Digital Asset Compliance
Crypto AML & BSA Compliance
Anti-money-laundering compliance is the program every licensed crypto business runs under the Bank Secrecy Act, and the program every licensing regulator reviews before approval. This guide maps the required pillars and what examiners actually test.
- All 50 states
- Specialist support
- Human review on every filing
Talk to an expert
Tell us about your situation and we will follow up within one business day.
Digital Asset Compliance
What AML compliance is required for a crypto business?
A US crypto business that holds or moves customer assets must run a written, risk-based Bank Secrecy Act anti-money-laundering program with four pillars: a designated compliance officer, written policies and procedures including risk-based customer identification, ongoing employee training, and independent testing. On top of the pillars sit the operating obligations: transaction monitoring calibrated to crypto typologies, suspicious activity reports for transactions of $2,000 or more, currency transaction reports, OFAC sanctions screening, Travel Rule recordkeeping, and FinCEN registration renewed every two years. State licensing regulators review the program in every money transmitter application, so it must exist before the licenses do.
- What Is AML in Crypto?
- Anti-money-laundering compliance: the Bank Secrecy Act program a crypto business must run to detect and report illicit use of its platform. It covers a designated officer, written policies, customer identification, transaction monitoring, suspicious activity reporting, sanctions screening, training, and independent testing.
- Do All Crypto Businesses Need an AML Program?
- All US businesses that exchange, transmit, or custody digital assets for customers do, as money services businesses under FinCEN rules. Pure non-custodial software has historically fallen outside MSB status, but the analysis is fact-specific and should be confirmed with counsel.
Money transmitter licensing by the numbers
- US jurisdictions require a money transmitter license
- 51 of 52 US jurisdictions require a money transmitter license Source: state regulator statutes compiled in our state-law index, verified July 2026. Money transmitter license state laws
- statutory surety bond range across licensing states
- $10,000 to $500,000 statutory surety bond range across licensing states Source: state regulator statutes compiled in our state-law index, verified July 2026. Money transmitter license state laws
The Cornerstone Way
A repeatable method, from first filing to every renewal
Faster licenses, less effort on your side, fewer mistakes, and fewer headaches. It is the way we combine experienced specialists, intentional AI, and the Atlas platform across one sequenced process.
-
Discover
We connect you with independent attorneys to pin down which licenses you need.
-
Prepare
Your licensing specialist assembles each application; our software handles the repetitive work.
-
Review
That same specialist reviews every filing before it reaches a regulator.
-
Approve
We submit, track each application, and keep you posted until the license is granted.
-
Renew
We file every renewal ahead of its deadline in Atlas so licenses stay current.
Anyone can list five steps. Here is what makes ours hold up.
The shortcut
The common approach is to scrape the web for an answer and hope it is current. When the rules change, or the page was wrong to begin with, the mistake surfaces as a deficiency after the filing is in, when it costs the most time.
The Cornerstone Way
-
Specialists who know the answer
Decades of licensing specialists, so the answer is right rather than guessed.
-
Trusted relationships with the regulator
Direct, trusted relationships with regulators, so we ask the question instead of assuming the answer.
-
Living internal checklists
Checklists that update the moment we learn something new, so deficiencies are caught before they happen.
The Program Behind Every Crypto License
AML compliance for cryptocurrency is not a specialty add-on; it is the federal baseline for any business that exchanges, transmits, or custodies digital assets for customers. FinCEN classifies those businesses as money services businesses, which makes the Bank Secrecy Act's program requirements mandatory, and every state money transmitter application and New York BitLicense review evaluates the written program before granting a license. Cornerstone builds crypto AML programs as part of licensing engagements. This guide covers the required components, the crypto-specific tooling regulators now expect, and how the program is tested at application and examination time.
The Legal Stack: FinCEN, the BSA, and the States
The anti-money-laundering obligation reaches crypto through money services business classification. FinCEN's 2013 and 2019 guidance treats exchangers and administrators of convertible virtual currency as MSBs, which triggers registration on Form 107 and the full Bank Secrecy Act program requirement under 31 CFR Part 1022. That is the federal layer, and it applies whether or not any state has licensed you yet.
The states then make the same program a licensing condition: money transmitter applications require the written AML program, examiners test it after approval, and New York's BitLicense framework adds its own AML article with transaction monitoring guidance. The result is one program answering to two levels of review, which is why we draft it once, to the stricter standard, rather than maintaining separate federal and state stories.
The Required Program Components
Examiners organize their review around the BSA pillars and the reporting obligations that sit on them.
Designated Compliance Officer
A named BSA/AML officer with day-to-day authority, board access, and resources. Regulators interview this person during licensing and examinations; a figurehead fails the review.
Written Policies and Procedures
Risk assessment, customer identification and due diligence, monitoring rules, escalation paths, and recordkeeping, documented and matched to what the platform actually does.
Transaction Monitoring for Crypto Typologies
Rules calibrated to digital asset risks: mixers and tumblers, sanctioned protocols, darknet exposure, ransomware addresses, rapid pass-through, and structuring across wallets. Blockchain analytics integration is the expected tooling.
