For much of the digital asset industry’s history, compliance programs have focused on understanding the movement of funds. Through wallet screening, sanctions monitoring, transaction tracing, and blockchain investigations, institutions have developed increasingly sophisticated methods for identifying exposure to illicit activity. These capabilities remain foundational to any effective AML and KYC program and have helped transform digital assets into one of the most transparent asset classes in modern finance.
However, as institutional participation accelerates and digital assets become increasingly integrated into the global financial system, a new challenge has emerged. Understanding the transaction itself is no longer sufficient. Regulators, auditors, banking partners, and institutional investors increasingly expect organizations to understand the businesses, legal entities, ownership structures, and compliance programs operating behind those transactions.
This shift represents one of the most significant changes in digital asset compliance over the past decade. The institutions best positioned for the future will not simply be those capable of identifying suspicious wallets. They will be the organizations capable of understanding the counterparties behind them.
This shift introduces both a challenge and an opportunity for institutions operating in digital assets today. While the limitations of transaction-only compliance models are becoming increasingly clear, a new approach is emerging – one that combines on-chain intelligence with deeper counterparty insight. This article explores both sides of that equation: where existing frameworks fall short, and what institutions can do to build more complete, regulator-ready compliance programs.
The Compliance Landscape Has Changed
The compliance expectations facing digital asset institutions today look dramatically different than they did just a few years ago.
The digital asset market has entered a new phase of maturity. Spot Bitcoin ETFs have accelerated institutional participation, stablecoins are increasingly being discussed as payment infrastructure rather than speculative instruments, and tokenized funds, private credit products, and treasury instruments are steadily moving on-chain. Banks, brokerages, custodians, asset managers, and payment providers are actively expanding their digital asset capabilities in response to growing customer demand and evolving market opportunities.
As participation broadens, so does the complexity of the ecosystem. Compliance teams are now expected to evaluate an increasingly diverse range of counterparties, including exchanges, custodians, OTC desks, tokenization platforms, stablecoin issuers, liquidity providers, decentralized protocols, and settlement providers. Many of these organizations operate across multiple jurisdictions, maintain complex corporate structures, and face different regulatory obligations depending on where they conduct business. For compliance teams, this introduces a significant operational challenge: requirements are not only increasing, but diverging across regions. What may be sufficient due diligence in one jurisdiction may fall short in another, forcing institutions to navigate a fragmented and continuously evolving global regulatory landscape.
While blockchain analytics provides critical visibility into the movement of funds, it was never designed to answer questions about corporate governance, ownership structures, licensing status, regulatory history, or operational maturity. Yet these are precisely the factors that increasingly influence institutional onboarding decisions, counterparty approvals, and ongoing risk assessments.
Why Wallet Screening Alone Creates Blind Spots
Understanding Transactions Is Not the Same as Understanding Counterparties
Blockchain analytics has become one of the most effective tools available for understanding transactional risk. Compliance teams can review wallet activity, assess sanctions exposure, identify suspicious transaction patterns, and trace the movement of funds across blockchain networks with a level of transparency that has few parallels in traditional finance. These capabilities have become foundational to modern AML programs and remain critical for detecting financial crime.
The challenge is that transaction-level transparency does not automatically create counterparty-level transparency.
As digital asset markets mature, institutions are increasingly discovering that understanding where funds originated is only one component of effective risk management. Equally important is understanding the organization responsible for those funds. An address may have limited exposure to illicit activity, yet still belong to an entity operating with inadequate compliance controls, unclear ownership structures, limited regulatory oversight, or a history of enforcement actions.
Consider two counterparties that appear nearly identical through the lens of blockchain analytics. Both may demonstrate clean transactional histories, limited exposure to sanctioned entities, and no obvious indicators of suspicious activity. From an on-chain perspective, each may appear suitable for onboarding or continued business engagement. However, one counterparty may operate under robust regulatory supervision with mature AML controls, while the other may function through a complex offshore structure with limited transparency and questionable governance standards.
From a transactional perspective, these counterparties may appear similar.
From an institutional risk perspective, they represent entirely different decisions.
This distinction is becoming increasingly important as compliance programs evolve beyond simply identifying illicit activity and toward developing a more complete understanding of institutional risk. Wallet screening remains an essential control, but it was never designed to answer questions regarding ownership, licensing, jurisdictional exposure, governance practices, or operational maturity. Yet these are precisely the factors that increasingly influence regulatory examinations, banking relationships, and institutional onboarding decisions.
