Controls applied to detect and prevent the use of a transaction to move proceeds of crime, including screening, record-keeping and reporting. Where a bullion purchase is funded from digital assets, those controls apply twice, in two different legal capacities: once at the licensed platform that converts the assets into national currency, and once at the seller that receives that currency and allocates bars. AML compliance on a cryptocurrency-funded purchase is therefore not one programme but two, run by two obliged entities that hold separate files and answer to separate supervisors. What joins them is not a licence. It is a single order reference carried through both.
Two obliged entities, one purchase
The FATF standards put the two halves of the transaction in different categories. A platform that converts digital assets for others is a virtual asset service provider, and its obligations — customer due diligence, wallet and transaction screening, the Travel Rule, record-keeping and suspicious activity reporting — follow from that status under Recommendation 15 and are supervised through the licence it holds. A seller of bullion is a dealer in precious metals, which sits in the FATF’s designated non-financial businesses and professions category and carries its own due diligence, screening, record-keeping and reporting obligations under the law applying to it.
Neither set of obligations absorbs the other’s work. The platform sees the address the assets came from, the conversion and the settlement instruction; it does not see the sale contract, the beneficial-ownership file or the bars. The seller sees the counterparty, the mandate, the payment and the allocation; it holds no digital assets and screens no address it has no sight of. The institution most likely to ask about the transaction later — the counterparty’s own bank — sees neither.
| Control | Who performs it | What it produces |
|---|---|---|
| Wallet and transaction screening on the incoming digital assets | The licensed platform, under its own licence | A screening decision held by the platform; the payment proceeds to conversion or it does not |
| Conversion into national currency | The licensed platform | A conversion record naming the assets received, the currency paid and the settlement instruction |
| Counterparty due diligence, beneficial ownership, sanctions and PEP screening | The seller | A counterparty file and a screening result recorded against a counterparty reference |
| Source-of-funds assessment | The seller, on the national currency it receives | Documented origin of the money applied to the instruction |
| Allocation and record creation | The seller | An Allocation Record: serial number, weight, fineness, producer, location |
| Retention and reporting | Each obliged entity separately | Two archives, in two companies, under two retention regimes |
The order the controls run in
AML governs sequence before it governs anything else. Each gate opens the next one.
- Eligibility precedes commercial terms. Verification of authorised representatives, beneficial-ownership tracing and jurisdictional classification are completed before a quote is issued and before a transaction reference is activated.
- Sanctions, PEP and adverse-media screening. Golden Ark Reserve performs this against LSEG World-Check One data. The counterparty receives verified status, a date and an internal reference; the screening report itself stays internal.
- Screening of the digital assets, before conversion. The platform assesses the address and its transaction history against sanctions lists and risk indicators under its own licence. The seller receives the outcome, not the address.
- Conversion and settlement against the order reference. The seller is settled in national currency, holds no digital assets, and issues no token or claim on metal. The reference is what lets an incoming payment post against one instruction instead of arriving as an unattributed credit.
- Source-of-funds assessment and payer-name match. The money applied to the instruction is documented, and the payer is matched to the counterparty of record.
- Allocation. Whole bars, by serial number, into a dedicated client sub-account at Brink’s Hong Kong or Singapore, named to the counterparty in the vault register and segregated from the seller’s own stock. The resulting position is allocated gold: title to identified bars rather than a claim against the seller.
- Retention. Each obliged entity retains its own file, under its own regime, for its own period.
What it costs is sequence, not fee
AML carries no line on an invoice. It prices the transaction in order of operations: no commercial terms before eligibility is recorded, no conversion before the platform’s screening clears, no allocation before settled currency posts against the reference. The consumption is documentary. Beneficial-ownership tracing through layered holding structures, adverse-media resolution on a common name, and source-of-funds evidence for assets accumulated over years across several venues each take the time the documents take, and a counterparty that holds them takes less of it than one reconstructing them.
Review time is a function of the structure being reviewed rather than a published figure, and no counterparty is quoted one. What is fixed is the order: an instruction does not advance to the next gate while the previous one is open.
What the controls produce
The output of the controls is the Evidence Set: the contract, the AML/KYC record, the payment confirmation, the Allocation Record, the vault placement or delivery documentation, and the instruction log. Funding from digital assets adds two documents to that set — the platform’s conversion record and the screening record — and it is these two that the rest of the chain has no substitute for. The conversion record is the only document naming both the digital asset that left and the national currency that arrived. The screening record is the only evidence that the address was assessed at all.
The commercial invoice is issued on the bars actually allocated, not on the advance; the pro forma covers the advance against the instruction, and an unused remainder returns to the source account. A counterparty holding the full set can show a reviewer one instruction from quote to serial number.
What goes wrong
The payer is not the counterparty. Assets are sent from an address or an account belonging to a company, a family member or an adviser rather than to the counterparty of record. The name match fails, and the payment cannot be applied to the instruction it was meant for. What the counterparty holds is a settled payment attached to nothing.
