CVCLD study materials
CVCLD study resources

CVCLD key terms

CVCLD · Get comfortable with the vocabulary.

Blockchain

A distributed ledger in which records are grouped into cryptographically linked blocks and replicated across many nodes, so that changes require network consensus rather than a single administrator's approval.

Related: Distributed Ledger Technology, Consensus Mechanism, Private Key
Distributed Ledger Technology

Any system that maintains and synchronizes a record of transactions across multiple participants or locations without relying on one central custodian of the authoritative copy.

Related: Blockchain, Permissioned Network
Consensus Mechanism

The protocol rule set by which network participants agree on the ordering and validity of transactions, such as proof of work or proof of stake, determining who may append the next block.

Related: Blockchain, 51% Attack
Public Key Cryptography

An encryption scheme using a mathematically linked key pair, where the public key verifies signatures or receives funds and the private key authorizes spending or proves ownership.

Related: Private Key, Digital Signature, Wallet
Private Key

A secret alphanumeric value that allows its holder to authorize transfers from an address; losing it generally means losing access, and disclosing it means surrendering control.

Related: Public Key Cryptography, Wallet, Custodial Wallet
Digital Signature

Cryptographic proof, created with a private key, that a specific message or transaction was authorized by the key's holder and has not been altered since signing.

Related: Private Key, Public Key Cryptography
Wallet

Software or hardware that stores keys or seed phrases and lets a user send, receive, and track virtual currency; it holds access credentials rather than the assets themselves.

Related: Custodial Wallet, Private Key, Seed Phrase
Custodial Wallet

A wallet in which a service provider controls the private keys on the customer's behalf, creating counterparty, commingling, and recordkeeping obligations for that provider.

Related: Wallet, Private Key, Money Transmission
Seed Phrase

A human-readable sequence of words that deterministically regenerates a wallet's private keys, making it a high-value secret targeted by phishing and social engineering.

Related: Private Key, Wallet
Smart Contract

Self-executing code deployed on a blockchain that automatically enforces and records actions when predefined conditions are met, with legal effect depending on jurisdiction and design.

Related: Decentralized Application, Blockchain
Stablecoin

A virtual currency designed to maintain a stable value relative to a reference asset such as a fiat currency, typically through reserves, overcollateralization, or algorithmic mechanisms.

Related: Virtual Currency, Reserve Attestation
Virtual Currency

A digital representation of value that can be digitally traded and functions as a medium of exchange, unit of account, or store of value, but is not legal tender issued by a government.

Related: Convertible Virtual Currency, Stablecoin, Digital Asset
Convertible Virtual Currency

Virtual currency that has an equivalent value in real currency or can be exchanged for it, a category that triggers money transmission and AML obligations in many regimes.

Related: Virtual Currency, Money Transmission
Permissioned Network

A blockchain or distributed ledger where participation and validation rights are restricted to identified, approved entities, often used by financial institutions for privacy and control.

Related: Distributed Ledger Technology, Consensus Mechanism
51% Attack

A scenario in which a party controlling a majority of a proof-of-work network's mining power can reverse or exclude transactions, undermining settlement finality and customer confidence.

Related: Consensus Mechanism, Blockchain
Digital Asset

A broad category covering virtual currencies, tokens, and other blockchain-based instruments, whose regulatory treatment depends on features such as transferability and the issuer's promises.

Related: Virtual Currency, Security Token
Travel Rule

The requirement that covered financial institutions transmit originator and beneficiary identifying information alongside certain virtual asset transfers, mirroring wire transfer recordkeeping rules.

Related: Virtual Asset Service Provider, Customer Due Diligence
Virtual Asset Service Provider

An entity conducting activities such as exchange, transfer, custody, or administration of virtual assets for others, which international standards treat as a regulated financial institution.

Related: Travel Rule, Money Transmission, Customer Due Diligence
Customer Due Diligence

The risk-based process of identifying customers, verifying their identity, understanding their activity, and monitoring the relationship for consistency with the institution's knowledge.

