The U.S. Treasury's Financial Crimes Enforcement Network (FinCEN) on October 5, 2026, formally withdrew two proposed rules that would have imposed surveillance-grade reporting requirements on crypto mixing services and self-custodied wallet transactions. Deputy Director Jimmy L. Kirby signed both...
"Their official withdrawal finally closes that door." — Jason Somensatto, Coin Center
The U.S. Treasury's Financial Crimes Enforcement Network (FinCEN) on October 5, 2026, formally withdrew two proposed rules that would have imposed surveillance-grade reporting requirements on crypto mixing services and self-custodied wallet transactions. Deputy Director Jimmy L. Kirby signed both withdrawal notices, scheduled for Federal Register publication on October 6. FinCEN cited concerns that the proposals' "expansive definition of CVC mixing" would have "a chilling effect on legitimate activity and place a large reporting burden on covered financial institutions."
The withdrawals end rulemaking proceedings that spanned six years — from a December 2020 unhosted wallet proposal (RIN 1506-AB47) through an October 2023 mixer surveillance proposal (RIN 1506-AB64). Neither rule was finalized; existing Bank Secrecy Act obligations remain unchanged. FinCEN stated it would "continue monitoring crypto mixers for signs of illicit finance, with the option of taking further action in the future."
The action arrives against a backdrop of surging self-custody adoption — non-custodial wallets now handle 68% of crypto transactions — and a privacy coin sector that has expanded to $34.97 billion in market capitalization, up from $11.97 billion five months prior. The withdrawals represent the clearest regulatory signal yet that the current administration views transaction privacy as a feature, not a defect, of digital asset infrastructure.
Two separate rulemakings are now dead. Each targeted a different segment of crypto infrastructure.
The 2020 Unhosted Wallet Rule (RIN 1506-AB47) would have required banks and money services businesses (MSBs) to:
The rule aimed to extend traditional Currency Transaction Report (CTR) logic to crypto-to-self-custody transfers. It would have effectively made every exchange and MSB a surveillance node for on-chain activity touching non-custodial addresses.
The 2023 Crypto Mixing Special Measure (RIN 1506-AB64) invoked Section 311 of the USA PATRIOT Act to designate international convertible virtual currency (CVC) mixing as a "primary money laundering concern." Under the proposal, covered institutions would have been required to:
The definition of mixing was broad, encompassing pooling, algorithmic coordination, splitting transfers, single-use wallet generation, asset exchanges, and delayed transactions. According to FinCEN's own assessment, this definition would have captured a wide range of standard privacy-preserving techniques used by legitimate participants.
The withdrawal notices attribute the decision to two factors: public comment feedback and the President's Working Group on Digital Asset Markets report issued July 30, 2025.
On the mixer rule, FinCEN stated the proposed definition was too broad. Comment submissions argued that the expansive scope would sweep in legitimate privacy tools — including coin selection algorithms, payment channel routing, and standard wallet consolidation — alongside actual laundering infrastructure. The reporting burden on financial institutions was deemed disproportionate to enforcement value.
On the unhosted wallet rule, the core objection was that the $3,000/$10,000 thresholds would generate massive data collection without proportional law enforcement benefit. The six-year gap between proposal and withdrawal suggests the rule was politically untenable across two administrations.
FinCEN characterized both withdrawals as consistent with "the Trump Administration's deregulatory agenda and ongoing efforts to ensure digital asset regulations are fit-for-purpose." Neither withdrawal changes existing BSA/AML obligations.
The withdrawals do not exist in isolation. They are the latest in a sequence of policy reversals on crypto privacy enforcement.
March 2025: The Treasury's Office of Foreign Assets Control (OFAC) delisted Tornado Cash from its sanctions list, following the Fifth Circuit's November 2024 ruling that OFAC had exceeded its statutory authority in designating the mixer protocol.
July 2025: Treasury dropped its appeal in the Coin Center lawsuit challenging Tornado Cash sanctions. The Eleventh Circuit dismissed the case as moot. According to Coin Center Executive Director Peter Van Valkenburgh, "the government didn't want to argue that it has the statutory authority to sanction Tornado Cash in court."
July 30, 2025: The President's Working Group on Digital Asset Markets released its 160-page report, "Strengthening American Leadership in Digital Financial Technology." The document explicitly "advocates for promotion and protection of the rights of individual users to self-custody digital assets and to maintain privacy in digital asset transactions." It recommended modernizing AML/CFT frameworks by "tailoring requirements to different business models" rather than applying blanket surveillance.
October 5, 2026: FinCEN withdrawals. Both notices cite the PWG report as justification.
The pattern is clear: a systematic unwinding of the enforcement-first approach to crypto privacy that defined the 2022–2024 period, replaced by a framework that treats self-custody and transaction privacy as protected activity unless specific illicit conduct is identified.
The policy shift arrives at a moment when self-custody infrastructure has achieved significant market penetration, making broad surveillance rules increasingly impractical to enforce.
