Anti-Money Laundering (AML) & Compliance Policy

1. Purpose & Regulatory Mandate

This Anti-Money Laundering (AML), Counter-Terrorist Financing (CTF), and Sanctions Compliance Policy (“AML Policy”) defines the rigorous compliance standards and operational controls enforced by CryptoEscrowDesk (“the Platform”, “we”, “us”, or “our”).

Our compliance framework is designed in alignment with international best practices and regulatory recommendations, including:

• FATF Recommendations: Financial Action Task Force (FATF) Guidance for a Risk-Based Approach to Virtual Assets and Virtual Asset Service Providers (VASPs);
• European Union AML Directives: The EU 5th and 6th Anti-Money Laundering Directives (5AMLD / 6AMLD) and the Markets in Crypto-Assets (MiCA) regulatory standards;
• US FinCEN Guidelines: Financial Crimes Enforcement Network (FinCEN) guidance on the application of Bank Secrecy Act (BSA) regulations to persons administering virtual currencies;
• Global Sanctions Regimes: Sanctions enforcement frameworks administered by the US Department of the Treasury Office of Foreign Assets Control (OFAC), the United Nations Security Council (UNSC), the European Union External Action Service, and the UK HM Treasury Office of Financial Sanctions Implementation (OFSI).

Escrow exists to provide honest buyers and sellers with mutual protection in commercial transactions. We do not provide anonymous custodial services or tools for concealing the illicit origin, ownership, or destination of funds.

2. Compliance Governance & MLRO Role

The Platform maintains an independent Compliance Department led by a designated Money Laundering Reporting Officer (MLRO) / Chief Compliance Officer possessing the authority and resources to enforce this policy:

• Independent Oversight: The Compliance Department has unrestricted authority to pause, decline, freeze, or reverse transactions, block user accounts, and report suspicious activities without interference from commercial or business development teams.
• Continuous Risk Assessments: Regular enterprise risk assessments are conducted to evaluate evolving blockchain typologies, mixing tools, darknet nexus points, and jurisdictional vulnerability ratings.
• Mandatory Staff Training: All operational staff, transaction review officers, and customer support representatives undergo comprehensive annual AML/CTF training regarding red flags, identity verification techniques, and reporting protocols.

3. Risk-Based Customer Due Diligence (CDD) & Tiered KYC

We deploy a risk-based tiered verification framework tailored to transaction values, user risk scores, and counterparty characteristics:

Politically Exposed Persons (PEPs) & Adverse Media Screening

All transacting parties undergoing Tier 1 and Tier 2 verification are screened against global databases of Politically Exposed Persons (PEPs), their immediate family members, close business associates, and global adverse media reports. Any PEP relationship requires mandatory senior management approval before escrow services can be rendered.

4. Global Sanctions & Prohibited Jurisdictions

The Platform strictly enforces global economic, financial, and trade sanctions. We utilize automated real-time screening engines combined with manual compliance verification to prevent sanctioned individuals, entities, and regions from accessing our escrow services.

Sanctions Registries Screened

• United States OFAC: Specially Designated Nationals and Blocked Persons List (SDN List), Consolidated Non-SDN Sanctions Lists, and Sectoral Sanctions Identifications (SSI);
• United Nations Security Council (UNSC): Consolidated United Nations Security Council Sanctions List;
• European Union (EU): Consolidated List of Persons, Groups, and Entities Subject to EU Financial Sanctions;
• United Kingdom (OFSI): Consolidated Sanctions List maintained by HM Treasury.

Comprehensive Jurisdictional Restrictions

The Platform does not provide services to individuals or entities located in, organized under, or resident of the following embargoed jurisdictions:

• Sanctioned Territories: Cuba, Iran, North Korea (DPRK), Syria, and the Crimea, Donetsk, and Luhansk regions of Ukraine;
• FATF Blacklist: Jurisdictions identified on the FATF “High-Risk Jurisdictions subject to a Call for Action”;
• High-Risk Jurisdictions: Regions subject to severe international restrictions, export bans, or elevated financial crime risk as determined by our Compliance Department.

5. Blockchain Forensics & Address Screening

Cryptocurrency transactions leave transparent, immutable traces on public blockchains. We leverage industry-standard blockchain forensics, on-chain clustering algorithms, and risk-scoring engines to monitor all digital asset deposits and payout destination wallets.

High-Risk On-Chain Categories Screened

• Coin Mixers & Tumblers: Decentralized obfuscation protocols, privacy pools, and mixing services (e.g., Tornado Cash, Blender.io, ChipMixer);
• Darknet Marketplaces: Addresses associated with illicit marketplaces, counterfeit vendors, or unauthorized credential trafficking;
• Ransomware & Cyber Extortion: Wallets linked to known ransomware campaigns, malware command-and-control infrastructure, or extortion addresses;
• Stolen Funds & Exploit Proceeds: Digital assets originating from exchange hacks, decentralized finance (DeFi) bridge exploits, or phishing drains;
• Sanctioned Smart Contracts: Cryptocurrency addresses or smart contracts explicitly sanctioned by OFAC or international regulatory bodies.

