Global money laundering watchdog FATF releases guidelines that could force crypto companies to check customers' identities and report suspicious transactions
New guidelines could spur more crypto firms to check their customers' identities and report suspicious transactions to regulators
Context & Ripple Effects
This is the latest step in a compliance arc FATF has been building since it announced its first cryptocurrency oversight rules in 2018, warning that non-complying countries would face blacklisting (first crypto oversight rules). G20 backing in 2019 and a 12-month adoption window for US and EU members turned those guidelines into national regulation pressure (G20 endorsement, 12-month adoption deadline).
The 2021 update matters because it goes beyond exchanges: FATF's guidance says DeFi platforms where parties exert control or influence over protocols — and even developers and DAO members — should conform to anti-money-laundering rules, while also pulling crypto businesses into the same AML frameworks banks already operate under. The EU's provisional agreement on verified-identity transfer rules the following year shows the guidance translating into binding legislation (EU anti-laundering rules).
First-order effects
- Crypto exchanges and custodians face immediate pressure to implement customer identity checks and suspicious-transaction reporting, converting compliance from optional differentiator to operating requirement.
- DeFi projects with identifiable controllers — core developers or DAO members with protocol influence — are newly told they may carry AML obligations, a category of actor that had no such duties before.
Second-order effects
- Banks gain an opening to enter crypto services, since FATF's framework makes regulated crypto firms look like familiar counterparties rather than unbankable ones.
- Jurisdictional arbitrage intensifies: with FATF gray-listing laggards like Malta and threatening blacklist status, compliant venues cluster in strict jurisdictions while activity migrates to looser ones.
Third-order effects
- If member states keep adopting the guidance, the industry splits between regulated platforms embedded in bank-grade AML systems and permissionless alternatives pushed further underground — the structural divide the EU's wallet-transfer identity requirements formalize.
- AML compliance becomes the gatekeeping layer of crypto market access, shifting power from protocol designers toward whichever entities can afford the surveillance infrastructure regulators demand.
The trend: Global AML standards bodies are folding decentralized finance into the same identity-and-reporting regime as banks, with FATF guidance and EU legislation converging on verified identities as the price of market access.