In 2024, TRM Labs discovered that CoinEx had processed over $3 billion in transactions linked to sanctioned entities without proper AML screening. For retail crypto holders, this raises an urgent question: how exposed is your portfolio to regulatory risk? Learn how to audit your exchange holdings, identify sanctioned assets in real-time, and protect yourself from compliance fallout.
What are sanctioned assets and why should crypto holders care?
Sanctioned assets are cryptocurrencies, tokens, or holdings tied to individuals, organizations, or countries subject to government restrictions. The United States Office of Foreign Assets Control (OFAC), the European Union, and the United Kingdom all maintain lists of sanctioned entities. If you hold crypto connected to these lists, you may face frozen accounts, forced liquidations, or legal liability.
The TRM Labs CoinEx investigation revealed that $3.2 billion in sanctioned transaction volume flowed through the exchange without adequate screening. This matters to you because exchanges don't always publicly disclose which addresses or wallets are flagged. You could unknowingly be holding sanctioned tokens or trading on a compromised platform.
Why compliance failures hurt retail investors
When an exchange fails AML screening, regulators often freeze operations or force compliance audits. Users catch the fallout: trading halts, withdrawal delays, account locks. If your portfolio includes holdings on a non-compliant exchange, you lose access to sell, transfer, or rebalance.
- Regulatory action: SEC or CFTC enforcement can result in account freezes for users on that platform.
- Delisting risk: Sanctioned tokens may be delisted from exchanges, leaving you unable to exit positions.
- Civil liability: In rare cases, users trading sanctioned assets face legal action if they knew or should have known about the restriction.
- Portfolio reporting gaps: Exchanges with poor compliance don't export clean transaction history, making tax reporting impossible.
How to identify sanctioned assets in your portfolio right now
The first step is knowing which assets are at risk. OFAC maintains a public Specially Designated Nationals (SDN) list that includes cryptocurrency addresses and wallet identifiers. You should cross-reference your holdings against this list immediately.
Step 1: Check the OFAC SDN list
Visit the US Treasury OFAC website and search the SDN list for any token names, projects, or wallet addresses you hold. The list is updated weekly and includes both traditional and crypto assets.
Look for entries labeled "Virtual Asset Service Provider" (VASP) or cryptocurrency-specific flags. If your token or exchange appears, take immediate action.
Step 2: Audit your exchange positions by jurisdiction
Different countries enforce sanctions differently. A token legal in Singapore may be restricted in the US. Document which exchange holds each position and verify that exchange's regulatory status.
- US-regulated exchanges (Kraken, Coinbase, Gemini) must comply with OFAC and SEC rules. Check their public compliance pages.
- Non-regulated exchanges (some Asia-based platforms) may have weaker AML controls. Higher risk for sanctioned asset exposure.
- EU-regulated platforms follow MiCA (Markets in Crypto Assets Regulation) and FATF guidelines. Stricter than unregulated venues.
Step 3: Use AML screening tools for individual tokens
Several blockchain analysis firms offer free or low-cost AML screening for retail holders. Chainalysis, TRM Labs, and Elliptic all provide wallet risk scoring. These tools flag if your holdings have transaction history linked to sanctioned addresses.
Enter your wallet address and review the risk report. Green flag means low exposure. Red flag means your holdings may be tainted by prior sanctioned transfers.
How PortfolioTrackr helps you track regulatory compliance risk
Managing sanctioned asset exposure across multiple exchanges is complex. PortfolioTrackr lets you centralize holdings from Binance, Kraken, Coinbase, and other platforms in one dashboard, making it easier to spot concentration risk on any single exchange.
If you're using PortfolioTrackr, you can categorize holdings by exchange risk level and set automated alerts if regulatory news breaks. For example, you can flag all positions on a particular platform and monitor them for compliance updates in real-time.
PortfolioTrackr also integrates your crypto holdings with traditional stock and UAE market positions (ADX/DFM), so you can see your total regulatory exposure across all asset classes.
Red flags that suggest your exchange or asset is at regulatory risk
Not every non-compliant exchange announces problems. Learn to spot warning signs before regulators step in.
- Vague AML policy: Exchange website says "we comply with local regulations" but doesn't publish detailed AML procedures.
- No KYC updates: Platform hasn't required Know-Your-Customer re-verification in over 2 years.
- Withdrawals slow or restricted: Fiat withdrawals take weeks, or certain countries are blocked without explanation.
- Delisting announcements: Tokens are being delisted with minimal notice, often a sign of compliance crackdowns.
- Regulatory action history: Search news for the exchange name + "SEC", "CFTC", "FinCEN". Prior enforcement = higher ongoing risk.
- Low transparency on AML screening: Exchange doesn't disclose which addresses or tokens are flagged as high-risk.
What to do if you hold sanctioned assets or trade on a flagged exchange
Act fast. Regulatory enforcement moves quickly once an exchange is targeted. Here's your action plan.
