Why AML/KYC matters for venture capital
It is not just a banking thing anymore
For years, VC fund managers operated in a relative regulatory blind spot when it came to AML/KYC. Banks had extensive requirements. Broker-dealers had extensive requirements. But investment advisers and fund managers had lighter obligations. That era is ending.
The regulatory environment has shifted dramatically. FinCEN (the Financial Crimes Enforcement Network) has expanded its focus on investment advisers as a potential channel for illicit finance. The Corporate Transparency Act (CTA) introduced beneficial ownership reporting requirements. And the broader trend toward transparency in financial services means that fund managers who ignore AML/KYC do so at significant legal and reputational risk.
Beyond regulatory requirements, robust AML/KYC protects your fund and your LPs. Accepting capital from a sanctioned individual or entity can result in asset freezes, penalties, and criminal liability. Accepting capital from a money laundering scheme makes your fund a tool for financial crime. These are not theoretical risks. They have happened to real funds.
The reputational angle
Even if you never face enforcement action, the perception of weak AML/KYC can damage your fund. Institutional LPs conduct their own due diligence on your compliance practices. If they find gaps, they will not invest. And if a problem emerges after they have invested, the LP relationship is likely over permanently. Strong AML/KYC is not just about compliance. It is a competitive advantage in fundraising.
The good news: for most emerging VC managers, the requirements are manageable. You do not need a full BSA compliance department. You need a documented process, consistent execution, and the right tools. This guide will show you exactly what that looks like.
The 2026 regulatory landscape
What has changed and what is coming
The regulatory landscape for AML/KYC in the investment management industry has evolved significantly in recent years. Understanding the current state and trajectory helps you build a program that is not just compliant today but resilient to future changes.
Key regulatory developments
FinCEN Investment Adviser AML Rule
FinalizedFinCEN finalized rules requiring SEC-registered investment advisers and exempt reporting advisers to implement AML programs, report suspicious activity, and comply with certain BSA requirements. This is the most significant regulatory change for fund managers in a decade.
Corporate Transparency Act (CTA)
In effectRequires most US entities (including fund entities) to report beneficial ownership information (BOI) to FinCEN. Existing entities must file, and updates must be submitted within 30 days of changes. This affects both your fund entities and your portfolio companies.
OFAC Sanctions Expansion
OngoingThe Office of Foreign Assets Control continues to expand its sanctions lists. The scope now includes not just countries but specific individuals, entities, and sectors. Screening must be comprehensive and regular, not just at onboarding.
Customer Due Diligence (CDD) Rule
In effectWhile originally targeted at financial institutions, the CDD Rule's principles are being extended to the investment management industry. Understanding beneficial ownership of your LPs is increasingly expected.
EU Anti-Money Laundering Directive (AMLD6)
In effectIf you accept EU-based LPs, you need to understand AMLD6 requirements. EU regulators expect fund managers accepting EU capital to have AML programs that meet or exceed EU standards.
The trend is clear: regulatory expectations for fund managers are converging with those of traditional financial institutions. The managers who build strong AML/KYC programs now will be ahead of the curve. Those who wait until enforcement actions make headlines will be scrambling.
KYC requirements for LP onboarding
What you need to collect and verify
KYC (Know Your Customer) is the process of verifying the identity of your LPs before accepting their capital. At a minimum, you need to confirm they are who they say they are, understand the source of their funds, and ensure they are not prohibited from investing by sanctions or other restrictions.
For individual LPs
For entity LPs (family offices, fund of funds, corporations)
The subscription agreement is not enough
Many emerging managers rely solely on the self-certifications in their subscription agreement for KYC. This is insufficient. A signed subscription agreement where the LP checks a box saying “I am an accredited investor” does not constitute adequate KYC. You need to independently verify identity (through government ID), screen against sanctions lists, and, for entities, identify and verify beneficial owners. Your subscription agreement can collect some of this information, but it should be supplemented by independent verification.
Building your AML program
The four pillars of a compliant program
A robust AML program for a VC fund does not need to be as elaborate as a bank's. But it does need to have four essential pillars, documented in writing and consistently implemented.
1. Written AML Policies & Procedures
Document your AML/KYC procedures in writing. This includes your LP onboarding process, identity verification steps, sanctions screening procedures, ongoing monitoring approach, and escalation procedures for suspicious activity. This document should be reviewed and updated annually.
In practice: A 10-20 page document that covers every step of your AML process. Your compliance consultant can draft this.
2. Designated AML Compliance Officer
Designate a specific individual as your AML Compliance Officer. For most emerging managers, this is a GP or the COO. This person is responsible for implementing and overseeing the AML program, ensuring training is completed, and serving as the point of contact for suspicious activity escalation.
In practice: A formal appointment documented in your compliance manual. This person doesn't need to be a full-time compliance hire.
3. Ongoing Training
All team members who interact with LP onboarding, capital calls, or fund operations must receive AML training. This includes recognizing red flags for money laundering, understanding sanctions requirements, and knowing the escalation procedure. Training should occur at hire and annually thereafter.