Related: Enhanced Due Diligence, Beneficial Owner, Suspicious Activity Report
Enhanced Due Diligence

Additional scrutiny applied to higher-risk customers or transactions, such as source-of-funds analysis, senior approval, and more frequent review, beyond standard identification measures.

Related: Customer Due Diligence, Politically Exposed Person, Risk-Based Approach
Beneficial Owner

The natural person who ultimately owns or controls a customer or the funds involved, identified through ownership thresholds or control tests rather than nominal legal title.

Related: Customer Due Diligence, Enhanced Due Diligence
Suspicious Activity Report

A confidential filing to a financial intelligence unit describing transactions the institution suspects may involve criminal proceeds or terrorist financing, with a prohibition on tipping off the subject.

Related: Suspicious Transaction Monitoring, Customer Due Diligence
Suspicious Transaction Monitoring

Automated and manual review of customer activity against typologies and thresholds to detect unusual patterns, such as structuring, rapid pass-through, or exposure to mixers, that warrant investigation.

Related: Suspicious Activity Report, Blockchain Analytics
Blockchain Analytics

Use of clustering, address attribution, and transaction tracing to link on-chain activity to real-world entities, supporting investigations and sanctions screening of counterparties.

Related: Suspicious Transaction Monitoring, Sanctions Screening
Risk-Based Approach

Allocating compliance resources in proportion to assessed money laundering and terrorist financing risk, so that stronger controls apply where risk is higher.

Related: Enhanced Due Diligence, Enterprise-Wide Risk Assessment
Security Token

A digital token that meets the legal definition of a security, for example because it represents an investment with an expectation of profit from a common enterprise's efforts.

Related: Howey Test, Digital Asset, Commodity
Howey Test

The multi-factor analysis asking whether there is an investment of money in a common enterprise with a reasonable expectation of profits derived from the efforts of others.

Related: Security Token, Investment Contract
Investment Contract

A flexible securities law category covering arrangements where investors contribute funds expecting returns generated by a promoter or third party's managerial efforts.

Related: Howey Test, Security Token
Commodity

A good, article, or future-delivery instrument traded in interstate commerce; certain virtual currencies have been treated as commodities subject to derivatives oversight.

Related: Security Token, Derivatives Regulation
Derivatives Regulation

Oversight of futures, options, and swaps on virtual currencies, including registration, clearing, and market conduct requirements administered by a commodities regulator.

Related: Commodity, Exchange Registration
Exchange Registration

The licensing process by which a trading venue for securities or derivatives obtains authority to operate, subject to fair-dealing, recordkeeping, and surveillance obligations.

Related: Derivatives Regulation, Market Manipulation
Market Manipulation

Conduct such as wash trading, spoofing, or pump-and-dump schemes that distorts prices or volume and deceives other market participants.

Related: Exchange Registration, Wash Trading
Wash Trading

Executing offsetting purchases and sales to create the appearance of trading volume without genuine change in ownership, a prohibited practice on regulated venues.

Related: Market Manipulation
Money Transmission

Receiving money or value for transmission to another location or person, an activity requiring state or federal licensing when performed for the public as a business.

Related: Money Services Business, Virtual Asset Service Provider, Custodial Wallet
Money Services Business

A US regulatory category including money transmitters, currency exchangers, and similar providers that must register and maintain AML programs under federal rules.

Related: Money Transmission, Suspicious Activity Report
Permissible Investments

The limited, high-quality assets a licensed money transmitter may hold to back outstanding payment obligations, protecting customers if the licensee fails.

Related: Safeguarding Requirement, Money Transmission
Safeguarding Requirement

A rule obliging payment or virtual asset firms to hold customer funds separately from corporate assets, often in trust or segregated accounts, to protect against insolvency.

Related: Permissible Investments, Custodial Wallet
Cost Basis

The amount used to measure gain or loss on disposing of virtual currency, generally the acquisition price plus certain costs, adjusted for fees and allocations.

Related: Capital Gain, Fair Market Value
Fair Market Value

The price at which property would change hands between a willing buyer and seller, used to value virtual currency received as payment or compensation.

