Crypto Fund AML: Source of Funds Evidence for On-Chain Subscriptions

Crypto fund AML source of funds work assumes a document that a digital asset subscription never produces. When an investor wires fiat, a statement from a regulated institution discharges most of the enquiry in one page. When the same investor sends a stablecoin from a wallet they control themselves, there is no originating institution to ask, and the obligation does not fall away with the paperwork. What substitutes is address control evidence, acquisition history and independent provenance analysis, each narrower than the statement it replaces. A fund that fixes its acceptable combinations before the offering opens can onboard on-chain subscribers, while a fund that decides at the point of subscription will usually decline them.

The question we are asked is never whether the obligation applies. It is what the file has to contain when there is no bank anywhere in the chain. Managers who settle that with the administrator's AML function before the offering opens accept subscriptions that would otherwise sit unprocessed for weeks.David Lloyd, Chief Executive Officer at CV5 Capital

Executive Summary

A subscription paid in digital assets does not remove the source of funds obligation. It removes the document that normally discharges it, replacing one authoritative record with several partial ones. Regulatory positions here are current as at August 2026.

• The Anti-Money Laundering Regulations (2025 Revision) impose the obligation in substance, not by prescribing documents.
• Source of wealth explains how the investor became wealthy, source of funds explains how the subscribed amount came to exist, and the on-chain case strains the second.
• Provenance analysis screens for exposure to sanctioned and illicit counterparties, and it does not establish lawful origin.
• A subscription routed through a regulated venue in the investor's own name is far easier to evidence than the same value sent from self-custody.
• The acceptance decision sits with the administrator's AML function and the money laundering reporting officer, under a board-approved policy.

What Crypto Fund AML Source of Funds Evidence Must Establish

The fund must explain, on the file and to a later reader, where the subscribed value came from and why that origin is credible. That is the substance of the obligation, and it does not change because the value arrived as a ledger entry rather than a wire. What changes is that the usual proof does not exist.

Three questions sit underneath a single request for source of funds evidence, and conflating them is the most common reason a file fails on review. Is the subscriber who they say they are? Are the assets under that person's control? How did those assets come to be theirs? A bank statement answers all three at once. Nothing on-chain does.

The fund therefore assembles a composite file rather than obtaining a single document. Each component carries a defined scope, and the residual weakness of each has to be recorded rather than glossed over. A file that states what it does not establish is stronger under scrutiny than one implying a certainty the evidence cannot support.

The Cayman Obligation in Substance, and Why Exchange Compliance Content Misses It

Regulation 3(1) of the Anti-Money Laundering Regulations (2025 Revision) requires a person carrying out relevant financial business to maintain procedures for the prevention and detection of money laundering. Regulation 4 sets out the customer due diligence obligation and regulation 33 addresses ongoing monitoring. The CIMA Guidance Notes on the Prevention and Detection of Money Laundering and Terrorist Financing in the Cayman Islands explain how those obligations apply on a risk-sensitive basis. None prescribes a document. They prescribe an outcome, and the fund must show it was reached.

Two further instruments bear on the same file. The first is the CIMA Rule on Effective Compliance Programmes for the Prevention and Detection of Money Laundering, Terrorist Financing and Proliferation Financing for Financial Services Providers. The second is the CIMA Rule on Compliance with Financial Sanctions and Targeted Financial Sanctions. Both are reported as issued on 20 July 2026, effective 18 September 2026. Obtain the final texts from CIMA. That programme sits on top of the full Cayman AML and know your business framework at launch.

Almost every ranking page on crypto AML is written for a virtual asset service provider, an exchange or a payment gateway. Those businesses hold the customer's assets, see the account history, and can freeze a balance. A fund has none of that. It receives one inbound transfer, from an address it did not create, and decides once whether to issue shares against it.

Source of Wealth and Source of Funds Are Different Tests

Source of wealth describes how the investor's overall economic position was built: a business sale, professional earnings, inheritance, an early position that appreciated. Source of funds describes the origin of the specific amount subscribed. Evidence for one does not automatically satisfy the other.

In a fiat subscription the second test is the easy one. The money arrives from a named account, the statement shows the balance, and the enquiry moves to the wealth narrative behind it. In a digital asset subscription the position inverts: the wealth narrative may be documented through tax filings or a sale agreement, while the tokens arriving cannot be tied to it.

That inversion is the problem. An investor who bought through a regulated venue can usually reconstruct the trail. One who accumulated the same assets across venues that no longer exist often cannot. Both may be legitimate, and only one can produce the file.

Proving Control of the Address and Reading the Provenance Trail

Demonstrating control, and the methods that do not

Before origin arises, the fund needs to know the sending address belongs to the investor. A message signed with the private key controlling that address, containing text the fund specifies, shows the signer held the key at that moment. A de minimis test transfer to an address given out of band shows the same. Neither is durable.

