KIBBO · CRYPTO & FINTECH
One template, 3 generators, 2 analyzers, 6 checklists, 8 directory sections, and 25 guides — covering the US, UK, EU, and Australia, all indexed here.
The two situations most people land on this page for — go straight to the right sequence.
Urgent
Urgent
Every analyzer, generator, template and checklist Kibbo has built for crypto and fintech, grouped by what it actually does.
Paste an Ethereum wallet address and see its real on-chain token approvals — which are unlimited, how old they are, and which combine unlimited access with an unfamiliar or dormant contract. Ethereum mainnet only.
Paste a crypto investment pitch, message or URL and get an itemized list of fraud patterns detected — guaranteed returns, pig-butchering, Telegram redirects, and more.
A full AML compliance package, not just a letter — cover letter, chronological timeline, income breakdown table, narrative, and a document checklist cross-referenced against what you already have.
A firm, cooperative letter requesting the specific reason for a frozen crypto exchange account, the exact documents compliance needs, and a clear resolution timeline.
Routes your complaint to the regulator that actually handles your problem — FTC/SEC/FinCEN/CFPB (US), FCA/FOS (UK), your national MiCA authority (EU), or ASIC/AFCA/Scamwatch (AU). Never a single guessed regulator.
Organize proof of where your money came from — 7 fixed categories (salary, investments, mining, staking, asset sales, inheritance, savings), each with the documents institutions expect. PDF + Word.
Verify a crypto exchange's licensing, reserves, reputation and withdrawal terms before you deposit — not after.
ChecklistGuaranteed returns, pig-butchering relationship scams, AI deepfakes, and technical red flags to check before you send anything.
ChecklistSecuring crypto you already hold — hardware wallets, seed phrase storage, phishing and permission risks, and backup practices.
ChecklistGet exchange identity verification right the first time, and what to do if you're rejected without a clear reason.
ChecklistWhat to do the moment an exchange or bank freezes your account — evidence to gather, escalation steps, and tracking timelines.
ChecklistThe records to keep year-round for crypto taxes, with US, UK and Australia country-specific notes.
A quick preview of what's in each section of the full Crypto & Fintech directory — expand a section or click through to see every entry.
Licensing and conduct regulators with actual jurisdiction over crypto activity: SEC, CFTC & FinCEN (US) · FCA (UK) · ESMA plus 6 national MiCA authorities — BaFin, AMF, CNMV, CONSOB, FIN-FSA, Central Bank of Ireland (EU) · ASIC & AUSTRAC (Australia).
See all Crypto Regulators →Rather than a stale list of "licensed exchanges," these are the official registers to search yourself by the exchange's exact legal entity name: FinCEN MSB Registrant Search (US), FCA Financial Services Register (UK), ESMA CASP Register (EU), ASIC Professional Registers (Australia).
See all Licensed Exchange Registers →Look up any wallet, transaction or contract directly on-chain: Etherscan (Ethereum), Blockchair (multi-chain), Blockstream Explorer (Bitcoin/Liquid), Solscan (Solana), Tronscan (TRON), BscScan (BNB Smart Chain).
See all Blockchain Explorers →Import exchange/wallet history and calculate gains, losses and income for filing: Koinly, CoinTracker, CoinLedger, Recap — coverage varies by country, so confirm your jurisdiction is supported before relying on one.
See all Crypto Tax Software →B2B blockchain-analytics and compliance platforms used by exchanges and financial institutions for AML/transaction-risk screening: Chainalysis, TRM Labs, Elliptic, AMLBot, Crystal Blockchain, Scorechain.
See all AML & Wallet Risk Tools →How three major exchanges currently verify their reserves — Kraken (quarterly cryptographic attestations since 2014), Binance (monthly reserve-ratio attestations), Coinbase (SEC-filed, Deloitte-audited statements instead of a crypto-native PoR program).
See all Proof of Reserves →Firms that audit smart contracts and protocols for vulnerabilities — a signal worth checking for on any project you're evaluating: OpenZeppelin, CertiK, Trail of Bits, Hacken, Quantstamp.
