AML checks on crypto payments: what they catch, what they do not

Crypto is public data with private keys. That is the opposite of “no one can see this”. Mixers, stolen funds, sanctioned clusters and high-risk services leave traces. AML screening on an address is a risk signal, not a court verdict.

What a merchant can check

CryBit has a public AML page: paste an address, pick the coin and network, get a risk label and flags. Use it before you treat a large incoming payment as ordinary turnover. The explorer page is the other half — look up a transfer when support asks “did it land?”.

• Low risk is not a guarantee. It is the absence of known bad labels at that moment.
• A flag is a reason to pause and ask, not to publish the customer’s name.
• The tool does not replace your own policy or a licensed compliance team.

Inside acquiring

Payments that go through CryBit are not a blind drop into a personal wallet. Invoices are scoped, balances are a ledger, and risky flows can be reviewed. That is different from posting one static address on a landing page and hoping.

What AML cannot do

It cannot see the human behind a fresh wallet. It cannot promise that a clean address stays clean tomorrow. It cannot be the only control if you are in a licensed business. Treat it as one input, next to invoices, support chat, and your own terms.

Screening is a flashlight. It is not a wall.