If your exchange is under investigation
First, withdraw all holdings to a self-custody wallet (hardware wallet or MetaMask) that you control. Do not wait for regulators to freeze accounts. Withdrawals often become restricted mid-investigation.
Document your transaction history and cost basis before moving funds. Many exchanges delete user data after being acquired or shut down by regulators.
If you hold a sanctioned token
Liquidate immediately on a compliant exchange, even if it means selling at a loss. Holding a sanctioned asset exposes you to civil liability and future forced liquidation at worse prices.
Once sold, document the sale and the reason (compliance risk). This protects you if regulators later ask why you held the asset.
Document everything for your records
Keep records of when you purchased the asset, which exchange held it, when you sold it, and the price. If regulators ever question your holdings, documentation proves you acted in good faith.
Export your complete transaction history from the exchange before any regulatory action occurs. After enforcement actions, historical data becomes hard to recover. You need this for tax reporting and future audits.
Real-world example: The CoinEx case and what it means for your portfolio
TRM Labs' 2024 report on CoinEx is instructive. The exchange processed transactions for North Korean entities, Hezbollah-linked accounts, and other OFAC-designated parties without flagging them as high-risk.
What happened next? Regulatory scrutiny increased, withdrawal limits were imposed, and certain countries saw their access restricted. Users holding illiquid altcoins on CoinEx suddenly couldn't exit positions quickly.
The lesson: regulatory failures don't affect all users equally. If you held Bitcoin or Ethereum on CoinEx, you likely exited fine. If you held small-cap tokens with low volume, you were trapped until liquidity returned or the exchange relaunched.
This is why diversifying across multiple platforms and tracking concentration risk matters. One exchange failure shouldn't liquidate your entire portfolio.
Building a compliant crypto portfolio going forward
Prevention is easier than recovery. Apply these rules to new holdings.
- Prioritize regulated exchanges: Coinbase, Kraken, and Gemini face quarterly audits. Choose them for core holdings.
- Avoid delisted tokens: If a token is being removed from major exchanges, there's often a compliance reason. Don't chase it to smaller platforms.
- Check token project governance: Look for the team's public AML policy. Serious projects publish compliance details.
- Use real-time alerts for regulatory news: Set up notifications if your holdings or exchange appear in regulatory announcements.
- Rebalance quarterly: Quarterly audits force you to review each position for compliance and concentration risk.
The bottom line
Sanctioned asset exposure is not a theoretical risk for retail crypto holders, it's operational. The TRM Labs CoinEx findings prove that even mid-sized exchanges fail AML screening. You cannot assume your exchange or token is compliant just because you bought it.
Audit your portfolio today: check OFAC lists, verify your exchange's regulatory status, and use AML screening tools on your wallets. If you spot red flags, move positions to compliant platforms immediately.
Tracking regulatory risk across multiple exchanges is easier when you centralize your holdings in one place. Whether you're protecting against scams or regulatory exposure, real-time portfolio tracking is your first line of defense. The cost of a compliance miss is always higher than the cost of prevention.
Track your portfolio in real time: free for 3 days
Live P&L across stocks, crypto, and global markets. WhatsApp and Telegram price alerts. AI trade import. Unified dividend tracking. No brokerage connection required.
Start Free Trial
Frequently asked questions
How do I check if my crypto exchange complies with OFAC?
Visit your exchange's compliance page (Coinbase, Kraken, Gemini publish policies) or search SEC and CFTC databases for enforcement history. Use PortfolioTrackr to flag exchanges by risk level, then prioritize regulated US or EU platforms. Non-regulated exchanges warrant extra scrutiny.
What happens if I unknowingly hold a sanctioned token?
Liquidate immediately on a compliant exchange, even at a loss. Document the sale for tax records. Unknowing purchase is a defense, but holding after learning about the restriction creates liability. Speed matters more than price when compliance risk emerges.
Can I be sued for trading sanctioned assets on an exchange?
Unlikely if you traded on a regulated exchange and neither you nor the exchange knew of the restriction. High risk if you traded on a known non-compliant venue or if the token was publicly flagged as sanctioned. Legal exposure depends on jurisdiction and intent.
Where can I find the official list of sanctioned cryptocurrencies?
The US Treasury OFAC SDN list is the primary source (ofac.treasury.gov), updated weekly. The list includes wallet addresses and crypto-specific entities. EU and UK maintain separate sanction lists. No single master list exists for all jurisdictions, so check all three if you hold internationally.
Does PortfolioTrackr help identify sanctioned assets in my portfolio?
PortfolioTrackr centralizes multi-exchange holdings so you can audit concentration by platform and flag exchanges with compliance risks. It alerts you to regulatory news affecting your holdings. For specific token screening, use third-party AML tools like TRM Labs or Chainalysis alongside your tracker.