction as part of the product.

What a compliance freeze looks like from the inside

Consider a common sequence: you buy bitcoin peer to peer, later deposit those coins at a licensed exchange to sell, and the deposit lands in an account with a modest declared income.

The analytics engine scores the incoming coins and finds they passed through an address cluster the vendor labels as high risk two hops earlier. Your account is restricted the same day. Support sends a templated message asking for source of funds. You supply the trade record and a bank statement, and after two to four weeks the restriction is lifted or the account is closed and the balance returned. Nobody will tell you which flag fired, and if a report was filed you will never learn of it.

Two details in the OKX case explain why firms behave this way. Its operator pleaded guilty in February 2025 and paid roughly 505 million dollars after facilitating more than 5 billion dollars in suspicious transactions, and prosecutors described employees coaching US customers to enter false countries to get around verification. Once a regulator has seen that, every platform tightens, and the tightening lands on ordinary customers.

Anti-Money Laundering vs chain analysis

Anti-Money Laundering is a legal regime; chain analysis is a commercial technology that firms buy to comply with it. The law says monitor your transactions and understand your exposure. It does not say which vendor to use, what a risk score means, or how many hops from a flagged address should matter, and those judgements are made by private companies whose methods are not published and not appealable. When your withdrawal is held because coins were "associated with" something, a heuristic produced that association, and the legal obligation only required the firm to look. Understanding the split matters: the rules come from a parliament, and the label on your coins came from a software subscription.