How Crypto Companies Can Prepare for Bank Account Opening: AML, KYB, UBO, and Source of Funds Requirements

A bank account application for a crypto company succeeds or fails based on how clearly the company can explain and document its risk profile. That is the real dynamic behind bank onboarding for crypto businesses—not whether banks “like crypto,” but whether the bank’s compliance team can understand and accept the specific risk the company presents.

Banks assess more than the fact of registration. Before approving an account, a bank wants to understand who owns and controls the business, what crypto activity it conducts, where its funds originate, who its customers and counterparties are, and whether the company has functioning AML/KYC/KYB controls and transaction monitoring in place. Most importantly, it wants evidence that these controls are real—not just a policy document filed away somewhere.

This article covers what crypto companies should prepare before applying for a corporate bank account or payment account: the compliance package, the documents, the business model explanation, the flow of funds, and the wallet screening and transaction monitoring evidence that banks increasingly expect to see. The goal is not to identify crypto-friendly banks, but to explain what makes a banking application credible—and what typically makes it fail.

What Bank Account Opening Means for a Crypto Company

The term “crypto bank account” covers several different things, and the requirements depend on which type of account the company actually needs. Most crypto companies are not looking for an account that holds digital assets—they need a fiat account to support their operations, and the type of account determines the level of scrutiny it attracts.

Corporate Bank Account vs Payment Account vs Exchange Account

A corporate bank account is a standard business account at a traditional bank or neo-bank, used for operating expenses, payroll, vendor payments, and fiat-denominated business activity. For a crypto company, this is often the hardest account to open, because banks apply their full KYB and AML review to any company with crypto in its business model.

An EMI or payment account is an account held with an Electronic Money Institution or payment service provider, used for payment infrastructure, fiat settlement corridors, or processing client payments. Some EMIs are more comfortable with crypto-related clients than traditional banks, but the compliance requirements are comparable—a payment provider conducting due diligence on a crypto business client will ask the same questions.

An exchange or institutional account is an account at a crypto exchange or liquidity provider, used for trading, settlement, or accessing digital asset markets. This is a separate category—it is not a banking relationship, and the compliance expectations (covered in detail for Binance and OKX separately) differ from those of a bank or EMI.

A client funds account is a segregated account used to hold funds that belong to the company’s own customers. This type of account attracts the most intensive scrutiny because it implies a fiduciary relationship with end clients, which raises immediate questions about licensing, customer protection, and AML controls over client money.

Understanding which type of account the company is applying for matters because the bank’s risk questions will be different for each. A company applying for a client funds account but describing itself as a simple trading business will create inconsistencies that trigger further review immediately.

Why Banks Treat Crypto Companies as Higher-Risk Clients

Banks do not categorically refuse crypto businesses. What they refuse is unclear or poorly documented risk. The distinction matters because it points directly to what a company needs to fix.

A bank classifies a crypto company as higher-risk not because of the word “crypto” in its name, but because the business model typically involves factors that are genuinely harder to assess: pseudonymous or anonymous transaction flows, cross-border payments to multiple jurisdictions, potential exposure to wallets or counterparties connected to scams, hacks, sanctioned entities, mixers, darknet markets or stolen funds, and a client base that may include higher-risk individuals or entities.

Alongside these inherent features, banks also evaluate what the company has done to manage these risks. The result is that a crypto company with strong, well-documented AML controls, a clear ownership structure, and a coherent source of funds explanation can pass the same review that rejects a company with opaque UBO disclosure and a generic one-page AML policy.

In practical terms, banks are looking for evidence that the company has addressed each of the following risk factors:

A bank does not want to see only an AML policy PDF. It wants to understand how the company actually prevents financial crime—and be able to verify that through the documents, explanations, and evidence submitted during onboarding.

The Core Documents Banks Usually Expect From a Crypto Company

The documents a bank requests during onboarding are not arbitrary. Each one answers a specific risk question the bank needs to resolve before it can approve the account. The table below maps the main document categories to the question each one is designed to answer.

