What Is Anti-Money Laundering (AML) in Fundraising?

Anti-money laundering in fundraising means screening investors and their money for sanctions and other financial-crime risk before funds are accepted. Know-your-customer, or KYC, means verifying that the investor is a real person or entity and that their identifying information checks out. In online fundraising, especially Regulation Crowdfunding (Reg CF), these checks are usually built into the investment flow, and an investor who cannot be cleared usually cannot invest.

KYC asks, "Is this investor who they say they are?" AML asks, "Can we safely accept this money?"

What is AML in fundraising?

When a company raises money, it is taking funds from people it may not know, often over the internet, through banks, payment processors, and securities intermediaries. That is exactly the kind of activity that triggers identity, sanctions, and fraud-risk controls.

In a fundraising context, AML usually shows up as investor screening rather than founders running a full bank-style compliance program. The practical question is not abstract. It is whether the intermediary, platform, or service provider can clear the investor and accept the funds.

AML checks often include sanctions screening, watchlist screening, and review of suspicious signals. The exact scope depends on the provider, the offering structure, the investor type, and the institutions involved.

AML vs. KYC: what is the difference?

The terms are often used together because they overlap in practice, but they are not the same thing. KYC provides the identity data. AML uses that data, plus other signals, to assess risk.

Topic	KYC	AML
Main purpose	Verify the investor's identity	Screen for sanctions and other financial-crime risk
Typical information	Name, date of birth, address, government ID, entity details	KYC data plus sanctions, watchlist, and risk-screening results
Common issues	Name mismatch, bad ID image, unverifiable address, incomplete entity info	Potential sanctions match, PEP or watchlist hit, unusual funding pattern, third-party payment concerns
What usually happens if flagged	The investor may be asked for more information or documents	The investment may pause until the potential issue is cleared

KYC verifies identity. AML evaluates risk. Most fundraising flows that do one will effectively do some version of both.

Why investors get asked for ID or documents

Founders are often surprised when a willing investor gets stopped and asked for more information. That is normal. These systems are designed to prevent bad actors from using ordinary-looking transactions to move money through legitimate channels.

Depending on the platform or provider, an investor may be asked for:

• Basic identifying information such as name, date of birth, and address
• A government-issued ID or a selfie match
• Confirmation of address, phone number, or other contact information
• For entity investors, formation documents and information about control persons or beneficial owners
• Clarification if the funding source or payment account does not line up cleanly with the investor record

A screening hit does not automatically mean wrongdoing. Often it means the system found a possible match and needs more information to rule it out.

A screening hit is often a matching problem before it is a misconduct problem.

How AML works in a Reg CF raise

In a Reg CF offering, the raise must be conducted through a registered intermediary: a funding portal or broker-dealer. Those intermediaries typically build KYC and AML-style checks into investor onboarding before an investment is completed or funds are accepted.

For founders, the key point is simple: you usually are not the one running these checks, but your round still depends on them. If an investor cannot be verified or cleared, the platform may not be able to let that investor participate.

Most investors clear quickly. The delays usually come from edge cases such as:

• A typo or mismatch in personal information
• An ID upload that cannot be verified
• An address inconsistency
• A possible sanctions or watchlist false positive
• A funding method that raises review questions

AML does not usually derail the whole round. It slows the minority of investments that need manual review.

How it works outside Reg CF

Reg D and other private offerings

Outside a portal-based Reg CF flow, there is often no single default onboarding process. Whether KYC and AML screening happens, who performs it, and how formal it is can depend on the structure of the round and the intermediaries involved.

A broker-dealer, SPV manager, bank, transfer agent, or other service provider may run some or all of the checks as part of its own compliance program. If you are taking money more directly, do not assume that means no one needs to think about KYC or AML. What is legally required, and what is prudent as a risk-management matter, depends on the facts and on counsel.

AML is not the same as accredited investor verification

This is a common source of confusion in Rule 506(c) offerings. Accredited investor verification is required in 506(c), but it solves a different problem.