Handling of Flagged Deposits

If an incoming deposit is flagged with an unacceptable risk score or originates from a tainted cluster:

1. The transaction is immediately paused and quarantined;
2. Funds are locked in a segregated cold escrow holding;
3. The depositing user is required to provide comprehensive Source of Wealth and Source of Funds documentation;
4. If the funds are determined to be the direct proceeds of crime or linked to active sanctions, the assets remain frozen, and formal reports are submitted to competent law enforcement agencies.

6. Prohibited Typologies & Red Flags

The Platform monitors transactions for suspicious patterns and behaviors (“Red Flags”). Any transaction exhibiting these characteristics is subject to immediate compliance escalation:

• Structuring (“Smurfing”): Breaking down a large transaction into multiple smaller transactions to deliberately evade KYC thresholds or compliance review limits;
• Rapid Pass-Through Velocity: Rapidly opening and funding escrow deals with immediate release or cancellation requests that lack genuine commercial rationale or verifiable deliverables;
• Third-Party Funding & Diversion: Deposits sent from cryptocurrency wallets belonging to third parties who are not the named Buyer, or requests to disburse payouts to third parties unconnected to the transaction agreement;
• Evasive Customer Behavior: Providing inconsistent, altered, or fraudulent identity documents, refusing to provide proof of delivery, or demonstrating reluctance to explain the commercial purpose of a transaction;
• Darknet & Prohibited Goods Nexus: Transactions involving sales of stolen credit cards, malware, unlicensed firearms, illegal drugs, or unauthorized access credentials.

7. Suspicious Activity Reporting (SAR / STR)

In compliance with international financial intelligence regulations, CryptoEscrowDesk is legally mandated to report suspicious, unusual, or illicit transactions to competent national Financial Intelligence Units (FIUs) and law enforcement bodies.

A Suspicious Activity Report (SAR) or Suspicious Transaction Report (STR) is filed whenever the Platform has reasonable grounds to suspect that funds involve the proceeds of criminal activity, are related to terrorist financing, or represent an attempt to evade sanctions or AML laws.

8. Statutory “No Tipping Off” Rule

If your account or transaction is paused for compliance review, our staff may request specific verification documentation without disclosing specific internal risk flags or external reporting actions. Any failure to comply with documentation requests will result in indefinite transaction suspension.

9. Immutable Double-Entry Ledger & Record Retention

Accountability and transparency are fundamental to our compliance architecture:

• Append-Only Double-Entry Ledger: All financial entries are recorded as balanced double-entry rows. Database-level triggers permanently prevent updating or deleting posted ledger entries, ensuring an incorruptible financial audit trail.
• Immutable Audit Logging: All operator actions, deposit verifications, milestone approvals, dispute adjudications, and release authorizations are recorded with actor IDs, cryptographic IP hashes, and immutable timestamps.
• 5 to 7 Year Record Retention: In accordance with statutory AML regulations, all KYC identity documentation, transaction messaging records, on-chain transaction hashes, and ledger audit logs are retained for a minimum statutory period of five (5) to seven (7) years following transaction settlement or account closure.

10. Asset Freezing & Law Enforcement Liaison

The Platform cooperates with verified, lawful requests submitted by competent judicial, regulatory, and law enforcement authorities worldwide.

Freezing Authority

CryptoEscrowDesk reserves the absolute legal right to pause transactions, freeze escrowed digital assets, and block account access upon:

• Receipt of a valid court order, search warrant, seizure warrant, or formal restraining notice from a court of competent jurisdiction;
• Receipt of an official directive from an authorized financial regulatory body or Financial Intelligence Unit;
• Detection of confirmed cyber theft, ransomware nexus, or on-chain sanctions taint.

Law Enforcement Inquiry Guidelines

Authorized law enforcement agencies and judicial officers seeking transaction records, ledger logs, or asset preservation must submit official requests to our legal desk from an official government email domain, accompanied by valid judicial documentation (subpoena, warrant, or court order).

11. Compliance Contact & Reporting Channels

For questions regarding this AML Policy, identity verification submissions, or official law enforcement correspondence, please contact our Compliance & MLRO Desk:

• Operating Entity: CryptoEscrow Desk LLC
• Regulatory Status: FinCEN Registered MSB (Registration #3100024891024)
• Money Laundering Reporting Officer (MLRO): Marcus Vance, Head of Compliance & MLRO
• Registered Office: 300 Delaware Avenue, Suite 210, Wilmington, DE 19801, USA
• Operating Desk: 333 S.E. 2nd Avenue, Suite 2000, Miami, FL 33131, USA
• Compliance Email: info@cryptoescrowdesk.com
• Direct Telephone: +1 (813) 586-4511
• Subject Line: COMPLIANCE & AML INQUIRY or LAW ENFORCEMENT LIAISON