AMLBot: determine the purity of cryptoassets and the origin of coins

Mr. Dog
3 min readDec 30, 2021

--

When registering at most major exchanges, you will have to go through KYC (Know Your Client) and AML (Anti-Money Laundering) procedures. Strict linking of the account to the person and checking the exchange of incoming funds for the purity of their own investigations.

When you are investigating the addresses of abusers or checking potential partners, the information about the sources of cryptocurrency origin and ways of its withdrawal into fiat is even more critical.

Due to the fact that specialized tools like Chainalysis are actually unavailable to “mere mortals” due to their high price, and it is difficult to check thousands of transactions by hand, you can use AMLBot.

Two versions are available: in Telegram (t.me/cryptoaml_bot) and a web version at https://amlbot.com/ru/.

It has two modes of operation: basic check and investigation.

In basic check mode, after entering the address, the bot generates a small report characterizing the purity of the funds.

Let’s take a closer look at each source of funds:

Exchange With Low ML Risk — exchanges that require KYC/AML identification for any deposit or withdrawal.

Marketplace is an entity offering legal trading services for cryptocurrency.

Online Wallet — a service for storage and making payments with cryptocurrency, already checked by AMLBot.

Exchange With High ML Risk — exchanges that allow the withdrawal of more than $2000 in crypto daily without KYC/AML. (They still require KYC/AML for fiat withdrawal).

Exchange With Moderate ML Risk — exchanges that allow the withdrawal of up to $2000 in crypto daily without KYC/AML. (They still require KYC/AML for fiat withdrawal).

P2P Exchange With High ML Risk — P2P exchanges that allow the withdrawal of more than $1000 in crypto daily without KYC/ AML.

Scam — entities that have scammed their customers and taken possession of their cry ptocurrency.

In total, AMLBot highlights 20 different sources of funds, from ransom money and drug stores to funds earned through mining. Each report will provide a detailed legend at the end, it can also be viewed at the link.

If we want a detailed report with specific services, then we should use the search in the investigation mode. This time we will use the BTC address as input data.

The report is kinda huge and I can not hsre it with a single screenshot. As you can see, AMLBot has dicovered 316 income and 409 outcome transactions. The results can be uploaded in XLS format for convenience.

In contrast to the basic check mode, the investigation allows you to see specific services and transfer amounts. The indirect links of the target address are displayed separately: the nearest named clusters are displayed.

If you wish, you can also upload the specific addresses behind the detected services, as well as the transaction IDs. This will allow full traceability of the movement of funds to/from the cluster addresses.

When investigating crypto incidents, I often had to analyze the data manually, as a freelancer I could not afford to use specialized software. AMLBot, unlike very expensive Chainalysis with blackjack and visualization ;) , allows you to choose how detailed the investigation will be.

Such flexibility will save you a lot of money on routine checks, and, if necessary, for an additional fee you can trace the funds all the way back to the transaction between the target wallet and the cluster.

Автор: t.me/gspdnsobaka

Donate: ETH: 0x8de398C8318d93c73f51DC36E24d984489a2962a

--

--