--- title: What is Off-ramp source_page: https://www.sardine.ai/learn/off-ramp canonical: https://www.sardine.ai/learn/off-ramp format: text/markdown description: Once fiat settles into accounts, attribution and recovery get much harder. Block withdrawals at the cash-out point where KYC attaches real names and you still control the flow. --- **Quick links:** [Human page](https://www.sardine.ai/learn/off-ramp) · [Home](https://www.sardine.ai) · [Customers](https://www.sardine.ai/customers) · [Blog](https://www.sardine.ai/blog) · [Demo](https://www.sardine.ai/demo) --- # What is Off-ramp **Read time:** 4 Once fiat settles into accounts, attribution and recovery get much harder. Block withdrawals at the cash-out point where KYC attaches real names and you still control the flow. An off-ramp is a service that turns crypto back into regular money, such as an exchange withdrawal, a payment processor, or an OTC desk. It is the point where illicit funds try to leave crypto and enter the banking system, which makes it a prime spot to catch or stop them. What is an off-ramp? An off-ramp is the exit from crypto back into traditional money. It is any service that converts digital assets into fiat that lands in a bank account or comes out as cash: an exchange withdrawal to a bank, a payment processor, or an over-the-counter (OTC) desk. If an on-ramp is where cash becomes crypto, an off-ramp is the reverse. For anyone laundering funds, the off-ramp is the moment of truth. Crypto can move endlessly on-chain, but eventually the criminal wants usable money, and that means passing through a service that touches the banking system. That is why the off-ramp is the point where illicit funds try to leave crypto and enter the regular financial world, and why it is such a valuable place to watch. The reason it is a good interdiction point is that off-ramps usually require KYC and can freeze or reject a cash-out. That combination attaches a real identity to the funds and gives a compliance team the ability to stop them. In tracing, following funds to an off-ramp is often the whole goal, because that is where you can put a name on the money and recover it. How funds move through an off-ramp Arrive — Crypto reaches the off-ramp. Funds land at an exchange, processor, or OTC desk to be converted. Verify — KYC and screening. The venue checks identity and screens the funds, attaching a real name to the money. Clears — Cash-out proceeds. Funds convert to fiat and settle to a bank account or cash. Flagged — Freeze or reject. The venue holds or refuses the cash-out and may report it. Convert — Crypto becomes fiat. The digital asset is exchanged for regular money at the venue's rate. Exit — Money enters the bank. Fiat settles into an account, after which attribution and recovery get much harder. Who is involved? What it looks like in practice After a scam, the stolen crypto moves through several hops and a mixer, then heads toward a regulated exchange to be cashed out. Investigators, watching for exactly this, have already shared the attacker's addresses with the venue. When the funds arrive and the user requests a withdrawal to a bank, KYC attaches a real identity and screening flags the deposit. The exchange freezes the cash-out and reports it, and the identity behind the withdrawal becomes a lead for recovery. Had the funds cleared to a bank first, both naming the holder and clawing the money back would have been far harder. The off-ramp was the last, best chance to stop them. Why it matters to operators Off-ramps are the chokepoint where crypto's traceability meets the identity controls of the banking world. Illicit funds can hop and mix indefinitely on-chain, but to become spendable money they have to pass through a service that usually runs KYC and can freeze or reject the cash-out. That makes the off-ramp the single most valuable place to attach a name to the funds and to actually stop or recover them. For investigators, this is why following funds to an off-ramp is often the goal, not an afterthought. It is where a trace turns into a real identity and a recovery opportunity. The flip side sets the urgency: once funds clear the off-ramp and settle into a bank account, both attribution and recovery get much harder, so the window to act is before the cash-out completes. What to watch in the data Funds heading to a cash-out venue. Traced illicit funds approaching an exchange, processor, or OTC desk mark the interdiction window. Arrival after mixing or hopping. Cash-out attempts right after mixers or bridges are a strong laundering signal worth escalating. Venue controls matter. An off-ramp with strong KYC can freeze and attribute; a no-KYC one erases the chance to do either. Speed after an incident. Rushing funds to an off-ramp soon after a theft suggests an attempt to exit before addresses are flagged. Point of no return. Once fiat settles to a bank, attribution and recovery drop sharply, so act before the cash-out clears. Quick questions ### How is an off-ramp different from an on-ramp? An on-ramp turns regular money into crypto; an off-ramp does the reverse, converting crypto back into fiat. Both are conversion points between the two worlds, but the off-ramp is where illicit funds try to exit crypto into the banking system. ### Why is the off-ramp a good place to catch illicit funds? Because off-ramps usually run KYC and can freeze or reject a cash-out. That attaches a real identity to the funds and gives a compliance team the power to stop them, which is exactly what on-chain hopping and mixing try to avoid. ### What counts as an off-ramp? Any service that converts crypto to fiat: an exchange withdrawal to a bank, a payment processor, or an OTC desk. The common thread is that the funds leave crypto and touch the traditional financial system. ### Why does recovery get harder after the off-ramp? Once crypto becomes fiat and settles into a bank account, it leaves the transparent on-chain environment and enters accounts and jurisdictions that are slower and harder to trace and freeze. The clear window is before the cash-out completes. ### Do all off-ramps run KYC? Regulated ones do, which is what makes them useful interdiction points. No-KYC venues can also act as off-ramps but skip identity checks, erasing the chance to attribute or freeze the funds. The venue's controls determine how catchable the funds are. ### What should an investigator do as funds near an off-ramp? Move fast: share the flagged addresses with the venue so it can watch for the deposit, and coordinate to freeze the cash-out before it clears. Reaching the off-ramp is often the goal, but only if you act before the funds settle out. Go deeper FATF ↗ — The global standard-setter for AML, counter-terrorist-financing, and counter-proliferation. Recommendations, guidance, and jurisdiction lists. OFAC, US Treasury ↗ — Administers US sanctions programs, the SDN list, and licensing.