Skip to content
ComplianceOfficer

Exchanges · custodians · stablecoins

Crypto compliance software and crypto AML software for exchanges, custodians and stablecoin compliance

Crypto compliance software covers three jobs: verifying customers, screening wallets and transactions on chain, and keeping the program in step with the rules. Sumsub meters the first from $1.35 a check, Chainalysis and Elliptic sell the second from $50,000 a year, and the third is where 2026 hurts, with 14 GENIUS Act rule documents published since December. We watch those for $149 a month.

§ Live · Compliance scan

One free run. Nothing you pick is stored.

Frameworks you answer to

Crypto, US · first rows of a real scan

  • § 01 Written AML program with a named officer
  • § 02 KYC / Customer identification program
  • § 03 Customer due diligence and beneficial ownership
  • § 04 Transaction monitoring and SAR filing
§ 02

What the software has to deliver

Crypto AML software is bought against these federal numbers

A US exchange, kiosk operator or custodial wallet is a money services business under the Bank Secrecy Act. Every feature on a crypto AML vendor's slide traces back to a short list of federal thresholds, and an examiner will pick a sample and ask you to prove each one.

Compliance officer reviewing printed regulatory bulletins next to a laptop
Every one of these numbers sits on a rule that has its own notice and comment cycle. Somebody on your team has to read each notice before it takes effect.
§ 03

Stablecoin compliance in 2026

GENIUS Act compliance is being written one Federal Register notice at a time

The law was signed on July 18, 2025. The rules that tell an issuer, a bank subsidiary or a credit union what it actually has to do came out across ten months and five agencies. These are the ones we read from the Federal Register, with the comment windows that matter to a firm planning a launch.

The market structure side is quieter but not settled. The CLARITY Act passed the House on July 17, 2025, then failed a Senate cloture vote 49 to 50 on September 15, 2026, with a motion to reconsider pending. The SEC published a proposed Regulation Crypto Assets on August 21, 2026 (comments to October 20) and a crypto custody proposal on October 6 (comments to December 7). California's Digital Financial Assets Law licensing date arrived on July 1, 2026, and the state repealed its stablecoin chapter on June 30. A compliance plan written in January is already out of date.

§ 04

Crypto compliance companies

Crypto compliance tools compared on what they do and what they cost

We read every price below on October 12, 2026 from the vendor's own pricing page, its AWS Marketplace listing, Vendr's recorded contracts or US federal award data. Where none of those has a number, the table says so.

Crypto compliance software vendors compared
Vendor What it covers Public price evidence Best fit
ChainalysisWallet and transaction screening, investigations, attribution dataAWS Marketplace 12-month tiers of $50,000 and $250,000 (private offer). Vendr median $174,709, range $25,742 to $297,338. IRS award $10,922,339 for March 2026 to March 2027Large exchanges and custodians that need the deepest attribution
EllipticWallet and transaction screening, cross-chain tracingAWS Marketplace tiers of $50,000 and $100,000 per year. IRS award $537,500 for August 2026 to August 2027Mid-size platforms that want a listed price to start from
TRM LabsTransaction monitoring, wallet screening, investigationsVendr median $40,000, range $20,000 to $48,000. FBI award $2,785,535 for April 2026 to April 2027Growth-stage exchanges and fintechs adding crypto
SumsubKYC, liveness, AML screening, Travel Rule on the regulated tierPricing page: $1.35 per verification, $149 monthly minimum; $1.85 with a $299 minimum on the regulated tier. AWS: $120,000 for 60,000 ID verificationsPlatforms onboarding retail customers at volume
NotabeneTravel Rule messaging between VASPsEntry plan for up to $10,000 sent a month; the full platform is priced by demoAny VASP that sends $3,000+ transfers to other VASPs
Scorechain, Merkle ScienceBlockchain analytics and screeningNo public price, no AWS listing, no federal awards foundBuyers who want a smaller vendor and will negotiate from zero
ComplianceOfficerObligation register, daily rule watch (FinCEN, OFAC, OCC, Fed, FDIC, SEC, state), gap list, policy drafts, audit trail. No on-chain screening and no KYC$149 a month for one owner, $298 for up to three people, month to monthThe compliance officer who has to know which of those notices changes the program
§ 05

Budgeting the stack

How much a US crypto compliance stack costs and what moves the quote

Nobody buys one crypto compliance tool. A US exchange ends up paying for identity checks on every new customer, on-chain screening on every deposit and withdrawal, Travel Rule messaging on the larger transfers, and something that keeps the written program current. Four numbers set the bill.

1

New customers a month

KYC is metered. At Sumsub's listed $1.85, 5,000 verifications a month is about $9,250, before liveness and screening add-ons.

2

Screening volume and chains

Analytics tiers move with transfers screened and chains covered. Elliptic's listed step is $50,000 to $100,000 a year.

3

Counterparty VASPs

Travel Rule cost tracks how many $3,000+ transfers go to other platforms rather than to private wallets.

4

States you serve

Each money transmitter license brings its own exam cycle and reporting. New York and California each add a separate digital asset regime.

