Enhanced Due Diligence Obligations for the Transfer of Crypto-Assets to or from a Self-Hosted Address

(1) Obliged entities carrying out a transfer of crypto-assets where the payee or the payer is a self-hosted address shall identify and assess the risk associated with the transfer of misuse for the purpose of money laundering and terrorist financing, and the risk of the non-implementation and evasion of targeted financial sanctions and of targeted financial sanctions related to proliferation financing, and shall take appropriate risk-mitigating measures.
(2) Risk-mitigating measures under subsection (1) comprise at least one of the following measures, where appropriate also in combination with one another:
1. collecting, verifying and storing the identity of the payee or payer and of the beneficial owner of the self-hosted address,
2. measures to establish the origin and destination of the crypto-assets to be transferred,
3. enhanced, ongoing monitoring of these transactions and of the business relationship connected with them, or
4. other measures to mitigate and manage the risks of money laundering and terrorist financing and the risk of the non-implementation and evasion of targeted financial sanctions and of targeted financial sanctions related to proliferation financing.