Crypto exchanges face increasing legal exposure for the conduct of their users and counterparties
Aiding and abetting liability represents one of the most significant legal risks facing cryptocurrency exchanges today. Unlike direct liability, which requires a party to commit a wrongful act themselves, aiding and abetting liability attaches when a business knowingly facilitates, encourages, or provides substantial assistance to someone else who commits fraud, theft, money laundering, or other illegal conduct. For crypto exchanges operating in the United States or serving U.S. customers, this doctrine creates a secondary layer of legal exposure that many operators do not fully understand until they face litigation or regulatory action.
The stakes are substantial. Plaintiffs in civil cases have successfully pursued aiding and abetting claims against exchanges that allegedly failed to implement adequate know-your-customer (KYC) procedures, failed to detect suspicious transaction patterns, or continued processing transactions despite red flags suggesting criminal activity. Regulatory agencies, including the Securities and Exchange Commission (SEC) and the Commodity Futures Trading Commission (CFTC), have also brought enforcement actions based on aiding and abetting theories. Understanding this liability framework is essential for exchange operators, investors in crypto platforms, and business owners who hold cryptocurrency or use exchanges as part of their operations.
The Legal Foundation of Aiding and Abetting Liability
Aiding and abetting liability does not require that a defendant commit the underlying wrongful act. Instead, the doctrine holds a party liable for assisting another person who does commit the wrong. The elements of an aiding and abetting claim typically include the following: the existence of an underlying wrongful act committed by a primary actor, knowledge by the defendant that the primary actor was committing or about to commit the wrongful act, and substantial assistance or encouragement by the defendant that furthered the wrongful act.
Some jurisdictions add an additional requirement that the defendant acted with the purpose of facilitating the wrongful act, while others require only that the defendant knew their conduct would facilitate the wrong. This distinction matters significantly in crypto cases. A crypto exchange that processes transactions without asking questions might argue it lacked the requisite knowledge or purpose. However, courts have increasingly rejected this argument when the exchange had access to information suggesting illegal activity but failed to investigate or act on that information.
The doctrine originated in common law and has been codified in various federal statutes. Section 15 of the Securities Act of 1933 and Section 20(a) of the Securities Exchange Act of 1934 both contain aiding and abetting provisions. The Dodd-Frank Act expanded aiding and abetting liability in certain contexts. State law also recognizes aiding and abetting liability for common law fraud and other torts. For crypto exchanges, this means exposure under multiple legal theories and in multiple forums, including federal court, state court, and administrative proceedings before the SEC or CFTC.
How Aiding and Abetting Claims Arise in Crypto Contexts
Crypto exchanges have faced aiding and abetting claims in several recurring scenarios. The first involves exchanges that process transactions for users engaged in securities fraud. When a fraudster uses an exchange to move stolen funds or to liquidate securities obtained through fraud, the exchange may face liability if it failed to implement adequate compliance procedures. Courts have found that an exchange's failure to verify customer identity, failure to monitor for suspicious patterns, or failure to report suspicious activity to authorities can constitute substantial assistance to the fraudster.
A second category involves exchanges that facilitate money laundering. Criminals use crypto exchanges to convert illicit proceeds into cryptocurrency, move funds across borders, and convert cryptocurrency back into fiat currency. Exchanges that fail to implement anti-money laundering (AML) controls, fail to file suspicious activity reports (SARs), or fail to comply with Bank Secrecy Act requirements may face aiding and abetting liability. The Financial Crimes Enforcement Network (FinCEN) has issued guidance making clear that exchanges have obligations under the Bank Secrecy Act, and failure to meet those obligations can support both regulatory enforcement and private litigation.
A third category involves exchanges that facilitate theft or embezzlement. When an employee steals funds from an employer and uses an exchange to convert those funds into cryptocurrency, the exchange may face aiding and abetting liability if it failed to detect the suspicious nature of the transactions. Similarly, when a fiduciary misappropriates client funds and uses an exchange to move those funds, the exchange may be liable if it provided substantial assistance through inadequate compliance procedures.
A fourth category, increasingly common, involves exchanges that facilitate investment fraud or Ponzi schemes. When a fraudster uses an exchange to receive investor funds or to move scheme proceeds, the exchange may face liability if it failed to implement procedures that would have detected the fraud. This category has expanded as regulators and courts have recognized that crypto exchanges often serve as critical infrastructure for financial fraud schemes.
Knowledge and Willful Blindness in Aiding and Abetting Cases
The knowledge requirement in aiding and abetting cases has proven to be a critical battleground in crypto litigation. Exchanges often argue that they did not know their customers were engaged in illegal conduct. However, courts have increasingly recognized that willful blindness can satisfy the knowledge requirement. Willful blindness occurs when a party deliberately avoids learning facts that would establish knowledge of wrongdoing.
