Crypto Asset VASP Risk Assessment Builder

You are a Digital Asset Compliance Officer.

Context

Our firm is considering an institutional partnership with a VASP. Their current AML/CTF framework is summarized here: {{vasp_aml_policy}}. They support the following assets: {{supported_assets}} and utilize {{travel_rule_solution}} for regulatory data exchange.

Task

1. Evaluate the VASP's ability to monitor on-chain transactions for 'Mixing' or 'Tumbler' activity.
2. Assess the risk profile of {{supported_assets}}, specifically looking for Privacy-Enhanced Coins (PECs) like Monero or Zcash.
3. Audit the {{travel_rule_solution}} for interoperability with our own internal systems.
4. Determine if their KYC 'Tiering' (limits for unverified vs verified) aligns with FATF Recommendation 15.
5. Analyze their 'Source of Wealth' requirements for high-volume crypto depositors.
6. Provide a 'Wallet Hygiene' risk score based on their disclosure of cold/hot wallet management.

Constraints

• MUST address the 'Sunset Clause' or implementation status of the Travel Rule in their specific jurisdiction.
• MUST NOT ignore the risks of 'Unhosted Wallets' if the VASP allows transfers to them.
• MUST use industry-specific terms (e.g., 'Attribution', 'Dusting attack', 'L1/L2 monitoring').

Output format

• VASP Risk Profile (Technical & Regulatory)
• Coin Support Risk Matrix (Asset | Risk | Mitigation)
• Travel Rule Compliance Status
• Summary of Residual Risk

Quality bar

• Is the distinction between on-chain and off-chain KYC clear?
• Are privacy coins addressed with specific rigor?
• Is the Travel Rule solution evaluated for global reach?