Exhibit DeskAML · crypto compliance · fraud

Archive

Everything we have published.

Case Files reconstruct one event from the record; Explainers take one mechanism; Regulation decoded reads one regulatory text at source; Red flags one signal and what a desk would check first; Fast Takes one fresh fact. Each lists the sources it rests on.

Case Files

  1. Case File 001 · 30 Sep 2026Bitget: the payment that never settledDuring Bitget's hack (its final figure: about $388M), a 9,142,093.8 XRP payment shows on the explorer. It never settled. The ledger result: tecUNFUNDED_PAYMENT. Count it, and the stolen XRP looks 8.88% bigger than it was.

Explainers

  1. Explainer 002 · 14 Oct 2026Trust, sold to scammersDOJ alleges vendors offered scam operators scam sites, laundering and the recruiting of trafficking victims on one Telegram market. The market, DOJ says, held the payment until the job was done. On 9 Sep OFAC designated it: Xinbi Guarantee. DOJ announced it had seized its channels.
  2. Explainer 001 · 4 Oct 2026Stolen funds need an exitNEAR Intents says it blocked more than $50M of attempted transfers tied to the Bitget hack ($388M by Bitget's count). By its own account, those transfers then went to other providers. As NEAR Intents uses the word, blocked is not frozen.

Regulation decoded

  1. Regulation decoded 001 · 15 Oct 2026MASAK on rented accounts: one account, a networkTürkiye's FIU, MASAK, says a suspicious transaction report "should not be considered the only measure" once a firm detects a rented account (a money mule). The main aim is first to stop the account's continued use in illegal activity. Quotes are translated from the Turkish.

Red flags

  1. Red flag 002 · 9 Oct 2026Structuring under thresholdsSeveral transfers, each just under a reporting threshold, that clear it together. FATF lists this structuring among its virtual-asset red flags. We read the FATF list and MASAK's rules for Turkish platforms: the flag is a reason to look, not a verdict.
  2. Red flag 001 · 5 Oct 2026DeFi in, fiat outA customer receives stablecoins from a DeFi protocol that runs no AML checks, sells them and withdraws fiat. FinCEN lists this among its scam-center laundering red flags. We read the alert: the flag is a reason to look, not a verdict.

Fast Takes

  1. Fast Take · 10 Oct 2026Ledger says one user's device had a hardware implantLedger says one impacted user's device contained an unauthorized hardware implant. It is investigating reported losses from users in Southeast Asia who bought from one reseller, CryptoBilis. Its two statements do not say where the implant was added, by whom, or whether other devices had one.