2026-10-31 9 min read

AML explained: why your coins carry their past with them

To a risk system, money is never just money — it is a story about where it has been. This essay explains the machinery that reads that story, why two honest people get different treatment from the same desk, and what a user can actually control.

AML risk scoring USDT compliance

The ledger remembers everything

Public blockchains are the most honest witnesses in finance: every transfer, forever, in the open. This transparency was sold as a feature for users; it turned out to be a far more consequential feature for compliance departments, because it means that any coin’s biography can be reconstructed — hop by hop, address by address — without asking anyone’s permission. A bank statement can be forged; a blockchain history cannot.

That single property explains the entire AML industry around stablecoins. Tools cluster addresses into services, label them, trace flows through mixers and swaps, and grade every incoming transfer by where it has slept. From the system’s point of view you are not primarily a person — you are the latest address in a chain of custody it is evaluating. The machinery has no malice; it also has no manners.

What the systems actually look at

Risk engines care about a surprisingly short list of things. Provenance: did the funds pass through mixers, darknet markets, sanctioned entities, or exchanges with bad reputations? Behaviour: round-amount transfers at odd hours, rapid in-and-out patterns, chains of freshly funded wallets. Counterparty: who else ends up touching the money after you. None of these are proof of anything — they are priors, the statistical shadows of a decade of observed laundering.

The consequence is that risk is inherited, not just earned. Coins that passed near a flagged service months before you ever saw them can carry a worse grade than coins with a boring, exchange-to-wallet biography. This is why two people of identical honesty can face different treatment at the same desk, and why the first question an informed user asks about received funds is not “how much” but “from where”.

How it feels from the user’s side

AML almost never announces itself. It arrives as symptoms: a deposit accepted but a withdrawal delayed; a request for a source-of-funds document; a limit quietly lowered; occasionally a flat refusal with no explanation — because explaining the rule would explain how to evade it. Users experience these as personal accusations, which they usually are not; they are the desk discharging obligations with a regulator’s eye on it.

The practical translation: compliance friction is information about the counterparty’s regime, not about your guilt. A service that never asks anything of anyone is running on a jurisdiction or a business model you should think hard about; a service that asks proportionate questions and honours its own stated timelines is showing you a functioning apparatus. The user-side habits that reduce friction are unglamorous — keeping documented provenance, separating traffic from savings, not accepting funds of unknown origin — and they are the same habits the safe-deal notes on UsdtChange build on.

Freezes, soft and hard

The word “frozen” covers two different events. A hard freeze is on-chain and absolute: the issuer of a centrally administered stablecoin can blacklist an address at the contract level, and the balance becomes inert — visible, unmovable, permanent until reversed. A soft freeze is commercial: nothing happens on-chain, but analytics flags the address, and exchanges begin declining deposits from it. Your coins still display cheerfully; they have simply lost their passport.

The user-side defence against both is provenance discipline, because you cannot argue with either. Funds inherit the history of every address they have slept in, so the working rules are: check an address’s history before large inbound transfers, do not let unknown-origin funds camp in your main wallet, and keep your working balance’s story simple enough to explain to a compliance officer in two sentences. None of this is paranoid; it is hygiene at the same level as reconciling a bank statement.

Mixers, privacy tools and the gradations of guilt

Privacy tools occupy the morally busiest intersection of this map. A mixer breaks the link between sender and receiver by pooling; from the user’s side it is a privacy instrument, and from the compliance side it is a laundering instrument — and both descriptions are true at once. Regulators have progressively treated mixer-exposed funds as presumptively risky, and several tools have been sanctioned outright, which means coins that merely passed through can now inherit a status their owner never intended.

The balanced reading is gradation, not binary. Proximity to a mixer is a risk factor, not a conviction; and the practical question for an ordinary user is cost of exposure: funds you plan to convert to fiat through regulated channels will be questioned in proportion to their history. If privacy matters to you, the sequencing matters — keep the funds you will exchange documented and simple, and know that the more private a tool made your coins, the harder they may be to hand back to the fiat world. The security terms shelf of this glossary defines the vocabulary that appears in such conversations.

What a user actually controls

You cannot argue with a scoring model, but you feed it. The inputs you control are: where your funds come from (prefer verifiable sources), where they sleep (separate traffic from reserves), and how you document both (records that would satisfy a reasonable compliance officer). This is not a lifestyle of suspicion; it is a filing habit — and it is precisely what separates an inconvenient exchange from an impossible one.

Finally, keep your map of the environment current. Enforcement intensity varies by jurisdiction and by quarter; corridors that were open close, and practices that were tolerated become policed. Reading the regulation-aware write-ups on CryptoChange is one way to notice the weather changing before it reaches your transaction — because in this field, the rules are not a fixed law so much as a climate, and climates shift.

Frequently asked questions

Can AML systems see who I am?

Not by themselves — they grade addresses and transaction histories, not identities. Identity enters through the exchange’s KYC side, which is separate from the analytics that grade your coins.

My transaction was rejected — am I suspected of a crime?

Almost certainly not. Rejections are usually automated risk grades doing their job on a pattern, not a judgement about you. What you can influence is the pattern: documented sources and a simple, explainable history.

If I never use mixers, am I safe from risk scoring?

Safer, not safe. Funds inherit the history of previous holders, so even coins you received innocently can carry a worse grade. Address hygiene and segregated wallets are the practical mitigation.

Security terms: AML, KYC, risk scoring, frozen addresses

The vocabulary of money’s immune system. These are not laws you feel directly — they are procedures applied to you invisibly, and reading them in advance is the difference between a routine exchange and an unexpected rejection.

Learn more

Market terms: spread, mid-market rate, peg, liquidity, slippage

Five words that decide how much of your money survives an exchange. Each entry gives a one-sentence definition and a long read about where the term shows its teeth: the moment a quote appears, and the moment it quietly changes.