On-chain transaction monitoring & SARs
Hey everyone, still wrapping my head around the practical application of TRM and similar tools for crypto. Specifically, when does a cluster of smaller, seemingly unrelated transactions on $BTC (like multiple low-value sends to different wallets, then consolidated) cross the threshold for internal review or a SAR? Is there a clear aggregated value or pattern that triggers it, or is it more qualitative based on destination/source risk scoring?
It's rarely a single threshold, more often a combination of factors. The "clear aggregated value" is usually set internally based on risk appetite, but the pattern of consolidation after multiple small sends definitely raises flags for many institutions, particularly if it crosses a certain volume or velocity over a short period. Regulators tend to focus on the 'why' behind the activity.