A Virtual Asset Service Provider is any business that exchanges, transfers, or custodies virtual assets (crypto). This includes exchanges, custodial wallets, and payment processors. Defined by FATF in 2019.

Has OFAC designated any VASPs?

Yes. OFAC has designated Suex (2021), Chatex (2021), Garantex (2022), and BitRiver (2022), among others. US persons cannot transact with these exchanges or their addresses.

What is the FATF Travel Rule?

FATF Recommendation 16 requires VASPs to share originator and beneficiary information for virtual asset transfers above USD/EUR 1,000. This creates an audit trail that helps sanctions enforcement.

How do I know if a VASP is sanctioned?

Check the OFAC SDN list for VASP names. For crypto addresses, screen against OFAC's designated address list. agentmail provides free screening at /tools/wallet-checker.

VASP sanctions evasion methods

Virtual Asset Service Providers (VASPs) are crypto exchanges, custodial wallets, and payment processors. Unlicensed or poorly regulated VASPs in high-risk jurisdictions are a primary channel for sanctioned entities to convert crypto to fiat.

TL;DR: Sanctioned entities use under-regulated VASPs to cash out crypto into fiat currency, bypassing the compliance controls of regulated exchanges. The FATF Travel Rule is designed to close this gap but adoption is incomplete.

How sanctioned entities exploit VASPs

A designated entity cannot use regulated exchanges like Coinbase or Binance (they screen against OFAC SDN). Instead, they use: (1) unlicensed P2P exchanges in high-risk jurisdictions, (2) nested exchanges operating under another VASP's license, (3) exchanges in jurisdictions with weak sanctions enforcement.

FATF Travel Rule

The FATF Travel Rule (Recommendation 16) requires VASPs to share sender and recipient information for transactions above USD/EUR 1,000. This creates an audit trail that sanctions screening can use. However, implementation is incomplete: many jurisdictions have not enacted Travel Rule legislation, creating gaps.

OFAC designation of VASPs

OFAC has designated multiple VASPs for facilitating sanctions evasion, including Suex (2021), Chatex (2021), and Garantex (2022). These designations make it a sanctions violation for any US person to transact with these exchanges, including sending or receiving crypto to/from their addresses.

VASP risk tier	Characteristics	Sanctions risk
Low	Licensed in FATF-compliant jurisdiction, screens against SDN	Minimal
Medium	Licensed but in weak-enforcement jurisdiction, limited screening	Moderate
High	Unlicensed or nested under another VASP's license	Significant
Critical	Located in or serving comprehensively sanctioned jurisdiction	Severe, do not transact

For AI agents: Before accepting crypto payments, verify the sending address is not associated with a designated VASP. agentmail flags known addresses of OFAC-designated VASPs.

Screen your agent's next payment

Check any wallet, name, or entity against OFAC, EU, UN sanctions lists in real time.

Free wallet checker

Frequently Asked Questions

What is a VASP?: A Virtual Asset Service Provider is any business that exchanges, transfers, or custodies virtual assets (crypto). This includes exchanges, custodial wallets, and payment processors. Defined by FATF in 2019.
Has OFAC designated any VASPs?: Yes. OFAC has designated Suex (2021), Chatex (2021), Garantex (2022), and BitRiver (2022), among others. US persons cannot transact with these exchanges or their addresses.
What is the FATF Travel Rule?: FATF Recommendation 16 requires VASPs to share originator and beneficiary information for virtual asset transfers above USD/EUR 1,000. This creates an audit trail that helps sanctions enforcement.
How do I know if a VASP is sanctioned?: Check the OFAC SDN list for VASP names. For crypto addresses, screen against OFAC's designated address list. agentmail provides free screening at /tools/wallet-checker.