What is AML (anti-money laundering)?

Laws and procedures requiring financial businesses, including crypto exchanges, to detect and report suspicious transactions.

AML rules are why exchanges require kyc and may freeze or question large or unusual deposits.

The obligation sits on the exchange, not on you, which explains behavior that otherwise looks arbitrary. A venue that asks where your funds came from is not accusing you of anything; it is producing the record its regulator expects to see, and in most regimes it is not allowed to tell you when it has filed a report about your account.

How it works

The international baseline comes from the Financial Action Task Force, whose Recommendation 15 extends its standards to virtual asset service providers and whose Recommendation 16, the travel rule, requires originator and beneficiary information to accompany transfers above a threshold set by each country.

Countries implement this in their own law. In the United States, exchanges register with the Financial Crimes Enforcement Network as money services businesses under the Bank Secrecy Act. In the European Union, obligations run through the anti-money-laundering directives and, for crypto specifically, Regulation (EU) 2023/1113 on transfers of funds and crypto-assets.

Operationally that becomes four things: identify the customer, monitor transactions against risk rules, screen names and addresses against sanctions lists, and report what looks suspicious. Screening covers both people and on-chain addresses, the second using chain analysis vendors.

Where a transaction trips a rule, the exchange asks for source-of-funds evidence, holds the withdrawal, or files a suspicious activity report. Most jurisdictions prohibit telling the customer a report was filed, which is why support responses go vague at that point.

Example

Illustrative: you deposit $30,000 by bank transfer after two years of $500 monthly buys. The pattern breaks your account's own history, so it flags. The exchange asks for a payslip, a property completion statement, or a bank statement showing the source, holds the balance while it reviews, and releases it once satisfied. Nothing was wrong; a rule triggered and a human cleared it. Review times vary widely by venue.

Why it matters when you buy

AML compliance determines how long verification takes, what documents you need before your first deposit, and how a large or unusual transfer will be treated. It is also the main reason a venue geoblocks a country. Check the requirements for your location at the jurisdiction pages and see the guide to KYC for what to expect.

Related terms

• kyc — identity checks that implement AML rules
• travel rule — sending sender and recipient data with transfers
• fatf — the body that sets the international standard
• vasp — the regulated entity category exchanges fall into
• suspicious activity report — the filing you are not told about
• ofac screening — sanctions checks on names and addresses

Questions

Why does an exchange ask where my money came from?

Because its regulator requires it to understand the source of funds when activity does not match the account's profile. Providing a document usually resolves it quickly.

Can an exchange freeze my account without explaining?

In many jurisdictions it can and must. Tipping-off rules prohibit disclosing that a suspicious activity report was made, so support is limited in what it can say.

Does using a non-custodial wallet avoid AML rules?

Holding your own keys is not itself regulated in most places, but the moment you move funds to or from a regulated venue the rules apply at that boundary, including travel-rule information about the counterparty.