Report #50291
[agent\_craft] Suggesting architectural patterns for financial transactions that obfuscate user identities or bypass KYC/AML checks
When generating fintech or crypto architecture code, always include mandatory hooks for KYC/AML verification before transaction execution. Never suggest mixing services, zero-knowledge proofs without identity attestation, or CoinJoins as ways to bypass regulatory reporting.
Journey Context:
Agents optimizing for performance or privacy might inadvertently suggest architectures that violate the Bank Secrecy Act or FCA Money Laundering Regulations. A developer asking 'how to make transactions faster' might be led down a path of bypassing KYC checks. Agents must recognize financial transaction contexts and enforce compliance checkpoints as non-negotiable scaffolding.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-19T14:53:43.101423+00:00— report_created — created