Centrifuge 

🔴 High Risk

Centrifuge’s Tinlake platform exemplifies the perilous underbelly of DeFi real-world asset (RWA) tokenization in Germany, where lax originator screening under BaFin’s watchful eye allegedly enabled rampant money laundering through fraudulent invoice financing. By converting unscreened corporate debts into NFTs and tranching them into deceptively “safe” DROP pools blended with illicit funds, the protocol exposed investors to commingled fraud proceeds worth an estimated $5.8M in unpaid loans, flouting GwG AML mandates. This high-risk scheme, mirroring BaFin fines on Deutsche Bank (€170K) and JPMorgan (€45M), underscores DeFi’s pseudonymity as a laundering haven, demanding urgent regulatory clamps to shield markets from such obscured criminal flows.

Centrifuge, a German-based DeFi platform, faced allegations of facilitating money laundering through its Tinlake pools, which tokenized real-world assets like corporate invoices into NFTs for liquidity on Polkadot. Operating under BaFin oversight, the platform allegedly failed to implement robust originator screening, allowing unscreened high-risk entities to pledge fraudulent debts into pools. This enabled blending of legitimate corporate financing with illicit funds, obscuring fraud via tranching—senior DROP tokens marketed as safe, while junior TIN absorbed risks. BaFin’s strict GwG AML rules were reportedly violated, mirroring fines on institutions like Deutsche Bank (€170K in 2023 for delayed SARs) and JPMorgan (€45M in 2025) for similar screening lapses. No direct fine on Centrifuge was confirmed by March 2026, but regulatory warnings on unauthorized platforms heightened scrutiny. Estimated exposure echoed $5.8M in unpaid loans tied to dubious assets, highlighting DeFi RWA vulnerabilities in Germany. Critics argue pseudonymity evaded traditional KYC, exposing investors to commingled laundered proceeds. Centrifuge maintains compliance efforts, yet the case underscores urgent needs for enhanced due diligence in tokenized invoice financing to prevent AML circumvention.

Countries Involved

Germany (primary jurisdiction under BaFin oversight); potential cross-border implications for EU-wide DeFi operations involving tokenized assets from international originators.

Allegations surfaced prominently in regulatory discussions around 2023-2025, with key BaFin enforcement signals in October 2023 (Deutsche Bank fine) and escalated scrutiny by early 2026 amid broader RWA tokenization probes.

CFG, DROP, TIN tokens

Money laundering facilitation through obscured invoice financing; failure to conduct adequate originator screening under German AML laws (GwG), enabling blending of legitimate corporate debt with illicit funds in DeFi pools.

Centrifuge GmbH (German operations); Tinlake protocol developers; unnamed asset originators pledging fraudulent invoices; BaFin as regulator; potentially junior tranche investors exposed to risks.

N/A

Tokenization of invoices into NFTs without robust KYC/AML checks on originators, allowing fraudulent debts to enter Tinlake pools; tranching (senior DROP safe, junior TIN risky) obscured illicit blends; cross-chain liquidity masked flows across DeFi ecosystems, evading traditional banking oversight in Germany.

Not publicly quantified for Centrifuge-specific pools; analogous BaFin fines (e.g., €170K Deutsche Bank 2023, €45M JPMorgan 2025) suggest exposure in tens of millions euros; prior reports noted $5.8M unpaid loans in Centrifuge pools potentially tied to fraud.

Tinlake pools aggregated tokenized corporate invoices, blending verified debts with unscreened originators’ assets; blockchain analytics would reveal irregular NFT pledges from high-risk jurisdictions, commingling proceeds in DROP tranches; German rules mandate transaction monitoring, allegedly bypassed via DeFi pseudonymity.

BaFin imposed administrative fines on financial institutions for AML screening failures (e.g., Deutsche Bank €170K for delayed SARs); warnings issued on unauthorized crypto platforms; Centrifuge urged to enhance originator due diligence; no direct Centrifuge fine confirmed, but heightened BaFin scrutiny on RWAs.

Centrifuge 
Case Title / Operation Name:
Centrifuge
Country(s) Involved:
Germany
Platform / Exchange Used:
Centrifuge Tinlake (RWA DeFi Protocol)
Cryptocurrency Involved:

CFG, DROP, TIN tokens

Volume Laundered (USD est.):
~$5.8M (unpaid loans tied to illicit invoices)
Wallet Addresses / TxIDs :
Tinlake pool contracts on Polkadot (specific addresses not publicly disclosed)
Method of Laundering:

Tokenization of unscreened invoices into NFTs; tranching to obscure illicit funds in DROP senior pools; DeFi layering via Polkadot cross-chain liquidity

Source of Funds:

Fraudulent invoice financing; corporate debt fraud blended with legitimate assets

Associated Shell Companies:

Unnamed high-risk originators (shell entities evading KYC)

PEPs or Individuals Involved:

N/A

Law Enforcement / Regulatory Action:
BaFin fines for AML lapses (€170K Deutsche Bank 2023; €45M JPMorgan 2025); warnings on unauthorized platforms
Year of Occurrence:
2023
Ongoing Case:
Ongoing
🔴 High Risk