In practice: Annual training sessions (can be online) with documented completion records. Many compliance consulting firms offer AML training programs.
4. Independent Testing
Your AML program should be independently tested periodically. This means an outside party (compliance consultant, auditor, or law firm) reviews your program, tests your procedures, and identifies gaps. Annual independent testing is best practice.
In practice: An annual review by your compliance consultant or an independent party, resulting in a written report with findings and recommendations.
OFAC and sanctions screening
Screening against the lists that matter
OFAC (the Office of Foreign Assets Control) maintains several sanctions lists. The most relevant for VC fund managers are the Specially Designated Nationals and Blocked Persons List (SDN List) and the Sectoral Sanctions Identifications List (SSI List). You must screen every LP (and for entities, every beneficial owner) against these lists before accepting their capital.
Sanctions screening is not a one-time event. The lists are updated frequently, sometimes multiple times per week. Best practice is to screen at onboarding, re-screen the entire LP base at least annually, and re-screen whenever the lists are materially updated. Many screening tools offer automated ongoing monitoring that handles this for you.
Lists to screen against
OFAC SDN List
Specially Designated Nationals. Individuals and entities owned or controlled by targeted countries, or acting on their behalf. Transactions with SDN-listed parties are strictly prohibited.
OFAC SSI List
Sectoral Sanctions Identifications. Entities operating in specific sectors of the Russian and other economies. Certain transactions with SSI-listed parties are restricted.
OFAC Non-SDN Lists
Includes the Foreign Sanctions Evaders (FSE) List, Palestinian Legislative Council List, and others. Less commonly triggered but still important to screen.
BIS Entity List
Bureau of Industry and Security. Entities subject to export control restrictions. Relevant if your fund involves any technology transfer.
UN Sanctions Lists
If accepting international LPs, screen against UN Security Council consolidated sanctions lists.
EU Sanctions Lists
Required if accepting EU-domiciled LPs. EU consolidated sanctions list covers individuals and entities.
If you get a potential match (a “hit”), do not panic. False positives are common, especially for common names. Your process should include a clear procedure for investigating potential matches: compare all available identifying information (date of birth, address, nationality), escalate to your AML compliance officer, and document your analysis and conclusion. If you cannot confidently clear the match, consult with your compliance counsel before proceeding.
Beneficial ownership and the Corporate Transparency Act
Understanding who really owns what
The Corporate Transparency Act (CTA) requires most US entities to report their beneficial owners to FinCEN through Beneficial Ownership Information (BOI) reports. This affects your fund in two ways: your own entities need to file BOI reports, and you need to verify beneficial ownership of your entity LPs as part of your KYC process.
A “beneficial owner” under the CTA is any individual who directly or indirectly exercises substantial control over the entity OR who owns or controls at least 25% of the ownership interests of the entity. For your fund entities, this typically means the GPs. For entity LPs, you need to identify the individuals who meet this threshold.
CTA filing requirements for your fund
Your management company LLC, fund LP, and any GP entity all need to file BOI reports with FinCEN unless they qualify for an exemption. Large operating companies (20+ employees, $5M+ revenue, US physical presence) are exempt, but most fund entities will not meet this exemption. The filing is done through FinCEN's electronic filing system and requires full name, date of birth, address, and a government ID number for each beneficial owner.
Updates must be filed within 30 days of any change to beneficial ownership information. This includes new GPs joining, existing GPs departing, or changes in ownership percentages. Keep a calendar reminder to review and update your BOI filings whenever there are changes to your fund structure or team.
The look-through requirement
When an entity LP invests in your fund, you should “look through” the entity to identify the natural persons who ultimately own or control it. If a family office LLC invests $1M, you need to identify the individuals behind that LLC. If a fund of funds invests, you need to understand who the beneficial owners of that fund of funds are. The depth of look-through depends on your risk assessment, but at minimum you should identify all individuals who own 25% or more of the investing entity.
Ongoing monitoring and suspicious activity reporting
AML/KYC does not end at onboarding
Your AML obligations extend beyond initial LP onboarding. Ongoing monitoring means staying alert for suspicious activity, periodically re-screening your LP base, and updating KYC information when circumstances change.
Red flags to watch for
Suspicious Activity Reports (SARs)
Under the FinCEN investment adviser AML rules, fund managers must file Suspicious Activity Reports when they detect suspicious transactions. A SAR must be filed within 30 days of detecting the suspicious activity. SARs are filed electronically through FinCEN's BSA E-Filing system.
Critical: SAR filings are confidential. You must not disclose to the LP or any other party (except your legal counsel and certain regulators) that a SAR has been filed. This is a legal requirement. Tipping off the subject of a SAR is a federal crime.
Build a clear internal escalation procedure. If any team member observes a red flag, they escalate to the AML Compliance Officer. The AML CO investigates, consults with counsel if needed, and decides whether a SAR filing is warranted. Document every step of the investigation, whether or not a SAR is ultimately filed.
International LP considerations
Additional requirements for non-US investors
Accepting capital from international LPs adds complexity to your AML/KYC process. You need to navigate different regulatory frameworks, additional tax documentation, and heightened due diligence requirements.
