Regulators� AML crackdown overtakes securities enforcement

TLDR

Regulators are now punishing crypto firms more for anti?money?laundering failures than for securities violations, reshaping the main legal risk in the industry.

1. A CertiK report shows AML-related fines above $900 million in early 2025, while SEC crypto penalties fell 97 percent, making AML the primary enforcement vector.
2. Big cases against OKX and KuCoin, plus steep AML fines in Europe and Asia, show a global pivot to licensing, KYC and transaction monitoring over token classification fights.
3. Projects that lack strong AML and audit practices risk de?banking, delisting and loss of institutional access, even if their tokens avoid securities status.

Deep Dive

1. Evidence for the AML Shift

CertiKs latest regulatory report finds that in the first half of 2025, AML-related fines exceeded $900 million, while U.S. SEC crypto penalties dropped 97 percent from about $4.9 billion in 2024 to roughly $142 million in 2025, confirming that AML enforcement has surpassed securities cases.

The same report, cited in another summary of CertiK's Skynet report, highlights that the U.S. Department of Justice and FinCEN have effectively taken the lead in crypto enforcement via Bank Secrecy Act and money-transmission rules.

Outside the U.S., European AML fines rose more than 700 percent year over year, and Asia-Pacific regulators leaned on license revocations and business improvement orders rather than arguing about Howey-style securities status.

2. How Enforcement Is Changing in Practice

The headline cases are operational. OKX paid about $504 million and KuCoin about $297 million in U.S. settlements for unlicensed money transmission and BSA violations, with billions in suspicious transactions cited, illustrating that missing licenses and weak monitoring are now existential problems.

Regulators are focusing on know-your-transaction (KYT) systems, sanctions screening and suspicious activity reports, and CertiK describes AML as a one-button kill-switch that lets authorities pressure banks, payment processors and centralized exchanges to cut off non-compliant projects without new laws.

Globally, AML rules are also tied to prudential expectations: Basel capital rules coming into force in 2026 make unbacked assets like Bitcoin and Ether costly for banks to hold, while heavily regulating stablecoin reserves, redemption and issuer licensing.

3. What Builders and Users Should Watch

For builders, baseline costs now include multi?jurisdiction licensing, continuous AML and KYT infrastructure, and recurring smart contract audits, which CertiK notes are increasingly required to get top?tier exchange listings or institutional flows.

For users, this likely means stricter KYC on reputable venues, reduced access to lightly regulated exchanges, and the real possibility that non?compliant platforms or privacy tools can disappear quickly if banks or exchanges are forced to sever ties.

Sector?wise, regulated stablecoins and tokenized traditional assets may benefit from clearer regimes, while high?risk, lightly monitored services face consolidation or exit as enforcement pressure remains focused on AML.

Conclusion

The balance of regulatory risk in crypto has moved from is my token a security to can my platform prove clean flows and robust controls. Enforcement is now centered on AML, licensing and audits, and projects that treat this as optional rather than core infrastructure risk being cut off from banking, liquidity and institutions, regardless of their on?chain traction.