AML Policy for XRP Crypto Exchanges

What AML Means in Cryptocurrency

Anti-Money Laundering, or AML, refers to controls intended to identify and reduce the misuse of financial or crypto services for laundering proceeds, fraud, sanctions evasion or other prohibited activity. In cryptocurrency, those controls can include blockchain transaction screening alongside other risk and compliance checks.

AML and KYC are related but not identical concepts. A transaction can be screened for risk even when a conventional account has not been created, and identity verification can be requested when the circumstances of a specific transaction require it.

Transaction and Address Screening

Supported transactions may be assessed using information available from the exchange request, blockchain activity and other implemented risk controls. Public blockchain data can help identify transaction histories or address relationships that warrant additional review.

Screening can consider factors such as:

• blockchain addresses associated with elevated-risk activity;
• transaction patterns that are inconsistent with ordinary use;
• attempts to bypass transaction or compliance controls;
• information suggesting fraud, theft or other unlawful source activity;
• sanctions or other restrictions that apply to the transaction circumstances;
• mismatches or anomalies that require clarification before processing can continue.

A risk indicator does not necessarily mean that unlawful activity has occurred. It can instead trigger a closer review before a decision is made.

When Additional Verification May Be Required

An eligible crypto-to-crypto transaction may be started without opening a conventional trading account under the current service model. That does not create a universal exemption from AML screening, risk review or additional verification.

Depending on the circumstances, the service may request information needed to understand or verify a transaction. The exact request should be limited to what is relevant to the identified risk and any applicable compliance requirement.

Examples of additional review can include confirming transaction ownership, clarifying the source or purpose of funds, or requesting identity information when legally or operationally required. No single verification threshold is stated because the current project materials do not define one.

Possible Outcomes of a Risk Review

The result of a review depends on the available information and the service's legal and technical ability to act. The same response is not appropriate for every type of risk signal.

A transaction may be:

• processed normally when the review is resolved;
• held temporarily while additional information is requested;
• delayed while a blockchain or compliance issue is investigated;
• refused or cancelled when the service cannot process it consistently with applicable requirements;
• handled according to the available return or refund procedure when that is legally and technically possible.

A refund or return should never be described as automatic in every case. Blockchain irreversibility, legal restrictions and the status of the source funds can affect what options are available.

User Responsibilities

Users should provide accurate transaction information and use assets and addresses they are authorized to control. The service must not be used to disguise unlawful proceeds, evade applicable restrictions or interfere with risk controls.

Users should also follow the network instructions shown for the exchange. Sending an unsupported asset, using the wrong network or providing incorrect receiving details is an operational problem and can complicate a compliance review even when the transaction itself is legitimate.

XRP Ledger and Other Blockchain Data

The XRP Ledger and other public blockchains can expose transaction information that is useful for screening. XRP, XRPL and Ripple are separate entities: XRP is the native digital asset, XRPL is the blockchain network, and Ripple is a company in the broader ecosystem.

XRP-Exchange.io is an independent service and does not control the underlying public ledgers. Blockchain records can remain visible even if a service transaction is later cancelled or reviewed.

AML Data and Privacy

Information used for risk review can overlap with transaction, support and blockchain data described in the Privacy Policy. Compliance-related information should be handled only for legitimate service, security and legal purposes and retained according to the actual operational and legal requirements of the service.

Do not send private keys, seed phrases or wallet recovery credentials as part of an AML response. Those secrets are not required to prove ownership of an ordinary blockchain transaction and can expose funds to theft.

Contact About an AML Review

If a transaction is subject to additional review and support requests information, use the instructions associated with that transaction or contact [email protected]. Include the exchange reference and relevant blockchain transaction details when available.

Do not attempt to bypass a review by repeatedly creating replacement transactions. That can create additional ambiguity and does not resolve the original risk or compliance question.