Anti-money-laundering rules require businesses that move money to know their customers, monitor for suspicious flows, and report to regulators: KYC is the identity-collection limb, AML the ongoing surveillance one.
In crypto the obligations attach to the same chokepoints as in fiat: the on-ramps, the exchanges, the processors. Non-custodial settlement between self-held wallets sits largely outside them, which is exactly why jurisdiction and scale determine what applies to you.
Anti-money-laundering rules are the obligations placed on businesses that move money: know who you are dealing with, watch for suspicious patterns, file reports on defined events, and keep records. The framework binds banks, processors, exchanges, and ramps, each at its own boundary, and KYC is its identity-collection limb.
The logic is traceability: money that can be followed end to end is money that cannot be laundered invisibly, so the rules build identification and monitoring into every regulated hop. In crypto the obligations attach at the fiat boundaries and the custodial intermediaries: ramps, exchanges, and processors carry the framework wherever they sit in a flow.
What the framework does not do, structurally, is reach non-custodial settlement between self-held wallets, where no intermediary exists to obligate. That is not a loophole so much as an architecture: the traceability burden shifts to the public chain itself, which records every transaction permanently. For a merchant, the practical shape is knowing which of your rails are inside the framework and which are simply public-ledger settlement, and running your own record-keeping to the standard your jurisdiction expects of your business.
A merchant's crypto checkout settles between wallets with no intermediary to obligate, while its card leg and its fiat off-ramps run through providers whose AML programs are their regulated cost of doing business. The merchant's own books reconcile both.
U.CASH's sanctions policy screens wallets and restricted regions, and the fiat rails carry their providers' own programs; the legal pages state what U.CASH does and does not do.
Merchants should map their obligations with counsel rather than assume: taking payment for goods is generally a different activity than exchanging money for others, and the rules follow activities. U.CASH publishes its sanctions screening and restricted-region controls, and the fiat rails carry their providers' programs at their boundaries. On posture: the businesses that navigate this well treat their map as a living document, revisited when rails, jurisdictions, or volumes change, and they write down the reasoning at each revision. The artifact that protects you is rarely a legal opinion alone; it is the record of a business taking its obligations seriously on a schedule.
Every term behind the rails, the assets, and the settlement.