SARs and CTRs
Suspicious activity reports (FinCEN Form 111) within 30 days for suspicious transactions of $2,000 or more, and currency transaction reports for cash transactions over $10,000. SAR confidentiality is absolute.
Sanctions and the Travel Rule
OFAC screening of customers and counterparty wallets, and Travel Rule recordkeeping and transmission for transfers at or above the applicable threshold.
Training and Independent Testing
Documented employee training on a regular cadence and periodic independent testing of the program, internal audit or an outside reviewer, with findings tracked to closure.
How the AML Program Is Tested in Licensing
At application time, states read the program documents and probe them through deficiency letters. The recurring questions are concrete: who is the officer and what else do they do, which analytics vendor screens wallets and what rules are on, what are the EDD thresholds, when was the last independent test. New York's review is the deepest, holding BitLicense applicants to Part 200's AML article and the department's transaction monitoring and filtering guidance.
After approval, examinations sample the program in operation: real alerts, real SAR decisions with documented rationale, real training records. The common findings mirror the KYC side, paper policies the platform does not enforce, monitoring rules never tuned, SAR backlogs, and stale risk assessments. A crypto AML policy that matches production is the single best examination outcome predictor we see.
Banking partners run parallel diligence: an exchange's AML program is reviewed by every bank it approaches for accounts, so the same program that satisfies regulators is what keeps fiat rails open.
Compliance Programs, Not Investigations
A note on scope, because the search results around crypto AML mix two industries. Cornerstone builds and maintains compliance programs for businesses seeking and holding US licenses. We are not a blockchain forensics firm: we do not trace stolen funds, investigate crypto fraud, or provide expert-witness investigation services, and we do not sell analytics software. Where a program needs wallet-screening tooling, we help select and document established analytics vendors as part of the program build. If you need an investigator, you want a forensics specialist; if you need a program that gets your business licensed and keeps it examination-ready, that is exactly what we do.
FAQ
Frequently Asked Questions
Ready for licensing the Cornerstone way?
Anyone can file paperwork and hand you a license. Licensing the Cornerstone way is the same outcome done right: fewer deficiencies, a faster path to approval, less work on your plate, and renewals that stay managed long after you go live.
-
Right the First Time
We prepare and file it correctly the first time, so most applications are accepted on the first submission instead of bouncing back with correction notices.
-
25 to 30x
faster than doing it yourself
Faster to Licensed
Start applications for 12 to 15 states on your own and it crawls. Hand those same states to a Cornerstone Licensing Specialist and they get you licensed 25 to 30 times faster, pursuing every state at once and knowing what each examiner expects.
-
97-98.5%
of the work handled for you
Less Work for You
You answer questions once, then Cornerstone generates and files the license. Your part is the few minutes it takes to confirm the details.
-
99.995%
on-time submissions in 2025
Renewals That Stay Managed
Every license, bond, and renewal date lives in Atlas and is tracked for you, so nothing lapses once you are approved.
Ready to Apply?
Start Your Application Now
Save and resume from any step. An expert reviews every submission within one business day.
Money transmitter regulations by state
Money transmitter regulations by state
Where you operate shapes what you file
52 of 52 jurisdictions documented. Pick a state to see the regulator, the license rule, and the bond.
Explore More From Our Team
Tools and references our customers use most.
Stay Ahead of the Rules
Recent rule changes, deadline announcements, and state agency updates we are tracking for you.
- Watch NMLS Jul 30, 2026
NMLS remote work status tracking deadline for MLO records
NMLS directed companies to complete MLO remote-status details by August 31, 2026 in preparation for 2027 renewals. The system change does not make remote work permissible in every state, but it adds a reporting and recordkeeping step for companies using remote work arrangements.
- Action NMLS Jul 30, 2026
Updated MU4 and MU2 disclosure questions in NMLS
NMLS implemented updated MU4 and MU2 disclosure questions effective April 18, 2026. Users were urged to complete updates by August 31, 2026 to avoid blocking filings.
- Action Texas Office of Consumer Credit Commissioner TX Jul 30, 2026
OCCC regulated lender licensing amendments implementing NMLS transition
Texas OCCC adopted broader regulated lender licensing amendments effective through a January 2026 adoption to implement transition to NMLS for regulated lender licenses under Texas Finance Code Chapter 342. The changes affect OCCC-regulated secondary mortgage and home-loan activity rather than SML's primary mortgage regime.
- Action Texas Office of Consumer Credit Commissioner TX Jul 30, 2026
OCCC adoption of RMLO NMLS registration amendments to 7 TAC §2.102
In March 2025, the Texas Finance Commission adopted amendments to 7 TAC §2. 102 tied to RMLO NMLS registration.
- Watch New York Department of Financial Services NY Jul 30, 2026
New York DFS proposed regulation on issuance of payment stablecoins
On June 9, 2026, NYDFS posted a proposed regulation on issuance of payment stablecoins, with comments due June 22, 2026. DFS said the proposal would align New York's stablecoin framework with new federal requirements under the GENIUS Act and would address reserve concentration limits and risk-management programs.
Stand Up an AML Program That Passes Review
Your AML program is reviewed by FinCEN rules, every state application, and every banking partner. We build it once, to the stricter standard, as part of your licensing project. Talk with our team.