User clusters guide: P2P-trader / OTC / DeFi / mining pool
Different crypto users face different AML risks. A breakdown of 4 main clusters: P2P traders, OTC desks, DeFi users, mining pools — what risks and how to check.
AML risks depend on who you are in the crypto ecosystem. A P2P trader and a DeFi farmer face completely different threats. Let's break down the 4 main user clusters and their specific risks.
Cluster 1: P2P traders (main demand)
Who: freelancers receiving USDT for work; small P2P exchangers; those converting crypto to fiat.
Main risk: receiving "dirty" fiat after P2P → account block under AML rules.
What to check:
- The counterparty's address in P2P before the trade (USDT-TRC-20 is the main asset)
- Your wallet when withdrawing to a CEX
VerifAML level: Fast (OFAC/EU sanctions) — sufficient for most P2P.
The main pain of P2P is not sanctions but connection to drug trafficking and drop accounts. VerifAML partially covers this via eth-labels (category=scam), but for USDT-TRC-20 it's more important to check the sender against sanctions.
Cluster 2: OTC desks
Who: over-the-counter exchangers working with large amounts ($10k+ per trade).
Main risk: passing through sanctioned or stolen funds → reputational loss, legal issues.
What to check:
- Every incoming deposit of $10k+
- Counterparty addresses at L2-L3 level (multi-hop tracing)
VerifAML level: Standard. For OTC, L3 tracing (Phase 3+) is critical, which isn't yet available — OTC desks should use Chainalysis/GraphSense for critical trades.
Cluster 3: DeFi power users
Who: active users of DeFi protocols (Uniswap, Aave, Curve) earning from farming/liquidity.
Main risk: receiving "tainted" inflows from mixers via interaction with public pools.
What to check:
- Incoming deposits to your DeFi positions
- Addresses your contracts interact with
VerifAML level: Standard (GoPlus + eth-labels). DeFi addresses are often flagged as defi (severity info) — this is normal.
Cluster 4: Mining pools / payout recipients
Who: miners receiving regular payouts from pools (Foundry USA, F2Pool, Binance Pool).
Main risk: minimal. Mining pools pay out honestly mined coins, AML systems know this.
What to check:
- Rarely. If a pool's address suddenly gets flagged — worth checking.
VerifAML level: Fast. Mining payouts are flagged as mining pool (severity info, score 5) — this is safe.
Summary table by cluster
| Cluster | Main risk | VerifAML level | Check frequency |
|---|---|---|---|
| P2P trader | Dirty fiat → block | Fast | Every trade |
| OTC desk | Sanctions/theft | Standard + L3 (external) | Every deposit |
| DeFi user | Tainted inflows | Standard | Regular |
| Mining pool | Minimal | Fast | Rare |
Related materials
VerifAML is an informational service. For OTC and large amounts, use professional tools.