The correct answer is B, C, and E, as these three present the highest anti-money laundering or sanctions risk and will require controls prior to launch. According to the FATF Updated Guidance for a Risk-Based Approach to Virtual Assets and Virtual Asset Service Providers1, P2P transactions pose significant challenges for AML/CFT compliance, as they may involve anonymous or pseudonymous parties, cross-border transfers, real-time settlement, and limited information on the beneficiaries. These factors increase the risk of money laundering, terrorist financing, and sanctions evasion, as well as the difficulty of detecting and reporting suspicious activity. Therefore, the institution should implement appropriate controls to mitigate these risks, such as:
Conducting enhanced due diligence on customers who use the P2P service, especially if they are located in high-risk jurisdictions or are involved in high-risk activities1.
Implementing transaction monitoring systems that can identify and flag unusual or suspicious patterns of behavior, such as large or frequent transfers, transfers to or from sanctioned entities or countries, or transfers that do not match the customer's profile or expected activity12.
Applying the travel rule, which requires the originator and beneficiary VASPs (or financial institutions) to exchange and retain information on the parties involved in the transfer, such as their names, account numbers, addresses, and national identification numbers13.
Establishing information-sharing and cooperation mechanisms with other VASPs, financial institutions, and regulators, to facilitate the exchange of relevant data and intelligence on P2P transactions and customers14.