Who must screen crypto payments
Two obligations get talked about as one, and they are not. Sanctions rules bind every EU company today, with no threshold. Customer due diligence under the EU’s new anti-money-laundering regulation binds a defined list of sectors, from 10 July 2027. Most businesses asking this question are inside the first and want to know about the second.
Sanctions
You may not make funds or economic resources available to a listed person. There is no minimum amount and no sector gate. Paying a listed counterparty in USDT is the same act as wiring them euros, and the blockchain keeps the evidence permanently.
Due diligence
Identify the customer, understand the source of funds, monitor the relationship, keep records, report what is suspicious. This is the layer where the sector list and the thresholds matter — and where the table below answers the question.
A record, not a feeling
Both layers are judged after the fact, by someone reading your file. What is checked is not whether you were careful — it is whether you can show what you checked, on what data, and what you decided on the day.
Layer 1: sanctions bind you already
The EU’s asset-freeze regulations do two things: they freeze the funds of listed persons, and they forbid anyone from making funds or economic resources available to them. The second is the one that catches ordinary businesses, and its scope clause is deliberately wide.
- Inside the territory of the Union — Reg. 269/2014 Art. 17(a)
- To any person who is a national of a Member State, inside or outside the Union — Art. 17(c)
- To any legal person constituted under the law of a Member State, wherever it operates — Art. 17(d)
- To any legal person, entity or body in respect of any business done in whole or in part within the Union — Art. 17(e)
Read plainly, that covers a Spanish construction company, a Dutch yacht broker and a Cypriot law firm as squarely as it covers a bank. None of them is an obliged entity because of what it is; all of them are inside the prohibition. Read the regulation.
Layer 2: the dates
10 July 2027
The AMLR applies directly in every Member State — no national implementing act needed. AMLD6 must be transposed by the same date.
10 July 2027
An EU-wide limit of EUR 10 000 on cash payments takes effect. Member States may set a lower limit, and several already have.
10 July 2029
Football agents and professional football clubs become obliged entities.
| Date | What changes | Source |
|---|---|---|
| 10 July 2027 | The AMLR applies directly in every Member State — no national implementing act needed. AMLD6 must be transposed by the same date. | AMLR / AMLD6 |
| 10 July 2027 | An EU-wide limit of EUR 10 000 on cash payments takes effect. Member States may set a lower limit, and several already have. | AMLR cash payment limits |
| 10 July 2029 | Football agents and professional football clubs become obliged entities. | AMLR final provisions |
Layer 2: the sectors
The AMLR lists its obliged entities in Article 3. Below is that list rearranged by how close the sector sits to crypto funding, with the trigger that bites first. Rows that say “no” are answers, not omissions — and the sanctions layer above still applies to every one of them.
Crypto exchanges, brokers and OTC desks (CASPs)
- Under the AMLR
- Financial institution — the AMLR's definition of a financial institution includes a crypto-asset service provider as defined by MiCA. AMLR Art. 2 and Art. 19
- What triggers the work
- Due diligence on an occasional transaction of EUR 1 000 or more; below that, identification and verification of the customer.
E-money institutions, payment institutions and fintechs
- Under the AMLR
- Financial institution. AMLR Art. 2 and Art. 19
- What triggers the work
- Due diligence on transfers of funds of EUR 1 000 or more, and on a business relationship whatever its size.
Crypto payment processors serving merchants
- Under the AMLR
- Financial institution, where the service performed is a crypto-asset service under MiCA. AMLR Art. 2 and Art. 19
- What triggers the work
- EUR 1 000 on occasional transactions; your merchants inherit whatever you conclude, whether or not you send them the evidence.
FX, CFD and securities brokers taking crypto deposits
- Under the AMLR
- Financial institution — as an investment firm. Crypto funding does not change the category, it changes what you have to be able to explain. AMLR Art. 2 and Art. 19
- What triggers the work
- Due diligence on the business relationship; the crypto deposit is a transaction on that relationship, not an occasional one.
