AML and KYC rules for crypto
As of February 2026 anti money laundering and know your customer rules require crypto platforms to identify their users, monitor transactions, report suspicious activity, and apply the travel rule to transfers. The Financial Action Task Force sets the global standard, and each country writes it into its own law, so the regulator and the detail differ by jurisdiction.
The identity checks and limits you meet on a regulated exchange are anti money laundering and know your customer rules in action.
Quick answer
Anti money laundering, often shortened to AML, is the set of legal measures that stop crypto being used to launder the proceeds of crime or finance terrorism. Know your customer, shortened to KYC, is the process by which a platform identifies and verifies its users so those measures can work. As of February 2026 a regulated crypto platform must verify customers before serving them, monitor their transactions, report suspicious activity to a national authority, and send sender and recipient information with transfers under the travel rule. The Financial Action Task Force sets the global standard, but each country writes its own version into law, so the regulator, the thresholds, and the detail vary. For users, these rules explain the identity checks and limits that regulated platforms apply.
Where the rules come from
The common source is an international standard. As of February 2026 the Financial Action Task Force, the intergovernmental body that sets global anti money laundering standards, requires countries to bring virtual asset service providers within their anti money laundering regimes, to license or register them, and to supervise them. Its standards are not binding law in themselves; members and monitored jurisdictions translate them into national legislation, and the Financial Action Task Force assesses how well they do so. This is why anti money laundering and know your customer requirements look broadly similar from one regulated platform to the next, even across borders. The shared origin produces convergence, while the national implementation produces the differences in thresholds, paperwork, and the regulator in charge.
What know your customer involves
Know your customer is the front line of the system. As of February 2026 a regulated platform typically asks a new user for identifying information, such as full name, date of birth, and address, and verifies it against documents like a passport or national identity card, often with a check that the person is real. It may apply enhanced checks for higher risk customers or larger activity, and it monitors accounts over time rather than only at sign up. The point of all this is to attach a verified identity to activity, so that monitoring and reporting have something reliable to work with. Without dependable identification, the wider anti money laundering measures, including the travel rule, lose much of their value, which is why identity verification is the foundation.
The travel rule and transaction monitoring
Beyond identifying customers, platforms watch what they do. As of February 2026 the travel rule requires a provider to transmit information about the sender and the recipient alongside a crypto transfer above a set threshold, which the Financial Action Task Force places at the equivalent of around one thousand dollars or euros, so that information travels with the value. Platforms also run transaction monitoring to flag unusual patterns and file suspicious activity reports with a national financial intelligence unit when something looks wrong. The travel rule is an external exchange of data between providers, while know your customer is the internal verification that makes that data meaningful. Together they let supervisors trace value and identify risk, which is the core purpose of the regime.
How the major jurisdictions apply it
The same standard takes different legal forms. As of February 2026 the European Union applies anti money laundering duties through its anti money laundering framework and the travel rule through its transfer of funds rules, alongside authorisation under the Markets in Crypto Assets regulation. The United States applies them through the Bank Secrecy Act and rules administered by the Financial Crimes Enforcement Network, including a recordkeeping rule that serves as its travel rule, with state level supervision as well. The United Kingdom applies them through its money laundering regulations, supervised by the Financial Conduct Authority. The duties rhyme across these regimes, but the thresholds, the reporting bodies, and the precise obligations differ, so a platform tailors its compliance to each market it serves.
| Element | What it does (as of February 2026) |
|---|---|
| Know your customer | Identify and verify users before and during service |
| Transaction monitoring | Watch for unusual patterns and risk indicators |
| Suspicious activity reporting | Report concerns to a national financial intelligence unit |
| Travel rule | Send sender and recipient data with transfers above a threshold |
| Supervision | Oversight by a national regulator that can inspect and sanction |
Regulator and sources
The international standard comes from the Financial Action Task Force, and the national rules from each country's authorities, such as the European supervisors, the Financial Crimes Enforcement Network in the United States, and the Financial Conduct Authority in the United Kingdom. The descriptions draw on the Financial Action Task Force standards and its June 2025 targeted update, and on the official national frameworks, reviewed as of February 2026.
- Financial Action Task Force, Recommendation 15 and the standards on virtual assets (fatf-gafi.org)
- Financial Action Task Force, Targeted Update on Virtual Assets and VASPs, June 2025
- European Union, anti money laundering framework and the transfer of funds rules
- Financial Crimes Enforcement Network, the Bank Secrecy Act and the recordkeeping rule
- Financial Conduct Authority, the Money Laundering Regulations and cryptoasset registration
Check which regulated platforms are available where you live
Regulated platforms apply the identity checks and monitoring described above as part of normal compliance. Availability depends on your country, so use the country pages to confirm which platforms are genuinely available to you before signing up.
Subscribe to The Compliance Ledger
One short email when a rule changes that affects where you live or trade. Information, never advice.
Frequently asked questions
What do AML and KYC mean in crypto?
AML stands for anti money laundering, the set of measures that stop crypto being used to hide the proceeds of crime. KYC stands for know your customer, the process by which a platform identifies and verifies its users. As of February 2026 regulated platforms apply both.
Why does a crypto exchange ask for my identity?
Because know your customer rules require it. As of February 2026 a regulated platform must identify and verify customers before serving them, under national laws built on the Financial Action Task Force standards, which is why it asks for documents at sign up.
What is the travel rule?
The travel rule requires a platform to send sender and recipient information with a crypto transfer above a set threshold. As of February 2026 the Financial Action Task Force sets the standard at the equivalent of around one thousand dollars or euros, applied through national law.
Do AML and KYC rules apply everywhere the same way?
No. The Financial Action Task Force sets the global standard, but each country writes its own rules. As of February 2026 the European Union, the United States, and the United Kingdom each apply AML and KYC and the travel rule through their own legislation and thresholds.
Can I avoid KYC by using an unregulated platform?
Using an unregulated platform to avoid identity checks carries real legal and safety risks and may breach local law. As of February 2026 this page does not advise evading rules. Use a platform that is permitted in your country and confirm the position with the regulator.
Is this legal advice?
No. This is general information, not legal, tax, or financial advice. AML and KYC rules differ by country and change often, so confirm the current position with the relevant regulator and a qualified professional before acting.