Crypto Compliance Guide

The four-layer crypto compliance stack, explained for builders.

Overview

Crypto compliance is a stack, not a checkbox. The layers: sanctions screening (every transaction), KYC/AML (onboarding), travel rule (VASP-to-VASP data), and the audit trail that ties them together.

Layer 1: Sanctions screening

Screen every wallet, name, and jurisdiction before funds move - 947 wallets, 19,218 names, 16 jurisdictions. This is the deterministic layer that runs on every transaction.

Layer 2: KYC/AML

Identity verification at onboarding plus behavioral monitoring. KYC answers 'who are you'; screening answers 'may we deal with you'. Both, in order.

Layer 3: Travel rule

VASP-to-VASP counterparty data sharing above thresholds - the messaging layer (Notabene and peers). Complements, not replaces, screening.

Layer 4: Audit

Every decision logged with list versions and timestamps. An inquiry is answered with exports, not archaeology - the recordkeeping guide covers retention.