Financial-crime risk in crypto-asset settlement: a reading of the enforcement record

Introduction: International standards for crypto-assets have treated illicit finance as a central regulatory concern since the Financial Action Task Force (FATF) extended its standards to virtual assets in 2018-19. Yet the location of residual financial-crime exposure within crypto-asset settlement remains under-specified. This paper examines whether exposure is better explained by settlement architecture and the practical reach of enforcement than by an arrangement's legal classification.

Methods: A structured documentary analysis examines 31 significant enforcement actions from January 2019 to 12 June 2026, together with FATF targeted updates, mutual-evaluation follow-ups and supervisory notices. Arrangements are coded by custody and control, contact with a regulated intermediary, anonymity-enhancing functionality, cross-border positioning, and the presence of an identifiable entity against which legal obligations can be enforced.

Results: Enforcement is concentrated on custodial intermediaries, whereas non-custodial transfer remains less amenable to instruments designed for identifiable obligors. Travel Rule legislation also exceeds operational supervision: in 2026, 91 of 109 surveyed jurisdictions had legislated, but 55 of those 91 had neither issued findings nor taken supervisory or enforcement action. The remaining enforcement-visible exposure identified in the record clusters at cross-border and offshore perimeter gaps, including transfers that do not encounter a regulated intermediary. Taken together, the findings indicate that legal classification alone does not account for the observed distribution of enforcement-visible exposure.

Conclusions: Enforcement-visible financial-crime exposure can therefore be mapped more tractably through settlement architecture and practical enforcement reach than through legal classification alone. This approach provides virtual-asset service providers with a basis for architecture-sensitive counterparty assessment and supports risk-based allocation of supervisory resources towards non-custodial, cross-border and operationally unsupervised settlement points.