AML (Anti-Money Laundering)

Every time you deposit funds on a CeFi lending platform, that platform is legally required to know who you are and where your money came from. That's AML in one sentence: a set of laws that force financial institutions — including crypto lenders — to detect and report activity that looks like someone cleaning dirty money.

If you've ever wondered why Nexo or Ledn asks for a passport scan before you can borrow, AML compliance is the answer. Regulators treat crypto lending platforms the same way they treat banks: facilitate a transaction for a sanctioned entity or a money launderer, and the platform faces massive fines or loses its operating license.

How It Works

AML compliance runs on three pillars: Know Your Customer (KYC) verification, transaction monitoring, and Suspicious Activity Reports (SARs). KYC is the front door — you prove your identity before you get access. Transaction monitoring is the ongoing surveillance — algorithms flag unusual patterns, like a dormant account that suddenly moves $500,000 in USDC overnight.

When a transaction trips a flag, the compliance team reviews it. If they can't explain it, they file a SAR with the relevant financial regulator — FinCEN in the U.S., for example. The customer usually doesn't know a SAR was filed. That's by design; tipping off a suspect is itself a federal crime.

Blockchain analytics firms like Chainalysis and Elliptic give CeFi platforms a tool traditional banks don't have: the ability to trace the entire on-chain history of a wallet before accepting a deposit. A wallet that received funds from a known darknet market will trigger a rejection before the money ever lands on the platform.

Why It Matters

AML compliance is the reason CeFi crypto lending platforms can operate legally in regulated markets. Without it, they can't maintain banking relationships, can't hold licenses, and can't process fiat withdrawals. Platforms that cut corners on AML don't survive long — they get shut down or exit regulated markets entirely.

What to Watch

The practical risk for borrowers and depositors isn't that AML exists — it's what happens when your funds get flagged. Platforms can freeze accounts during an investigation with little explanation given. If your crypto passed through a mixer, a flagged exchange, or even a wallet that was later linked to illicit activity, you may find your withdrawal blocked while compliance reviews the transaction. It can take days or weeks to resolve.

DeFi protocols don't run AML checks — there's no compliance team, no KYC, and no SAR filing. That doesn't mean DeFi is a legal free-for-all; regulators are actively debating whether DeFi front-ends and developers carry AML obligations. The legal picture is still forming, and platforms caught on the wrong side of that line face serious consequences.