1. Company registration and articles of association answer the most basic question: Does this company legally exist, and is it active and in good standing?
2. A shareholder register and ownership chart tell the bank who owns the company and whether the ownership structure is transparent enough to follow.
3. UBO information and identity documents go one level deeper: Who ultimately controls the business? Are there politically exposed persons, sanctioned individuals, or undisclosed controllers behind the legal structure?
4. Director IDs and proof of address confirm who manages the company day to day and whether those individuals can be verified and are not flagged in sanctions or adverse media checks.
5. A license or registration certificate answers whether the company is authorized to conduct the regulated activity it describes. Applying without the required authorization is usually an immediate disqualifier.
6. An AML/CFT policy shows that the company has a documented framework for preventing financial crime—though as explained below, a generic policy is rarely sufficient on its own.
7. KYC/KYB procedures explain how the company verifies its individual customers and its business clients. The bank wants to understand the process, not just know that it exists.
8. A sanctions screening process confirms that customers, wallets, and counterparties are checked against relevant lists—and describes when, how often, and what happens when a match is found.
9. Transaction monitoring rules and workflow describe how the company detects unusual or suspicious activity and what the escalation path looks like when something is flagged.
10. Wallet screening and KYT reports address a specific risk that is unique to crypto: whether the company checks on-chain exposure before accepting deposits or processing withdrawals. This is increasingly a standard expectation rather than an optional extra.
11. A risk assessment shows that the company has identified and documented its own risk exposures based on its business model, client base, and jurisdictions of operation—rather than relying on a generic description of industry-wide risks.
12. A Travel Rule process, where applicable, explains how the company handles originator and beneficiary information for transfers. For VASPs and CASPs, the absence of any Travel Rule procedure is a notable gap.
13. Source of funds documentation answers where the money coming into the account comes from and whether it is consistent with the declared business model.
14. Source of wealth documentation goes further: where did the underlying capital come from? Is the business financially legitimate at its foundation?
15. A flow of funds explanation or diagram ties everything together by showing how money actually moves through the business—in, through, and out—and who is on each end of each leg.
16. Expected transaction volumes and counterparties define what normal looks like for this specific account, giving the bank a baseline against which future activity can be assessed.

Corporate and Ownership Documents

Company registration documents, articles of association, a shareholder register, and a current registry extract establish that the company is real, active, and legally constituted. An ownership chart maps who owns what at each level of the corporate structure. Director and UBO identity documents confirm that the people behind the company can be verified and are not flagged in sanctions or adverse media checks.

For multi-layered corporate structures—holding companies, offshore entities, nominee arrangements—the bank needs to be able to follow the ownership chain all the way to natural persons. A structure that is difficult to follow in documents will be difficult to approve in the review.

Compliance Documents

The compliance package is the core of the banking application for a crypto company. It is not one document—it is a set of procedures and evidence that together show how the company manages financial crime risk in practice. At minimum, this includes an AML/CFT policy tailored to the business model, KYC and KYB procedures, a sanctions screening process, a transaction monitoring workflow, a suspicious activity escalation path, and a risk assessment. For VASP/CASP businesses, a Travel Rule procedure should also be included if the company conducts transfers above applicable thresholds.

Each document needs to be specific to the company’s operations. Generic templates that could apply to any business are a red flag to an experienced banking compliance reviewer—they signal that the controls may not be genuinely implemented.

Financial and Source of Funds Documents

Bank statements, investor funding agreements, revenue records, and treasury documentation establish where the company’s money comes from. Source of funds evidence should explain not only the current account balance but the ongoing flow: where income is generated, how it reaches the account, and why the declared volumes match the business model. For companies holding or routing client funds, an explanation of how client money is handled and segregated is also typically required.

AML, KYB, UBO, and Source of Funds: What Banks Actually Want to Understand

AML: How the Company Controls Financial Crime Risk

For a bank, AML is not a declaration—it is a set of evidence questions. The bank wants to know whether the company has conducted a risk assessment specific to its business model, whether customer due diligence is applied consistently, whether sanctions screening happens before or at onboarding and on an ongoing basis, whether transaction monitoring is active and alert-based, and whether there is a clear escalation path when suspicious activity is identified. A compliance officer or designated responsible person with a plausible background for the role is also part of what the bank looks for—an AML function with no named owner signals a compliance program that exists on paper only.

Recordkeeping is another element banks evaluate: how long are compliance records retained, who can access them, and could the company provide an audit trail if requested?

