In 2024, TRM Labs discovered that CoinEx had processed over $3 billion in transactions linked to sanctioned entities without proper AML screening. For retail crypto holders, this raises an urgent question: how exposed is your portfolio to regulatory risk? Learn how to audit your exchange holdings, identify sanctioned assets in real-time, and protect yourself from compliance fallout.
What are sanctioned assets and why should crypto holders care?
Sanctioned assets are cryptocurrencies, tokens, or holdings tied to individuals, organizations, or countries subject to government restrictions. The United States Office of Foreign Assets Control (OFAC), the European Union, and the United Kingdom all maintain lists of sanctioned entities. If you hold crypto connected to these lists, you may face frozen accounts, forced liquidations, or legal liability.
The TRM Labs CoinEx investigation revealed that $3.2 billion in sanctioned transaction volume flowed through the exchange without adequate screening. This matters to you because exchanges don't always publicly disclose which addresses or wallets are flagged. You could unknowingly be holding sanctioned tokens or trading on a compromised platform.
Why compliance failures hurt retail investors
When an exchange fails AML screening, regulators often freeze operations or force compliance audits. Users catch the fallout: trading halts, withdrawal delays, account locks. If your portfolio includes holdings on a non-compliant exchange, you lose access to sell, transfer, or rebalance.
- Regulatory action: SEC or CFTC enforcement can result in account freezes for users on that platform.
- Delisting risk: Sanctioned tokens may be delisted from exchanges, leaving you unable to exit positions.
- Civil liability: In rare cases, users trading sanctioned assets face legal action if they knew or should have known about the restriction.
- Portfolio reporting gaps: Exchanges with poor compliance don't export clean transaction history, making tax reporting impossible.
How to identify sanctioned assets in your portfolio
Knowing which assets are at risk starts with public reference data. OFAC maintains a public Specially Designated Nationals (SDN) list that includes cryptocurrency addresses and wallet identifiers. Holders can cross-reference their own holdings against this list.
Step 1: Check the OFAC SDN list
The US Treasury OFAC website lets you search the SDN list for any token names, projects, or wallet addresses you hold. The list is updated weekly and includes both traditional and crypto assets.
Entries labeled "Virtual Asset Service Provider" (VASP) or cryptocurrency-specific flags identify crypto-related designations. A holder can see whether their own token or exchange appears there.
Step 2: Audit your exchange positions by jurisdiction
Different countries enforce sanctions differently. A token legal in Singapore may be restricted in the US. Documenting which exchange holds each position, and that exchange's regulatory status, is one way to review your own exposure.
- US-regulated exchanges (Kraken, Coinbase, Gemini) must comply with OFAC and SEC rules. Their public compliance pages describe this.
- Non-regulated exchanges (some Asia-based platforms) may have weaker AML controls. Higher risk for sanctioned asset exposure.
- EU-regulated platforms follow MiCA (Markets in Crypto Assets Regulation) and FATF guidelines. Stricter than unregulated venues.
Step 3: AML screening tools for individual tokens
Several blockchain analysis firms offer free or low-cost AML screening for retail holders. Chainalysis, TRM Labs, and Elliptic all provide wallet risk scoring. These tools flag if holdings have transaction history linked to sanctioned addresses.
Entering a wallet address returns a risk report. A green flag indicates low exposure. A red flag indicates holdings may be tainted by prior sanctioned transfers.
How PortfolioTrackr helps you track regulatory compliance risk
Managing sanctioned asset exposure across multiple exchanges is complex. PortfolioTrackr lets you centralize holdings from Binance, Kraken, Coinbase, and other platforms in one dashboard, by hand on any plan or through the SnapTrade bridge on Pro and Lifetime, making it easier to spot concentration risk on any single exchange.
If you're using PortfolioTrackr, each connected exchange gets its own portfolio, so you can see how much sits on each platform. It does not send regulatory news alerts, so follow compliance updates for each platform yourself.
PortfolioTrackr also integrates your crypto holdings with traditional stock and UAE market positions (ADX/DFM), so every holding, whatever the asset class, sits in one view.
Red flags that suggest your exchange or asset is at regulatory risk
Not every non-compliant exchange announces problems. Learn to spot warning signs before regulators step in.
- Vague AML policy: Exchange website says "we comply with local regulations" but doesn't publish detailed AML procedures.
- No KYC updates: Platform hasn't required Know-Your-Customer re-verification in over 2 years.
- Withdrawals slow or restricted: Fiat withdrawals take weeks, or certain countries are blocked without explanation.
- Delisting announcements: Tokens are being delisted with minimal notice, often a sign of compliance crackdowns.
- Regulatory action history: Search news for the exchange name + "SEC", "CFTC", "FinCEN". Prior enforcement = higher ongoing risk.
