KYC and AML address different but connected parts of exchange compliance. Know Your Customer (KYC) establishes who a customer is through identity and, where applicable, business verification. Anti-Money Laundering (AML) extends beyond onboarding by assessing customer and transaction risk, screening relevant parties and monitoring activity for indicators that may require further review.
HashCash's current exchange documents a Customer Management System, document-management functionality for KYC/verification, geography-specific KYC and AML checks, and administrative controls around users and transactions. HashCash's broader compliance also describes customer identification, customer risk assessment, customer due diligence, beneficial-ownership verification, sanctions screening and ongoing monitoring.
KYC is the identity layer of exchange onboarding. Depending on the business model and jurisdiction, an exchange may need to collect customer identity information, supporting documents and additional information required to understand the customer relationship. Verification is followed by an approval, rejection or further-review decision according to the operator's process.
HashCash's exchange documentation includes user KYC submission and update, identity verification, customer management and document-management functionality.
A single verification process does not necessarily fit every exchange customer. Verification requirements can vary according to jurisdiction, customer type, intended activity and assessed risk. A tiered or risk-based approach lets an operator apply additional checks when the customer's profile or activity requires enhanced review.
HashCash's exchange product provides multi-tier KYC handling and geography-specific KYC/AML processes. HashCash's AML guidance identifies customer, geographic, product/service, transaction, delivery-channel and industry risk as relevant dimensions of a risk-based AML approach.
| Dimension | What it can influence |
|---|---|
| Customer Risk | Identity, customer profile, expected activity and other risk characteristics |
| Geographic Risk | Jurisdiction-specific onboarding or verification requirements |
| Product / Service Risk | Additional controls associated with the services offered |
| Transaction Risk | Review intensity based on transaction activity and risk indicators |
| Enhanced Review | Additional due diligence when applicable risk requires it |
AML extends beyond proving a customer's identity. Customer due diligence can involve understanding the purpose and expected nature of the relationship, assessing customer risk and, where applicable, examining source-of-funds information, ownership structures and other relevant risk factors.
For crypto businesses, AML screening may include sanctions, PEP, watchlist or adverse-media checks depending on the compliance stack and applicable requirements. Specialist compliance platforms increasingly combine these checks with case management and configurable rules.
KYC answers who the customer is; transaction monitoring examines activity after and around onboarding. In crypto, this can include monitoring transfers and wallet activity for indicators of illicit or unusual exposure. The crypto-specific discipline is often described as Know Your Transaction (KYT), which applies blockchain analytics to transaction and wallet activity.
Industry products illustrate the category: Chainalysis describes real-time or near-real-time transaction monitoring, risk parameters and alerts for human review; Sumsub documents wallet screening, transaction screening, configurable rules and case management; Elliptic describes continuous transaction monitoring, wallet screening and investigation workflows.
| Component | Relationship to compliance |
|---|---|
| Admin Panel | Operator-facing environment for reviewing users, verification status, transactions and administrative actions. |
| Wallet Infrastructure | Asset and transaction context for deposits, withdrawals and wallet activity. |
| Exchange API | Programmatic connectivity to supported applications and services. |
| Reporting & Analytics | Reporting, records and operational history surrounding compliance activity. |
| Security | Protection for accounts, infrastructure, credentials and sensitive compliance data. |
| Customer Management | Customer-side information needed for onboarding and verification workflows. |
A white label crypto exchange needs more than a branded trading interface. The operator also needs a configurable compliance layer that can apply verification, screening and monitoring workflows appropriate to its business model and target jurisdictions.
HashCash provides geography-specific KYC and AML verification, KYC/verification document management, customer management and administrative controls. The compliance workflow can therefore be positioned as part of the exchange infrastructure rather than as a separate compliance website.
KYC and AML systems handle sensitive identity, business and transaction information, so compliance functionality has to operate within the exchange's broader security architecture. HashCash has account security controls such as two-factor authentication, infrastructure protection, database-level encryption and firewall/DDoS controls.
| Term | Primary purpose | Exchange context |
|---|---|---|
| KYC | Identify and verify the customer | Onboarding and ongoing customer verification |
| AML | Broader framework for preventing, detecting and responding to financial-crime risk | Customer due diligence, screening, monitoring and compliance processes |
| KYT | Monitor crypto transactions and wallet activity for risk | On-chain transaction and counterparty monitoring |