AMLBot Academy

A collection of 114 posts

AMLBot Academy

USDT/USDC Blacklist vs AML Risk Score: Who Can Actually Freeze Crypto?

On 23 April 2026, $344 million in USDT stopped moving. Tether blacklisted two addresses on Tron after several U.S. authorities passed it information about activity tied to unlawful conduct, in coordination with OFAC and other law enforcement agencies. The company said this kind of action has become a routine

AMLBot Academy

Global Crypto Travel Rule 2026: Which Jurisdictions Have Implemented It?

Ninety-one out of 109. That is how many surveyed jurisdictions had passed legislation implementing the Crypto Travel Rule when FATF published its Seventh Targeted Update on 16 July 2026 — 83%, up from 73% a year earlier, with another 11 jurisdictions reporting that implementation is under way. Read on its

AMLBot Academy

Australia Crypto AML Regulations 2026: What Changed for VASPs and the Travel Rule

On 8 May 2026, AUSTRAC put numbers on how closely it intended to watch Australia's crypto sector: 36 over-the-counter crypto-to-cash businesses under a supervisory campaign it branded ramps and rails, and 27 local exchanges under a second campaign focused on reform readiness and governance.

AMLBot Academy

Third-Party Crypto Payments: How to Review Funds From Someone Other Than the Customer

A customer passes KYC. Account approved. Risk level assigned. Two weeks later, 40,000 USDC arrives in their account — from a wallet that does not belong to them. The compliance team now has a verified customer and an unverified payment. The identity check answered who opened the account. It did

AMLBot Academy

When an AML Check Is Not Enough: From Wallet Risk Score to Crypto Tracing

The AML check returned High Risk. Stolen Funds exposure. The number is there. The category is there. And the next question is not about the score. It is: which transfer created this exposure? Is it connected to the deposit being reviewed — or to something that happened in this wallet'

AMLBot Academy

KYT Provider Migration: How to Switch Without Losing Your AML History

Nobody migrates a KYT provider because the old one works perfectly. The decision usually follows months of frustration — coverage gaps on chains the business now supports, slow API responses during peak volume, risk categories that do not match how the compliance team actually thinks about risk, alert logic that cannot

AMLBot Academy

The Crypto Paper Trail for AML: What to Save Before an Exchange or Bank Asks

Imagine: 3 years ago you bought ETH on an exchange using a bank transfer. You withdrew it to a hardware wallet. Later you swapped half for USDC on a DEX, bridged it to another chain, received freelance payments in the same wallet, sold some through a P2P trade, and now

AMLBot Academy

Wallet Drainer, Private-Key Theft, or Scam Transfer? What On-Chain Evidence Can Reveal

Intro "My wallet was hacked." Every crypto investigation team hears this sentence multiple times a week. And in almost every case, it describes the outcome — not the diagnosis. The balance was there. The assets moved. The recipient is unknown. The transaction cannot be reversed. From the victim'

AMLBot Academy

Unknown Crypto Appeared in My Wallet: Dusting, Scam Tokens, and AML Risk

You open your wallet and something is there that was not there before. Maybe it is a token you never bought. Maybe a fraction of a dollar in a cryptocurrency you do not recognize. Maybe an NFT from a project you have never heard of. Maybe a small USDT transfer

AMLBot Academy

Why the Same Crypto Wallet Gets Different AML Results Across Platforms

A user checks one Ethereum address using two different blockchain analytics tools. Platform A shows Low Risk. Platform B shows Medium Risk with mixer exposure flagged. The user then sends funds from that same wallet to an exchange — and the exchange places the deposit under manual review. The blockchain is

AMLBot Academy

How to Test Crypto AML Rules Before They Affect Real Customers

The compliance team lowers a mixer-exposure threshold from 5% to 2%. The change goes live on Monday morning. By Wednesday, alert volume has doubled. Legitimate exchange deposits — where a centralized service wallet has tiny residual indirect exposure from thousands of unrelated users — are now entering manual review. Analysts spend

AMLBot Academy

ERC-4337 Account Abstraction and AML: How Smart Wallets Change Transaction Screening

A compliance system receives an Ethereum TXID. The top-level from address belongs to a Bundler — an infrastructure operator that submits transactions to the network. The top-level to address is EntryPoint — a shared contract that coordinates smart-wallet execution. Gas is paid through a Paymaster — a separate entity sponsoring

AMLBot Academy

Proof of Reserves Is Not Proof of Clean Funds: What AML Checks Are Still Needed

An exchange publishes its reserve wallet addresses. The balances match the reported snapshot. An auditor or verification provider confirms control of the selected wallets. Customers can verify their inclusion in the liabilities structure through a Merkle Proof. The company announces that its reserves are transparent and fully backed. But none

