Why AML/KYC Exists: Money Laundering, Terrorism Financing, and Regulatory Response
The concept
Every country with a developed financial system requires banks, money transmitters, and (increasingly) crypto businesses to run Anti-Money Laundering (AML) and Know Your Customer (KYC) programs. These rules did not appear out of nowhere — they exist because dirty money needs clean-looking rails to move through, and regulators have spent fifty years building a system designed to make that movement visible.
Money laundering typically follows three stages:
- Placement — the dirty money first enters the financial system. A drug trafficker deposits cash at a bank, or a scammer converts stolen funds into crypto.
- Layering — the money is moved through a series of transactions designed to obscure its origin. Multiple wallets, mixers, cross-chain bridges, and shell companies are classic layering tools.
- Integration — the now "clean-looking" money re-enters the legitimate economy: real estate, luxury goods, a legitimate business, or a cashed-out exchange balance.
Terrorism financing works in reverse in one important way: the money can be entirely legitimate (a charitable donation, a salary) and still fund illegal activity, which is why the regulatory response — the Bank Secrecy Act (BSA) in the US, the EU's AML Directives, and the global FATF Recommendations — asks institutions to look not just at where money came from but at the pattern and purpose of a customer's activity.
Crypto became a regulatory focus for three structural reasons that have nothing to do with the technology being "for criminals": pseudonymity (wallet addresses don't carry a name), speed and finality (a transaction can't be reversed once confirmed), and borderlessness (a transfer from Singapore to Argentina is as fast as one across the street). None of these properties are illegal — they are also why millions of legitimate users hold crypto — but they are exactly the properties a money launderer wants, which is why regulators built a parallel compliance regime for the industry rather than assuming traditional banking rules would transfer over unchanged.
Worked example
Consider a simplified real-world pattern regulators have flagged repeatedly: a ransomware operator receives a payment of 5 BTC directly to a wallet. That is placement — criminal proceeds entering the crypto ecosystem for the first time.
Next, the operator sends the 5 BTC through a mixing service that pools it with coins from hundreds of other depositors and returns "clean" coins to a new address, often in smaller, randomized amounts over several days. That is layering — breaking the on-chain link between the original criminal transaction and the coins that emerge.
Finally, the operator deposits the mixed coins across a dozen small accounts at several exchanges, just under the dollar thresholds that would normally trigger extra scrutiny, and converts them to fiat, which is wired to a bank account tied to a shell consulting company. That is integration — the money now looks like ordinary business revenue.
A well-designed compliance program has a control point at each stage. At placement, blockchain analytics and exchange onboarding can flag a wallet address already known to be tied to ransomware (sanctions and darknet-market attribution lists exist for exactly this). At layering, transaction-monitoring rules can flag structuring patterns — many small deposits from a newly created wallet in a short window is a classic red flag, not a routine deposit. At integration, the Customer Due Diligence (CDD) process at the exchange — collecting a verified identity, a stated source of funds, and a risk rating — should have made the shell-company owner's claimed "consulting income" implausible against the deposit history, triggering a Suspicious Activity Report (SAR) rather than a clean cash-out.
Exercise
Pick your own company's product — or, if you don't have one yet, a hypothetical exchange, non-custodial wallet, payments app, or NFT marketplace — and answer these three questions in writing:
- Which of the three laundering stages does your platform touch? A fiat on-ramp primarily sees placement. A DEX aggregator or bridge primarily sees layering. A merchant payments processor converting crypto to fiat for a business primarily sees integration. Many platforms touch more than one stage — be specific about which parts of your product map to which stage.
- What evidence would a regulator expect you to be able to produce for a transaction at that stage? (Example: for placement, expected evidence includes the identity-verification record and the deposit's blockchain provenance.)
- Where is your current biggest blind spot? Be honest — this is the question the rest of the course will help you answer with specific tools and processes.
Write two to three sentences per question. Keep this document; you'll revisit and extend it in the CDD and EDD lessons that follow, and again in the capstone project.
Recap
- Money laundering moves through placement, layering, and integration, and AML/KYC rules exist to create a detectable trail at each stage.
- Crypto's pseudonymity, speed, and borderlessness are legitimate product properties that also happen to be attractive to launderers — which is why a parallel regulatory regime exists for the industry.
- Effective compliance means knowing which laundering stage your specific product touches, because that determines which controls (screening, monitoring, CDD) matter most for you.
Resources
- FATF — Money Laundering — the international standard-setter's overview of how laundering works and why it's regulated.
- FinCEN — Bank Secrecy Act — the core US statute requiring AML programs.
- US Treasury — Terrorism and Illicit Finance — overview of how terrorism financing differs from money laundering.