Alexanders Malchevskis

Supporting AML/CTF and sanctions compliance operations at Coinbase Luxembourg S.A., including Enhanced Due Diligence (EDD) reviews, escalations, and Suspicious Activity Reporting (SAR) in line with regulatory requirements and Coinbase internal policies.

• Managed the full intelligence lifecycle — OSINT collection, analysis, risk assessment, and reporting — focusing on cyber threats, hacktivist activity, and geopolitically motivated actors relevant to sanctions and financial crime risk. • Collected and analysed information from open sources, dark web forums, messaging platforms, and online communities to identify threat actors, operational networks, and emerging campaigns. • Conducted continuous monitoring of underground ecosystems and illicit online environments, identifying early indicators of attacks, data leaks, and criminal activity relevant to AML and investigative teams. • Produced 300+ structured threat actor and entity profiles, assessing intent, capability, infrastructure links, and potential sanctions or geopolitical risk exposure. • Applied OSINT techniques to support enhanced due diligence (EDD) and KYC-related investigations, identifying hidden relationships, online footprints, and inconsistencies in publicly available data. • Prepared strategic intelligence reports, threat assessments, and investigative briefings for technical teams, investigators, and senior stakeholders. • Maintained situational awareness of the global cybercrime and financial risk landscape, with a focus on Russia, Europe, MENA, and Asia, including monitoring of actors operating in high-risk and sanctioned environments. • Delivered actionable intelligence including IOCs, infrastructure mapping, actor context, and investigative leads to support detection, incident response, and financial crime investigations. • Built and maintained an internal Threat Intelligence and investigative repository covering 2,000+ entities, linking actors, infrastructure, campaigns, and sector targeting.

• Prepared due diligence and KYC intelligence reports on cryptocurrency and blockchain-related companies, UBOs, founders, and project teams, assessing regulatory, compliance, and cyber-risk exposure. • Conducted intelligence-led investigations into cyber-enabled and cryptocurrency-related crime, including fraud, money laundering, data theft, and infrastructure abuse, linking financial activity to threat actor behaviour. • Analysed cryptocurrency businesses, exchanges, DeFi platforms, NFT projects, and VASPs from both cybersecurity and compliance perspectives, evaluating governance, licensing status, jurisdictional risk, and security posture. • Performed blockchain and transaction-flow analysis to identify illicit activity, trace funds, and support attribution in cases involving cybercrime and financially motivated threat actors. • Applied cyber threat intelligence methodologies (OSINT, dark web intelligence, TTP analysis) to monitor crypto-related threat activity, fraud ecosystems, and underground marketplaces. • Supported enhanced KYC, AML, and sanctions screening for crypto-industry entities and individuals, including high-risk jurisdictions and PEP-related cases.

• Thoroughly analysed bank client documents, such as account opening forms, KYC records, transaction histories, and other relevant docs. • Identified inconsistencies, discrepancies, or missing information in the provided documents. • Conducted comprehensive OSINT-based analysis of banking client documents, including scrutinizing account opening forms, KYC (Know Your Customer) records, and transaction histories to extract and validate intelligence. • Performed in-depth document and profile analysis to ensure alignment with global sanctions compliance, with a specialized focus on geopolitical factors involving individuals, PEPs (Politically Exposed Persons), and entities in Russia and Belarus. • Utilized open-source intelligence techniques to identify and flag inconsistencies, anomalies, or gaps in client-provided data, laying the groundwork for further investigation. • Engaged in direct intelligence gathering from clients, using OSINT skills to obtain supplementary details or clarifications, enhancing the accuracy and comprehensiveness of the intelligence collected.

• Spearheaded a high-profile project overseeing enhanced due diligence processes for over 120 entities. • Revamped AML/KYC/CTF policies and procedures, ensuring strict compliance standards were met. • Orchestrated the preparation of investor and client Customer Due Diligence (CDD) files, subsequently reviewed by Conducting Officer. • Facilitated the collection of requisite CDD documentation from clients, maintaining precise records of completed and pending files. Actively managed pending CDD requests, adhering to escalation and follow-up protocols to ensure timely completion. • Collaborated closely with executive management and government bodies to fortify customer data security, and uphold the company's reputation. • Conducted exhaustive reviews of electronic and physical corporate registries, media archives, litigation databases, credit checks, global regulatory and compliance sources, and online repositories.

• Leveraged deep expertise in Open-Source Intelligence (OSINT), due diligence, and risk analysis to conduct and oversee over 200 high-level investigations on individuals, corporations, and entities across multiple sectors and jurisdictions. • Delivered specialized training to over 100 EU Commission officials, focusing on OSINT methodologies, sanctions compliance, and risk assessment related to Russia and Belarus. Designed and led training sessions, created technical materials, and provided hands-on support. • Built and maintained a trusted network of human and digital sources, enhancing the quality and depth of information gathering, particularly in restricted or high-risk regions. • Conducted real-time monitoring of open-source and subscription-based intelligence platforms, government registers, regulatory databases, social media (SOCMINT), and news outlets to track emerging threats, adverse media, and client-related developments. • Analyzed and interpreted complex financial data, including bank statements, property records, vehicle registrations, corporate filings, and digital archives, supporting due diligence, fraud investigations, and background checks. • Performed advanced Dark Web investigations targeting cybercrime, fraud, counterfeit trade, and crypto-asset theft using anonymization tools (VPNs, TOR) and tradecraft techniques to maintain operational security (OPSEC). • Led Trademark Infringement Investigations using OSINT and SOCMINT tools, supporting brand protection efforts across Central and Eastern Europe for a major international fashion brand. Identified counterfeit networks, leading to the takedown of over 300 illicit social media accounts involved in unauthorized product sales.

Led end-to-end AML/KYC compliance operations across multiple banking institutions, including CDD and EDD procedures, transaction monitoring, investigations, and regulatory reporting. Conducted sanctions screening against EU, OFAC, and UN watchlists, identifying PEP matches and adverse information; assessed relevance, materiality, and escalation requirements. Managed the full KYC lifecycle: client onboarding, periodic review, documentation collection, and ongoing monitoring for high-risk and standard-risk clients. Optimised CDD/EDD workflows and internal procedures, improving compliance team efficiency and reducing review backlogs. Prepared and reviewed AML case files, alerts, and investigation reports for submission to senior compliance officers and regulatory bodies. Supported AML/KYC tool implementation and case management system activities, ensuring tools aligned with due diligence processes. Served as a key point of contact for KYC-related inquiries from business, onboarding, and risk stakeholders across the organisation.

Performed sanctions and PEP screening across OFAC, EU, and UN lists; reviewed and categorised results by relevance and materiality in compliance with internal escalation protocols. Collected, validated, and maintained client KYC documentation in line with AML/CTF regulatory requirements. Conducted AML/KYC reviews for individual and corporate clients, supporting both initial onboarding and periodic compliance checks. Managed case preparation and control plan tasks within AML/KYC compliance platforms. Responded to KYC enquiries from internal stakeholders including compliance, relationship management, and onboarding teams. Contributed to project activities aimed at strengthening AML tool functionality and due diligence process alignment.