AML (Anti-Money Laundering) and KYC (Know Your Customer) compliance requirements determine who can legally participate in ICOs, IEOs, and IDOs — and from which jurisdictions. These aren't optional extras: they represent legal obligations that project teams and launchpads must meet to avoid regulatory liability, and that investors must understand to participate safely without inadvertently breaching regulations in their home jurisdiction.
What Is KYC in Crypto Token Sales?
KYC (Know Your Customer) is the process of verifying a participant's identity before allowing them to invest. Standard ICO KYC requirements:
- Government-issued photo ID (passport, national ID, driver's license)
- Selfie with ID (liveness check to confirm the document owner is the applicant)
- Proof of address (utility bill, bank statement dated within 3 months)
- In some cases: source of funds documentation for large investments
KYC is processed either by the launchpad directly or via third-party KYC providers (Jumio, Onfido, Sumsub, Fractal ID). KYC data is stored by the platform — evaluate the platform's privacy policy before submitting sensitive documents.
What Is AML in Crypto Token Sales?
AML (Anti-Money Laundering) compliance goes beyond identity verification to assess transaction risk:
- Sanctions screening: Checking investor names and wallet addresses against OFAC, EU, UN, and domestic sanctions lists
- Politically Exposed Persons (PEP) screening: Additional due diligence for government officials, their families, and close associates
- Source of funds: For large investments, documenting where the investment capital originated
- Transaction monitoring: Ongoing monitoring of crypto wallet addresses for sanctioned transaction history using blockchain analytics (Chainalysis, Elliptic)
- Suspicious Activity Reporting: Obligation to report suspicious transactions to financial intelligence units
Geographic Restrictions for Investors
ICOs and IEOs typically restrict investors from certain jurisdictions based on legal risk:
- United States: Most token sales exclude US persons due to SEC securities law risk. Exceptions: CoinList under accredited investor exemptions, projects specifically structured for US compliance under Reg D or Reg S
- China: Crypto fundraising banned since 2017. Chinese persons typically excluded from all token sales.
- Sanctioned countries: Iran, North Korea, Cuba, Syria, Crimea — all excluded under OFAC regulations applicable to any project with US nexus
- FATF High-Risk Countries: Some launchpads impose additional requirements or exclusions for countries on the FATF high-risk jurisdictions list
India-Specific AML Context
India's crypto AML framework has evolved significantly: the 2023 extension of PMLA (Prevention of Money Laundering Act) to VASPs (Virtual Asset Service Providers) requires crypto exchanges and platforms to register with FIU (Financial Intelligence Unit), implement KYC/AML, and report suspicious transactions. Indian investors participating in foreign ICOs must also consider FEMA (Foreign Exchange Management Act) compliance — foreign crypto investments may require RBI approval depending on structure.
For India-specific crypto law context, see our India crypto AML law guide. For the KYC definition and process in detail, see our KYC definition guide. For the EU MiCA regulation framework for ICO compliance, see our MiCA regulations guide.
What Investors Should Do
- Never use a VPN to circumvent geographic restrictions — this violates platform terms, potentially violates local law, and creates personal legal risk
- Complete KYC early (before sale windows open) — KYC review takes 24-72 hours
- Use consistent information across all platforms — inconsistencies trigger enhanced due diligence
- Retain records of KYC submissions and any tokens received for tax purposes
Glossary
- VASP (Virtual Asset Service Provider)
- Any entity providing crypto exchange, custody, transfer, or token sale services — the entity type subject to AML/KYC obligations under FATF guidelines.
- OFAC
- The US Office of Foreign Assets Control — the sanctions authority whose lists (SDN, blocked countries) determine which persons and jurisdictions are prohibited from US-nexus transactions.
- FATF
- Financial Action Task Force — the intergovernmental body setting global AML/CFT standards, including the 2019 crypto travel rule requiring VASPs to share sender/receiver information.
- PEP (Politically Exposed Person)
- A current or former government official, their family member, or close associate — subject to enhanced due diligence requirements due to heightened corruption risk.
Disclaimer
Important: Crypto regulation varies by jurisdiction. This guide is educational and not legal advice. Consult a qualified legal professional for jurisdiction-specific compliance questions. CryptoPresaleNews.com is not a licensed financial advisor or legal advisor.