The Hidden Cost of Incomplete Counterparty Intelligence
Many compliance failures do not occur because organizations knowingly engage with high-risk counterparties. More often, they occur because institutions make decisions using incomplete information. While transaction monitoring and wallet screening can reveal important insights into the movement of funds, they may not provide the broader context required to evaluate the organizations participating in those transactions.
The consequences of these blind spots can extend far beyond financial crime exposure.
Regulators increasingly expect institutions to demonstrate a risk-based approach to due diligence that extends beyond transactional activity. Organizations must be prepared to explain not only where funds originated, but also why a particular counterparty was approved, what risks were considered during onboarding, and how those risks continue to be monitored throughout the relationship. Without access to reliable counterparty intelligence, these decisions can become difficult to justify during examinations or audits.
Banking relationships present a similar challenge. Financial institutions providing fiat services to digital asset firms continue to apply significant scrutiny to the counterparties operating within the ecosystem. Banks increasingly expect their clients to understand the exchanges, custodians, payment providers, and other virtual asset service providers with whom they conduct business. Inadequate visibility into these relationships can create friction during banking reviews and increase operational risk.
Reputational considerations are equally important. Institutions that become associated with counterparties experiencing regulatory enforcement actions, governance failures, sanctions concerns, or significant compliance deficiencies may face consequences that extend beyond any individual transaction. In an industry where trust remains a critical differentiator, the quality of counterparties matters.
As institutional participation continues to grow, organizations are recognizing that effective compliance requires more than identifying suspicious wallets. It requires understanding the broader ecosystem of entities operating behind them.
The Rise of VASP Due Diligence
One of the clearest indicators of market maturity is the growing emphasis regulators are placing on counterparty due diligence. Across traditional financial services, institutions are expected to understand the organizations with which they conduct business. Banks evaluate correspondent banking partners. Asset managers evaluate custodians. Broker-dealers evaluate service providers. Compliance programs are built around understanding counterparties, not merely transactions.
The same expectation is rapidly emerging within digital assets.
Virtual Asset Service Providers ( VASPs), have become critical components of the digital asset ecosystem. Exchanges, custodians, brokers, payment providers, lending platforms, tokenization firms, and numerous other organizations fall into this category. As these businesses become increasingly interconnected with traditional finance, regulators are expecting institutions to apply the same level of due diligence that would be expected when evaluating any other financial institution.
The challenge is scale.
The global digital asset ecosystem now includes tens of thousands of VASPs operating across multiple jurisdictions. Ownership structures change. Licenses are granted, suspended, or revoked. New regulatory frameworks emerge. Businesses expand into new markets. Risk profiles evolve continuously.
For compliance teams, manually monitoring these developments is becoming increasingly difficult. More so, what once could be addressed through periodic reviews and manual research has evolved into an ongoing intelligence challenge that requires continuous monitoring and structured data.
As a result, many institutions are beginning to recognize that VASP due diligence is no longer a one-time onboarding exercise. It is becoming a continuous compliance function.
From Wallet Intelligence to Counterparty Intelligence
The next generation of AML and KYC programs will not be defined solely by their ability to screen wallets or identify suspicious transactions. Those capabilities will remain foundational components of effective compliance programs, but they increasingly represent only part of the picture.
Modern institutions require both transactional intelligence and counterparty intelligence.
Blockchain analytics remains essential for understanding source and destination of funds, sanctions exposure, ransomware activity, darknet market exposure, transaction monitoring, and behavioral risk indicators. These capabilities provide critical visibility into how value moves throughout the ecosystem and remain indispensable for detecting financial crime.
However, understanding the entities operating behind those transactions requires a different layer of intelligence. Legal entities, ownership structures, regulatory licenses, jurisdictional information, enforcement histories, compliance controls, security certifications, and operational characteristics all contribute to a more complete understanding of institutional risk.
Neither perspective is sufficient on its own.
Transaction data without counterparty intelligence can leave institutions blind to governance, regulatory, and operational risks. Counterparty intelligence without blockchain analytics can overlook transactional behavior that may reveal financial crime exposure. Together, however, these datasets provide the context necessary to make informed decisions with confidence.