A screenshot of a wallet interface proves nothing, because an interface can display any address. An investor naming the address in a subscription document is an assertion, which is what the control test checks. Where neither method is practical, treat the uncertainty as a risk factor rather than assume it away.

What a provenance trace can and cannot establish

Independent provenance analysis examines the visible history of the sending address, attributes counterparties where possible, and scores exposure to categories the fund will not accept. It shows whether value reached the address from counterparties associated with sanctions designations, theft or mixing services, and whether the balance fits the investor's account.

Attribution is probabilistic and depends on the provider's clustering, so two providers can return different pictures of one address. A clean result means no identified exposure on the visible path, which is not a finding of lawful origin. Record it as one input, never as a clearance.

The Subscription Route Evidence Matrix

Route determines difficulty far more than amount does. A fund that sets expectations by route can tell an investor what is required before the transfer is made. The mechanics of receiving that value are set out in how subscriptions in BTC, USDC and USDT are processed.

The regulated venue route is the cleaner path, and it is worth saying so to investors directly. A withdrawal from a venue account in the investor's own name imports an intermediated identification step and produces records in a familiar form. It does not remove the fund's obligation, since reliance on a third party's due diligence carries conditions. It converts an unanswerable question into a documented one, as stablecoin subscription and redemption mechanics sets out.

Decline, Quarantine and Who Owns the File

Some subscriptions should not be accepted, and a fund that has not decided this in advance will decide badly under pressure. Direct exposure to a sanctions designation is the clearest case, and the reporting consequences follow immediately. Recent exposure to a mixing service, an address assembled from unattributed sources shortly before subscribing, or a narrative irreconcilable with the visible flows are each grounds to decline.

Partial acceptance is possible where part of the value has a documented trail and the fund will take only that part. Quarantine, meaning value held unallocated pending further evidence, should be a policy position rather than an improvisation. It creates a balance held for someone who is not yet a shareholder, and its treatment in the net asset value must be settled in advance.

The administrator's AML function performs the due diligence and will not process a subscription until its own standard is met. The money laundering reporting officer holds the reporting obligation and the escalation decision, and the board approves the policy both operate within. A manager expecting an exception under time pressure has misread the structure, which is why which administrator runs the AML function should be settled early.

Redemptions to a different address

The default rule should be that redemption proceeds return to the address the subscription came from. A request to redeem elsewhere is a change of payment instruction, one of the most commonly attacked points in fund operations. Treat it as new evidence requiring the same control test, verified out of band. Which addresses the fund receives into, and who may confirm a destination, belong in the fund's own wallet governance policy.

Reporting is a separate matter and should not be conflated with the AML file. The Crypto-Asset Reporting Framework and the revised Common Reporting Standard operate independently of customer due diligence, as CARF and CRS 2.0 reporting for Cayman crypto funds sets out, alongside the fund's FATCA and CRS obligations.

Key Takeaways

• Write the acceptable evidence combinations into the AML policy by subscription route before the offering opens.
• Require a signed message or a de minimis test transfer for any subscription from a self-custodied wallet.
• Tell investors early that a transfer from a venue account in their own name is far easier to evidence than the same value sent from self-custody.
• Record what each piece of evidence does not establish on the file itself, because a file stating its own limits survives review better.
• Settle the quarantine and partial acceptance treatment, including its net asset value effect, before a contested subscription arrives.
• Apply the subscription control test again to any redemption request naming a different address.

Frequently Asked Questions

Can a fund accept a stablecoin subscription from a self-custodied wallet?

Nothing in the Anti-Money Laundering Regulations (2025 Revision) prohibits it. The question is whether the fund and the administrator's AML function can satisfy the customer due diligence obligation without a bank record. No evidence set can be said in advance to satisfy the Regulations.

What is the difference between source of wealth and source of funds for a crypto investor?

Source of wealth explains how the investor's economic position was built, such as a business sale or professional earnings. Source of funds explains the origin of the amount subscribed. In a digital asset subscription the wealth narrative is often well documented while the tokens cannot be tied to it.

Does a signed message prove that the investor owns the assets?

It shows that whoever produced the signature controlled the private key at that moment. It says nothing about how the assets were acquired, and control can change afterwards. It is a necessary part of the file, not a sufficient one.

Should redemption proceeds be paid to a different address on request?

Treat any such request as a change of payment instruction, a common attack point. The control test applied at subscription should be applied again, and the request verified out of band through a channel established at onboarding.

Who decides whether a crypto subscription is accepted?

The administrator's AML function will not process the subscription until its own standard is met, and the money laundering reporting officer holds the escalation and reporting decision. Both operate within a board-approved policy, and the investment manager overrides neither.