No-KYC Swaps Get Blocked? AML Screening Explained (2026)
No account, no documents — and still three filters before payout: corridor limits, address-risk scores, and travel-rule law. Measured limits and rates from today.
No KYC means no identity file, not no screening. Three filters stand between your coins and your payout, and they run in this order: parameters (does the pair exist, is the amount inside the corridor's limits), address risk (does the sending or receiving address carry a score a screening vendor flags), and law (what the regulated provider behind the order is required to do). We remove exactly one of those at the door — the document check. The other two keep running whether or not you ever see them, which is why an order can be refused on a service that never asked your name. Everything numeric below comes from our own live endpoints at the time of writing (2026-10-16, around 06:05 UTC); the quotes on the exchange page are always the ones that count.
Layer one is arithmetic, and it causes most rejections. Our catalog today carries 540 assets across 73 networks, and every corridor has its own floor and ceiling driven by network cost. Measured this morning: 0.00001 BTC→XMR returned HTTP 400, 'amount below minimum', with a floor of 0.00017341 BTC (about $14.25 at BTC $82,155.42) and a ceiling of 2.18506824 BTC. 15 USDT-TRC20→XMR was refused at a floor of 19.567865 USDT, ceiling 179,510.16. 100 ETH→XMR came back 'amount above maximum', ceiling 73.30800883 ETH (roughly $179,339), floor 0.00573074 ETH (about $14.02). Ask for an asset that does not exist and the endpoint answers 404 'pair not supported'; ask XMR→XMR and it answers 'identical assets'. None of that is compliance work. It is the pool refusing an order it would lose money on, and it happens before any address is ever inspected. (XMR to USDT exit)
Small orders are not blocked, they are expensive. The same corridor prices differently by size, because the fixed part of the spread does not shrink. Measured today on USDT-TRC20→XMR: 25 USDT quoted 0.0010327696 XMR per USDT, 50 quoted 0.0014059542, 100 quoted 0.0015921813 (0.15921813 XMR), 250 quoted 0.001704502, 500 quoted 0.0017418204, and 20,000 quoted 0.0017772855 (35.54570976 XMR). The smallest quotable size therefore receives 41.9% less per dollar than the largest. That is the entire reason a 19.57 USDT floor exists — below it the corridor cannot pay for itself, not because a compliance officer is watching. If a swap looks 'punished', check the size before blaming screening. (XMR to USDT exit)
Layer two is address risk, and it is invisible from your side. Regulated providers connect to blockchain-analytics vendors — Chainalysis, TRM Labs and Elliptic are the three names you will find in public product documentation — which score addresses instead of people. The score travels along the flow: coins that touched a sanctioned entity, a darknet market, a ransomware payout or a mixer are treated as tainted, and taint spreads by hop count. When an order's deposit address is paired with a sending address above the provider's threshold, the provider chooses between refusing the order, holding it for manual review, or letting it settle and then asking for the story. The practical consequence for a no-KYC user: what is being judged is your coins' history, and that history is public. A wallet you have held for years can be perfectly clean; a wallet you funded from a peer-to-peer desk last Tuesday may carry a score you cannot see. (privacy coins vs mixers)
Layer three is law, and it is aimed at the provider, not at you. The FATF travel rule (Recommendation 16) standardised a USD/EUR 1,000 threshold for originator and beneficiary information. In the European Union, Regulation (EU) 2023/1113 has applied to crypto transfers since 30 December 2024, with simplified treatment for transfers to and from self-hosted wallets below EUR 1,000. In the United States, the BSA funds-transfer recordkeeping rule uses a $3,000 threshold. None of those obligations requires your passport — they require the provider to know something about the addresses, and to refuse or unwind what it cannot support. Screening lists are also policy, not physics: OFAC designated Blender.io in May 2022 and Sinbad.io in November 2023, sanctioned Tornado Cash in August 2022 and delisted it again in March 2025. An address's treatment can change twice without the address ever moving. (Is Tor safe for swaps?)
Six ways an order actually stalls, by symptom. (1) Refused at creation — parameter layer, fix the amount. (2) Payout address rejected as invalid — usually a wrong network rather than a wrong format; the string can look fine and belong to another chain. (3) Stuck in 'confirming' — the chain has not reached the confirmation count the provider wants; nothing is wrong, and nothing speeds up for worrying. (4) Funds arrived, state frozen — provider-side manual review, usually address risk or a missing memo. (5) Refunded after arrival — the provider declined to settle and sent the coins back to the refund address; this is where a refund address on an exchange account turns a recoverable order into a support ticket. (6) Expired with a late deposit — the rate window closed, and the arriving coins are still tracked and refunded rather than swapped at your locked rate. (recovering misdirected funds)
Two mechanical traps to clear before the compliance ones. First, memos. Today 540 assets carry only 7 that need an extra identifier: XRP on the XRP ledger, USDC on Algorand, XLM on Stellar, HBAR on Hedera, ATOM on Cosmos, STX on Stacks, and Neiro on Ethereum. A deposit to a shared address without the memo is not lost, but it is not credited automatically either — recovery runs through the provider's support path and takes time. Second, the refund address: it must be a wallet you control, on the network you are sending from. Worth thinking through — an exchange deposit address carries the exchange's omnibus wallet risk profile, and it cannot receive a refund at all if the network is wrong. One extra field costs nothing and removes an entire failure mode. (recovering misdirected funds)
A checklist, and the honest other half. Before you send: confirm the amount clears the corridor floor; confirm the payout address is on the right network; add the memo if the asset needs one; use a refund address you control; keep the transaction hash; and if the receiving address is one you rarely use, send a small test first — 25 USDT quoted today at 0.0010327696 XMR per USDT, cheap tuition. Then the uncomfortable half: no-KYC removes record-keeping risk from your side, and it does not remove counterparty risk from the transaction. You are still trusting a provider with a deposit address and a 30-minute window, and address screening can still refuse you with no appeal process. Compare the quote on the exchange page, watch the order states, and read 'no KYC' as one fewer exposure rather than zero — that is the accurate reading on both sides of the counter. (recovering misdirected funds)