Liquidity risk assessment focuses on the ability to execute trades without large price swings, which is reflected in order book depth and bid-ask spreads.

Effective risk mitigation requires VASPs to obtain sufficient information about counterpart VASPs to assess the quality of their regulatory supervision and controls. This helps determine the risk of transactions and build a risk-based framework for correspondent relationships.

Having no requirements (A) or engaging with poorly regulated jurisdictions (B) increases risk. Blanket high-risk classification (C) without proper assessment is inefficient.

FATF Recommendation 15 and DFSA guidance emphasize due diligence on counterparties as a critical control.

The ability to monitor the cryptoasset for unusual activity directly impacts the residual AML risk, as effective monitoring enables detection and prevention of illicit transactions. Even if a blockchain is public or private (A), or the asset is profitable (B), the lack of proper monitoring mechanisms increases risk. The number of exchanges supporting the asset (D) is less significant than monitoring capability.

AML frameworks and DFSA guidance stress that risk mitigation depends heavily on effective transaction monitoring.

An effective AML CDD program must include:

Staff training on gathering CDD (A)

Maintaining complete information to support risk profiling (B)

Procedures to address situations where the customer's true identity is unclear or questionable (F)

Annual client reviews (D) and IP address monitoring (E) may be part of broader AML controls but are not fundamental CDD requirements. Maintaining a list of high-risk virtual assets (C) is important but relates more to product risk management than direct CDD.

Red flags related to anonymity include transactions where virtual assets are cashed out at exchanges from peer-to-peer hosted wallets with no clear business rationale. Such behavior indicates attempts to obscure the origin or destination of funds, characteristic of laundering activities.

Executing high-value transactions after inactivity (A) or frequent transfers to known VASPs (C) may be suspicious but are less directly linked to anonymity. Exchanging at a loss (D) is a different type of red flag.

FATF’s red flag indicators list (2021) highlights (B) as a key sign of anonymity-related risk.

EDD is required when dealing with customers or transactions from jurisdictions identified as high-risk for ML/TF. This aligns with FATF Recommendation 19 and local UAE regulations.

Mixing and tumbling services are used to obscure the origin of funds by blending multiple transactions, resulting in unknown or disguised sources of funds. This is a classic money laundering technique.

Rapid trades (B), IP address obfuscation (C), and transactions to high-risk jurisdictions (D) are separate or related risks but not direct indicators of mixing/tumbling.

Red flags include private sharing of NFTs without public trading (A), indicating potential lack of transparency, and new coins with untested protocols controlled by few wallets (C), signaling possible manipulation or fraud.

Tokens endorsed by celebrities with price increases (D) or active social media presence (E) are less directly indicative of fraud but require monitoring. Low social media presence with wide ownership and original whitepapers (B) is typically less suspicious.

The FATF Travel Rule requires Virtual Asset Service Providers to share originator and beneficiary information for virtual asset transfers exceeding a certain threshold. Its purpose is to mitigate ML/TF risks by increasing transparency and enabling authorities to trace the movement of funds across institutions and jurisdictions.

It does not aim to slow transactions (B) or directly enhance CDD (A), although it supports the overall AML framework including CDD.

This rule is a cornerstone of FATF’s efforts to regulate virtual asset transfers effectively and is adopted by DFSA and other regulators.

Indirect exposure refers to a situation where cryptoassets are not directly associated with illicit activity but have transactional links through other addresses that are associated with risky or illicit behavior. Blockchain analytics tools detect these indirect links to flagged addresses, allowing firms to assess risk based on network connections rather than direct ownership or activity.

The DFSA AML guidance and international FATF Virtual Assets guidance explain that indirect exposure is a critical concept for transaction monitoring as it broadens the detection scope beyond direct transactions, flagging assets that might be “tainted” through intermediary addresses.