KYB: How the Company Checks Business Customers and Partners

KYB (Know Your Business) is particularly important for crypto companies with B2B products: payment processors, OTC desks, exchange integrations, wallet providers, or infrastructure partners. The bank wants to understand how the company verifies the business clients and counterparties it works with—their legal entity status, registration, ownership structure, business activity, jurisdiction of operation, sanctions exposure, and risk profile.

A crypto company that accepts business clients without a defined KYB process is effectively passing unverified counterparty risk through to the bank. That creates a problem the bank has to assess, and often it will not.

UBO: Who Ultimately Owns or Controls the Company

UBO (Ultimate Beneficial Owner) disclosure is a non-negotiable part of bank onboarding. The bank is legally required to identify the natural persons who ultimately own or control the entity, regardless of how many holding layers or corporate structures sit above them. If the ownership chart shows a clean structure with clearly identified individuals, their identity documents, and proof of address, this part of the review moves quickly. If the structure is complex, involves nominee arrangements, or leaves beneficial ownership ambiguous, the bank will keep asking until it is resolved.

Source of Funds and Source of Wealth: Where the Money Comes From

Source of funds is the immediate question: where does the money coming into the account originate? For a crypto company, this might be business revenue from transaction fees, investor capital, proceeds from a token sale, OTC settlement flows, or client deposit activity. The explanation needs to be specific and consistent with the declared business model.

Source of wealth is the deeper question: how was the underlying capital accumulated? This typically comes into focus for founders and major UBOs of high-value accounts. A founder who built a previous business and sold it, or raised a seed round, has a documentable source of wealth. A company funded by unexplained capital movements raises concerns that the bank cannot easily resolve.

Both elements need to be consistent with every other part of the application. A mismatch between the declared source of funds and the company’s business description is one of the fastest routes to an escalated or rejected application.

How to Explain Your Crypto Business Model to a Bank

“We are a crypto company” is not a business model description. Banks need specificity, because the risk profile of a crypto exchange is completely different from that of a blockchain analytics firm, a crypto payroll provider, or a DeFi infrastructure company. The vagueness that seems harmless to the company reads as evasiveness to the bank.

In practical terms, the business model explanation should answer: what service or product does the company provide, who are its customers, how does it generate revenue, which jurisdictions does it operate in, what role does crypto play in the commercial activity, and what does a typical transaction look like. Different business models generate different bank questions:

The bank evaluates the specific risk profile of the company, not crypto as a category. A company that can describe its product in clear, banking-oriented language—including how it manages the risks that product creates—presents a fundamentally different application than one that relies on generic descriptions.

Flow of Funds: The Part Many Crypto Companies Explain Poorly

A flow of funds explanation is one of the most practically useful documents a crypto company can prepare for bank onboarding—and one of the most commonly missing. The bank needs to understand not just where money comes from, but how it moves through the entire business: who sends it, through which channels, in what form, to which destinations, and what screening or controls apply at each step.

For crypto businesses, this is more complex than for a typical commercial company because the flow involves both fiat and on-chain activity, multiple intermediaries (exchanges, VASPs, payment processors), wallet addresses, and potentially client funds flowing alongside company funds. A flow of funds diagram can tie all of this together in a way that a written description cannot match.

What to Include in a Flow of Funds Explanation

Transaction Monitoring and Wallet Screening Before Bank Onboarding

A bank can verify that a crypto company has a well-structured ownership chart and a readable AML policy. What is harder to fake—and therefore more credible—is evidence that the company actually monitors what moves through its system. Transaction monitoring and wallet screening are the operational layer of AML compliance, and they are increasingly what banks look for when assessing whether a crypto company’s compliance program is genuine.

The specific risk that wallet screening addresses is on-chain exposure: whether funds coming into or going out of the company have connections to sanctioned entities, stolen funds, scam activity, darknet markets, hacking incidents, or mixers. Without wallet screening, a company cannot demonstrate that it has checked for this risk—and a bank accepting deposits from that company inherits it.

What Banks May Expect to See

Travel Rule, Sanctions, and Counterparty Risk

For crypto companies that are VASPs or CASPs, or that conduct transfers on behalf of clients, the bank will likely ask how the company handles transfer-related obligations and counterparty risk. This is where Travel Rule compliance becomes relevant to the banking conversation.

