Crypto AML Course: AML Training for VASPs, CASPs & Blockchain Teams

This course is built for people who make or defend decisions about crypto customers and crypto transactions. The examples, the red flags and the regulatory frame are all crypto. It isn’t a general AML course with a blockchain chapter bolted on.

The clearest fit is first-line staff at a virtual asset service provider: onboarding and KYC officers at centralised exchanges, deposit and withdrawal reviewers, OTC desk operations, and support staff who decide what to escalate. So if your day involves judging whether a deposit from an unhosted wallet gets released, this is your level.

Second, compliance and risk staff at newly authorised CASPs. The MiCA transitional period ended on 1 July 2026, and plenty of firms crossed that line with a compliance function sized for a national registration rather than for full authorisation. And where a team has grown fast, a shared baseline stops three analysts applying three different standards to the same alert.

Third, transaction monitoring and sanctions screening analysts arriving from banking or payments. You already know CDD, EDD, SAR drafting and threshold logic. What’s missing is the on-chain half — address clustering, mixer and bridge exposure, chain-hopping, and why a wallet-address hit is not the same object as a name hit. So the course fills that gap without re-teaching what you know.

Fourth, staff at custody providers, wallet-service firms and token issuers. Custodians observe control changes and destination patterns an exchange never sees. Stablecoin and e-money token issuers see mint and redeem flows that behave like cash in and cash out. Both need people who can name what they are looking at.

Fifth, whoever owns the Travel Rule. Someone at every VASP now owns originator and beneficiary data — collecting it, validating IVMS 101 payloads, running counterparty due diligence before transmission, and handling the cases where the receiving side cannot be reached. That role is usually filled by an internal move rather than a hire, and it is the one we hear about most.

Outside the VASP itself: law enforcement and FIU officers who receive crypto STRs and have to read them; supervisory staff at national authorities coordinated through ESMA and the EBA, including the Estonian FIU, BaFin, the Bank of Lithuania, KNF, ČNB and the MFSA; lawyers and advisers scoping CASP authorisation files; and auditors testing whether a crypto AML programme does what its policy claims.

Recruiters hiring for crypto compliance benefit too. But after this you can tell the difference between a candidate who has run a blockchain analytics query and one who can explain what the result means.

And founders. If you’re building an exchange, a marketplace or a token product, the compliance obligation attaches to the product decision, not to a remediation project two years later. Better to learn that before the authorisation file than during it.

Who it does not suit: if you already run a monitoring desk, own the STR pipeline, or hold an MLRO appointment, start at CASS instead. This is foundations, and we’d rather you skip a level than resent one.