In the crypto context, willful blindness might arise when an exchange receives multiple red flags suggesting illegal activity but fails to investigate. Red flags might include transactions that are inconsistent with the customer's stated business purpose, transactions that involve high-risk jurisdictions, transactions that involve rapid movement of funds, or transactions that involve conversion of large sums into privacy-focused cryptocurrencies. An exchange that receives such red flags but fails to investigate, fails to file a SAR, or fails to freeze the account may be found to have acted with willful blindness.
Courts have also recognized that an exchange's failure to implement adequate compliance procedures can itself constitute evidence of willful blindness. If an exchange lacks basic KYC procedures, lacks transaction monitoring systems, or lacks a compliance officer, a court may infer that the exchange deliberately avoided learning about illegal activity. This creates a significant incentive for exchanges to implement robust compliance procedures, not only to prevent illegal activity but also to establish that they acted in good faith and without willful blindness.
The distinction between negligence and willful blindness matters significantly. A negligent failure to detect illegal activity may not support aiding and abetting liability in all jurisdictions. However, a deliberate failure to investigate red flags, or a deliberate failure to implement compliance procedures, will likely support aiding and abetting liability. Exchanges that operate with minimal compliance infrastructure face substantial risk.
Substantial Assistance and the Exchange's Role
The substantial assistance element requires that the defendant's conduct materially furthered the wrongful act. For crypto exchanges, this element is often satisfied relatively easily. An exchange that processes a transaction provides the direct mechanism by which a fraudster moves funds, a money launderer converts illicit proceeds, or a thief liquidates stolen assets. Without the exchange, the wrongful act could not be completed in the same way.
However, courts have recognized that not every transaction processed by an exchange constitutes substantial assistance. If an exchange processes a transaction without knowledge that the transaction furthers illegal conduct, and without willful blindness regarding that knowledge, the exchange may not face aiding and abetting liability. The question becomes whether the exchange's conduct was sufficiently connected to the wrongful act to constitute substantial assistance.
Exchanges that implement robust compliance procedures and that investigate red flags before processing transactions are in a stronger position to argue that they did not provide substantial assistance. Conversely, exchanges that process transactions without investigation, or that deliberately avoid implementing compliance procedures, are in a weaker position. Courts have found that an exchange's decision to process a transaction despite red flags, or despite a lack of adequate compliance procedures, can constitute substantial assistance.
The timing of the exchange's knowledge also matters. If an exchange learns of illegal activity only after processing a transaction, it may not face aiding and abetting liability for that transaction. However, if an exchange learns of illegal activity and continues to process subsequent transactions for the same customer, it may face liability for those subsequent transactions. This creates an obligation for exchanges to act on information they receive, including information from law enforcement, regulatory agencies, or other sources.
Regulatory Enforcement and Private Litigation
Aiding and abetting liability can arise in both regulatory enforcement proceedings and private litigation. Regulatory agencies, including the SEC, CFTC, and FinCEN, have brought enforcement actions against exchanges based on aiding and abetting theories. These enforcement actions typically result in civil penalties, disgorgement of profits, and injunctive relief. In some cases, regulatory agencies have also referred matters to the Department of Justice for criminal prosecution.
Private litigation presents a different set of risks. Victims of fraud, theft, or money laundering may bring civil suits against exchanges based on aiding and abetting liability. These suits may seek compensatory damages, punitive damages, and attorney's fees. Class action litigation is also possible, particularly in cases involving widespread fraud or theft affecting multiple customers.
The standards for aiding and abetting liability may differ between regulatory enforcement and private litigation. Some regulatory statutes impose aiding and abetting liability based on negligence, while common law aiding and abetting liability typically requires knowledge or willful blindness. Exchanges may face liability under one standard but not another. Additionally, the remedies available in regulatory enforcement differ from those available in private litigation, creating multiple layers of exposure.
Exchanges should be aware that regulatory enforcement and private litigation often proceed in parallel. A regulatory agency may bring an enforcement action, and victims may simultaneously bring private suits. The exchange may face substantial liability in both forums. Additionally, admissions or findings in regulatory proceedings may be used against the exchange in private litigation.
Compliance Procedures as a Defense and Risk Mitigation Strategy
The most effective defense against aiding and abetting liability is the implementation of robust compliance procedures. Exchanges that implement comprehensive KYC procedures, transaction monitoring systems, and suspicious activity reporting protocols are in a stronger position to defend against aiding and abetting claims. These procedures serve two functions: they reduce the likelihood that the exchange will actually facilitate illegal activity, and they establish that the exchange acted in good faith and without willful blindness.
Effective KYC procedures should include verification of customer identity, verification of the source of funds, and verification of the customer's stated business purpose. The level of due diligence should be proportionate to the risk presented by the customer. High-risk customers, such as those in high-risk jurisdictions or those engaged in high-risk business activities, should receive enhanced due diligence.
Transaction monitoring systems should be designed to detect suspicious patterns, including rapid movement of funds, conversion into privacy-focused cryptocurrencies, transactions inconsistent with the customer's stated business purpose, and transactions involving high-risk jurisdictions. When suspicious patterns are detected, the exchange should investigate before processing the transaction. If the investigation does not resolve the suspicion, the exchange should file a SAR and consider freezing the account.