The Travel Rule requires that originator and beneficiary information accompany virtual asset transfers above applicable thresholds. As of the FATF’s June 2025 sixth targeted update, 99 jurisdictions have adopted or are drafting legislation to enforce the Travel Rule, though implementation levels vary significantly. For a bank reviewing a VASP or CASP client, the relevant questions are: does the company collect originator and beneficiary information for transfers, how is this information transmitted to counterparty VASPs, how are counterparty VASPs assessed before a transfer is executed, and how are high-risk jurisdictions handled?

Sanctions screening is a parallel obligation that the bank will assess separately. The bank wants to know which sanctions lists the company screens against, how frequently, and what happens when a match is found. For a company that also screens wallets against on-chain data, this layer of evidence reinforces the overall picture of a functioning compliance program.

How to Prepare Before Applying for a Bank Account

Most banking rejections for crypto companies happen because the company applied before it was ready. The compliance package was incomplete, the business model explanation was vague, the UBO structure was unclear, or the source of funds documentation did not match what the company said it did. Preparing thoroughly before submitting saves time, protects the company’s reputation with the institution, and avoids the compounding effect of a rejection on future applications.

What Not to Do Before Applying

Do not send vague business descriptions that leave the bank to guess what the company does. Do not hide or downplay the crypto nature of the activity—banks find out, and discovering it mid-review creates a much worse impression than disclosing it upfront. Do not rely on a generic AML policy template that does not reflect how the company actually operates. Do not apply before the UBO structure is clear and documented. Do not assume that having a license replaces the need for transaction monitoring—a license confirms authorization; monitoring confirms operations. And do not claim non-custodial status if the product in practice involves control over user funds or flows.

Bank Account Rejection: What It Usually Means

A rejection does not necessarily mean the business model is unworkable or that no bank will ever approve the account. In many cases, it means the bank could not adequately assess the risk the company presents—and defaulted to no rather than requesting the volume of follow-up documentation it would need to say yes.

The most common reasons banking applications are rejected or stalled for crypto companies follow a recognizable pattern. Insufficient documentation—missing documents, expired certificates, incomplete UBO information—leaves gaps the bank cannot resolve. Unclear beneficial ownership raises concerns the bank is legally required to address before proceeding. Weak AML and KYC procedures, especially generic ones not tailored to the company’s specific operations, signal that compliance may not be genuinely embedded. No transaction monitoring or wallet screening means the bank cannot assess how the company manages on-chain risk. No source of funds evidence makes the origin of the company’s capital opaque. An unsupported jurisdiction or unclear licensing status creates regulatory uncertainty the bank may not be willing to accept. High-risk counterparties or a mismatch between the declared business model and the actual transaction flows raises consistency questions that often cannot be resolved without starting the documentation process over.

The practical implication is that before submitting to another bank, the right step is to identify which of these gaps exist in the current compliance package and close them—not simply to search for a more permissive institution.

How AMLBot Can Help Crypto Companies Prepare for Bank Onboarding

AMLBot can help crypto companies prepare the AML, KYB, transaction monitoring, and compliance documentation banks often expect during onboarding. This does not mean AMLBot opens bank accounts or guarantees approval—the bank’s decision depends on its own risk assessment of the company. What it means is that the compliance layer the bank reviews can be built to a standard that gives the application the best chance of being understood and accepted on its merits.

The practical areas where AMLBot supports bank onboarding preparation include drafting AML/KYC and KYB procedures tailored to the company’s specific business model, building a transaction monitoring workflow with defined alert logic and escalation paths, setting up wallet screening and KYT controls with audit-ready reporting, conducting sanctions exposure checks, supporting source of funds documentation, preparing the risk assessment, and structuring the compliance package for presentation to a bank or payment provider.

Conclusion

Opening a bank account for a crypto company is a compliance readiness exercise. The strongest applications are not the ones with the most documents, but the ones where all the documents—business model, ownership structure, source of funds, AML procedures, transaction monitoring, and wallet screening—tell one consistent story.

If a company can show the bank who owns the business, where funds come from, how customers and counterparties are checked, and how on-chain risk is monitored, its application looks fundamentally different from one that cannot answer these questions clearly. The goal is not to accumulate paperwork—it is to build a compliance program that is genuinely operational, and then document it in a way a bank can follow.

If your crypto company is preparing for bank onboarding, AMLBot can help review or build the AML/KYB/KYT documentation and monitoring workflows needed to support the application.

FAQ