Technically it was an unregulated money transference service without KYC. The user that stole the cards from the bookstore was the one doing the money laundering part. I just enabled it (which is probably worse, legally).

I was investigated and cooperated fully.

Edit: I just remembered, the bank I used for the transference did do KYC for all users who were sent funds. This makes it more like "money dirtying", since the account is tied directly to a real identity.

This is not laundering, it is in fact exactly as the service was meant to be used. As long as you save where the money comes from and where it goes you are at worst operating a discount pseudo-bank. But that's what google is also doing, so we can infer that this is okay.