- Low transparency on AML screening: Exchange doesn't disclose which addresses or tokens are flagged as high-risk.
What happens if you hold sanctioned assets or trade on a flagged exchange
Regulatory enforcement moves quickly once an exchange is targeted. Here is what tends to unfold and what other holders have faced.
If your exchange is under investigation
Some holders move their holdings to a self-custody wallet (a hardware wallet or MetaMask) that they control, because withdrawals often become restricted mid-investigation and accounts can be frozen.
Transaction history and cost basis are frequently documented before funds move, since many exchanges delete user data after being acquired or shut down by regulators.
If you hold a sanctioned token
Holding a sanctioned asset can expose a holder to civil liability and to future forced liquidation. Some investors who identified such holdings chose to exit them on a compliant exchange, in some cases at a loss.
Where a sale occurs, documenting the sale and the reason (compliance risk) creates a record that can be shown if regulators later ask why the asset was held.
Document everything for your records
Keeping records of when an asset was purchased, which exchange held it, when it was sold, and the price creates evidence of good faith if regulators ever question holdings.
Complete transaction history exported from the exchange before any regulatory action becomes hard to recover afterward. This data is used for tax reporting and future audits.
Real-world example: The CoinEx case and what it means for your portfolio
TRM Labs' 2024 report on CoinEx is instructive. The exchange processed transactions for North Korean entities, Hezbollah-linked accounts, and other OFAC-designated parties without flagging them as high-risk.
What happened next? Regulatory scrutiny increased, withdrawal limits were imposed, and certain countries saw their access restricted. Users holding illiquid altcoins on CoinEx suddenly couldn't exit positions quickly.
The lesson: regulatory failures don't affect all users equally. If you held Bitcoin or Ethereum on CoinEx, you likely exited fine. If you held small-cap tokens with low volume, you were trapped until liquidity returned or the exchange relaunched.
This is why diversifying across multiple platforms and tracking concentration risk matters. One exchange failure shouldn't liquidate your entire portfolio.
Building a compliant crypto portfolio going forward
Prevention is easier than recovery. These are patterns other holders apply to new holdings.
- Regulated exchanges: Coinbase, Kraken, and Gemini face quarterly audits.
- Delisted tokens: If a token is being removed from major exchanges, there's often a compliance reason behind it.
- Token project governance: A team's public AML policy signals how seriously a project treats compliance.
- Follow regulatory news yourself: PortfolioTrackr's price alerts cover price moves only, so check announcements about your exchanges and tokens directly.
- Periodic review: Regular audits are how many holders review each position for compliance and concentration risk.
The bottom line
Sanctioned asset exposure is not a theoretical risk for retail crypto holders, it's operational. The TRM Labs CoinEx findings prove that even mid-sized exchanges fail AML screening. You cannot assume your exchange or token is compliant just because you bought it.
Reviewing a portfolio involves checking OFAC lists, verifying an exchange's regulatory status, and running AML screening tools on wallets. When red flags appear, some holders relocate positions to compliant platforms.
Tracking regulatory risk across multiple exchanges is easier when you centralize your holdings in one place. Whether you're protecting against scams or regulatory exposure, real-time portfolio tracking is your first line of defense. The cost of a compliance miss is always higher than the cost of prevention.
Frequently asked questions
How do I check if my crypto exchange complies with OFAC?
Visit your exchange's compliance page (Coinbase, Kraken, Gemini publish policies) or search SEC and CFTC databases for enforcement history. In PortfolioTrackr each connected exchange gets its own portfolio, so you can see how much sits on each platform. Non-regulated exchanges warrant extra scrutiny.
What happens if I unknowingly hold a sanctioned token?
Sanctions rules vary by jurisdiction. An unknowing purchase is generally treated differently from continuing to hold after learning about a restriction, which can create liability. What to do with the token, and how to document any sale for tax records, depends on your circumstances, so a lawyer who knows sanctions law where you live is the right person to confirm the steps.
Can I be sued for trading sanctioned assets on an exchange?
Unlikely if you traded on a regulated exchange and neither you nor the exchange knew of the restriction. High risk if you traded on a known non-compliant venue or if the token was publicly flagged as sanctioned. Legal exposure depends on jurisdiction and intent.
Where can I find the official list of sanctioned cryptocurrencies?
The US Treasury OFAC SDN list is the primary source (ofac.treasury.gov), updated weekly. The list includes wallet addresses and crypto-specific entities. EU and UK maintain separate sanction lists. No single master list exists for all jurisdictions, so check all three if you hold internationally.
Does PortfolioTrackr help identify sanctioned assets in my portfolio?
PortfolioTrackr centralizes multi-exchange holdings so you can see how much sits on each platform. It does not screen tokens or send regulatory news alerts. For specific token screening, use third-party AML tools like TRM Labs or Chainalysis alongside your tracker.