This convergence represents the future of digital asset compliance. The organizations best positioned to navigate an increasingly regulated and interconnected ecosystem will be those capable of combining on-chain intelligence with off-chain intelligence to develop a comprehensive understanding of risk.
What Institutional-Grade Due Diligence Looks Like
As digital asset markets continue to mature, institutions are increasingly expected to perform due diligence that mirrors the standards applied across traditional finance. This means moving beyond basic onboarding reviews and developing a more comprehensive understanding of counterparties throughout the relationship lifecycle.
Effective due diligence should provide clear answers to a number of critical questions. Organizations need to understand who controls an entity, where it is regulated, which jurisdictions it serves, what licenses it maintains, whether it has been subject to enforcement actions, how mature its AML controls are, what its historical risk profile looks like, and how its blockchain activity aligns with broader compliance expectations.
These insights are no longer relevant only during onboarding. They influence ongoing trading relationships, custody decisions, settlement activity, liquidity partnerships, banking relationships, and broader strategic initiatives.
Without this information, institutions are effectively making risk decisions based on incomplete information. They may understand transactional activity while lacking visibility into the organizational factors that ultimately determine whether a counterparty meets institutional standards.
The organizations that develop a more complete view of counterparties will not only strengthen compliance outcomes but will also improve operational efficiency, accelerate onboarding processes, and increase confidence in decision-making across the business.
As a result, institutions are increasingly prioritizing solutions that can standardize and scale due diligence across jurisdictions while still accounting for local regulatory nuance. The ability to map counterparties across regions, monitor regulatory status globally, and maintain consistent, audit-ready records is quickly becoming a requirement, not a differentiator, for operating at institutional scale.
How Lukka Helps Institutions Close the Gap
Lukka’s Blockchain Analytics and Compliance Intelligence solutions were built to help institutions address the growing complexity of digital asset compliance.
While traditional blockchain analytics platforms focus primarily on wallet activity, Lukka combines both on-chain and off-chain intelligence to provide a more comprehensive view of counterparties, ecosystem risk, and institutional due diligence requirements.
Lukka supports compliance teams with coverage across more than 108 blockchains representing over 99% of digital asset market capitalization, enabling organizations to investigate activity across the vast majority of the digital asset ecosystem. Lukka’s attribution capabilities extend across more than one billion deterministically attributed addresses, helping institutions identify counterparties, investigate relationships, and understand exposure with greater precision. In addition, Lukka evaluates more than 380 risk indicators, including sanctions exposure, terrorism financing, money laundering typologies, ransomware activity, darknet markets, fraud indicators, and behavioral risk signals.
Beyond blockchain analytics, Lukka maintains one of the industry’s largest repositories of VASP intelligence, covering more than 50,000 entities and hundreds of compliance, licensing, jurisdictional, operational, and regulatory data points. This intelligence helps organizations accelerate onboarding, strengthen counterparty reviews, and navigate jurisdiction-specific regulatory requirements with greater consistency by providing a standardized, global view of VASP risk, licensing, and compliance status.
By combining blockchain transparency with counterparty intelligence, Lukka enables institutions to evaluate risk through a broader and more contextual lens.
The Future of Compliance
The next generation of AML and KYC programs will not be defined solely by their ability to screen wallets or identify suspicious transactions. Those capabilities will remain foundational, but they will increasingly serve as only one component of a broader compliance framework.
What will distinguish leading compliance programs is their ability to provide context.
Context around ownership structures. Context around licensing and regulation. Context around jurisdictions and operational footprints. Context around counterparties and business relationships. Context around the full flow of funds and the organizations participating in those flows.
As digital assets become increasingly integrated with traditional financial markets, institutions need compliance infrastructure capable of delivering the same depth of due diligence expected across every other asset class.
Because ultimately, compliance is not simply about identifying risk. It is about understanding risk well enough to make informed decisions with confidence.
And that begins by seeing the complete picture.
About Lukka
Founded in 2014, Lukka provides enterprise blockchain data and software solutions to financial institutions, exchanges, fund administrators, and government agencies. Its platform transforms raw on- and off-chain activity into audit-ready intelligence—powering accounting, compliance, risk, and reporting workflows across the digital asset ecosystem.
Lukka operates under AICPA SOC 1 Type II and SOC 2 Type II frameworks, delivering institutional-grade data and infrastructure for the next generation of finance.
Learn more: Website | X (Twitter) | LinkedIn