Active non-custodial wallet users now exceed 50 million globally, according to industry estimates. Trust Wallet reports 200 million cumulative users; MetaMask has surpassed 100 million; Phantom exceeds 20 million. Non-custodial wallets handle an estimated 68% of crypto transactions, with custodial providers managing the remaining 32%.
Non-custodial swap volumes rose more than 340% year-over-year through early 2026. Smart account deployments on EVM chains crossed 62 million wallets by April 2026. The global non-custodial wallet market reached $4.8 billion in 2025, with projections of $18.3 billion by 2033 at a compound annual growth rate of 18.2%.
These numbers suggest that had the unhosted wallet rule been finalized, it would have generated reporting obligations on hundreds of millions of transactions annually — a data volume that would have challenged FinCEN's processing capacity while pushing privacy-conscious users to decentralized exchanges and peer-to-peer channels beyond regulatory reach.
The market has been pricing in the regulatory shift for months. The combined privacy coin sector reached $34.97 billion in market capitalization, according to CoinGecko data. Five months prior, the figure stood at $11.97 billion — a $23 billion expansion driven primarily by two assets.
Zcash (ZEC) gained approximately 2,496% over the year ending in early September 2026, with its market cap reaching $24.13 billion. The asset's NU7 upgrade, which activated on testnet October 4, reduces block time from 75 seconds to 25 seconds and introduces a Network Sustainability Mechanism allocating 60% of transaction fees to a reserve fund. Mainnet deployment is targeted for November 5, with a final decision due October 20.
Monero (XMR) trades at a market cap of $10.28 billion, with price appreciation from $330 to $555 over the same five-month period.
The timing is notable: privacy coin valuations began their ascent following the PWG report in July 2025 and accelerated through 2026 as the regulatory environment clarified. The FinCEN withdrawals formalize what the market already anticipated.
Mixer volumes tell a parallel story. Tornado Cash received over $700 million in 2026 year-to-date, capturing approximately 20% of all mixer activity and remaining the largest mixer on Ethereum-based networks, with weekly inflows between $10 million and $80 million. Total mixer inflows across all blockchains ran above $3 billion per quarter through 2021, fell to roughly $1 billion per quarter during 2023–2024, and climbed back toward $2.7 billion per quarter in 2025 — volumes that continued rising through 2026.
The withdrawals are narrower than they appear. Several enforcement mechanisms remain intact.
Existing BSA obligations are unchanged. Exchanges and MSBs still file Suspicious Activity Reports (SARs) and Currency Transaction Reports (CTRs) under current rules. The withdrawn proposals would have expanded these obligations; their removal simply preserves the status quo.
OFAC sanctions authority remains available. While Tornado Cash was delisted, OFAC retains the power to designate specific mixer instances or addresses associated with sanctioned actors. The Fifth Circuit ruling narrowed how sanctions apply to immutable smart contracts, not whether sanctions can target mixer operators or identifiable wallets.
Criminal prosecution continues independently of regulatory rulemaking. Tornado Cash developer Alexey Pertsev was convicted in the Netherlands. The DOJ retains jurisdiction over money transmission violations, wire fraud, and sanctions evasion regardless of FinCEN's rulemaking posture.
CFTC rulemaking is proceeding in parallel. On the same day as the FinCEN withdrawals, CFTC Chair Michael Selig announced the agency would use "existing statutory authorities" to propose two rules governing crypto company operations.
FinCEN stated explicitly that it "will continue monitoring crypto mixers for signs of illicit finance, with the option of taking further action in the future." The door is closed on these specific proposals; it is not locked on future ones.
The Crypto Council for Innovation called the withdrawal "positive for the digital asset ecosystem." Coin Center, which filed comments against both proposals and litigated the Tornado Cash sanctions case, characterized it as "a significant victory for financial privacy."
The reaction underscores the lobbying infrastructure that shaped the outcome. Industry comment letters during the rulemaking periods focused on two arguments: that broad definitions of mixing would capture legitimate privacy tools, and that reporting burdens would be disproportionate. Both arguments appear in FinCEN's withdrawal rationale.
The FinCEN withdrawals mark the formal end of a regulatory approach that attempted to extend traditional financial surveillance to self-custodied crypto infrastructure. The six-year arc — from the December 2020 proposal through the October 2026 withdrawal — traces a period during which self-custody adoption outpaced regulatory capacity, court rulings narrowed enforcement authority, and political will shifted toward accommodation.
The economic implications are structural. Self-custody and mixing services represent infrastructure layers where value flows without intermediary extraction — no custody fees, no compliance surcharges, no reporting overhead. Their regulatory treatment directly affects the cost structure of on-chain economic activity. By withdrawing rules that would have added friction to these layers, FinCEN has preserved the low-cost transaction channels that distinguish crypto rails from traditional finance.
The question that remains is durability. FinCEN's explicit reservation of future rulemaking authority, combined with unchanged BSA obligations and OFAC powers, means the regulatory posture could reverse. The withdrawals are a policy choice, not a legal constraint. For now, the data is clear: the U.S. has chosen to let crypto privacy infrastructure operate under existing rules rather than expanding surveillance mandates. Whether that choice survives the next enforcement crisis — or the next administration — is an open question.