Industry
CASPs
Crypto-Asset Service Providers are moving from the AML-focused era of crypto compliance into a broader financial regulation era. Across jurisdictions, frameworks such as MiCAR, the GENIUS Act, Hong Kong's virtual asset regime, VARA regulations, and the future UK cryptoasset regime increasingly require CASPs to be authorised, properly governed, prudentially sound, and compliant with conduct standards.
This means CASPs are expected to operate at a more institutional level, with stronger governance, clearer accountability, more robust compliance controls, and better integration between regulatory obligations, business operations, technology, and risk management.
Key compliance challenges for CASPs
Authorisation and licensing across jurisdictions
Identifying where authorisation is required, both in countries of operation and in jurisdictions where regulatory touchpoints — such as customer base, marketing activity, or service availability — may trigger licensing obligations. This often requires ongoing multi-jurisdictional licence scanning.
Product and service classification
Assessing products, services, tokens, and business models across different regulatory frameworks to determine how they are classified and what regulatory consequences follow.
Regulatory impact assessments
Conducting ongoing impact assessments as regulations evolve, including changes that may affect operations, marketing communications, customer access, product design, governance, reporting, and compliance obligations.
End-to-end AML compliance orchestration
Aggregating and coordinating the full lifecycle of AML and financial crime compliance workflows, including onboarding, customer reviews, transaction monitoring, wallet screening, Travel Rule compliance, escalation handling, and contextual risk assessment.
Third-party tooling and systems integration
Selecting, implementing, and managing third-party compliance vendors for specific parts of the compliance workflow, while integrating those tools with internal systems, legacy infrastructure, and operational processes.
Staff and management capability
Ensuring that staff, senior management, and control functions are properly empowered, trained, and upskilled to perform their roles effectively under increasingly complex regulatory expectations.
Recommended CARCI programmes
Examination-assessed specialist programmes for regulatory and compliance professionals.
MiCAR Specialist
EU Markets in Crypto-Assets Regulation Specialist
80h · Examination included
Travel Rule Specialist
Certified Crypto Travel Rule Specialist
12h · Examination included
From the Intelligence Hub
Further reading
Train your team in crypto-asset compliance
Team and enterprise access is available for organisations.