TL;DR: NFT marketplaces reached $2 billion in sales in 2021, yet even large platforms often fall short of AML requirements, according to Sumsub’s guide on compliance for NFT businesses. The operational gap is no longer theoretical: marketplaces need controls that can withstand regulatory scrutiny before legislation catches up.
Editorial analysis by NHI Mgmt Group, based on content published by SumSub: “How NFT Marketplaces Can Become AML Compliant”.
Key questions
Q: How should NFT marketplaces approach AML compliance as they scale?
A: Start with risk-based onboarding, then extend controls into transaction monitoring, escalation, and record retention.
Q: Why do NFT marketplaces need KYC and monitoring together?
A: KYC tells the marketplace who the user is, while monitoring shows whether the user’s behaviour matches the expected risk profile.
Q: What breaks when NFT marketplaces rely on growth-first compliance design?
A: The platform can still process trades, but it loses the ability to explain why a user was accepted, how higher-risk activity was detected, and whether escalation was consistent.
Practitioner guidance
- Build risk-based onboarding for marketplace users Require identity checks proportional to transaction risk, jurisdiction, and expected account behaviour so the marketplace can distinguish ordinary collectors from higher-risk participants.
- Add behaviour-based monitoring to NFT transfers Review repeated transfers, rapid value movement, and unusual wallet patterns as AML signals, then route higher-risk activity into documented case handling.
- Define evidence retention for AML decisions Preserve onboarding, alert, and escalation records so the platform can explain why an account was accepted, reviewed, or restricted during audit or investigation.
Bottom line: NFT marketplaces face an AML gap because rapid growth does not automatically create the identity and monitoring controls regulators expect.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
AML readiness for NFT marketplaces is fundamentally a governance problem, not a narrow compliance checkbox. The article shows that platform growth can outpace control design, which means the compliance issue starts with who is allowed in, what is monitored, and what evidence can be produced later. Practitioners should treat the marketplace as a regulated identity and transaction environment, not as a simple digital commerce channel.
A question worth separating out:
Q: Who should own AML compliance in an NFT marketplace?
A: Ownership should be shared across compliance, IAM, fraud, and legal, with one accountable programme lead. That structure prevents gaps between who approves identity, who detects suspicious activity, and who responds to regulatory questions. In regulated marketplaces, fragmented ownership is usually where control failure begins.
👉 Read our full editorial: NFT marketplace AML compliance: what practitioners need to know