The payment arrives without its reference. An incoming credit that cannot be matched to an instruction at the moment of receipt is not held against a future purchase and is not credited anywhere. It is returned to the source account. The counterparty holds a returned payment and a quote that has lapsed.
Jurisdictional status moves mid-file. On 19 June 2026 the FATF added Bosnia and Herzegovina and Iraq to its list of jurisdictions under increased monitoring and removed Algeria and Namibia, leaving 22 jurisdictions listed; Iran, the DPRK and Myanmar remain subject to the call for action. A counterparty, a payer or a route classified against one quarter’s list is reassessed against the next.
The declining party is not the party the counterparty deals with. Where the platform’s screening stops the leg, the decision, the reasons and the underlying data sit with the platform under its own licence. The seller receives an outcome. The counterparty holds an unconverted position and an instruction that lapses without a fixed price.
The exit meets a bank that never saw the entry. Buyback proceeds settle to the counterparty’s registered bank account, which may be the first point at which its own bank encounters the money. That institution was party to none of the earlier controls and applies its own. Category-level refusal of digital-asset-linked funds — de-risking — turns on what the counterparty can produce, not on what was done at the time.
AML and the terms it is confused with
| Term | What it covers | Who it binds |
|---|---|---|
| AML | The whole control set: screening, record-keeping, reporting, and the programme that governs them | Every obliged entity in the chain, separately |
| KYC | Establishing who the counterparty is, and who ultimately owns and controls it | The entity onboarding that counterparty |
| Customer due diligence | The measures applied at onboarding and refreshed over the relationship, scaled to assessed risk | The entity holding the relationship |
| Source of funds | Where the money in this transaction came from | The entity receiving the payment |
| Proof of funds | That the payer holds the money, not where it originated | The payer, on request |
| Sanctions screening | Whether a party, a jurisdiction or an address appears on an applicable list | Each entity, against the lists applying to it |
| Travel Rule | That originator and beneficiary information travels with a transfer between regulated providers; the trigger and the data set differ by jurisdiction | Virtual asset service providers, not the metal seller |
| Wallet screening | Assessment of a specific address before a transaction is accepted | The platform, under its own licence |
What changed in 2026
On 16 July 2026 the FATF published its seventh targeted update on virtual assets, reporting that 83% of surveyed jurisdictions now have Travel Rule legislation in force, against 73% a year earlier, with a further eleven reporting implementation under way. The same report finds that many jurisdictions have yet to translate legal frameworks into effective supervision and enforcement in practice. The gap has moved. Legislation is close to universal; supervision is not.
That relocation matters to whoever reads the file. Licence status was always a statement about a jurisdiction and an activity rather than a portable attribute, and the FATF’s March 2026 report on offshore virtual asset service providers — providers formed under one jurisdiction’s law and serving clients resident in another — put a name to the gap, finding that fewer than half of jurisdictions, 46%, regulate on an activity basis. A reviewer who cannot verify supervision falls back on what can be verified: the record the transaction produced.
Two further findings sit directly on the funding leg. The July 2026 update reports that most identified on-chain illicit activity now involves stablecoins, which are the assets large funding payments usually arrive in; the effect is attentional rather than evidential, but a stablecoin-settled payment is read against that population. And from 10 July 2027, Regulation (EU) 2024/1624 applies directly across the European Union: traders in precious metals become obliged entities in their own right under a single rulebook rather than transposed national variants, and regulated platforms are prohibited from maintaining anonymous accounts or supporting anonymity-enhancing assets.
The question is asked after the transaction has closed
The controls run at the front of the transaction, inside a window of days or weeks. The demand to explain the transaction runs at the back, and it comes from a party that was not present: the counterparty’s own bank when buyback proceeds arrive, an auditor at year-end, a successor trustee, an incoming counterparty in a transfer of title, a tax authority reviewing a disposal.
By then the record is split. The screening decision and the conversion record belong to the platform, retained under its regime, in its jurisdiction, for its period. The counterparty file, the Allocation Record and the instruction log belong to the seller, under a different one. Neither obliged entity owes anything to the institution now asking, and neither is positioned to reassemble a chain it only ever held half of. The only party with an interest in holding both halves is the counterparty — and the only moment at which both are easy to obtain is while the instruction is open.
This is the work the order reference does, and it is why it is a control rather than an administrative convenience. One number appearing on the quote, the pro forma, the conversion record, the settlement, the Allocation Record and the instruction log turns documents from two unrelated companies into one chain that reads in a single pass. Without it, the counterparty holds a folder of documents about the same money that a reviewer must first be persuaded are connected — which is precisely the position that produces a refusal at a bank that has no time to be persuaded.
What separates a counterparty that can answer years later from one that cannot is not which platform converted the assets or which supervisor licensed it. It is whether the funding-leg documents were taken and kept at settlement, when the platform was still a counterparty in an open instruction rather than a company with no obligation to the person asking.
The control gates, review sequence and record outputs are set out in full on AML & KYC Controls in Physical Gold Transactions. The funding route they apply to is described on Buy Gold with Cryptocurrency Payment.