CRYPTO-KYC-006Critical Risk
cyber/fraud
Red Flag
Customer’s account is accessed after credential stuffing attack, with login from a new device and immediate withdrawal of all funds to an external wallet not previously associated with the account.
Industry
Cryptocurrency Exchanges
Transaction Type
crypto
Customer Type
individual
Category
Regulatory Source
Document:FIN-2016-A003 Cyber Events
Type:FinCEN Advisory
CFR Citation:31 CFR §1022.210
SAR Category:Cyber event
FinCEN Key Term:Account Takeover
Last Verified:2026-04-15
This red flag is provided for informational and educational purposes only. It is not legal, regulatory, or compliance advice. Always consult the official source document and a qualified compliance professional for guidance specific to your situation.