This summer season, Roman Storm, the co-founder of notorious crypto mixer Twister Money, was convicted in New York federal court docket of conspiring to function an unlicensed money-transmitting enterprise.

Prosecutors celebrated Storm’s conviction as a significant victory within the combat towards crypto cash laundering, however the actuality is extra difficult.

For years, regulators have handled mixers like Twister Money as the final word cash laundering menace. Nameless, opaque, and seemingly tailored for criminals, it’s simple to consider these instruments are driving the vast majority of crypto cash laundering. However the numbers inform a distinct story.

The most well-liked crypto cash laundering engines aren’t money mixers, they’re centralized exchanges: huge, brand-name buying and selling platforms which might be licensed, regulated, and overtly linked to the worldwide banking system. These exchanges seem extremely regulated and properly supervised, touting compliance groups and “Know Your Buyer” (KYC) verification checks; nonetheless, in observe, they permit prison exercise to fester, functioning as the first on and off-ramps for soiled crypto.

To really fight crypto cash laundering, regulators must focus their efforts on bolstering KYC necessities, and policing the centralized exchanges the place most cash laundering takes place.

Centralized exchanges are laundering hubs

All through 2024, the vast majority of illicit crypto funds had been routed to centralized exchanges, in accordance with a 2025 Chainalysis report.

Centralized exchanges are the place criminals flip to transform their soiled crypto into spendable money. They’re the ultimate step in most laundering schemes: the purpose the place illicit funds are swapped for {dollars}, euros, or yen and moved into actual banks.

Criminals gravitate to those platforms for a similar motive respectable merchants do: liquidity, velocity, and world attain. A mixer like Twister Money can obfuscate funds on-chain, however it could’t flip them into money and transfer them right into a checking account — solely an change with deep liquidity and fiat connections can do this. Typically, centralized exchanges depend on compliance packages which might be under-resourced, poorly enforced, or undermined by permissive jurisdictional guidelines, permitting illicit transactions to slide via the cracks.

Excessive-profile enforcement circumstances have uncovered simply how systemic this downside is. The U.S. Justice Division’s 2023 settlement with Binance revealed that the outstanding change had processed transactions tied to ransomware, darknet markets, and sanctioned entities. The change has since boosted compliance efforts, spending $213 million on the division in 2023. BitMEX was equally sentenced to a $100 million high-quality after it pleaded responsible to Financial institution Secrecy Act violations (BitMEX’s founders and former executives Arthur Hayes, Ben Delo and Samuel Reed pleaded responsible to associated prices and had been later pardoned by U.S. President Donald Trump.).

Focusing regulatory power on mixers whereas letting exchanges stay the first fiat gateways for illicit funds is like locking the home windows whereas leaving the entrance door extensive open.

KYC isn’t the silver bullet we fake it’s

Know Your Buyer (KYC) guidelines are the cornerstone of crypto compliance. On paper, they promise to maintain dangerous actors out by verifying identities, screening transactions, and flagging suspicious exercise. In actuality, they’re usually a box-ticking train, a skinny veneer of diligence that provides regulators the phantasm of safety whereas subtle criminals discover methods round it.

Weak KYC processes are one downside. Some exchanges settle for low-quality id paperwork or depend on automated techniques that may be tricked with deepfakes or stolen information. Others outsource their compliance totally, turning it right into a contractual checkbox fairly than an energetic safeguard. Even when the method works, it could’t cease decided launderers from utilizing mules, straw accounts, or shell corporations to move preliminary checks.

However the larger flaw is structural. KYC is designed to vet particular person accounts, to not detect laundering patterns at scale. A sanctioned entity would possibly by no means open an account in its personal title. As a substitute, it would unfold transactions throughout dozens of intermediaries, routing funds via layers of seemingly respectable accounts till they land at an change that converts them into fiat. By the point the funds hit the compliance group’s radar, they’ve usually handed via so many fingers that the paper path feels clear.

For this reason enforcement actions towards main exchanges hold revealing the identical uncomfortable fact: compliance isn’t failing as a result of the principles don’t exist; it’s failing as a result of the techniques imposing them are reactive, under-resourced, and simple to sport.

Hardening centralized exchanges towards cash laundering

Centralized exchanges will at all times be engaging targets for launderers as a result of they sit on the junction of crypto and fiat. That makes enforcement not only a matter of coverage, however of design. Actual progress means transferring past symbolic KYC checks to techniques that detect laundering patterns in actual time, throughout accounts, and throughout jurisdictions.

That begins with resourcing compliance groups to match the dimensions of the platforms they monitor. It means closing authorized loopholes that allow exchanges function from permissive jurisdictions whereas serving high-risk markets, and holding executives personally accountable for fraud when controls fail. Regulators should demand, and confirm, that exchanges share actionable intelligence with one another and with legislation enforcement, so criminals can’t merely hop from one platform to a different undetected.

That is a lot more durable than concentrating on cash-mixers.

None of this will likely be simple, but it surely’s the one option to sort out laundering the place it really occurs. Till exchanges are hardened on the structural stage, enforcement actions will stay reactive, and billions in illicit funds will hold slipping via the gates.