MLRO

About the company:

Our mission is that “Any financial application can onboard any user, anywhere in the world, in 1 click.” Transak provides onboarding to financial applications through authentication, KYC, risk checks, and fiat on/off ramps. This is a next generation of infrastructure for the next generation of financial applications that are built on blockchain and stablecoin rails. Our API and widget-based solutions are used by top partners like Meta Mask, Coinbase, Ledger, and Trust Wallet to enable seamless onboarding of over 10 million users across over 450 active applications.

We have raised over $37M from top-tier investors including Consensys, Tether, and Animoca Brands.

The UK MLRO is Transak's named nominated officer for the UK regulated entity, holding personal statutory accountability under the Money Laundering Regulations 2017 and the Proceeds of Crime Act 2002 for the detection, prevention and reporting of financial crime.

This is a role with individual regulatory liability, not a delegated function. The postholder owns the UK financial crime control environment end to end: risk assessment, policy, customer due diligence, transaction monitoring, sanctions, Travel Rule, suspicious activity reporting, and the relationship with the FCA and the NCA.

The timing is deliberate. Transak is preparing its application through the FCA cryptoasset authorisation gateway, which opens on 30 September 2026 and closes on 28 February 2027. The UK MLRO is on the critical path for that application and will be expected to drive it, front it, and carry the firm through submission, supervisory scrutiny, and into the FSMA regime that follows.

The successful candidate must be capable of holding the line. The role exists to protect the firm and the market, and that means being willing to say no, to document why, and to defend that position to a regulator.

• Act as the named nominated officer under regulation 21(3) of the Money Laundering Regulations 2017 for the UK entity, with personal accountability for the receipt, evaluation and onward reporting of internal suspicion reports.
• Own suspicious activity reporting to the National Crime Agency
  , including SAR quality, DAML requests, consent decisioning, and the management of tipping-off risk under sections 330 to 333A POCA 2002.
• Maintain unrestricted and direct access to the Board
  , with the standing and independence to elevate without filtering through commercial reporting lines.
• Hold and evidence continuing fitness and propriety
  , including readiness to be assessed as the named senior manager function holder on FSMA authorisation.
• Ensure the nominated officer function is covered at all times
  , including through a designated deputy arrangement with documented delegation and handover.

• Own the UK business-wide risk assessment
  , ensuring methodology, data inputs and conclusions are current, defensible, and connected to actual control decisions rather than produced as a compliance artefact.
• Own the AML and CTF policy suite and supporting procedures for the UK entity, ensuring they reflect the Money Laundering Regulations, JMLSG guidance, and the FCA Financial Crime Guide.
• Govern the customer due diligence framework
  , including simplified and enhanced due diligence triggers, PEP and sanctions handling, source of funds and source of wealth standards, and ongoing monitoring.
• Own transaction monitoring rule design, calibration and governance
  , working with Risk Engineering and Data to ensure coverage of relevant typologies, evidenced tuning, and documented rationale for every live rule.
• Ensure the control framework is evidenced to a standard that survives supervisory inspection
  , with clear ownership, testing, and audit trail.

• Own the UK sanctions compliance framework
  , including screening scope, list coverage, fuzzy matching thresholds, alert handling, true match escalation, and OFSI reporting obligations.
• Own Travel Rule compliance under the Money Laundering Regulations, including originator and beneficiary data handling, counter party VASP due diligence, missing and incomplete data workflows, and sunrise-period risk decisions.
• Govern blockchain analytics and wallet screening
  , including exposure thresholds, indirect exposure treatment, and the escalation path from a screening hit to a freeze or SAR.
• Assess and challenge new…