Enhanced due diligence for high-risk jurisdictions
LPs from jurisdictions identified by FATF (Financial Action Task Force) as having strategic AML deficiencies require enhanced due diligence. This means additional verification steps, more detailed source of funds documentation, and potentially senior management approval before accepting the investment.
FATCA compliance
The Foreign Account Tax Compliance Act (FATCA) requires non-US financial institutions to report US account holders. If you accept non-US entity LPs, you may need to collect FATCA self-certifications and W-8BEN-E forms. Your tax counsel and fund admin should guide this process.
CRS (Common Reporting Standard)
If you have LPs from CRS-participating jurisdictions (most countries outside the US), you may have reporting obligations. CRS requires the automatic exchange of financial account information between participating countries.
EU-specific requirements
EU-based LPs may expect compliance with AMLD6 (the EU's 6th Anti-Money Laundering Directive). This includes risk-based customer due diligence, beneficial ownership verification, and PEP screening that meets EU standards.
Tax withholding
Non-US LPs may be subject to US tax withholding on certain income (effectively connected income, FDAP income). Your fund admin handles the mechanics, but you need to collect the right tax forms (W-8BEN, W-8BEN-E, W-8IMY) and understand the implications for capital calls and distributions.
Complete AML/KYC checklist
Everything you need in one actionable list
Use this checklist to ensure your AML/KYC program is complete. Items are organized by when they should be completed.
At Fund Formation
Draft written AML/KYC policies and procedures
Designate AML Compliance Officer
Select sanctions screening tool or service provider
Build LP onboarding workflow with KYC data collection
Create KYC document checklist for individual and entity LPs
Establish record retention policy (5 years minimum for KYC records)
Schedule initial AML training for all team members
File BOI reports for all fund entities with FinCEN
At LP Onboarding
Collect and verify government-issued photo ID for all individual LPs / beneficial owners
Screen LP (and all beneficial owners of entities) against OFAC SDN and SSI lists
Screen against additional sanctions lists (UN, EU) for international LPs
Verify source of funds / source of wealth
Conduct PEP (Politically Exposed Person) screening
Complete adverse media screening
Verify accredited investor / qualified purchaser status
Collect W-9/W-8 tax documentation
Identify beneficial owners for all entity LPs (25%+ threshold)
Document risk rating for each LP (low, medium, high)
Obtain senior management approval for high-risk LPs
Ongoing (Annual+)
Re-screen entire LP base against updated sanctions lists (minimum annually)
Review and update AML policies and procedures
Conduct annual AML training for all team members
Arrange independent testing of AML program
Update KYC records when LP information changes
Monitor for red flags and suspicious activity on an ongoing basis
File SARs within 30 days of detecting suspicious activity
Update BOI filings within 30 days of any changes
Review and update risk ratings for LPs as circumstances change
Document all AML/KYC activities in a compliance log
Tools and service providers
Making AML/KYC manageable for emerging managers
You do not need to build an AML/KYC program from scratch. A combination of technology tools and service providers can make the process efficient without being burdensome.
AML/KYC tool categories
Identity verification
Persona, Jumio, Onfido, Alloy
Automated ID verification that validates government-issued IDs, runs facial recognition, and confirms identity. Can be integrated into your LP onboarding flow.
Sanctions screening
ComplyAdvantage, Dow Jones Risk & Compliance, LexisNexis, Refinitiv World-Check
Automated screening against OFAC, UN, EU, and other sanctions lists. Many offer ongoing monitoring with alerts when list changes affect your LP base.
PEP and adverse media screening
ComplyAdvantage, Dow Jones, World-Check
Checks whether your LP or their beneficial owners are politically exposed persons or have negative media coverage.
Compliance management platforms
InnReg, ACA ComplianceGroup, NorthPoint Compliance
End-to-end compliance platforms that manage AML policies, training tracking, and compliance calendars.
Fund management platforms with built-in compliance
Archstone, Carta, AngelList
Platforms that integrate compliance tracking (including AML/KYC checklists and monitoring) into the broader fund management workflow.
For most emerging managers, the practical approach is to use a sanctions screening service ($100-500/LP or a flat monthly fee) integrated into your LP onboarding process, combined with a compliance consultant who provides the AML policy framework and annual independent testing. Total annual cost for a fund with 15-30 LPs: $3K-$10K. That is a small price for regulatory compliance and LP confidence.
Archstone includes a built-in compliance module with AML/KYC checklists, automated reminders, and compliance calendar tracking. It does not replace a dedicated sanctions screening provider, but it gives you the workflow infrastructure to manage your AML program alongside your other fund operations.
Stay compliant, stay focused
Compliance tracking built into your fund management
Archstone's compliance module tracks AML/KYC checklists, filing deadlines, and LP accreditation status alongside your data room, LP portal, and portfolio tracking.
Start your free trial
Go deeper on VC Beast
Free long-form guides from the team behind Archstone
For detailed vendor comparisons, sample AML policies, and interviews with compliance officers at emerging VC funds, visit VC Beast.
Continue learning