Server-rendered tracker page for aml regulation in Global. This page is built for Google and LLM crawlers: every event below links to a permanent policy-event URL with source data and APAC FINSTAB analysis.
Jurisdiction: Global. Regulator: Financial regulator. Topic: AML. Latest event: September 27, 2026 — Bitget Stolen Funds Reportedly Move Through USDT0 And Wasabi CoinJoin.
Use this page to compare rule changes, licensing signals, enforcement posture, and market-access implications for exchanges, stablecoin issuers, protocols, custodians and institutional teams operating across APAC.
AMLBot monitoring reported that part of the Bitget theft proceeds moved from TRX into USDT, crossed through USDT0 to Ethereum, and then entered Wasabi CoinJoin. The path compresses the freezing window for exchanges, stablecoin issuers and cross-chain monitoring teams.
The CFTC said Cash FX Group, its CEO and related parties were charged over an alleged $950 million retail forex and commodity pool fraud scheme. The action keeps high-yield crypto-adjacent investment programs in the enforcement frame for solicitation, referral and cross-border fund-flow controls.
Circle and Tether blacklisted a wallet labeled Bitget Exploiter 8, freezing about 218,023 USDT and 99,990 USDC after the Bitget theft. The response shows how stablecoin issuer blacklist authority, on-chain labeling and exchange intelligence-sharing drive post-hack sanctions and asset recovery workflows.
Onchain analysis linked Bitget stolen funds to TraderTraitor infrastructure and prior Lazarus-linked flows, while reports put the affected asset mix across XRP, ETH, stablecoins, XAUt, BNB and AVAX. If confirmed, venues face sanctions-screening, cross-chain tracing, deposit interdiction and law-enforcement coordination pressure.
Tether said assets held with EQIBank represent less than 0.034% of total assets after reports that the offshore digital bank faces liquidation pressure following U.S. asset seizures. The case highlights stablecoin reserve-bank concentration, seizure risk and redemption resilience controls.
Visa is reportedly directing processors to stop classifying memecoin purchases as digital-media transactions, affecting card rewards, issuer risk controls and wallet checkout compliance for crypto purchases.
PeckShield-linked monitoring reported that an attacker exploited SingularityNET-related bridge contracts to mint 260 million AGIX and 53.83 million WMTX on Ethereum. The incident forces exchanges and liquidity venues to reassess deposit controls, contaminated liquidity, and token-supply integrity.
SlowMist and OKX security teams said FomoPeek iOS versions 1.1 and 1.2 embedded malicious apptrace modules capable of remote control, privilege escalation, sandbox escape, and Keychain data exposure. Wallet and exchange compliance teams should treat affected seed phrases and private keys as compromised.
Interpol is rolling out its Silver Notice mechanism so 196 member countries can share leads on cash, cryptocurrency, real estate and other illicit assets. The pilot has already involved 82 countries and identified at least EUR36 million in criminal assets, raising expected freeze-and-information requests for exchanges and custodians.
Synthetic-dollar protocol Neutrl opened a redemption portal allowing NUSD and sNUSD holders to redeem for USDC at a fixed rate, with redeemed tokens burned after wallet ownership verification. The exit process makes reserve sufficiency, user verification, burn accounting and secondary-market pricing the main stablecoin-control points through the redemption window.
An unreviewed ethereumclassic/core-geth v1.13.0 release was reportedly promoted through community channels before review by existing maintainers. For exchanges and custodians, client binary provenance, maintainer signatures, release hashes and rollback procedures become deposit-crediting controls rather than ordinary DevOps hygiene.
Bybit Pay integrated with Mesh, allowing Bybit users to spend exchange account balances directly across connected merchant and funding platforms without first withdrawing or converting assets. The payment path merges exchange account controls with merchant categorisation, refunds, transaction monitoring, Travel Rule duties, and freeze handling.
Liquid Network confirmed a security incident involving funds moved through SideSwap's Peg-out Authorization Key path while saying the key itself and other keys were not leaked. Exchanges were notified to pause or prepare to pause LBTC deposits and withdrawals, making UTXO tracing, customer balance reconciliation, and reopening criteria immediate controls.
A reported Notional Finance custody contract exploit led to about USD 1.7 million in DAI and USDC losses, with funds swapped into ETH and deposited into Tornado Cash. The flow affects exchange deposit monitoring, sanctions screening, victim recovery, and root-cause disclosure expectations for DeFi custody contracts.
Multiple verified WOO X users reported withdrawals pending or processing for three days or more, while the platform said some requests remained under review or on-chain processing. The incident raises customer asset availability, liquidity disclosure, support evidence, and unusual review queue control questions.
