AML is a program obligation, not a single check. A regulated business usually documents customer-risk methodology, screening controls, monitoring rules, escalation procedures, recordkeeping, and reporting workflows.
For crypto activity, AML analysis often adds on-chain source, destination, exposure, typology, and attribution evidence to the same governance framework used for fiat payment rails.