Related: Cost Basis, Capital Gain
Capital Gain

Profit from selling or exchanging a capital asset such as virtual currency held as an investment, taxed at rates that depend on the holding period.

Related: Cost Basis, Ordinary Income
Ordinary Income

Income taxed at standard rates, which generally includes virtual currency received as payment for services, mining rewards, and staking proceeds at receipt.

Related: Capital Gain, Fair Market Value
Information Reporting

Requirements for brokers and exchanges to report customer transactions and basis to tax authorities and furnish statements to customers.

Related: Cost Basis, Recordkeeping
Recordkeeping

Maintaining contemporaneous records of acquisitions, dispositions, fees, and valuations so that tax positions, cost basis, and compliance can be substantiated.

Related: Cost Basis, Information Reporting
Unfair or Deceptive Acts or Practices

Consumer protection standards prohibiting misleading marketing, hidden fees, and other conduct that harms consumers, applied to virtual currency products and services.

Related: Risk Disclosure, Marketing Compliance
Risk Disclosure

Clear presentation of the possibility of total loss, volatility, and technical risks so that customers can make informed decisions before using a product.

Related: Unfair or Deceptive Acts or Practices, Suitability
Marketing Compliance

Review and approval of advertising, social media, and influencer content to ensure claims are fair, balanced, and not misleading.

Related: Unfair or Deceptive Acts or Practices, Risk Disclosure
Suitability

The obligation to ensure a recommended product or strategy fits a customer's objectives, risk tolerance, and experience, including for volatile digital assets.

Related: Risk Disclosure, Unfair or Deceptive Acts or Practices
Fraud Typology

A recognized pattern of deceptive conduct, such as romance scams, fake trading platforms, or rug pulls, used to train staff and design detection controls.

Related: Suspicious Transaction Monitoring, Market Manipulation
Sanctions Screening

Comparing customers, counterparties, and wallet addresses against restricted party lists before and during a relationship to prevent prohibited dealings.

Related: Blockchain Analytics, OFAC Specially Designated Nationals List
OFAC Specially Designated Nationals List

A US list of blocked persons and entities; dealings with listed parties or their property are generally prohibited, and virtual currency addresses may appear on it.

Related: Sanctions Screening, Asset Freeze
Asset Freeze

Immobilizing funds or virtual assets of a designated person or entity without transferring ownership, a required response once a match is confirmed.

Related: OFAC Specially Designated Nationals List, Sanctions Screening
Export Controls

Rules restricting transfer of sensitive technology and software, including certain encryption and blockchain-related tools, to foreign persons or countries.

Related: Cross-Border Data Transfer, Sanctions Screening
Cross-Border Data Transfer

Movement of personal or transaction data across jurisdictions, subject to localization, privacy, and law-enforcement access rules that can conflict between countries.

Related: Export Controls, Recordkeeping
Compliance Program

An integrated set of policies, personnel, training, monitoring, and testing designed to detect and prevent violations of applicable laws and regulations.

Related: Three Lines of Defense, Enterprise-Wide Risk Assessment
Three Lines of Defense

A governance model separating operational management, independent risk and compliance oversight, and internal audit assurance to provide layered control and challenge.

Related: Compliance Program, Independent Testing
Enterprise-Wide Risk Assessment

A documented, periodic evaluation of a firm's money laundering, sanctions, and other risks across products, customers, geographies, and channels, driving control design.

Related: Risk-Based Approach, Compliance Program
Independent Testing

Periodic review of a compliance program by parties free from the operational function being tested, verifying that controls work as designed and documenting remediation.

Related: Three Lines of Defense, Compliance Program
Code of Ethics

Written standards of conduct and escalation expectations that guide employee decisions, including conflicts of interest, gifts, and use of confidential information.

Related: Compliance Program, Conflicts of Interest
Conflicts of Interest

Situations where personal or firm interests could improperly influence professional judgment, requiring identification, disclosure, and mitigation such as recusal or separation of duties.

Related: Code of Ethics, Compliance Program