Nils Silinevics
Partner · AML & Crypto Compliance · Former FIU Investigator
You've been informed that your transaction activity is being investigated for AML compliance on CEX.IO. CEX.IO, headquartered in United Kingdom (registered with FCA), is regulated by UK Financial Conduct Authority (FCA) under UK Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017. The exchange uses Chainalysis for blockchain analytics and Onfido for identity verification. CEX.IO is one of the few exchanges FCA-registered as a crypto-asset business in the UK. This means they're subject to UK MLR 2017 — one of the strictest AML regimes — but also means they follow due process more rigorously than offshore exchanges. CEX.IO freezes accounts under UK Money Laundering Regulations when their compliance team detects sanctions matches, high-risk deposits, or unusual withdrawal patterns. You receive a formal notice that your account is under AML review. This is more serious than a simple KYC request — it means the platform's compliance team suspects your activity may violate anti-money-laundering regulations.
CEX.IO freezes accounts under UK Money Laundering Regulations when their compliance team detects sanctions matches, high-risk deposits, or unusual withdrawal patterns. CEX.IO is one of the few exchanges FCA-registered as a crypto-asset business in the UK. This means they're subject to UK MLR 2017 — one of the strictest AML regimes — but also means they follow due process more rigorously than offshore exchanges. This background matters because it shapes how CEX.IO handles compliance — and how we approach resolving your case.
The compliance framework: CEX.IO operates under UK Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017, overseen by UK Financial Conduct Authority (FCA). Their compliance infrastructure uses Chainalysis for blockchain analytics and Onfido for identity verification. CEX.IO is known for fiat onboarding and card purchases for beginners, serving entry-level crypto users in Europe and UK — and their compliance team is calibrated to flag deviations from typical user behavior in that segment.
What triggers aml review on CEX.IO:
Real case — FCA regulation: A UK-based user had €30,000 frozen on CEX.IO after making a large withdrawal to a new bank account. CEX.IO's compliance team requested source of funds documentation but the user's funds originated from crypto mining 5 years ago — he no longer had the mining records. We reconstructed the mining history from blockchain evidence (pool payouts, hardware purchase receipts) and CEX.IO released the funds within 8 days.
What CEX.IO requires to resolve this: Depending on the trigger, CEX.IO may ask for government-issued photo ID (verified through Onfido), proof of address (utility bill or bank statement within 3 months), source-of-funds documentation (exchange statements, bank records, payslips, tax returns, or business documents), detailed transaction explanations with on-chain evidence, and in some cases a video verification interview. The challenge: CEX.IO rarely tells you which specific trigger caused the aml review, so you're guessing at what documentation to provide — and each rejected submission makes the next one harder.
Our approach is specific to CEX.IO: CEX.IO's FCA registration means they follow UK regulatory procedures — including the right to appeal compliance decisions. We use the FCA's complaints framework to escalate unreasonable freezes. CEX.IO is more responsive to legal pressure than offshore exchanges because their FCA registration is commercially critical and they can't afford regulatory complaints.
AML Review on CEX.IO — our strategy: We prepare a comprehensive AML compliance package: transaction tracing, source-of-funds documentation, explanation of trading patterns, and a legal cover letter demonstrating your compliance with applicable AML regulations in the platform's jurisdiction.
The submission that matters: Instead of submitting through CEX.IO's standard support channels (where you'll get automated responses or generic template replies), we prepare a professional legal submission — a structured compliance package with a cover letter from a Swiss law firm citing UK Financial Conduct Authority (FCA) obligations and UK Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017. CEX.IO's compliance team processes legal submissions differently from regular user tickets — they're assigned to senior compliance officers, not support agents, and they bypass the automated response loop that delays most cases by weeks.
When standard compliance isn't enough: Some situations fall outside the normal compliance flow — inherited crypto holdings, accounts registered under another person's name, unprovable source of funds through conventional documentation, or cross-jurisdictional complications where your residence, the exchange's jurisdiction, and the fiat banking path all differ. If that sounds like your case, our complex cases practice handles scenarios that other firms decline.
Further reading: our guide on crypto AML laws across Europe covers the documentation and legal strategy in more depth.
We determine the scope of the AML review: is it a standard periodic check, a transaction-triggered review, or a regulatory request? {p_name} must tell you the legal basis — we ensure they do.
We prepare a comprehensive AML compliance package: transaction tracing, source-of-funds documentation, explanation of trading patterns, proof of legitimate business activity, and a legal cover letter referencing {aml_law}.
We submit directly to {p_name}'s AML/compliance team — not standard support. Our submission references {regulator} guidelines and the legal framework under which {p_name} must complete the review within a reasonable time.
AML review completed — account fully restored. We advise on transaction patterns that triggered the review and how to avoid future AML flags on {p_name}.
FCA registration means CEX.IO follows UK MLR 2017 procedures, but it doesn't prevent them from freezing accounts they deem high-risk. What it does mean is that they must follow due process: provide reasons for the freeze, allow you to respond, and make a timely decision. If CEX.IO freezes your account without explanation or drags the review out for months, they're violating FCA expectations — and we can escalate to the FCA complaints system.
CEX.IO is FCA-registered; Binance's UK entity (Binance Markets Limited) has had a more complex regulatory journey. CEX.IO is fully compliant with UK MLR 2017 and has a dedicated UK compliance team. This means freezes are more predictable (they follow UK regulatory procedures) but also more stubborn — CEX.IO's compliance team won't unfreeze an account without proper documentation because they face FCA scrutiny.
An AML review is a formal process for investigating whether your account activity violates anti-money-laundering laws. Unlike a simple KYC check, an AML review examines the source of your funds, the pattern of your transactions, and the risk profile of addresses you interact with. Blockchain analytics tools assign risk scores that trigger these reviews.
KYC (Know Your Customer) verifies your identity — who you are. AML (Anti-Money Laundering) examines your activity — what you're doing with your account. You can pass KYC and still trigger an AML review if your transaction patterns are flagged. An AML review is more serious and harder to resolve without professional help because it involves transaction analysis, not just document submission.
Yes. If the compliance team determines that your activity constitutes suspicious activity, they are legally obligated to file a Suspicious Activity Report (SAR) with their local Financial Intelligence Unit. This could trigger a law enforcement investigation. Our involvement helps ensure your activity is presented in context that doesn't trigger unnecessary suspicion.
Tell us what triggered the AML review and what documentation they requested. We respond within 6 hours.