Sanctioned entities received an estimated $104 billion in crypto last year—a 694% year-on-year increase—while a single exchange, OKX, faced fines exceeding $500 million for leaving more than $5 billion in transactions unmonitored. As Binance’s $4.3 billion settlement and the February 2026 suspension of a European VASP for missing AML officers confirm, the question regulators are now asking is not who your customers are—it is what they are doing with their funds.
The regulatory framework is catching up. The FATF’s March 2026 report on offshore virtual asset service providers (VASPs) identifies governance gaps that Know Your Customer (KYC) alone cannot close. The EU’s Transfer of Funds Regulation, effective December 2024, now covers all crypto transactions regardless of amount. The GENIUS Act brought stablecoins under the Bank Secrecy Act in July 2025, mandating real-time monitoring and sanctions screening. These developments mark an irreversible shift: Know Your Transaction (KYT)—the continuous, behavioural monitoring of crypto transactions—has graduated from best practice to primary compliance obligation.
KYC establishes who a customer is at onboarding. KYT reveals what they are doing in real time. A customer may pass identity checks with entirely legitimate documents while routing funds through mixing services, hopping across blockchains via bridges, or transacting with wallets linked to sanctioned entities. Without continuous behavioural monitoring, that exposure is invisible until enforcement arrives. Elliptic’s research identified $22 billion in illicit funds successfully laundered through blockchain bridges alone, including $540 million through RenBridge—over $153 million of which represented ransomware proceeds. Stablecoins now account for roughly 84% of illicit crypto transaction volume, and North Korea’s $1.46 billion Bybit theft—the largest virtual asset theft on record—demonstrated that nation-state actors exploit monitoring gaps to move funds faster than institutions can respond.
Modern KYT platforms address this by assigning dynamic risk scores in near real-time across dozens of parameters: counterparty exposure, wallet clustering, mixer interactions, and jurisdictional risk. Nine of the ten largest crypto exchanges rely on Chainalysis; Elliptic screens transactions representing 66% of global crypto exchange volume; TRM Labs launched its AI-powered Co-Case Agent investigation assistant in March 2026, partnering with Zepz to protect stablecoin remittance flows. These are not niche compliance tools—they are the backbone of the industry’s risk management infrastructure, and the global transaction monitoring market is expanding at 13.3% annually toward $62 billion by 2034.
The consequences of inadequate KYT extend well beyond regulatory fines. An exchange without real-time monitoring risks becoming a conduit for sanctions evasion, exposing itself to secondary sanctions, correspondent banking restrictions, and criminal liability. Legacy rules-based alert systems compound the problem: fixed thresholds fire on every breach regardless of context, generating alert fatigue that buries compliance teams in false positives while genuine risks go undetected. Cross-chain activity amplifies the threat—most legacy systems cannot trace funds across multiple blockchains or through bridge transactions in real time, leaving the laundering chain invisible precisely where it is most active.
Effective KYT governance rests on four capabilities operating in concert: real-time ingestion across supported blockchain networks; cross-chain tracing that maps fund flows through bridges, atomic swaps, and DeFi protocols; AI-driven behavioural analytics that establish user baselines and detect deviations no threshold-based system can anticipate; and case management integration that ensures alerts translate into documented, auditable compliance decisions. Travel Rule alignment adds a further layer: with 73% of FATF jurisdictions having passed implementing legislation, originator and beneficiary data obligations are live in most major markets, and supervisory scrutiny is intensifying.
The immediate priority is a gap assessment: mapping current monitoring coverage against cross-chain exposure, stablecoin volume, and DeFi protocol interactions. Batch-processing systems should be replaced with streaming analytics capable of sub-second risk scoring. Governance documentation—demonstrating that monitoring controls are tested, calibrated, and regularly reviewed—has become a primary focus of regulatory examinations following the OKX and Binance settlements. The U.S. Treasury’s March 2026 innovation roadmap for countering illicit finance in digital assets explicitly frames AI-assisted transaction monitoring as core next-generation AML infrastructure. Institutions that invest in KYT now build a programme genuinely proportionate to the risk they carry. Those that wait face a compliance gap that is significantly more costly to close after enforcement has arrived.
About WIDTH
WIDTH is an AI-native unified compliance platform dedicated to helping global regulated industries complete compliance work in a more efficient, auditable, and scalable way. By integrating intelligent workflows, risk automation, and audit-grade execution capabilities, WIDTH enables institutions to achieve both greater efficiency and greater trust in an evolving regulatory environment.
