Virtual, Cryptocurrency Types: Definitions & Risk Profiles
November 23, 2020
If you have had any experience with crypto or virtual cryptocurrencies, you will understand that they are not just a digital version of a fiat currency. There are similarities, but you need to know the differences. Financial institutions (FIs) need to be aware of the different types of virtual assets and the different risks with each one in order to do a proper risk assessment.
Terminology for Virtual Currency System Participants
Here is a brief summary from FATF on the terminology for those involved with virtual currencies.
- An exchanger is a person/entity engaged as a business in the exchange of virtual currency for real currency, funds, or other forms of virtual currency and also precious metals, and vice versa, for a fee.
- An administrator is a person /entity engaged in issuing a centralised virtual currency, establishing the rules for its use; maintaining a central payment ledger; and who has the authority to redeem the virtual currency.
- A user is a person/entity who obtains virtual currency and uses it to purchase real or virtual goods or services, sends transfers to another person for personal use, or who holds the virtual currency as an investment.
- A miner is an individual or entity that participates in a decentralised virtual currency network by running special software to solve complex algorithms in a distributed proof-of-work or other distributed proof system used to validate transactions in the virtual currency system.
- Virtual currency wallet is a means for holding, storing and transferring bitcoins or other virtual currency.
- A wallet provider is an entity that provides a virtual currency wallet which holds the user’s private keys. Wallet providers allows users, exchangers, and merchants to more easily conduct virtual currency transactions, maintains the customer’s virtual currency balance and also provides storage and transaction security.
Below are some of the common cryptocurrency types and their risk profiles.
Conventional cryptocurrencies serve primarily has a means of holding and transmitting value, like fiat currency. Many, but not all, conventional coins split off (also known as hard-forked) from Bitcoin or were modifications of the Bitcoin code
- Bitcoin, the most famous and popular cryptocurrency, has many tools available to track and monitor transactions, thereby helping to manage and mitigate risk.
- Bitcoin is the most widely adopted, with an estimated 42 million wallet users, thereby making it the most commonly used currency for both legal and illicit activity.
Stablecoins are cryptos whose value is tied to a currency, basket of goods, commodities, or other stable asset to minimize price volatility. While stablecoins have a great value, they provide can significant amount of risks because they are pegged to an asset. Unless a reliable audit of these firms’ assets is done, you cannot confirm if the value is real or imagined.
- While stablecoins are marketed as being backed by the pegged asset, it is hard to guarantee that the central authority possesses the assets to back up the currency.
- When stablecoins are pegged to a fiat currency (as many are), users can transact with the ease and lack-of-controls of cryptocurrency but without the volatility of other cryptocurrencies.
Coined “The World’s Computer,” Ethereum and subsequent smart contract (sometimes called dApps) cryptocurrencies enable code to be run on the blockchain.
This code can be used to store, process, and represent ticket sales, equity trades, game tokens, and many other real-world assets in addition to running as normal software code. Your ownership is tied to your wallet and there is no protection if your funds get hacked.
- Smart contracts can be written and deployed by anyone. Because of this, there have been numerous hacks (and subsequent losses) due to errors made by the creator of the smart contracts.
- Smart contract wallets can store both value and other assets as defined by smart contracts, making it difficult to determine the nature of trades.
The goal of settlement networks is to replace existing cross border payment networks that banks, MSBs, and people currently use. Ripple is focused on banks and MSBs, while Stellar is focused on individual exchanges of value.
- Both Ripple XRP and Stellar Lumens can be freely traded as a cryptocurrency, so the risk is similar to conventional cryptocurrencies.
Exchange tokens provide an easy mechanism to transact within an exchange and pay reduced exchange fees. The largest is the Binance Coin (BNB). These pose similar risks to conventional tokens.
- Exchange tokens may be centralized and managed by the exchange, enabling the exchange to burn tokens and perform other currency management tasks.
- Risk profile of exchange tokens follows the same risk profile as other conventional tokens of similar
Privacy coins use advanced cryptographic algorithms to ensure transactions are not linkable or traceable, thereby ensuring senders, receivers and transactions can be obfuscated from third-party observers. This is the type of virtual currency that everyone knows and worries about since they have the biggest risk from an AML/KYC perspective.
- Privacy coins represent the biggest AML/KYC risk of all cryptocurrencies.
- Monero transactions are private by default, whereas Zcash transactions can be either public or private.
- By obfuscating wallets and transactions, it can be difficult of impossible for a 3rd party to identify the nature and risk of a transaction.
“By using privacy coins, individuals are, by default, saying they understand that this puts them in a higher risk category,” said Greg. “They may not be happy about it…but that is the reality.”
By combining the immutable ledger of cryptocurrencies with tagging devices such as RFID tags, supply chain cryptocurrencies provide full supply chain traceability and material authenticity.
- Supply chain cryptocurrencies represent a very small percentage of the market.
- While trading of supply chain cryptocurrencies is open to any user with a compatible wallet, these purpose-built currencies are used mainly by individuals investing in the projects or using the supply chain aspects.
Banking with VAs and VASPs
- While Bitcoin maintains the largest market capitalization, most of the transaction volume is conducted in stable coins such as Tether. For this reason, it is good to understand all the different kinds of cryptocurrencies.
- Each cryptocurrency type presents a different type of risk, but from an AML/KYC perspective, privacy coins pose the highest risk.
- You need to risk profile all the cryptocurrencies used by your clients. If a client is bringing money in from an exchange, you need to know not just what was the currency that they immediately transacted with but work with the exchange to understand if there were other currencies involved and what were the types of transactions being used by that user.
- You need to complete enhanced due diligence on any VASPs that you’re going to do business with. You need to understand the nature of the business, value and purpose and make sure the business is running legally and securely.
- Like with fiat currency, you need to do transaction monitoring. This is where blockchain forensics is incredibly important and can be used for both with when money comes in and also after the fact for investigations.
- Everything you do with traditional fiat currency applies for cryptocurrencies including sanctions screening, PEP screening, adverse media, etc.
- New coins and new types will continue to emerge as coins split (hard fork), new coins are developed, and new problems are solved through cryptocurrency. It is important to stay informed and assess the risk with each.
Identifying Virtual Currency Transactions and Entities
Given the recent reminders by FinCEN requiring financial institutions to to identify and report suspicious activities where they suspect bad actors are using virtual currencies to launder money, we recently partnered with CipherTrace to integrate their crypto intelligence data into the Alessa solution. The data provided by CipherTrace enables financial institutions to:
- Identify customers transacting with convertible virtual currencies (CVCs) and unregistered crypto MSBs that may be attempting to evade supervision and fail to implement appropriate AML controls
- Monitor wire transfers, ACH and credit card transactions to identify customers involved in CVC transactions
- More effectively track the accounts associated with peer-to-peer crypto exchanges and smaller virtual currency kiosks, and cross-references the contact information of small virtual asset service providers (VASPs) with customer records to flag suspicious activities
Once a customer or transaction has been flagged, a risk score is applied and the compliance team can do the necessary investigations to determine whether the transaction needs to be reported to the regulator.
Contact us to to request a demo about how Alessa can help you mitigate the risks associated with virtual currencies.