Suspicious activity reporting is a critical component of compliance. Exchanges that receive information suggesting illegal activity should file a SAR with FinCEN. Filing a SAR does not necessarily prevent the exchange from processing the transaction, but it does create a record that the exchange was aware of the suspicious activity and reported it to authorities. This record can be valuable in defending against aiding and abetting claims.
Exchanges should also maintain detailed records of their compliance procedures and their application to specific transactions. These records can demonstrate that the exchange acted in good faith and that any failure to detect illegal activity was not the result of willful blindness. Additionally, exchanges should consider obtaining insurance coverage for aiding and abetting liability, though such coverage may be limited or unavailable depending on the circumstances.
Jurisdictional Considerations and Puerto Rico
Aiding and abetting liability varies by jurisdiction. Federal law provides a baseline of liability in certain contexts, but state law also recognizes aiding and abetting liability for common law fraud and other torts. Exchanges operating in multiple jurisdictions face exposure under multiple legal standards.
For businesses considering establishing operations in Puerto Rico, Act 60 provides certain tax incentives for eligible businesses. However, these tax incentives do not provide protection from aiding and abetting liability. Exchanges operating in Puerto Rico remain subject to federal law, including the Bank Secrecy Act and securities laws, and remain subject to Puerto Rico law. Compliance with applicable laws remains essential regardless of the tax incentives available.
Businesses involved in blockchain and cryptocurrency activities should also be aware of the evolving regulatory landscape. Regulatory agencies continue to issue guidance regarding the application of existing laws to crypto activities. Staying informed regarding regulatory developments is essential for managing aiding and abetting risk. For businesses seeking to understand their compliance obligations in the crypto space, focused guidance on blockchain compliance is available.
Practical Steps for Exchanges and Crypto Businesses
Exchanges and crypto businesses should take several practical steps to reduce aiding and abetting liability. First, implement comprehensive compliance procedures, including KYC, transaction monitoring, and suspicious activity reporting. Second, train employees regarding compliance obligations and aiding and abetting liability. Third, maintain detailed records of compliance procedures and their application to specific transactions. Fourth, establish a compliance officer or compliance team responsible for overseeing compliance procedures. Fifth, conduct regular audits of compliance procedures to identify gaps or deficiencies. Sixth, stay informed regarding regulatory developments and adjust compliance procedures as necessary.
Additionally, exchanges should consider the legal structure of their business. Exchanges that operate as unregistered money transmitters face greater regulatory risk and greater aiding and abetting risk. Exchanges that obtain appropriate licenses and registrations, and that comply with applicable regulatory requirements, are in a stronger position. The specific regulatory requirements depend on the jurisdiction and the nature of the exchange's activities.
Exchanges should also be aware that aiding and abetting liability can extend to officers, directors, and employees of the exchange. Individuals who knowingly facilitate illegal activity, or who act with willful blindness regarding illegal activity, may face personal liability. This creates an incentive for exchanges to implement compliance procedures that protect not only the exchange itself but also its officers, directors, and employees.
Litigation Risk and Damage Exposure
Exchanges that face aiding and abetting claims should understand the potential damage exposure. In civil litigation, plaintiffs may seek compensatory damages, which include the actual losses suffered by the plaintiff. In fraud cases, plaintiffs may also seek punitive damages, which are designed to punish the defendant and deter similar conduct. Punitive damages can be substantial, particularly in cases involving egregious conduct or deliberate wrongdoing.
Additionally, plaintiffs may seek attorney's fees and costs. In some cases, statutes authorize the award of attorney's fees to prevailing plaintiffs. Even if attorney's fees are not available, the cost of defending against aiding and abetting claims can be substantial. Litigation involving complex financial transactions and regulatory compliance issues typically requires experienced counsel and can extend over several years.
Class action litigation presents additional risks. If multiple customers are affected by the same illegal activity, they may bring a class action suit against the exchange. Class actions can result in substantial liability, particularly if the class is large or if the damages per class member are significant. Exchanges should be aware of the potential for class action litigation and should consider whether class action insurance is available.
Next Steps: Protecting Your Business
If you operate a crypto exchange, if you are considering establishing a crypto exchange, or if you are involved in any business that uses crypto exchanges or blockchain technology, understanding aiding and abetting liability is essential. The legal landscape surrounding crypto activities continues to evolve, and regulatory enforcement continues to increase. Proactive compliance is the most effective strategy for managing aiding and abetting risk.
Christian M. Frank Fas, Esq. has more than 20 years of experience in commercial and business law, including focused guidance on blockchain compliance and commercial litigation matters. A free initial evaluation can help you understand your specific compliance obligations and identify gaps in your current compliance procedures. Contact the firm to schedule your free initial evaluation and discuss how to protect your business from aiding and abetting liability.
For more information on blockchain compliance and regulatory requirements, visit the firm's blockchain compliance page. For information on commercial litigation and dispute resolution, visit the commercial litigation page. To schedule your free initial evaluation, visit the evaluation page.