The Financial Crimes Enforcement Network has withdrawn two of the most contested crypto security proposals in its pipeline: a 2023 rule that would have designated cross-border crypto mixing a primary money laundering concern, and a 2020 proposal that would have required financial institutions to verify the identities of counterparties in self-custodial wallet transactions.
The bureau disclosed the withdrawals through a formal notice published in the Federal Register this week. Since neither rule was ever finalized, no enforceable standard is removed — but two frameworks that would have significantly expanded reporting obligations around mixers and self-hosted wallets are now off the table.
What the Mixer Rule Would Have Done
The October 2023 proposal, issued under Section 311 of the USA PATRIOT Act, employed an expansive definition of "mixing": fund pooling, transaction fragmentation, and the use of single-use wallets to obscure the origin or destination of funds. Under the framework, financial institutions would have been required to report wallet addresses, transaction identifiers, and IP data tied to such activity.
In withdrawing it, FinCEN acknowledged what commenters had argued since 2023: the definition swept in ordinary privacy-seeking behavior, would have imposed substantial reporting burdens, and risked a chilling effect on legitimate activity. A Treasury report to Congress in March 2026 had already conceded that mixers can serve lawful privacy purposes.
The 2020 "unhosted wallet" proposal, which would have mandated identity verification and record-keeping for transactions involving self-custodial wallets, was withdrawn in the same notice. Industry groups including Coin Center welcomed the decision.
The Sanctions Backdrop
The withdrawal lands against a longer arc of retreat from the sector's most aggressive anti-mixing measures. Treasury removed Tornado Cash from the OFAC sanctions list in March 2025 after an appeals court ruled that sanctioning immutable smart contracts exceeded the government's authority — a legal defeat that reshaped how prosecutors and regulators approach mixing services generally.
Existing obligations are unchanged: money services businesses remain subject to current AML rules, and sanctions enforcement against illicit finance networks continues. The Coin Republic notes FinCEN separately proposed customer identification requirements for permitted payment stablecoin issuers in June 2026 and continues rulemaking against sanctions-evasion networks.
What It Means for Security
For security teams, the practical consequence is that mixer-adjacent monitoring remains a risk-management choice rather than a reporting mandate — exchanges and analysts will keep relying on chain-analytics screening, exchange-level surveillance, and law-enforcement referrals rather than a formal mixing-reporting regime. The policy debate over how to police laundering infrastructure has not ended; it has simply moved back from rulemaking to enforcement discretion.
TrustGrade covers enforcement actions and the security ecosystem around them. For verified trust data on the projects and firms shaping this ecosystem, see trustgrade.ai.