Evaluating Exchange Compliance Quality | AML, KYC & Compliance | XRP Academy - XRP Academy
3 free lessons remaining this month

Free preview access resets monthly

Upgrade for Unlimited
Skip to main content
intermediate50 min

Evaluating Exchange Compliance Quality

Learning Objectives

Identify public compliance indicators that reveal exchange compliance quality

Interpret licensing status as a signal of compliance investment

Recognize compliance red flags that indicate elevated risk

Apply an evaluation framework to exchanges where you hold or consider holding XRP

Understand the connection between compliance quality and operational sustainability

RISKS FROM EXCHANGE COMPLIANCE FAILURES
  • Fines requiring exchange resources
  • Required compliance improvements (costly)
  • Operating restrictions
  • License suspension/revocation
  • Forced market exit
  • Banks terminate exchange accounts
  • Fiat on/off ramps disabled
  • Operations severely impacted
  • Customer withdrawals blocked
  • Account freezes during investigations
  • Withdrawal delays or restrictions
  • Forced account closures
  • Asset seizure in extreme cases
  • Inability to access funds
EXCHANGE FAILURES AND COMPLIANCE
  • Multiple compliance deficiencies
  • Weak AML controls
  • Poor governance
  • Result: Collapse, customer losses
  • Compliance theater (appeared compliant)
  • Actual controls inadequate
  • Governance failures
  • Result: $8B+ customer losses
  • Shut down by regulators
  • Banking relationships lost
  • Customers unable to withdraw
  • Assets frozen or lost
  • Inadequate compliance investment
  • Poor governance/oversight
  • Regulatory relationship breakdown
  • Banking access lost

LICENSING AS COMPLIANCE SIGNAL
  • New York BitLicense (NYDFS)
  • Japan FSA registration
  • Singapore MAS license
  • US state money transmitter licenses
  • EU national licenses (pre-MiCA)
  • Offshore jurisdictions only
  • Operating without license = major red flag
  • Either unlicensed jurisdiction or non-compliant
  • Highest risk category
WHAT TRANSPARENCY REVEALS

Positive transparency indicators:
✓ Published proof of reserves
✓ Regular audit reports
✓ Law enforcement cooperation statistics
✓ Compliance team publicly identified
✓ Clear compliance policies on website
✓ Regulatory filings accessible

  • Reserve audit (assets match liabilities)
  • SAR filing statistics (shows active compliance)
  • Law enforcement cooperation (shows legitimacy)
  • Compliance leadership credentials
  • Policy update frequency

Red flags in transparency:
✗ No proof of reserves
✗ Anonymous leadership
✗ No published policies
✗ No compliance contact
✗ Vague jurisdictional claims
```

CHECKING REGULATORY HISTORY
  • NYDFS enforcement actions
  • FinCEN enforcement actions
  • SEC enforcement database
  • State AG actions
  • News searches
  • Industry databases
  • Past violations indicate control weaknesses
  • Resolution terms show what was wrong
  • Repeat violations = serious concern
  • Settlement terms indicate severity
  • Single minor violation: May be resolved
  • Pattern of violations: Systemic problem
  • Recent violations: Current risk
  • Old violations with remediation: May be improved

Example interpretation:
"Exchange X settled with NYDFS for $100M in 2023
for AML failures and hired new compliance team"
→ Had serious problems
→ Invested in remediation
→ Under enhanced scrutiny
→ May be improved but monitor
```


WARNING SIGNS IN EXCHANGE OPERATIONS

KYC red flags:
✗ Able to trade with only email verification
✗ No identity verification for significant limits
✗ No source of funds questions ever
✗ Instant full access without verification

Transaction red flags:
✗ No withdrawal delays ever (no monitoring?)
✗ Serves sanctioned jurisdictions
✗ Privacy coins with no restrictions
✗ No questions about large transactions

Structural red flags:
✗ Anonymous team
✗ Frequent jurisdiction changes
✗ No clear regulatory status
✗ Resistance to compliance questions

Banking red flags:
✗ No fiat withdrawal options
✗ Frequent banking changes
✗ Third-party payment processors only
✗ Crypto-only operations
```

COMPLIANCE QUALITY COMPARISON

Strong compliance (examples):
Coinbase:
✓ BitLicense + 48 state MTLs
✓ Public company (additional scrutiny)
✓ Published compliance team
✓ Regular transparency reports
✓ Established banking relationships

Kraken:
✓ Major jurisdiction licenses
✓ Long operating history
✓ Compliance leadership identified
✓ Banking relationships maintained
✓ Industry engagement

SBI VC Trade (Japan):
✓ Japan FSA registered
✓ SBI Holdings backing
✓ Japanese regulatory compliance
✓ Established banking relationships

Weak compliance indicators:
Offshore-only exchange:
✗ Seychelles registration only
✗ No major jurisdiction license
✗ Anonymous team
✗ No published compliance info
✗ Frequent jurisdiction changes
```


EXCHANGE COMPLIANCE EVALUATION STEPS
  • Check claimed licenses
  • Verify in regulatory databases
  • NYDFS licensed entities list
  • FinCEN MSB registration
  • State license databases
  • International registries
  • Search enforcement databases
  • News searches for violations
  • Industry reputation research
  • Settlement/consent order review
  • Proof of reserves?
  • Compliance team identified?
  • Policies published?
  • Transparency reports available?
  • What KYC was required?
  • Are large transactions reviewed?
  • Response time to compliance inquiries
  • Documentation requirements
  • Fiat withdrawal options
  • Banking stability
  • Payment processor quality
  • Withdrawal speed and reliability
  • Weight factors appropriately
  • Consider your risk tolerance
  • Document your analysis
  • Make informed decision
EXCHANGE COMPLIANCE CHECKLIST

