This summer, Roman Storm, a co-founder of the notorious crypto mixing service Tornado Cash, faced conviction in a New York federal court for allegedly operating an unlicensed money-transmitting business. While prosecutors hailed this conviction as a significant achievement in the ongoing battle against crypto-related money laundering, the situation is more nuanced than it appears.
### The Misconception of Crypto Mixers as Major Money Laundering Threats
For a considerable period, regulators have classified mixers like Tornado Cash as the pinnacle of money laundering risks within the cryptocurrency realm. Their anonymous and opaque nature gives the impression that such tools are primarily responsible for the majority of crypto-related illicit activity. However, data suggests a different narrative. The true culprits in crypto money laundering are not mixers, but rather centralized exchanges—well-known trading platforms that are licensed, regulated, and integrated with the global banking system. Despite their claims of stringent regulatory compliance and robust “Know Your Customer” (KYC) practices, these exchanges often become havens for illicit activities, serving as the main conduits for converting dirty crypto into clean fiat currency.
### Centralized Exchanges as Money Laundering Hubs
According to a Chainalysis report from 2025, most illicit cryptocurrency funds during 2024 were funneled through centralized exchanges. These platforms are the final destination for criminals looking to transform their tainted crypto assets into usable cash, be it dollars, euros, or yen. Criminals are drawn to these exchanges for the same advantages that legitimate traders seek: liquidity, speed of transactions, and global access. While mixers like Tornado Cash can obscure the origins of funds on the blockchain, they lack the capability to convert these assets into cash and deposit them into bank accounts; that responsibility falls solely to exchanges with ample liquidity and connections to fiat markets. Many centralized exchanges struggle with compliance programs that are inadequately resourced and poorly enforced, enabling illicit transactions to evade detection.
High-profile enforcement actions have revealed the extent of this issue. The U.S. Justice Department’s 2023 settlement with Binance exposed that the exchange had processed transactions related to ransomware, dark web marketplaces, and sanctioned entities. In response, Binance increased its compliance investments, allocating $213 million to its compliance division in 2023. Similarly, BitMEX faced a hefty $100 million fine after admitting guilt to violations of the Bank Secrecy Act, with its founders previously pardoned by former President Donald Trump.
### The Limitations of KYC Regulations
The cornerstone of compliance in cryptocurrency transactions rests on Know Your Customer (KYC) regulations. Ideally, these rules are designed to exclude bad actors by verifying identities, scrutinizing transactions, and identifying suspicious activities. However, in practice, KYC often devolves into a mere formality, providing a façade of diligence while savvy criminals exploit loopholes.
Weaknesses in KYC processes exacerbate this issue. Some exchanges accept subpar identification documents or depend on automated verification systems that can be deceived by deepfakes or stolen data. Others may outsource their compliance operations, reducing them to mere contractual obligations rather than active safeguards. Even with effective processes in place, determined launderers can utilize mules, straw accounts, or shell companies to bypass initial screenings.
The more significant flaw lies in the fundamental structure of KYC. These regulations focus on individual accounts rather than identifying laundering patterns across multiple transactions. A sanctioned entity may never create an account in its own name; instead, it could distribute its transactions across numerous intermediaries, obscuring the funds’ origins until they eventually reach an exchange that converts them to fiat. By the time these transactions come under scrutiny, they have often traversed so many channels that the trail appears legitimate.
### Strengthening Centralized Exchanges Against Money Laundering
Centralized exchanges remain prime targets for money launderers due to their role at the intersection of cryptocurrency and fiat currencies. To tackle this issue effectively, enforcement must focus not only on policy but also on the design of these platforms. Genuine progress requires moving beyond superficial KYC checks to implementing systems capable of detecting laundering activities in real-time across various accounts and jurisdictions.
This initiative must begin with adequately funding compliance teams to match the scale of the exchanges they oversee. It also entails closing legal loopholes that allow exchanges to operate from lenient jurisdictions while engaging in high-risk markets, as well as holding executives personally accountable for compliance failures. Regulators must insist that exchanges share actionable intelligence with one another and with law enforcement agencies, ensuring that criminals cannot simply migrate from one platform to another without being detected.
Addressing these challenges is undoubtedly more complex than simply targeting cash mixers. However, this approach is essential for effectively combating money laundering at its source. Until centralized exchanges are fortified at a structural level, enforcement efforts will remain reactive, allowing substantial amounts of illicit funds to continue slipping through the cracks.
