Custodial vs Non-Custodial Wallets: Who Gets AML Screened?

TL;DR - A custodial exchange account gets watched for sanctions and suspicious activity the moment you sign up; a non-custodial wallet gets watched by nobody until you run that check yourself.

On August 8, 2022, the U.S. Treasury sanctioned Tornado Cash, and Circle froze the USDC sitting inside its addresses within hours. That instant freeze only works because a company sat between the funds and the wallet holder. Anyone deciding where to keep crypto is really deciding how much of that control they want back, and how much AML screening comes bundled with the account. There is no third option. You either hand a company your identity and your keys, or you keep both and take on the screening job yourself.

What actually happens when you open a custodial exchange account?

A custodial exchange like Coinbase, Kraken, or Binance runs your identity through sanctions and PEP lists before your account goes live. That is Know Your Customer, and it is not optional under the exchange's licenses. Once you are in, every deposit and withdrawal gets checked against transaction-monitoring rules built to catch structuring, rapid fund movement, and links to flagged addresses. The exchange holds your private keys, which means it can also freeze your balance or file a suspicious activity report without asking you first. A withdrawal that trips a monitoring rule can sit under review for days while a compliance analyst reads the case file, and there is rarely a clock on how long that takes. You get convenience and a safety net. You also get a company that can lock you out.

What happens when you hold crypto in a non-custodial wallet instead?

A non-custodial wallet, whether that is MetaMask or a hardware device, has no company in the loop at all. Nobody ran a KYC check when you generated the seed phrase. Nobody is watching the address for sanctions exposure, mixer contact, or stolen-funds proximity unless you set that up yourself. On August 16, 2026, Coinkite disclosed a firmware bug that let attackers drain $116 million from over 5,200 Bitcoin addresses tied to its Coldcard hardware wallets. Those were non-custodial wallets in the fullest sense, and most of the stolen coins sat untouched for weeks with no institution flagging them, because none existed to do it. That is the trade self-custody makes: full control over the keys, and full responsibility for every check an exchange would otherwise run for you. Anyone can look up an address's balance and transaction history on Etherscan for free, but a raw list of transactions will not tell you whether that address touched a sanctioned entity, a mixer, or a stolen-funds cluster. Screen the wallet with Plastron instead, and get a sanctions, mixer, and stolen-funds exposure score across Ethereum and six other chains in seconds.

How do custodial and non-custodial wallets actually compare on AML controls?

Laid out side by side in a table, the gap is not subtle.

Who is actually watching a non-custodial wallet for sanctions or stolen-funds exposure?

Nobody, until the funds hit a regulated on-ramp or off-ramp. That is the honest answer, and it surprises people who assume "the blockchain" is somehow self-policing. Plastron's own screening corpus carries 3,901 labeled addresses across scam, fraud, hack, and mixer categories, built specifically because that gap exists. The OFAC Specially Designated Nationals list currently names 780 crypto-linked addresses directly, and none of them stop working the moment they get added. A sanctioned address can still send and receive funds on-chain all day. The only thing that changes is whether the next exchange, bridge, or counterparty it touches is checking. That screening moment usually arrives late, well after the funds have already passed through two or three other non-custodial wallets. By the time a deposit lands on a regulated exchange and gets flagged, the original holder is often long gone and someone further down the chain is the one left explaining an account freeze they did not cause.

So which one should you actually use?

Neither answer is universal, and pretending otherwise is how bad advice gets written. If you swap a few hundred dollars a month and don't want to manage your own security, a custodial account is the safer default. The exchange's KYC and monitoring will catch problems you would never see coming yourself. But if you route funds through DeFi, OTC deals, or bridges that no exchange ever touches, a custodial account cannot protect you, because it never sees those transactions. A non-custodial wallet paired with your own screening habit is the only setup that actually covers that activity. A wallet with no screening isn't dirty by default. It's just unmeasured, and unmeasured is its own kind of risk. The safest posture, in practice, is treating a non-custodial wallet the way an exchange treats a new customer: check it before you trust it, and check it again before every transfer that matters.

FAQ

Can a non-custodial wallet actually get frozen?

Not at the wallet level. But a token issuer like Circle or Tether can blacklist a specific address at the smart-contract level, which freezes that token's balance even though the wallet itself stays non-custodial.

Does an exchange screen a wallet before you withdraw to it?

Policy varies by exchange. Some screen the destination address before releasing a withdrawal; many don't check beyond their own KYC records. Screening the address yourself before you send is the only way to know for sure.

Do non-custodial wallets get reported to regulators?

No. Suspicious activity reports come from regulated intermediaries. A wallet with no exchange, custodian, or payment processor attached has no entity positioned to file one.

Is a non-custodial wallet more likely to hold tainted funds than a custodial one?

Not inherently. The difference is visibility. A custodial account's exposure gets flagged automatically; a non-custodial wallet's exposure only surfaces when someone runs the check.