AMLBot Academy

Self-Hosted Wallet Ownership Verification: What Crypto Businesses Can and Cannot Prove

A verified customer adds an external withdrawal address to their account. The platform asks the customer to sign a challenge message with the corresponding private key. The signature is valid. The address is whitelisted as "customer-owned." Months later, an investigation reveals that the wallet is a company

AMLBot Academy

Blockchain Evidence in Court: How to Preserve On-Chain Data and Maintain Chain of Custody

An investigator finds the transaction that moved stolen funds from a victim's wallet. They save a screenshot from a block explorer, copy the transaction hash into a report, build a fund-flow graph, and send the file to the client. Months later, the case reaches a lawyer or

AMLBot Academy

Smart Contract AML Screening: How to Assess DEXs, Bridges, and DeFi Protocols

A crypto business plans to add DEX routing to its product. The protocol is well known — it has a website, multiple security audits, substantial TVL, and a recognizable brand. The compliance team screens the protocol's main contract address and finds no sanctions match. The integration proceeds. Six months

AMLBot Academy

Crypto Money Mules and Account Renting: How Verified Accounts Move Illicit Funds

In June 2026, a coordinated investigation supported by Eurojust and Europol shut down a crypto laundering service suspected of processing more than EUR 336 million in criminal proceeds between 2022 and 2025. Ransomware operators sent stolen assets to wallets controlled by the group and received "cleaned" funds back

AMLBot Academy

Synthetic Identity Fraud in Crypto KYC: How AI Helps Fraudsters Bypass Verification

On November 13, 2024, FinCEN issued alert FIN-2024-Alert004 after a sustained rise in suspicious activity reports describing deepfake media used against financial institutions. The filings, which FinCEN says began increasing in 2023 and continued through 2024, described criminals altering or creating fraudulent identity documents specifically to get past

AMLBot Academy

AML Compliance for RWA Tokenization: KYC, Wallet Screening, and Secondary-Market Transfers

"Securities, however represented, remain securities... economic reality trumps labels." That line from SEC Chair Paul Atkins, delivered in a November 2025 speech, became the backbone of the joint staff Statement on Tokenized Securities issued on January 28, 2026 — the most detailed regulatory signal to date that putting an

AMLBot Academy

AI Agent Stablecoin Payments: Who Is Responsible for AML Compliance?

A software agent finds a paid API. It evaluates the price, determines that the data is needed to complete its task, selects a provider, and initiates a stablecoin payment. The USDT leaves the wallet. The provider confirms receipt and returns the data. The agent continues with its work. The blockchain

AMLBot Academy

Web3 Gaming AML Compliance: Player KYC, Wallet Screening, and In-Game Asset Monitoring

In a traditional game, value stays inside. A player earns a sword, a skin, or in-game currency — and it remains on the platform, usable only within the game, non-transferable, and ultimately controlled by the developer. In a Web3 game, the same sword may be an NFT on Ethereum,

AMLBot Academy

Crypto Donations and Fundraising: How to Screen Incoming Funds for AML Risk

An organization publishes a wallet address for donations. Transfers begin arriving from different senders — some who identify themselves, some who do not. A blockchain confirmation shows that each transfer was recorded on-chain. It does not show who controls the sending wallet, where the funds originated, which services they passed

AMLBot Academy

PDF AML Report: When You Need It and What It Can Prove

You checked a wallet address or transaction. The screen showed a risk score, exposure categories, and a sanctions status. The result looked fine — or it raised questions. Either way, the moment passed. Now, weeks later, an exchange asks where a deposit came from. A counterparty wants proof that their address

AMLBot Academy

AML Software Stack for Growing VASPs: What Compliance Teams Need as Volume Grows

A three-person compliance team reviewing 200+ transactions per day can operate with spreadsheets, manual wallet checks, and email-based escalation. The same team reviewing 5,000+ transactions per day cannot — not because the people are less capable, but because the process was never designed to scale. Alerts pile up.

AMLBot Academy

USDT TRC-20 AML Check: Why Tron Stablecoin Payments Need Extra Screening

In 2024, the TRON blockchain accounted for 58% of all illicit cryptocurrency transaction volume — more than Ethereum, Bitcoin, and all other chains combined. Of that volume, 49% was linked to sanctioned entities and 32% involved blocklisted funds. Separately, on-chain analytics research found that Tron-based USDT dominated high-risk