Accredited investor verification asks whether the investor is eligible to participate under the securities rules. KYC and AML ask whether the investor's identity and funds clear the relevant onboarding and risk checks.

Accredited status answers, "Can this person invest?" KYC and AML answer, "Can we accept this investor and this money?"

Who usually runs the checks?

The answer depends on how the raise is structured. As a practical matter, founders should identify the responsible party before money starts coming in.

Fundraising path	KYC identity checks	AML / sanctions screening	Who typically runs it
Reg CF through a funding portal	Usually built in	Usually built in	The funding portal or broker-dealer intermediary
Reg D Rule 506(b)	Depends on the structure	Depends on the structure and intermediaries involved	Varies: issuer, broker-dealer, SPV manager, bank, or service provider
Reg D Rule 506(c)	Often part of onboarding	Often part of onboarding or intermediary compliance	Varies; accredited investor verification is separate and required
Reg A+ offering	Often yes in practice	Often yes in practice	Varies by issuer structure and engaged intermediaries

This is a practical generalization, not a legal rule. Exact responsibilities can vary by intermediary structure, jurisdiction, bank or payment-provider requirements, and counsel.

What founders should plan for

• Expect a small percentage of investors to need manual review. The process is usually fast for most people, but edge cases matter.
• Tell investors up front that they may need to verify identity or provide documents. Friction is easier when it is expected.
• Decide early who owns investor screening: the portal, broker-dealer, SPV manager, transfer agent, bank, or another vendor.
• Plan for non-U.S. investors, entity investors, trusts, and wires from third-party accounts. These cases often need more review.
• Build the possibility of clearance delays into your timeline. An investor saying "I'm in" is not the same as money being clear to close.
• If the raise is on a portal, do not try to work around failed checks by taking money off-platform without platform guidance and legal advice.

Common mistakes

• Assuming KYC and AML are the same thing. They overlap, but they solve different problems.
• Assuming a screening hit means the investor did something wrong. Many hits are false positives.
• Confusing AML with accredited investor verification. One is about eligibility; the other is about identity and risk.
• Waiting until the round is live to figure out who will handle investor screening.
• Ignoring edge cases like entity investors or account-name mismatches until funds are ready to move.

The biggest operational mistake is treating AML as back-office trivia. It is easy to ignore until an investor is ready to close and the money cannot be accepted.

Frequently asked questions

Will AML or KYC slow down investments?

Usually not for most investors. Many clear automatically in minutes. Delays tend to come from mismatched information, document issues, name matches that need manual review, or payment details that do not fit the investor record.

What happens if an investor fails KYC or cannot be cleared?

Usually the investment cannot be completed unless the issue is resolved. The intermediary or platform will often ask the investor for more information if the problem is fixable.

Is AML required for every type of fundraising round?

Not every round follows the same compliance workflow. In Reg CF, investor onboarding typically includes KYC and AML-style checks through the registered intermediary. In other offerings, what is required and who must do it depends on the structure, the intermediaries involved, and the applicable compliance obligations of those parties.

Why was my investor asked for ID if they already signed the subscription documents?

Because signing the investment documents and clearing onboarding are different steps. A valid signature does not replace identity verification or sanctions screening.

Can I accept the money another way if the portal blocks the investor?

Do not assume you can. If the round is being conducted through a portal or other intermediary, taking money outside that flow can create compliance and operational problems. Ask the platform what options, if any, exist and get legal advice before changing the process.

Are entity investors handled differently?

Often yes. If an LLC, fund, or trust is investing, the intermediary may ask for formation documents and information about the people who control the entity or beneficially own it.

Bottom line

AML in fundraising is the process of screening investors and their funds for sanctions and other financial-crime risk before money is accepted. KYC is the identity-verification piece of that onboarding. In Reg CF, expect these checks to be part of the platform flow. Outside Reg CF, do not assume the issue disappears. Figure out early who is handling investor screening, how edge cases will be cleared, and what happens if an investor cannot pass review.