The Justice Department said court-authorized actions let the FBI seize more than $560,000 in cryptocurrency and take control of online infrastructure tied to Hamas fundraising. Exchanges, stablecoin issuers and wallet providers need sanctions screening, domain intelligence and law-enforcement response procedures that can connect on-chain flows with off-chain infrastructure.
Robinhood Wallet and Fomo users can reportedly buy memecoins through Crossmint card payments without a separate point-of-sale KYC flow. The structure puts wallet front ends, payment processors, card networks and token checkout AML monitoring into the same compliance chain.
INTERPOL Operation Jackal IV targeted West African organized cybercrime across 22 jurisdictions, leading to 58 arrests and 263 identified suspects. The operation reinforces AML monitoring pressure on crypto investment fraud proceeds, OTC channels, wallet clusters and fiat off-ramps.
Chainalysis estimated that potentially taxable onchain crypto activity reached at least $457 billion globally in 2025, spanning realized gains, mining, staking, lending income and crypto payments. The finding points to tighter tax reporting expectations for exchanges, wallets and analytics providers as authorities map CEX, DEX and onchain income flows.
TRM Labs reported that AI adoption in crypto crime rose 40% over the past year, with scams the most mature use case and deepfake or AI-chatbot reports increasing sharply. Compliance teams face higher pressure to detect AI-generated identities, fraud campaigns and synthetic project materials during onboarding and asset review.
Arbitrum's ArbOS 61 Elara upgrade adds optional protocol-level transaction screening for dedicated chains while leaving Arbitrum One and Nova unchanged. The feature shifts compliance controls from only wallets, frontends and exchanges into configurable chain infrastructure, raising new due-diligence questions for appchain assets.
P2P trading platform NoOnes began a wind-down after unresolved sanctions issues caused it to lose key partners and led blockchain monitoring providers to flag related transactions as high risk. The case shows how sanctions labels can quickly propagate through payments, monitoring vendors and counterparty controls.
SafePal disclosed that an order-tracking plugin flaw exposed information for about 39,798 customers who placed orders between March 2025 and April 2026. The incident highlights wallet-sector compliance risk around third-party plugins, customer data minimization and breach-response controls.
Bitget announced enhanced compliance controls for transactions directly or indirectly linked to designated entities, citing recent regulatory developments and possible account termination for violations. The move extends sanctions and entity-list screening into exchange-to-exchange and indirect counterparty flows.
Binance said it will no longer process transactions involving HTX and other platforms, following earlier restrictions on Shelbit, Aban Tether Exchange and A7-linked entities amid regulatory compliance requirements. The move turns sanctions and counterparty-platform status into direct deposit and withdrawal control issues.
Daily policy intelligence flagged a suspected breach of Coinsbuy-related wallets with more than $7.9 million in losses and laundering through exchange routes into Monero. The case reinforces AML monitoring needs around compromised exchange wallets, cross-chain flows, privacy-coin conversion and freeze-coordination playbooks.
Samsung Wallet plans to add stablecoin-linked accounts, payments and cross-border transfer features across Galaxy devices, according to market reports citing Samsung product announcements. The rollout would push stablecoin compliance into consumer-wallet distribution, including licensing, KYC, Travel Rule, reserve disclosure and wallet-liability controls.
BitMart's wind-down and U.S.-user withdrawal cutoff have drawn scrutiny over withdrawal access, position closures, KYC, source-of-funds checks and wallet ownership controls. The case highlights exchange exit-planning obligations, customer asset handling and evidence trails for compliance-driven freezes or delayed withdrawals.
WIRED reported that Kumio CTO Vangelis Stykas found evidence North Korea-linked hackers impacted 1,640 companies across 57 countries, including hundreds of crypto-related targets with access to keys, cloud infrastructure and blockchain systems. The case ties cyber compromise directly to sanctions, AML and custody controls for crypto firms.
On-chain investigators reported that a threat actor bought darknet laundering services and then received 666,000 USDT, with the funds frozen by Tether days later. The case reinforces stablecoin issuer freezing as an AML intervention point for darknet, scam and laundering-service exposure.
Fiat24 said user and transaction growth had outpaced its risk, compliance and customer-support capacity, leading it to pause crypto deposits and new user registrations from July 14. The suspension shows how wallet, card and banking-account service providers can become operational compliance chokepoints for crypto distribution partners.
Ethereum's proposed EIP-8222 Lean Staking design would use STARK-based cryptography to separate deposits from withdrawals and improve validator privacy. For institutions and exchanges, the same privacy gain may complicate address attribution, staking disclosures and AML monitoring.