Prop trading firms
- Under the AMLR
- Usually not — a prop firm trading its own capital is generally outside the financial-institution definition, and this is decided by its actual licence and structure, not its marketing. Reg. 269/2014 Art. 17
- What triggers the work
- The sanctions layer binds it regardless, and it is the sender on every payout. Payment partners apply their own diligence on top.
Online casinos, sportsbooks and other gambling operators
- Under the AMLR
- Providers of gambling services. AMLR Art. 3 and Art. 19
- What triggers the work
- Due diligence at EUR 2 000 or more, on the wagering of a stake or the collection of winnings — counted per customer, not per session.
Crowdfunding platforms and intermediaries
- Under the AMLR
- Crowdfunding service providers and crowdfunding intermediaries. AMLR Art. 3 and Art. 19
- What triggers the work
- Due diligence on the business relationship; EUR 10 000 on an occasional transaction.
Estate agents
- Under the AMLR
- Estate agents, including when acting as intermediaries in letting where the monthly rent is EUR 10 000 or more. AMLR Art. 3 and Art. 19
- What triggers the work
- Due diligence on the business relationship, and on an occasional transaction of EUR 10 000 or more.
Property developers and construction firms selling their own units
- Under the AMLR
- Not by virtue of being a developer. Art. 3 names estate agents acting as intermediaries; a developer selling its own stock is a different thing, and national law varies on where the line sits. Reg. 269/2014 Art. 17
- What triggers the work
- The sanctions layer applies in full, and a buyer paying in USDT is a payment your file has to be able to explain whether or not you are an obliged entity.
Dealers in high-value goods — cars, yachts, aircraft, jewellery, watches
- Under the AMLR
- Persons trading in high-value goods, and persons trading in precious metals and stones, where that is their regular or principal activity. AMLR Art. 3 and Art. 74
- What triggers the work
- Reports to the FIU on motor vehicles at EUR 250 000 or more and watercraft or aircraft at EUR 7 500 000 or more, acquired for non-commercial purposes.
Art dealers, galleries, auction houses and free-zone operators
- Under the AMLR
- Persons trading in, or acting as intermediaries in the trade of, cultural goods and works of art — including when carried out by free zones and customs warehouses. AMLR Art. 3 and Art. 19
- What triggers the work
- Due diligence at EUR 10 000 or more, in a single transaction or linked transactions.
Lawyers, notaries, accountants, auditors and tax advisors
- Under the AMLR
- Listed in Art. 3, for defined activities — including assisting a client with the management of crypto-assets. AMLR Art. 3 and Art. 19
- What triggers the work
- Due diligence on the business relationship; EUR 10 000 on an occasional transaction.
Trust and company service providers, and investment-migration operators
- Under the AMLR
- Both are named in Art. 3 — investment-migration operators explicitly, for residence-by-investment schemes. AMLR Art. 3 and Art. 19
- What triggers the work
- Due diligence on the business relationship, and when a legal entity is created or its ownership transferred.
Professional football clubs and football agents
- Under the AMLR
- Named in Art. 3, but from 10 July 2029 rather than 10 July 2027. AMLR Art. 3
- What triggers the work
- Transactions with investors, sponsors, agents and player transfers.
Anyone else who accepts a crypto payment
- Under the AMLR
- No — a company outside Art. 3 does not become an obliged entity by taking a crypto payment. Reg. 269/2014 Art. 2 and Art. 17
- What triggers the work
- The sanctions layer still binds you, with no threshold: an asset freeze and a prohibition on making funds available to a listed person apply to every EU person and entity.
