Crypto scammers can now automate the conversations that persuade victims to send them money. Criminal adoption of AI rose 40% over the past year, TRM Labs reported in August, with scammers making the widest use of the technology.

Crypto Exchanges also use AI to detect fraud, monitor markets, and identify suspicious activity. That creates a two-sided security challenge. The same technology helping platforms identify threats can also help criminals make those threats more scalable and convincing.

That is the significance of ISO/IEC 42001:2023, the international standard for artificial intelligence management systems. KuCoin is among the few early digital-asset platforms to obtain the certification.

But why should users care about this? For all the things AI is good at, it can also flag legitimate transactions as suspicious or give an unreliable answer to a request for help. Such AI management certifications can actually make sure an exchange has the ability to review those decisions and correct mistakes. 

AI is Spreading Through Crypto Crime

TRM’s AI-in-Crime Adoption Index scored adoption at 54 out of 100 in 2026, up from 28 in 2024. It measures how extensively criminals use AI, with scams the only category classified as Mature.

TRM also recorded 201 crypto hacks in the first half of 2026, more than double the previous year. Just 4% of incidents accounted for 75% of losses, with infrastructure compromises responsible for most large breaches.

The concentration of losses helps explain why access controls remain central to exchange security. AI monitoring still depends on the integrity of the systems it watches and the accounts allowed to change them.

Europe’s AI Rules Have Limits

European regulation provides some requirements for AI oversight, though their reach depends on how a system is used. The Digital Omnibus on AI took effect on July 27, moving obligations for Annex III high-risk systems to December 2, 2027.

That annex includes credit-scoring systems but explicitly excludes financial-fraud detection from that category. An exchange’s transaction-monitoring software therefore does not automatically fall under the same high-risk requirements. Its classification needs to be assessed against its specific use.

Other duties still apply. Since August 2, AI transparency rules require providers of systems intended to interact directly with people to ensure users are informed, unless the AI interaction is obvious. This includes customer-service chatbots.

Voluntary certification can give an exchange a framework for supervising its AI. It does not replace applicable financial regulation or data-protection obligations.

ISO/IEC 42001 translates those principles into a management-system framework. It requires organizations to establish, implement, maintain, and continually improve the policies and processes governing their use of AI.

What KuCoin’s Certification Covers

KuCoin says its certification covers the AI management system and the organizational functions supporting it. Its announcement identifies fraud detection and market surveillance among the uses of AI across digital finance.

“AI is becoming a foundational capability of digital financial infrastructure, but greater capability must be matched by greater responsibility,” BC Wong, chief executive of KuCoin, said in the company’s announcement.

The assessment adds AI oversight to the external assurances summarised below. SOC 2 Type II reports examine controls over a period. Other standards address information security or privacy management, while business-continuity certification concerns preparations for disruption.

ISO/IEC 42001 focuses on how an organization manages AI throughout its use. That includes allocating responsibility and monitoring performance. The standard gives auditors requirements against which to assess those processes.

A company needs to define the intended use of its AI and consider how it could affect people. It also needs a process for reviewing changes, since updating a model can change its behavior after an initial assessment.

This certification is also a part of KuCoin’s broader $2 billion Trust Project, a multi-year program launched in 2025 to strengthen security, compliance, transparency, user protection, and operational resilience. 

What the Certification Means for Crypto’s Next Phase

ISO/IEC 42001 certification cannot guarantee that an individual model will always reach the correct conclusion. Its value lies instead in testing whether an organization has established the processes needed to govern AI systematically.

For users and institutional clients assessing a platform, that creates a basis for more practical questions: Who is responsible for an AI system? Who can override an automated decision? How are model changes reviewed? How are mistakes documented and corrected? And how can users challenge an outcome that affects them?

These questions will become more important as crypto platforms move from AI-assisted analysis towards more autonomous systems. Future applications may not simply identify suspicious transactions or summarise market information; they could initiate workflows, manage permissions or execute actions on a user’s behalf.

In that environment, trusted AI will depend on clearly defined identities, permissions, transaction limits, human-intervention mechanisms and auditable records. 

Source: BeInCrypto