Crypto & Web3 — identity & AML workflows

Identity verification workflows for crypto platforms

Document capture, OCR, local AML screening, manual review and a developer API for exchanges, lending desks, DeFi front-ends and NFT marketplaces that need to operationalise their own VASP / MiCA workflow.

Start Free Trial Request a Demo

⚠️

Scope — please read. TrustVerifyID is a developer-first identity-evidence and workflow platform. It is not a regulated VASP, a certified IDSP, or a Travel-Rule message-exchange operator, and it does not perform an operator's MiCA / 5AMLD / FCA filings or licence renewals. We provide the identity-verification, AML-screening and case-management infrastructure your operator uses inside its own programme — the regulated outcome remains the operator's.

Crypto faces the strictest KYC scrutiny

🌐

FATF classifies most VASPs as obliged entities — full CDD and transaction monitoring required.

✈️

Travel Rule mandates sharing originator and beneficiary data on transfers above $1,000/€1,000 — IVMS101 message exchange is planned for a future release.

🇪🇺

MiCA (effective June 2024) requires CASPs to implement AML programmes equivalent to traditional finance.

⚡

Onboarding friction leads to user drop-off — you need fast, accurate verification to stay competitive.

// VASP KYC onboarding via API

POST /api/v1/verifications

{

"applicant_id": "ap_9kXm...",

"flow": "kyc_aml",

"aml_check": true,

"travel_rule": true,

"webhook_url": "https://..."

}

// Webhook callback on completion

{ "status": "approved", "risk_score": 12, "pep": false }

Identity & AML building blocks for VASPs

🪪

KYC document capture

Passport / national ID / driving licence upload via API or hosted form. OCR, MRZ parsing and quality scoring on each scan. Optional face match and liveness via configurable providers.

🔍

AML & PEP screening

Local OFAC / EU / UN / HMT sanctions screening (31 073 entries, daily refresh) plus PEP matching from the local OpenSanctions sync. Adverse-media screening returns `provider_not_configured` unless a news-data provider key is set.

✈️

Travel Rule (IVMS101) — planned

Automated collection and sharing of originator / beneficiary data for transfers above the threshold is planned for a future release; not available today.

📊

Transaction monitoring — foundations

Rule-engine foundations for structuring, layering and unusual-pattern detection, plus a case-documentation workflow. Not commercially live; SAR filing is not a TrustVerifyID feature.

🔗

Wallet-linked identity (optional)

Optional cryptographic binding of a verified identity to a blockchain wallet address, with on-chain attestations via XebleChain. By configuration — requires `XEBLE_CHAIN_RPC_URL`.

🔄

Ongoing watchlist monitoring

Periodic re-screening of existing customers against the configured sanctions / PEP datasets. Webhook alerts when a new hit appears on the next sync.

Who Uses This

📈

CEX & Spot Exchanges

User onboarding KYC, withdrawal limits, and AML monitoring for centralised crypto exchanges.

🏦

Crypto Lending / DeFi

Identity gates for DeFi front-ends and lending desks. Optional wallet attestation for permissioned pools (by configuration).

🖼️

NFT Marketplaces

Seller KYC, age verification, and AML checks for high-value digital asset transactions.