The gap between list and recorded price is wide. Chainalysis lists a $250,000 top tier on AWS, while the Vendr median sits at $174,709, so a buyer with competing quotes has room to move. Ask each vendor for the per-unit overage rate and the renewal cap in writing before you sign; the year-one number is rarely the expensive one. For the KYC and sanctions side compared across banks and fintechs, see our AML compliance software guide, and the AML transaction monitoring page for how alert tuning drives the analyst headcount behind any of these tools.

Trader at a desk with several monitors showing price charts, holding a smartphone
The trading desk moves in seconds. The rulebook behind it moves by notice and comment, and the compliance team has to keep up with both.
§ 06

Permitted payment stablecoin issuers

Stablecoin compliance under the GENIUS Act means five standing obligations

Section 4 of the Act turns a stablecoin issuer into something close to a narrow bank. Each of these is a recurring control, not a one-time launch task, and each one has a regulator proposal behind it that may still change before the rules are final.

  • Reserves at least one to one

    Held only in the asset types the Act lists, with rehypothecation barred outside narrow cases.

  • Monthly reserve report, examined

    Composition published on the website each month and examined by a registered public accounting firm.

  • Monthly CEO and CFO certification

    Filed with the regulator. A knowingly false certification is a crime under the Act.

  • A full BSA program

    The issuer is a financial institution for Bank Secrecy Act purposes: risk assessment, named AML officer, CIP, enhanced due diligence, SARs and a sanctions program.

  • Block, freeze and reject

    The technical ability to comply with lawful orders, which the Act defines to include seizing, freezing and burning tokens.

§ 07

Where ComplianceOfficer fits

Buy blockchain analytics for the transactions and keep the rulebook behind them current

Buy an analytics or KYC vendor for

Screening wallets, tracing funds, verifying people

Risk scores on deposits and withdrawals, alerts on exposure to sanctioned or illicit addresses, identity and liveness checks at onboarding. Chainalysis, Elliptic, TRM Labs and Sumsub do this. We do not.

Buy ComplianceOfficer for

Knowing which notice changes your program

FinCEN, OFAC, the banking agencies, the SEC and state regulators checked daily against your crypto register: the 13 obligations the scan above returns. Each change arrives as a plain-language summary, you mark the gap, and a policy update is drafted for your review, with a dated trail for the examiner.

Get started for $149 a month Regulatory change management Financial services compliance software SOC 2 compliance software
§ 08

Questions buyers ask

How much does crypto compliance software cost?

It depends on which layer you buy. Identity verification is metered: Sumsub lists $1.35 per verification with a $149 monthly minimum, or $1.85 with a $299 minimum on the tier that includes the Travel Rule. Blockchain analytics is a yearly contract: Elliptic lists $50,000 and $100,000 tiers on AWS Marketplace, and recorded Chainalysis contracts on Vendr have a $174,709 median. A US exchange usually buys both, plus a way to track the rules.

How much does Chainalysis cost?

Chainalysis does not publish a price on its own site. Its AWS Marketplace listing for Crypto Compliance shows 12-month tiers of $50,000 and $250,000, sold by private offer. Vendr's recorded contracts, last updated February 2026, have a median of $174,709 a year and a range of $25,742 to $297,338.

When does the GENIUS Act take effect?

On the earlier of 18 months after enactment or 120 days after the federal stablecoin regulators issue final implementing rules. The law was signed July 18, 2025, so the outside date is January 18, 2027. As of October 12, 2026 the OCC, Federal Reserve, FDIC and NCUA rules were still proposals, and Treasury had issued one interim final rule.

Does the Travel Rule apply to crypto?

Yes. FinCEN's May 2019 guidance (FIN-2019-G001) applies the funds travel rule in 31 CFR 1010.410(f) to convertible virtual currency. A money services business sending a transmittal of $3,000 or more has to pass the originator and beneficiary information to the next institution in the chain.

Do crypto exchanges need to register with FinCEN?

A US exchange or custodial wallet that transmits value is a money services business and registers with FinCEN within 180 days of being established, then renews every two calendar years, by the last day of the year before each renewal period (31 CFR 1022.380). Federal registration does not replace state money transmitter licenses, which most states require separately.

Is the CLARITY Act law?

No. The House passed it 294 to 134 on July 17, 2025, and Senate Banking reported it on June 1, 2026, but a Senate cloture vote on the motion to proceed failed 49 to 50 on September 15, 2026. A motion to reconsider was entered, so the bill is stalled rather than dead.

What does a stablecoin issuer have to do under the GENIUS Act?

Hold reserves of at least one to one in the asset types the law lists, publish the reserve composition every month, have each month-end report examined by a registered public accounting firm, and file a monthly CEO and CFO certification. The issuer is also treated as a financial institution under the Bank Secrecy Act, so it needs an AML program, sanctions controls and the technical ability to block, freeze and reject transactions.

See which crypto rules on your register moved this year

One register of the rules that apply to your platform, checked daily, with a policy update drafted for each gap you mark. $149 a month for one owner, $298 for up to three people, month to month. Compare every plan on pricing.

Start for $149 a month Run the compliance scan
§ 90

Related registers

Buy the plan