| Sector | Obliged entity? | Under the AMLR | What triggers the work |
|---|---|---|---|
| Crypto exchanges, brokers and OTC desks (CASPs) | Yes | Financial institution — the AMLR's definition of a financial institution includes a crypto-asset service provider as defined by MiCA. AMLR Art. 2 and Art. 19 | Due diligence on an occasional transaction of EUR 1 000 or more; below that, identification and verification of the customer. |
| E-money institutions, payment institutions and fintechs | Yes | Financial institution. AMLR Art. 2 and Art. 19 | Due diligence on transfers of funds of EUR 1 000 or more, and on a business relationship whatever its size. |
| Crypto payment processors serving merchants | Yes | Financial institution, where the service performed is a crypto-asset service under MiCA. AMLR Art. 2 and Art. 19 | EUR 1 000 on occasional transactions; your merchants inherit whatever you conclude, whether or not you send them the evidence. |
| FX, CFD and securities brokers taking crypto deposits | Yes | Financial institution — as an investment firm. Crypto funding does not change the category, it changes what you have to be able to explain. AMLR Art. 2 and Art. 19 | Due diligence on the business relationship; the crypto deposit is a transaction on that relationship, not an occasional one. |
| Prop trading firms | Not as such | Usually not — a prop firm trading its own capital is generally outside the financial-institution definition, and this is decided by its actual licence and structure, not its marketing. Reg. 269/2014 Art. 17 | The sanctions layer binds it regardless, and it is the sender on every payout. Payment partners apply their own diligence on top. |
| Online casinos, sportsbooks and other gambling operators | Yes | Providers of gambling services. AMLR Art. 3 and Art. 19 | Due diligence at EUR 2 000 or more, on the wagering of a stake or the collection of winnings — counted per customer, not per session. |
| Crowdfunding platforms and intermediaries | Yes | Crowdfunding service providers and crowdfunding intermediaries. AMLR Art. 3 and Art. 19 | Due diligence on the business relationship; EUR 10 000 on an occasional transaction. |
| Estate agents | Yes | Estate agents, including when acting as intermediaries in letting where the monthly rent is EUR 10 000 or more. AMLR Art. 3 and Art. 19 | Due diligence on the business relationship, and on an occasional transaction of EUR 10 000 or more. |
| Property developers and construction firms selling their own units | Not as such | Not by virtue of being a developer. Art. 3 names estate agents acting as intermediaries; a developer selling its own stock is a different thing, and national law varies on where the line sits. Reg. 269/2014 Art. 17 | The sanctions layer applies in full, and a buyer paying in USDT is a payment your file has to be able to explain whether or not you are an obliged entity. |
| Dealers in high-value goods — cars, yachts, aircraft, jewellery, watches | Yes | Persons trading in high-value goods, and persons trading in precious metals and stones, where that is their regular or principal activity. AMLR Art. 3 and Art. 74 | Reports to the FIU on motor vehicles at EUR 250 000 or more and watercraft or aircraft at EUR 7 500 000 or more, acquired for non-commercial purposes. |
| Art dealers, galleries, auction houses and free-zone operators | Yes | Persons trading in, or acting as intermediaries in the trade of, cultural goods and works of art — including when carried out by free zones and customs warehouses. AMLR Art. 3 and Art. 19 | Due diligence at EUR 10 000 or more, in a single transaction or linked transactions. |
| Lawyers, notaries, accountants, auditors and tax advisors | Yes | Listed in Art. 3, for defined activities — including assisting a client with the management of crypto-assets. AMLR Art. 3 and Art. 19 | Due diligence on the business relationship; EUR 10 000 on an occasional transaction. |
| Trust and company service providers, and investment-migration operators | Yes | Both are named in Art. 3 — investment-migration operators explicitly, for residence-by-investment schemes. AMLR Art. 3 and Art. 19 | Due diligence on the business relationship, and when a legal entity is created or its ownership transferred. |
| Professional football clubs and football agents | Yes | Named in Art. 3, but from 10 July 2029 rather than 10 July 2027. AMLR Art. 3 | Transactions with investors, sponsors, agents and player transfers. |
| Anyone else who accepts a crypto payment | Not as such | No — a company outside Art. 3 does not become an obliged entity by taking a crypto payment. Reg. 269/2014 Art. 2 and Art. 17 | The sanctions layer still binds you, with no threshold: an asset freeze and a prohibition on making funds available to a listed person apply to every EU person and entity. |
Summarised from Regulation (EU) 2024/1624 as published, in our words rather than the regulation’s. Whether a specific business falls inside a category depends on its licence, its structure and its Member State — this table is where that conversation starts, not where it ends.
