Transaction approval controls
Test recipient checks and policy controls in the transfer process.
Find the control gaps before your audit
Range's forward deployed engineers and compliance specialists test your controls on real transaction history. In 1 to 4 weeks, you get the evidence and a remediation plan for every gap.
Audit-ready evidence
Show which controls work on the transactions you actually process
Auditors want proof your controls worked on real transactions, not a policy that describes them. Range tests each one and shows which hold and which need fixing.
Mapped to your regulators
Controls traced to the regulations you answer to
Range starts from the obligations that apply in your jurisdictions, from MiCA and the GENIUS Act to FCA and Central Bank of Brazil rules, and turns each one into a control it can test. Every finding points back to the rule behind it.
- OFAC sanctions
- MiCA
- CADOC 5710 reporting
- FinCEN requirements
- Electronic money institution licensing
- Financial Conduct Authority requirements
- GENIUS Act
- CADOC 5711 reporting
- Payment institution licensing
- FATF Travel Rule
Sanctions and issuer blacklists
Test whether relevant findings receive the required decision.
Illicit exposure thresholds
Test the configured percentages, USD floors and severity rules.
Travel Rule records
Test information exchange, verification and retained evidence.
Safeguarded customer funds
Test reconciliations between entitlements and segregated positions.
Stablecoin reserve reconciliation
Test reserve positions against issued supply.
Baseline in 1 to 4 weeks
From agreed scope to a remediation plan
Range compliance experts and engineers run the audit with your team. We connect your tools, test the controls and write the report. Your team answers questions and reviews the findings.
- 01
Agree the obligations and scope
Map controls to your jurisdictions, activities and regulatory obligations.
- Markets in Crypto-Assets Regulation (MiCA)
- Bank Secrecy Act and anti-money laundering requirements
- Payment Services Directive (PSD2)
- Financial Conduct Authority requirements (FCA)
- Financial Action Task Force Travel Rule (FATF)
- GENIUS Act
- Digital Operational Resilience Act (DORA)
- OFAC sanctions
- EU Anti-Money Laundering Regulation (EU AMLR)
- CADOC reporting: CADOC 5710 and 5711, Banco Central do Brasil
- Crypto-asset service provider authorization (CASP)
- FinCEN requirements
- Electronic money institution licensing (EMI)
- Virtual asset service provider registration and licensing (VASP)
- Electronic money institution licensing (EMI)
- Money transmitter licensing (MTL)
- Payment institution licensing (PI)
- 02
Connect the source records
Bring your existing provider and transaction data into the audit.
- 03
Test the controls
Run the agreed tests against the full transaction history in scope.
- 04
Review and remediate
Receive the report, inspect the evidence and agree the actions for each gap.
Works with your stack
Assess the stack your firm already operates
No rip and replace. Range tests your controls through the custody, screening and accounting systems you already run, against the same records your auditors will ask for.
Explore integrationsOnchain risk and screening
Bring your existing provider through your API key.
Chainalysis
TRM Labs
Elliptic
Merkle Science
Crystal
Identity and business verification
Sumsub
Persona
AiPrise
Custody and wallet platforms
Fireblocks
Anchorage Digital
Utila
Safe
Findings you can close
A control-by-control report, then ongoing testing
Range's forward deployed engineers and compliance specialists run the audit with your team and deliver a baseline in 1 to 4 weeks, depending on your providers, networks and transaction volume.
A result for each control
See the obligation behind each test and trace every result back to the real transactions tested.
A plan for each gap
Review each control gap and agree the remediation plan.
Ongoing checks and current evidence
Keep testing new transaction activity and retest as requirements and laundering patterns change. Retain current control results and supporting records for your next audit.
Digital Assets Compliance Testing FAQs
What compliance teams ask
Every required transaction control across your custodians, wallets, banks, screening providers and networks, tested against the BSA/AML, Travel Rule and MiCA obligations that apply to you.
The scope is agreed around your obligations, providers and transaction flows. Controls can include sanctions and issuer blacklists, illicit exposure thresholds, transaction approval controls, Travel Rule records, safeguarded customer funds and stablecoin reserve reconciliation. Range tests each one against the full transaction history in scope.
The custody, screening and accounting systems you already run. That includes onchain screening providers such as Chainalysis, TRM Labs, Elliptic, Merkle Science and Crystal through your API key, identity providers such as Sumsub, Persona and AiPrise, custody and wallet platforms such as Fireblocks, Anchorage Digital, Utila and Safe, and your bank records.
A report mapping each control to its obligation, recording every result against real data and providing a remediation plan for each gap. Continuous testing keeps the evidence current between audits.
1 to 4 weeks, depending on your networks, providers and transaction volume.
No. Range supplies controls, audit trails, evidence and reporting. Your regulated firm remains responsible for determining and meeting its obligations.
More questions on compliance testing, see the full FAQ.
Security for audit data and evidence
Customer data is isolated and encrypted. Range does not hold your assets or private keys.
Workspace isolation
Screening activity, policies and sensitive workspace data are separated between customers.
Data protection
Range maintains GDPR-aligned processing, access, retention and privacy controls.
SOC 2 Type II audit
Range is undergoing an independent external SOC 2 Type II audit.
Layered security
Encryption, role-based access, least privilege and monitoring protect the platform.
Test the controls your audit will depend on
Bring your obligations, providers and transaction history. Agree the audit scope with our compliance team.