Failed an AML Check? What a High-Risk Result Means and What to Do Next
There is no universal “pass” or “fail” in crypto AML: every platform sets its own line, and a result describes an address, not you. Here is how to find out what was flagged, how to respond when funds are held, what goes into a source-of-funds file — and which “fixes” make things worse.
October 29, 202610 min readAML Check Hub editorial team
Contents
IN SHORT
“Failed an AML check” is not a fixed status: each platform sets its own threshold, and the result is a snapshot of an address, not a verdict on you. If a platform holds your funds or your own check shows High (71–90) or Critical (91–100), do four things: find the category that triggered it, tell direct from indirect exposure, do not move funds through new addresses, and prepare a source-of-funds file. You cannot “clean” an address — you can explain the money. Anyone selling “AML cleaning” is a scammer.
01What “failing” an AML check actually means
People use the phrase for three different situations. The right response depends on which one you are in.
- A platform screened your transfer
- An exchange, payment service or P2P platform checks the address that sent you funds or the one you deposit to. Above its internal limit it holds the funds, asks questions or declines. The limit is theirs and is rarely published.
- Your own check came back risky
- You ran a check and the result is Medium, High or Critical. Nothing is blocked yet — it is a warning you can act on before you send or accept anything.
- A counterparty refused your address
- Someone you deal with checked your address and stopped the deal. You will need the same explanation as in the first case.
Deposit on hold, “additional verification”
Automatic screening flagged the incoming transfer. An analyst reviews it and usually asks where the money came from.
Withdrawals or the account restricted
A stronger reaction. Often tied to a larger share of risky funds or a severe category; expect a formal source-of-funds request.
Your own result is High or Critical
Significant or severe exposure. Open the categories before anything else — the number alone tells you little.
A counterparty declines your address
Their policy, not a law. Ask which category triggered it and what they would accept.
02Step 1: find out exactly what was flagged
- 01Write down the exact wording the platform used, the time, and which transaction or address it concerns.
- 02Collect the addresses involved: the one that received the funds and the one they came from.
- 03Run an AML check on each. It shows what a screening tool is likely to see — the steps are in how to do an AML check on a wallet.
- 04Read the categories, not just the score: sanctions, darknet, scams, fraud, mixers, high-risk services. Each one is explained in what a crypto wallet AML check is.
- 05Find out whether the exposure is direct or indirect, and how many transfers away it sits.
- 06Open the incoming transfers that brought the risk in. Usually it is one or two senders, not your whole history.
Example: 84
- Low0–30
- Medium31–70
- High71–90
- Critical91–100
03Direct or indirect: how serious is it
- Direct exposure to a severe category
- The address itself dealt with a sanctioned entity, a darknet market or a scam. This is a real warning whatever the share. Do not send to or accept from it.
- Indirect, a few transfers away
- Funds passed through a risky entity one to three hops before reaching the address. Worth a close look: open the path and ask the counterparty where the money came from.
- Indirect, many transfers away
- Four or more hops and a small share are usually background noise: distance and mixing dilute the link. Note it, do not panic.
- Lower-severity categories
- Gambling, bridges or a high-risk exchange only. Often legitimate use, but some platforms' compliance rules care about them.
How a clean-living wallet ends up flagged at all is explained in why a wallet shows high risk when you did nothing wrong, and the logic behind the two kinds of exposure is in the methodology.
04If a platform is holding your funds
- Use one official channel
- Write only through the platform's own support or ticket system. Messages from a “compliance officer” who contacts you first in Telegram are scammers.
- Do not move the funds around
- Sending the rest through new addresses to “get ahead” of the review looks like evasion and can turn a routine question into a restriction.
- Answer exactly what is asked
- Short, consistent and checkable. A second answer that contradicts the first does more harm than a modest amount of risk ever would.
- Track the dates
- Reviews run from hours to several weeks depending on the platform and the case. Note when you were promised an answer and follow up in the same ticket.
- Escalate in writing
- If the platform stalls, send a formal complaint and keep every message. For large sums, a lawyer who knows crypto in your jurisdiction can tell you what is realistic.
Know what the platform saw before you answer
Check both addresses and get the score, categories and a PDF report you can keep. Your first check is free.
05What to put in a source-of-funds file
A platform is not asking you to prove innocence. It wants to understand where the money came from. Make that easy, with documents rather than words:
- The origin of the money
- Bank statements, a receipt for buying crypto on a regulated exchange, a payslip, invoices or a contract for services, a sale agreement.
- The P2P deal
- The chat history, the payment confirmation, the counterparty's address and the transaction hash.
- The path on-chain
- Transaction hashes showing how the funds travelled from the origin to the flagged address.
- Your AML report
- A PDF that shows the exposure and its size, so the explanation is about real numbers and not guesses.
- A short written summary
- Half a page: who sent what, when, how much and why. Dry facts, no emotion.
Never fabricate or edit a document. A false explanation is far worse than a high score and is the quickest way to a permanent account ban.
06Can you “pass” an AML check?
Not in the sense of cleaning an address. History on a blockchain cannot be erased. A result changes only when new data arrives — new transfers, a new attribution by the data provider — or when a platform accepts your explanation of the old ones. In practice that leaves two honest routes: explain the money you already have, and keep future funds clean.
- Do not run funds through mixers, bridges or chains of new addresses. It looks like evasion and adds exactly the exposure that high scores are made of.
- Do not pay for “AML cleaning” or “score reduction”. Nobody can edit blockchain data or a provider's database. It is a scam, and actual “cleaning” of funds is money laundering.
- Do not send forged or edited documents. Platforms cross-check them, and a lie ends the conversation.
- Do not open duplicate accounts to dodge a review. It usually leads to a permanent ban and a worse record.
- Never share your seed phrase or private key to “verify” anything. A real address check needs only the public address.
07How to keep future checks clean
- Check the sender before you accept
- Run an AML check on the counterparty's address first. For stablecoins see the USDT AML check.
- Keep a separate address for P2P
- A problem with incoming funds then stays on one address instead of spreading to everything you own.
- Prefer regulated sources for the main flow
- Funds from large, compliant exchanges usually carry a cleaner trace than anonymous peer-to-peer chains.
- Keep your records
- Reports, transaction hashes and deal chats are proof of due diligence if anyone asks.
- Re-check before large transfers
- A result is a snapshot. Repeat the check before each significant amount.
A check costs far less than a frozen account — see what an AML check costs. If the funds are frozen by the issuer rather than a platform, the steps differ: read USDT frozen: why Tether blocks addresses and what to do. How the score is built is on the methodology page.
Check before it becomes a problem
Paste an address and see its risk score and category breakdown in seconds, with a PDF report for your records.
Questions and answers
What does it mean when a wallet fails an AML check?
How do I pass an AML check on my wallet?
What AML score is considered high risk?
An exchange held my deposit after an AML flag. What should I do?
Can an address that passed an AML check fail later?
Does a failed AML check mean I broke the law?
How long does an AML review take?
This article is general information, not legal advice, and outcomes depend on the platform, the case and the jurisdiction. AML Check Hub screens addresses against available third-party blockchain intelligence and reports the result as-is: a high-risk result is a strong warning sign, not a final legal determination, and a clean one is information, not a guarantee.