Licensing (Score: ___/25)
□ Licensed in Tier 1 jurisdiction (+10)
□ Multiple major jurisdiction licenses (+10)
□ US state licenses if serving US (+5)
□ No license in any major jurisdiction (-25)

Regulatory History (Score: ___/25)
□ No enforcement actions (+10)
□ Minor past violations, resolved (+5)
□ Recent major violations (-15)
□ Ongoing regulatory issues (-25)

Transparency (Score: ___/20)
□ Proof of reserves published (+5)
□ Compliance team identified (+5)
□ Policies publicly available (+5)
□ Regular transparency reports (+5)
□ None of the above (-10)

Operational Indicators (Score: ___/20)
□ Robust KYC required (+5)
□ Transaction monitoring evident (+5)
□ Source of funds questions for large amounts (+5)
□ Reasonable withdrawal processing (+5)
□ Minimal KYC/instant everything (-10)

Banking (Score: ___/10)
□ Established banking relationships (+5)
□ Multiple fiat withdrawal options (+5)
□ Frequent banking issues (-10)

TOTAL SCORE: ___/100
90+: Strong compliance
70-89: Adequate compliance
50-69: Concerning compliance
<50: High risk

Note: This is a guide, not definitive assessment
```


MAJOR US EXCHANGE COMPLIANCE

Coinbase:
Licensing: BitLicense, 48+ state MTLs, public company
Regulatory history: Various settlements, ongoing SEC issues
Transparency: Quarterly reports, reserves disclosed
Assessment: Strong compliance infrastructure despite regulatory disputes

Kraken:
Licensing: Major state licenses, international presence
Regulatory history: $362K OFAC settlement (2022), compliance improvements
Transparency: Compliance leadership public
Assessment: Strong compliance, addressed past issues

Gemini:
Licensing: BitLicense, trust company charter
Regulatory history: Clean history, Earn product issues separate
Transparency: Compliance focused from founding
Assessment: Strong compliance orientation
```

INTERNATIONAL EXCHANGE COMPLIANCE

Bitstamp (EU):
Licensing: Luxembourg license, EU operations
Regulatory history: Generally clean
Transparency: Long operating history
Assessment: Strong EU-focused compliance

Binance (Global):
Licensing: Complex multi-jurisdiction approach
Regulatory history: Multiple enforcement actions globally
Transparency: Improving but historically opaque
Assessment: Improving but elevated risk in some jurisdictions

bitFlyer (Japan):
Licensing: Japan FSA registered
Regulatory history: Clean in Japan
Transparency: Japanese standards
Assessment: Strong Japan compliance

SBI VC Trade (Japan):
Licensing: Japan FSA registered, SBI Group
Regulatory history: Clean
Transparency: Japanese standards, Ripple partnership
Assessment: Strong compliance, relevant for XRP
```


Exchange compliance quality varies significantly. Some invest heavily; others do minimum. Quality is assessable through public information.

Licensing provides meaningful signal. Tier 1 licenses require substantial compliance investment. No license is a red flag.

Past regulatory issues indicate control weaknesses. Enforcement history reveals where compliance failed. Pattern matters.

Banking relationships proxy for compliance. Banks conduct due diligence. Stable banking indicates compliance acceptable to banks.

⚠️ Future regulatory trajectory. Requirements will increase. Today's adequate may be tomorrow's deficient.

⚠️ Hidden compliance issues. FTX appeared compliant. Not all problems visible externally.

⚠️ Emerging exchange assessment. Newer exchanges have limited history. Assessment harder.

🔴 "Licensed = safe." License is minimum requirement. Quality varies above that floor. FTX had licenses.

🔴 "No enforcement = no problems." Enforcement is lagging indicator. Problems may exist before enforcement.

🔴 "Big = safe." Size doesn't guarantee compliance quality. Large exchanges have failed.

🔴 "My exchange is fine." Even good exchanges face risk. Diversification prudent.


Assignment: Complete a compliance quality assessment for two exchanges where you hold (or would consider holding) XRP. Use the framework provided to evaluate and compare.

  • Select two exchanges
  • Complete evaluation checklist for each
  • Document specific findings
  • Compare and contrast
  • Provide overall risk assessment
  • Make recommendation for personal use

Time investment: 2 hours


1. Why is exchange compliance quality important to investors?
Answer: B - Poor compliance leads to regulatory action, banking loss, and potential closure, risking customer assets

2. What is the strongest licensing indicator?
Answer: C - Tier 1 licenses (BitLicense, Japan FSA) which require substantial compliance investment

3. What is a significant red flag for exchange compliance?
Answer: B - Able to trade/withdraw significant amounts with only email verification (minimal KYC)

4. What does stable banking relationships indicate?
Answer: C - Banks have done due diligence and found compliance acceptable

5. What lesson does FTX provide about exchange compliance assessment?
Answer: B - External indicators can miss internal problems; licenses alone don't guarantee safety


End of Lesson 11

Total words: ~4,200
Estimated completion time: 50 minutes reading + 2 hours for deliverable

Key Takeaways

1

Exchange compliance quality directly affects your risk.

Poor compliance leads to regulatory action, banking loss, and potential closure.

2

Licensing provides a meaningful quality signal.

Tier 1 licenses (BitLicense, Japan FSA) indicate significant compliance investment.

3

Red flags are identifiable.

Minimal KYC, anonymous team, offshore-only, banking issues all indicate elevated risk.

4

A systematic evaluation framework helps.

Check licensing, regulatory history, transparency, operations, and banking.

5

No exchange is risk-free.

Even well-compliant exchanges face regulatory risk. Diversification and self-custody considerations appropriate. ---