The Estonian Financial Intelligence Unit (EFIU) has published a groundbreaking typology report examining nested services in virtual currency exchanges—and its findings directly corroborate FinTelegram’s long-standing compliance reporting on crypto payment processors servicing illegal online casinos.
In December 2025, the EFIU released “Nested Services in Virtual Currency Exchanges,” a comprehensive analysis conducted in consultation with the U.S. Financial Crimes Enforcement Network (FinCEN). The study examined 12 nested virtual currency exchanges, tracing over nine million blockchain data points to reveal systematic AML/CFT failures, beneficial owner concealment, multi-layered nesting structures, and direct exposure to darknet markets and sanctioned jurisdictions.
What Are Nested Services?

Nested services allow smaller crypto exchanges—often unlicensed or operating from weakly supervised jurisdictions—to conduct business through accounts held at larger, licensed host exchanges. While legitimate uses exist, the EFIU found that illicit actors exploit these arrangements to obscure transaction origins, evade customer identification requirements, and bypass AML monitoring. The structure functions like Russian nesting dolls: customer transactions pass through multiple layers before reaching their destination, each layer adding obfuscation.
The EFIU identified exchanges registered as private individuals despite conducting millions in commercial transactions, entities masking their Russian origins while advertising weak KYC controls, and host exchanges providing services to previously delicensed operators. Several nested exchanges had direct on-chain exposure to ransomware, darknet markets, and sanctioned entities.
Download the FIU Estonia Report on Nested Services here
Independent Validation of FinTelegram’s Work
FinTelegram has published multiple compliance reports documenting these exact patterns among crypto payment processors servicing unauthorized gambling operators. The EFIU’s independent investigation—conducted by a government financial intelligence unit with regulatory authority—validates FinTelegram’s investigative methodology and findings.
Download the Full Compliance Report
FinTelegram has prepared a detailed comparative analysis examining how the EFIU’s findings align with our published investigations. The report includes case study comparisons, red-flag indicator frameworks, unanswered regulatory questions, and professional conclusions about systemic vulnerabilities in the crypto payment processing sector.
Download the Full Nested Services Comparative Analysis.
Insiders: Share Your Information Securely
If you have knowledge of nested service arrangements, host exchange compliance failures, or payment processor misconduct, FinTelegram’s Whistle42 platform provides a secure, confidential channel to submit information. Your insights can support regulatory enforcement and protect consumers.