Drop Site News reported that Consensys unknowingly hired a DPRK-linked developer consultant who used the Tyler Knapp alias and worked on MetaMask-related code. The case turns developer onboarding, vendor screening, repository access and sanctions controls into a front-line wallet compliance issue.
Bitrace reporting in the policy channel linked roughly $1.7 million in stolen Gate-related funds to Xinbi guarantee groups and Newpay addresses following the Huione crackdown. The case signals that Southeast Asian illicit guarantee platforms are reorganizing rather than disappearing, requiring updated KYT address clusters.
Bitrace reported that multiple Tether-frozen addresses were tied to Southeast Asia human-trafficking entities, with known flows reaching centralized exchanges. The case highlights why issuers and exchanges need coordinated sanctions, KYT and high-risk corridor controls for USDT flows.
The Wall Street Journal reported that Iran, Russia, North Korea and other sanctioned actors handled about USD100 billion in crypto last year, citing blockchain analytics firms and Western authorities. The scale reinforces pressure on exchanges, stablecoin issuers and bridges to strengthen sanctions screening and illicit-flow monitoring.
Blockchain analytics firms flagged concentrated and potentially circular activity around the ruble-backed A7A5 stablecoin while its promoters claimed much larger payment volumes. The dispute reinforces that sanctions reviews for stablecoins need issuer, liquidity, counterparty and onchain-pattern checks rather than headline volume alone.
Security monitors reported that about $800,000 in USDC was taken from Hinkal and later routed through Tornado Cash and THORChain. The case highlights continuing AML exposure where privacy tools and cross-chain liquidity are used in post-exploit laundering paths.
FINMA and IOSCO chair Marlene Amstad highlighted supervisory technology and AI as core tools for modern financial-market supervision, including crypto-market monitoring. The direction points to more automated surveillance, AML screening and anomaly detection expectations for exchanges and VASPs.
Europol said Operation Endgame disrupted SocGholish, Amadey and StealC infrastructure while identifying, freezing or restricting more than EUR41 million in criminal cryptocurrency assets. The action reinforces AML and KYT expectations around malware, credential theft and ransomware-linked flows.
Reuters-linked coverage reported that technology, payment and crypto analytics firms including PayPal, TRM Labs, Chainalysis and Luno committed to disrupt financial flows tied to illegal wildlife trade. The initiative expands crypto AML cooperation beyond exchange crime into broader illicit-commerce typologies.
Arc released a privacy roadmap for onchain finance built around opt-in confidentiality and controlled visibility for authorized parties. The design is policy-relevant for payroll, treasury, asset issuance, business payments and FX settlement because privacy features must remain compatible with KYT, audits, sanctions screening and lawful access.
Sui opened confidential transfers in public beta on Devnet, hiding balances and transfer amounts while preserving controlled visibility for compliance and audit users. The design creates a policy-relevant template for privacy features that keep issuer, exchange or regulator review paths available.
HTX said World Liberty Financial unilaterally froze HTX-linked on-chain addresses after sanctions-compliance reviews, forcing HTX to suspend WLFI and USD1-related markets. The case turns issuer blacklist authority into a direct exchange listing and custody risk for sanction-sensitive tokens and stablecoins.
Chainalysis reported that crypto flows into gray-market peptide vendors reached $32 million in Q1 2026, up sharply from the prior quarter. The finding gives compliance teams a new merchant-category risk signal for BTC and stablecoin payments tied to semi-legal health and drug markets.
OFAC designated Iran-based Nobitex, Wallex, Bitpin, and Ramzinex under Iran sanctions, warning foreign financial institutions and non-U.S. persons of secondary sanctions exposure. The action raises AML and sanctions-screening pressure on crypto exchanges, OTC brokers, and USDT-linked Iran corridors.
Circle blacklisted a Zama confidential USDC contract after a wallet linked to Overnight Finance was flagged in litigation, trapping roughly $12.6 million of shared cUSDC liquidity. The case shows how stablecoin compliance actions can create contract-level collateral damage for privacy wrappers, yield pools and other pooled stablecoin products.
ICIJ reported that Kraken transferred at least $1.1 billion of bitcoin to crypto ATM operators, including flows to Athena Bitcoin after official scrutiny of ATM fraud. The report increases pressure on exchanges and liquidity providers to monitor downstream ATM and cash-out channels.
Socket Research reported a cross-ecosystem TrapDoor campaign across npm, PyPI and Crates.io packages targeting crypto, DeFi, AI and security developers. The attack raises compliance and listing-review risk because compromised developer secrets, wallets, CI/CD credentials and cloud keys can translate into project-control and custody failures.