Notifications
Clear all
Topic starter
23/06/2026 7:28 pm
TL;DR: NFT marketplaces reached $2 billion in sales in 2021, yet even large platforms often fall short of AML requirements, according to Sumsub’s guide on compliance for NFT businesses. The operational gap is no longer theoretical: marketplaces need controls that can withstand regulatory scrutiny before legislation catches up.
NHIMG editorial — based on content published by Sumsub: How NFT Marketplaces Can Become AML Compliant
Questions worth separating out
Q: How should NFT marketplaces approach AML compliance as they scale?
A: Start with risk-based onboarding, then extend controls into transaction monitoring, escalation, and record retention.
Q: Why do NFT marketplaces struggle to stay compliant across regions?
A: Because AML requirements, identity proofing expectations, and reporting duties vary by jurisdiction.
Q: What breaks when identity verification is too shallow in NFT platforms?
A: Shallow verification makes it easier for bad actors to register, transact, and re-enter after enforcement actions.
Practitioner guidance
- Strengthen onboarding verification Require risk-based identity verification before users can transact, not just before they create accounts.
- Map AML controls to the full user lifecycle Review how access, wallet linkage, and transaction permissions change after registration, escalation, and account recovery.
- Prepare for jurisdiction-specific control changes Document which AML controls vary by market and which remain global.
What's in the full article
Sumsub's full guide covers the operational detail this post intentionally leaves for the source:
- How NFT marketplaces can structure AML workflows around onboarding, monitoring, and escalation stages
- The compliance logic behind preparing for future legislation before rules are finalised
- Practical examples of how regulated digital asset businesses can adapt controls across jurisdictions
👉 Read Sumsub's guide on how NFT marketplaces can become AML compliant →
NFT marketplace AML compliance - is your programme ready?
Explore further
25/06/2026 3:30 am
AML readiness is fundamentally an identity governance problem, not just a legal one. NFT marketplaces cannot separate user verification from access control and transaction oversight without creating blind spots. The article’s core message is that compliance becomes operational only when identity proofing, monitoring, and lifecycle controls are designed together. Practitioners should treat the marketplace account as a governed identity, not a sign-up form.
A few things that frame the scale:
- 80% of identity breaches involved compromised non-human identities such as service accounts and API keys, according to Ultimate Guide to NHIs.
- Only 5.7% of organisations have full visibility into their service accounts, which shows how quickly identity blind spots become governance blind spots.
A question worth separating out:
Q: Who should own AML compliance in an NFT marketplace?
A: Ownership should be shared across compliance, IAM, fraud, and legal, with one accountable programme lead. That structure prevents gaps between who approves identity, who detects suspicious activity, and who responds to regulatory questions. In regulated marketplaces, fragmented ownership is usually where control failure begins.
👉 Read our full editorial: NFT marketplace AML compliance: what practitioners need to know