See all Blockchain Security Auditors →Where to actually report a crypto scam, by region: FBI IC3 & FTC ReportFraud (US), Action Fraud (UK), Europol (EU), ReportCyber (ACSC) & Scamwatch (ACCC) (Australia).
See all Scam Reporting Authorities →25 in-depth guides — kept separate by jurisdiction, never merged, since crypto and fintech rules differ sharply by region.
The SEC doesn't need Congress to pass a new law to sue a token project retroactively — it just needs your token to fail a 1946 test about orange groves. Here's what actually matters.
OFAC delisted Tornado Cash in March 2025 after a federal court ruled it exceeded its authority. Here's what changed, what didn't, and what to do if a wallet was frozen under the old rule.
Local police almost never have the tools to trace a rug pull. Here's how to build the evidence trail yourself and route it to the agencies that actually can.
Your bank doesn't need a reason, and it's legally allowed to say nothing about why. But your money is still yours — here's what actually happens next, and what to do about it.
You can no longer pool your Bitcoin's cost basis across every exchange and wallet you own. Since January 2025, each wallet is its own universe — and the IRS will assume zero basis if you can't prove otherwise.
Promoting a crypto app to UK users without FCA-approved sign-off isn't a grey area — it's a criminal offence. Here's what the rules actually require.
Sending crypto to your own hardware wallet from a UK exchange can get frozen because the platform can't automatically verify who owns the receiving address. Here's what to fill in to avoid the hold.
Selling crypto peer-to-peer and accepting a bank transfer from a stranger can end your banking relationship permanently — even if you had no idea the money was stolen.
Selling an NFT triggers Capital Gains Tax — that part's clear. Whether VAT applies to your sale depends on rules HMRC hasn't written a dedicated answer for yet.
The UK's mandatory bank refund scheme sounds like it should cover crypto investment scams. For most cases, it structurally doesn't — here's the gap, and what you can actually claim.
A MiCA whitepaper isn't marketing copy — it's a legal document, and getting it wrong exposes issuers to civil liability, not just a regulatory slap on the wrist.
Every crypto transfer between EU platforms now requires full sender/receiver data — no minimum amount. But your own hardware wallet only triggers extra checks past €1,000. Two different rules, often confused as one.
Your neobank isn't necessarily supervised by your own country's central bank — passporting means the regulator with jurisdiction is often in a completely different EU member state.
One license is supposed to work across all 27 member states. In practice, language requirements and local interpretation still create real friction for startups going cross-border.
Raise more than €5 million across any 12-month period and your crowdfunding campaign leaves ECSP protection entirely — triggering full prospectus requirements instead.
Australia's Big Four banks can close a crypto business's account with little explanation — and it's mostly legal. Here's what recourse actually exists.
A Ponzi scheme dressed up as an AI trading algorithm still needs new deposits to pay out old ones. Here's how to spot it, and where to actually report it in Australia.
The ATO already has your exchange transaction history before you file. Here's how the data-matching program actually works, and what a mismatch penalty can cost you.
Australia has no deposit guarantee for crypto, and past collapses left investors as ordinary unsecured creditors. A new law passed in April 2026 changes the picture going forward — but not retroactively.
A new law passed in April 2026 finally gives a real answer to whether a DeFi swap protocol needs a financial services licence — and small platforms may be exempt.
Binance, OKX, and similar exchanges can freeze your withdrawal indefinitely pending a source-of-funds review. Here's how to structure your evidence and force a real answer within a reasonable timeframe.
A convincing "analyst" persona, a private group full of fake success stories, and a dApp built to drain your wallet the moment you approve one transaction — the anatomy of the VIP investment scam.
A $292M bridge exploit in April 2026 showed exactly how fast a wrapped token's peg can collapse to zero — and how far the damage spreads to protocols that never touched the vulnerable code themselves.
A flash loan can distort a price for a single blockchain transaction — long enough to trigger your liquidation on a number that was never real market price at all.
A stranger on the phone tells you to feed cash into a crypto ATM to "protect your money." Once it's sent, it's gone — and regulators worldwide are now moving to restrict these machines specifically because of this pattern.