Where a crypto payment differs from a bank transfer
A bank transfer arrives with a name attached and a correspondent bank that has already looked at it. A crypto payment arrives with an address and nothing else — no name, no intermediary who screened it, and no way to send it back once it has settled. The obligations are the same; the amount of work that someone else has already done for you is not.
The practical consequence is that the check has to happen before you credit, not after. Three things are readable at that moment and all three are public: whether the paying address appears on an official sanctions list, whether the stablecoin’s issuer has frozen it, and whether the transaction you were told about actually exists on-chain with the amount you were told.
Pages for specific sectors
Crypto exchanges & OTC desks
Your vendor gives you a score today. Your supervisor asks what it was based on, on a day eighteen months ago, under the policy you had then.
EMIs, payment institutions & fintechs
Your AML programme is mature on every rail except the one where the counterparty is an address instead of an IBAN.
Crypto payment processors
Your merchants inherit your screening outcome. When their regulator asks what it was based on, the answer should not be 'the processor said yes'.
FX & CFD brokers
You are a broker, not a crypto exchange — but the moment a client funds in USDT, your regulator treats the deposit as yours to explain.
Prop trading firms
Prop firms move money in both directions with thousands of individuals, often unlicensed, often in crypto. That combination is exactly what payment partners and future regulators scrutinise.
Online casinos & sportsbooks
A player funds in USDT, plays for twenty minutes, and asks to cash out to a different address. Your obligation begins at the deposit and is judged at the withdrawal.
Real estate agents & developers
A buyer offers to pay the reservation deposit in USDT. Your obligation is not to have an opinion about crypto; it is to be able to show what you checked before you took it.
Dealers in high-value goods
The cash limit is what moved these payments to crypto. The obligations did not move with them.
Common questions
Do I have to screen crypto payments if my company is not a financial institution?
Two different obligations are involved and they have different scopes. Sanctions rules apply now, to everyone: EU asset-freeze regulations prohibit making funds or economic resources available to a listed person, and that prohibition binds every person in the Union, every national of a Member State anywhere, every company constituted under a Member State's law, and any company for business done in whole or in part in the Union. No threshold, no obliged-entity status required. Customer due diligence under the AMLR is the narrower one: it applies to the categories listed in Article 3 of Regulation (EU) 2024/1624, from 10 July 2027.
When does the EU AMLR start to apply?
10 July 2027. Regulation (EU) 2024/1624 applies directly in every Member State on that date, with no national implementing act required, and the Sixth Anti-Money Laundering Directive must be transposed by the same date. Football agents and professional football clubs come into scope on 10 July 2029 instead.
Is a property developer or construction company an obliged entity?
Not by virtue of being one. Article 3 names estate agents, including when acting as intermediaries in letting at a monthly rent of EUR 10 000 or more; a developer selling its own units is a different position, and national law varies on where the line falls. The sanctions layer applies either way, so a buyer paying a deposit in USDT is a payment the file has to be able to explain — regardless of obliged-entity status.
What is the due diligence threshold for a crypto payment?
Under Article 19 of the AMLR the general occasional-transaction threshold is EUR 10 000, but for transfers of funds and for crypto-asset service providers' occasional transactions it drops to EUR 1 000, for gambling services it is EUR 2 000 on the stake or the collection of winnings, and for cash it is EUR 3 000. A business relationship triggers due diligence at any amount.
Does KYTGate make my company compliant?
No product does. KYTGate screens a crypto payment against official sanctions data and live issuer freeze status, applies your own written policy, and keeps a signed record of what was checked and what was decided — so the control exists and can be evidenced later. Which obligations apply to you, and what your policy should say, is a question for your counsel and your supervisor.
The sanctions and issuer-freeze checks on this site are free and need no account. If you have a payment address in front of you, that is the fastest way to see what the layer-1 obligation looks like in practice.
Decision-support software, not legal advice. Sources are linked next to each row so you can read them yourself; which obligations apply to your business depends on your licence, structure and Member State — confirm with counsel.