EU’s Banking Regulator Highlights AML Risks in Privacy Coins, Self-Hosted Wallets

The European Banking Authority wants to extend money laundering guidance to crypto firms and banks that trade with them

AccessTimeIconMay 31, 2023 at 2:18 p.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global event for everything crypto, blockchain and Web3.Register Now

Crypto companies should watch out for customers using privacy coins or self-hosted wallets as they try to spot potential money laundering activity, the European Banking Authority said in draft guidance published Wednesday.

The plans, open for comment until August 31, follow a series of crackdowns on crypto tools which can enhance online privacy, but which lawmakers worry can be used to hide criminal or terrorist money.

Providers of crypto asset services such as exchanges and wallets, known as CASPs, can see heightened money laundering risks due to the innovative technology that enables instant transfers across the world, the EBA said in a statement.

“The EBA is proposing to amend its [money laundering and terrorist financing] risk factors guidelines to set common, regulatory expectations of the steps CASPs should take to identify and mitigate these risks effectively,” and to help them vet potential and existing customers, the EBA said.

Using mixers and tumblers, zero-knowledge proofs and privacy coins indicates higher risk, the guidance said. So do customers with multiple accounts who make transactions to self-hosted wallets that aren’t operated by a regulated CASP, or are located in supposedly under-regulated overseas jurisdictions.

Banks looking to take on crypto clients will also need to check their regulatory license and ownership, the guidance said.

In recent months and years, the European Union has sought to tackle money laundering risks from secretive crypto transactions. New money laundering rules could curb trades with self-hosted wallets where the owner can’t be identified, and may even ban anonymous coins such as zcash, monero and dash outright. In a March proposal, the EBA also highlighted extra risks for businesses that use crypto-style distributed ledger technology.

Meanwhile, U.S. authorities have sanctioned Tornado Cash, a privacy tool on the Ethereum blockchain that they say has been used to discreetly raise funds for North Korean regime. Some lawmakers and former regulators have suggested U.S. regulators’ actions amount to a deliberate attempt to isolate crypto from the traditional banking system, mirroring a previous “Choke Point” crackdown on gun businesses.

Edited by Nikhilesh De.


Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.

Jack Schickler

Jack Schickler was a CoinDesk reporter focused on crypto regulations, based in Brussels, Belgium. He doesn’t own any crypto.

Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to to register and buy your pass now.