In our previous guide, we covered the foundational questions every crypto AML candidate should answer. But for senior roles—Compliance Officers, AML Investigators, Blockchain Analysts, and Heads of Risk—you need to dig deeper. You need to test their ability to handle complex investigations, design controls for decentralized products, and navigate the murky waters of cross-chain crime.
The following advanced interview questions are designed for candidates who will be making critical decisions, building compliance frameworks, and defending your company against sophisticated illicit actors.
Contents
Part 1: Blockchain Forensics & Investigations
These questions test a candidate’s ability to follow the money across multiple ledgers and obfuscation techniques.
1. How would you conduct a forensic investigation into a cross-chain bridge hack? What steps would you take, and what tools would you rely on?
- What to look for: The candidate should mention tracing the initial exploit on the source chain, identifying the bridge contract, and then tracking the wrapped assets on the destination chain. They should discuss using blockchain analytics tools to cluster addresses, monitoring off-ramps (exchanges), and coordinating with law enforcement. A strong answer will also mention the importance of speed, as hackers often move funds through mixers within hours.
2. Describe a complex investigation you handled involving mixers, chain-hopping, and fiat off-ramps. How did you ultimately trace the funds?
- What to look for: Look for real-world experience with peeling chains, timing analysis, and clustering heuristics. The candidate should explain how they identified the initial deposit address, followed the funds through multiple swaps and bridges, and eventually linked the activity to a centralized exchange deposit. They should also discuss how they used subpoenas or law enforcement requests to obtain KYC data from the off-ramp.
3. What are the limitations of blockchain analytics tools, and how do you compensate for them?
- What to look for: A mature candidate will admit that tools are not perfect. They may mention false positives, incomplete coverage of privacy coins, and the difficulty of tracking funds through certain DeFi protocols. They should explain how they use manual review, open-source intelligence, and collaboration with peers to fill the gaps.
Part 2: DeFi, Smart Contracts, and Non-Custodial Risk
These questions assess a candidate’s ability to apply AML principles to decentralized products where traditional controls may not fit.
4. How would you design an AML program for a DeFi protocol that has no central custody or control? What are the practical limitations?
- What to look for: The candidate should acknowledge that full AML compliance is difficult without custody. They might suggest implementing wallet screening at the front-end, using sanctions oracles to block interaction with sanctioned addresses, geoblocking users from high-risk jurisdictions, and partnering with analytics providers to monitor on-chain activity. They should also discuss the legal wrapper or foundation structure that may create regulatory obligations.
5. What are the AML risks associated with stablecoins, and how would you mitigate them?
- What to look for: Risks include the potential for stablecoins to be used for money laundering due to their price stability, the ability of issuers to freeze funds, and the cross-border nature of transfers. Mitigation might include enhanced due diligence on large transfers, monitoring for rapid movement through mixers, and ensuring compliance with the Travel Rule when transferring to other VASPs.
6. How do you handle sanctions screening for cryptocurrency wallets? What is the difference between direct and indirect exposure?
- What to look for: The candidate should explain that direct exposure means the wallet itself is on a sanctions list (e.g., OFAC SDN). Indirect exposure means the wallet received funds from a sanctioned address. They should discuss the 50% rule, the importance of hop count, and the decision to block, reject, or file a SAR depending on the level of exposure and the company’s risk appetite.
Part 3: Program Design, Testing, and Governance
These questions are for leadership roles where the candidate will build and maintain the compliance framework.
7. How would you test the effectiveness of your transaction monitoring system? What metrics would you use?
- What to look for: Metrics such as false positive rate, alert-to-SAR ratio, time to disposition, and coverage of known typologies. They should also mention backtesting against historical data, tuning rules to reduce noise, and conducting independent reviews. A strong answer will emphasize that monitoring is not static—it must evolve with new criminal techniques.
8. How do you manage AML risk when dealing with users in high-risk jurisdictions?
- What to look for: The candidate should reference FATF grey and black lists, enhanced due diligence, source of funds and source of wealth checks, senior management approval, and periodic reviews. They should also discuss the challenge of IP masking and VPNs, and how to verify a user’s true location.
9. Scenario: A user receives a large deposit from an exchange that was recently sanctioned. They claim they bought the crypto on a peer-to-peer platform years ago. What do you do?
- What to look for: This tests judgment. The candidate should not immediately freeze or close the account without investigation. They should request proof of the original purchase, conduct enhanced due diligence, review the user’s transaction history for other red flags, and consider filing a SAR if suspicion remains. They should also document the decision-making process thoroughly.
Part 4: Leadership and Culture
These questions evaluate soft skills and the ability to influence across the organization.
10. How do you build a culture of compliance in a fast-growing crypto startup where product and engineering teams move quickly?
- What to look for: The candidate should talk about tone at the top, integrating compliance into the product development lifecycle, providing regular training, and creating incentives for compliance champions. They should frame compliance as an enabler of growth, not a blocker.
11. How would you handle a disagreement with the CEO or board about a high-risk business decision?
- What to look for: Integrity and diplomacy. The candidate should explain how they would present the regulatory and reputational risks, propose alternative solutions, and document their advice. If the decision proceeds, they should ensure the company is prepared for potential consequences and that their objection is on record.
Conclusion
Advanced AML interviews are not about catching candidates off guard. They are about identifying professionals who can think critically, adapt to new threats, and lead with integrity. The crypto industry is evolving rapidly, and your compliance team must be equipped to evolve with it. By asking these deeper questions, you can hire leaders who will protect your company’s future while supporting its growth.