TL;DR
VASP due diligence tools assess the crypto exchanges, custodians, and payment firms you send funds to or onboard, covering licensing, jurisdiction, and on-chain risk. Best for entity due diligence: Elliptic Discovery. Best for continuous counterparty monitoring: Crystal Intelligence. Best for configurable risk profiles: TRM Labs Know Your VASP. Best for analytics-led enterprises: Chainalysis.
Why generic crypto compliance lists fail this use case
Most "best crypto compliance software" lists rank tools on wallet screening and transaction monitoring. That answers a different question: is this address risky? VASP due diligence asks: is this business safe to deal with? You need to know whether a counterparty exchange is licensed, where it operates, who owns it, whether it can receive Travel Rule data, and how much of its on-chain flow touches sanctioned or illicit sources.
That matters because regulators now expect it. Under the FATF Travel Rule, the EU Transfer of Funds Regulation, and correspondent-style expectations from banks, a VASP must assess its counterparty VASPs before transacting, not just screen individual wallets. Getting it wrong means sending customer data to an unregulated entity, or funds to a high-risk one.
Criteria that matter for VASP due diligence
VASP coverage. How many exchanges and service providers are profiled, and how deep the profiles go.
Licensing and registration data. Whether the tool tracks licences, registrations, and enforcement actions by jurisdiction.
On-chain risk exposure. Direct and indirect exposure to sanctions, darknet markets, mixers, scams, and stolen funds.
Monitoring. Point-in-time reports versus continuous monitoring with alerts when a counterparty's risk changes.
Travel Rule integration. Whether risk results can feed Travel Rule decisions before data or funds move.
API access. Whether results can be automated into onboarding and transaction workflows.
Quick comparison table
| Tool | VASP profiles | Licensing data | On-chain risk | Continuous monitoring | Travel Rule fit | Best for |
|---|---|---|---|---|---|---|
| Elliptic Discovery | Thousands of VASPs, peer benchmarking | Yes | Yes, with month-over-month trends | Yes | Feeds Travel Rule counterparty checks | Banks and PSPs onboarding crypto businesses |
| Crystal Intelligence (VASP Check) | Counterparty VASP monitoring | Yes, licence verification | Yes, 330+ blockchains | Yes, with alerts | Integrates with 21 Analytics, Sumsub and other Travel Rule providers | Ongoing counterparty monitoring |
| TRM Labs Know Your VASP | Entity-level risk profiles | Yes | Yes, configurable indicators | Yes | Partners with Travel Rule providers including Veriscope | Teams wanting tunable risk models |
| Chainalysis | Broad entity attribution | Varies by product | Yes, deepest attribution | Yes | Integrates with Travel Rule providers | Large enterprises already on Chainalysis |
| Merkle Science (KYBB) | Know Your Blockchain Business module | Yes | Yes | Yes | Partner-based | Mid-market alternative |
Based on vendor documentation and independent comparisons, checked October 2026. Pricing is quote-based for every vendor listed. Feature depth changes quickly, so verify specifics in a demo.
Top options compared
Elliptic Discovery
What it does well: purpose-built entity due diligence. Discovery profiles thousands of crypto businesses, lets you benchmark a counterparty's risk against similar firms, and tracks how risk changes month over month. Elliptic positions it for correspondent banking due diligence and Travel Rule counterparty checks. Where it breaks: it is a due diligence product, not a Travel Rule messaging network, so you still need a separate protocol provider. Best for: banks, payment providers, and VASPs onboarding crypto business customers.
Crystal Intelligence
What it does well: continuous counterparty monitoring. Crystal's VASP Check covers licence verification, risk exposure, transfer volumes, and jurisdiction risk, with alerts on suspicious activity, across more than 330 blockchains. It integrates natively with Travel Rule providers including 21 Analytics and Sumsub. Where it breaks: Crystal states it does not transmit Travel Rule data itself, so it is one layer of the stack. Best for: compliance teams that need ongoing monitoring rather than one-off reports.
TRM Labs Know Your VASP
What it does well: entity-level risk profiles with configurable risk indicators, inside a platform that also covers wallet screening, monitoring, and investigations. Where it breaks: the configurability that makes it powerful also takes tuning time to avoid alert noise. Best for: teams that want one vendor across screening, VASP risk, and forensics, with control over how risk is scored.
Chainalysis
What it does well: the deepest blockchain attribution data in the market and wide adoption among enterprises and law enforcement, with KYT monitoring and address screening that integrate with Travel Rule providers for data exchange. Where it breaks: typically the most expensive option, and VASP due diligence is one capability within a broad platform rather than its single focus. Best for: large exchanges and institutions already using Chainalysis.
Merkle Science
What it does well: a dedicated Know Your Blockchain Business module for VASP due diligence alongside monitoring and investigation tools. Where it breaks: smaller footprint than the market leaders. Best for: mid-market firms wanting VASP due diligence without enterprise pricing.
Key differences that actually matter
The field splits into two camps. Analytics-led tools (Elliptic, Crystal, TRM, Chainalysis, Merkle Science) know the most about a counterparty's on-chain behaviour. Network-led tools (Travel Rule providers such as Sumsub, 21 Analytics, and Veriscope) know whether a counterparty can be reached, verified, and exchanged data with. Mature compliance stacks usually combine one of each, and the integrations between them, between analytics vendors and Travel Rule providers, are now standard.
When the top pick is not the right choice
If your main problem is Travel Rule data exchange, start with a network provider such as Sumsub, 21 Analytics, or Veriscope, and add analytics later. If you are a bank assessing a handful of crypto clients, a periodic due diligence report may be enough and continuous monitoring is overkill. For the protocol side, see our guide to the best Travel Rule solutions for enterprise VASPs.
The verdict
Elliptic Discovery for structured entity due diligence and onboarding. Crystal Intelligence for continuous counterparty monitoring. TRM Labs for configurable risk across one platform. Chainalysis for enterprises already on its data. Most regulated VASPs need an analytics tool and a Travel Rule network working together.
FAQs
What is VASP due diligence?
VASP due diligence is the process of assessing a virtual asset service provider before transacting with it or onboarding it: checking licensing, jurisdiction, ownership, Travel Rule capability, sanctions exposure, and on-chain risk. Regulators expect VASPs and banks to perform it on counterparties.
What is VASP screening?
VASP screening checks a counterparty exchange or service provider against risk data: licensing status, enforcement history, sanctions, and exposure to illicit on-chain activity. It is the business-level equivalent of wallet screening, which checks individual addresses.
Is VASP due diligence required by the Travel Rule?
Yes, in effect. FATF guidance expects VASPs to assess counterparty VASPs before sending customer data or funds, and the EU Transfer of Funds Regulation requires risk-based checks on counterparties. Sending data to an unverified or unlicensed entity creates both privacy and AML risk.
How much do VASP due diligence tools cost?
All major vendors use custom, quote-based pricing that depends on volume, products, and number of users. Expect enterprise contracts for the market leaders; mid-market vendors are typically cheaper.
Building compliance infrastructure for stablecoin payments? Reach out if you are building in this space.
Last updated: October 13, 2026.
