AML enforcement becomes crypto's main regulatory risk

TLDR

Antimoney laundering (AML) enforcement has overtaken securities law as cryptos primary regulatory risk, with regulators using AML rules to shut projects and venues out of the financial system.

1. Recent data shows AML-related fines above $1 billion in 2025 while SEC crypto penalties plunged, confirming a structural shift in enforcement focus.
2. AML violations now act as a kill switch, cutting off banking, fiat ramps, and listings when firms fail on KYC, transaction monitoring, and sanctions screening.
3. The next phase will be stricter rules for exchanges, stablecoins, OTC/P2P desks, and on/off-ramps, likely driving consolidation toward heavily regulated players.

Deep Dive

1. Evidence Of The AML Shift

CertiKs 2026 regulatory report finds that AML enforcement has surpassed securities cases as the main regulatory risk, with U.S. AML fines reaching about $1.06 billion in the first half of 2025 while SEC crypto penalties fell 97 percent year over year, from $4.9 billion to $142 million, according to a detailed summary from Cointelegraph and others based on the report.

Major cases include OKX paying $504 million and KuCoin $297 million in early 2025 for unlicensed money transmission and Bank Secrecy Act failures, illustrating how licensing and monitoring gaps now draw the largest penalties.

Europe and Asia follow the same pattern, with European AML fines up more than 700 percent and regulators in the UK, South Korea, Japan, and others conducting raids, suspensions, and criminal cases tied specifically to money laundering and sanctions risks rather than token classification.

2. How AML Becomes A Kill Switch

AML rules target how money flows, not what a token is, so they apply across centralized exchanges, OTC/P2P brokers, stablecoins, and even real-world sectors that accept crypto.

Regulators can lean on banks, payment processors, and top exchanges to freeze accounts or off-board entire venues once they conclude there are gaps in Know Your Customer (KYC), Know Your Transaction (KYT), sanctions screening, or suspicious activity reporting, a dynamic CertiK describes as a one-button kill switch in its 2026 status report.

Recent actions such as the UK Financial Conduct Authoritys raids on unregistered P2P crypto traders and South Korean crackdowns on unlicensed exchanges show how AML breaches can quickly translate into shutdown orders, fines, and even prison time for operators.

3. What To Watch In The Next Wave

Globally, frameworks are moving from design to implementation. Basel banking rules effective in 2026, the EUs MiCA, UKs upcoming crypto regime, and US Treasury proposals for stablecoin issuers all embed bank-like AML expectations into crypto infrastructure.

Traditional banks, through groups like the Bank Policy Institute, are lobbying for crypto AML and sanctions obligations to match banking rules, citing rising headline illicit volumes, while industry leaders counter that illicit use remains around 1 percent of on-chain activity and argue for proportionate rules.

The most exposed segments are smaller offshore exchanges, informal OTC/P2P desks, high-risk stablecoin models, and any project relying on centralized bridges to fiat without strong compliance. Larger, well-capitalized venues are positioned to absorb the rising cost of audits, surveillance tools, and multi-jurisdiction licensing.

Conclusion

AML enforcement has quietly become the main regulatory lever over crypto, shifting risk from token-by-token classification fights to continuous scrutiny of how money moves through the ecosystem. Projects and venues that treat AML as core infrastructure rather than a box-ticking exercise are more likely to retain bank access, listings, and institutional partners, while those that ignore it face growing odds of fines, forced exits, or sudden deplatforming.