Estonian FIU Confirms Scam-Or Project’s Findings on Nested Crypto Services
New Regulatory Compliance Analysis Released
The Estonian Financial Intelligence Unit (EFIU) has issued a landmark typology report on nested services within virtual asset exchanges, reinforcing years of investigative work published by the Scam-Or Project regarding crypto payment processors tied to illegal online gambling ecosystems.
In December 2025, EFIU published “Nested Services in Virtual Currency Exchanges”—a data-driven study developed in coordination with the U.S. Financial Crimes Enforcement Network (FinCEN). The review covered 12 nested exchanges and analyzed more than nine million blockchain transactions, uncovering pervasive AML/CFT deficiencies, layered ownership structures, and direct exposure to darknet platforms and sanctioned destinations.
Understanding Nested Services
Nested services allow smaller, often lightly supervised or unlicensed crypto exchanges to operate through accounts opened at larger, regulated host exchanges. While this model can have legitimate applications, EFIU found that illicit operators frequently exploit it to:
- conceal transaction origins,
- circumvent identity verification requirements,
- bypass AML oversight,
- distribute activity across multiple intermediary layers.
The model resembles a set of Russian nesting dolls: user transfers pass through several embedded exchanges before reaching the endpoint—each additional layer obscuring provenance and reducing transparency.
EFIU’s Key Findings
The report highlights troubling patterns, including:
- operators registered as private individuals, despite handling large-scale commercial flows,
- entities intentionally obscuring Russian ownership while promoting “relaxed” KYC rules,
- host exchanges offering services to previously delicensed platforms,
- direct transactional exposure to ransomware schemes, darknet vendors, and sanctioned actors.
Download the EFIU Report on Nested Services (link)
Independent Verification of Scam-Or Project’s Investigations
For years, the Scam-Or Project has published compliance analyses demonstrating similar structures used by crypto processors involved with unlicensed gambling operations. EFIU’s government-backed research provides authoritative confirmation of the same systemic weaknesses, validating the publication’s risk-assessment approach and investigative methodology.
The Complete Comparative Compliance Report
The Scam-Or Project has released a comprehensive review comparing EFIU’s findings with previously documented investigations.
The report contains:
- case-study parallels,
- a consolidated red-flag indicator framework,
- cross-jurisdictional risks,
- regulatory gaps and unresolved oversight questions,
- conclusions regarding structural vulnerabilities in crypto payment processing networks.
Confidential Tips: Secure Submission Channel
Individuals with knowledge of nested-service schemes, failures at host exchanges, or misconduct by crypto payment processors can share information anonymously through the Scam-Or Project whistleblower section.
Your insights may contribute to regulatory enforcement and consumer protection efforts.
