FinCEN Buries Wallet and Mixer Rules It Never Finished

FinCEN withdrew two unfinished crypto reporting plans on October 5, 2026, ending a $10,000 unhosted-wallet filing rule and a mixer surveillance order. Both notices publish in the Federal Register on October 6, 2026. Neither proposal ever became law.

The mixer file dies because FinCEN now says its own definition would freeze lawful privacy work and swamp banks with reports. The wallet file is older: the same department floated it in December 2020. Suspicious activity reports, identity programs, and sanctions screening were not part of the withdrawal.

FinCEN Withdraws Two Never-Finalized Crypto Rules

The Financial Crimes Enforcement Network, a Treasury bureau, withdrawn two proposed digital-asset rules after reviewing comments, tying the move to the Trump administration’s deregulatory agenda and a push for digital-asset rules that are fit-for-purpose. Deputy Director Jimmy L. Kirby signed both notices, which were filed on October 5, 2026 at 8:45 a.m. for publication the next day.

One notice pulls a December 23, 2020 plan that would have made banks and money services businesses keep records and check customer identity on crypto transfers above $3,000 that touched an unhosted wallet, and file a report when those transfers topped $10,000, including totals that crossed that mark inside 24 hours. FinCEN said it will take no further action on that notice of proposed rulemaking.

The other notice withdraws an October 23, 2023 finding that international convertible virtual currency mixing was a class of transactions of primary money laundering concern under Section 311 of the USA PATRIOT Act, along with the special measure that would have sat on top of that finding. Covered firms would have had to report activity they knew, suspected, or had reason to suspect involved mixing within or involving a foreign jurisdiction.

THE TWO RULES THAT NEVER TOOK EFFECT

The legal change is the docket, not a repeal of live duties. Banks and exchanges still run customer programs, file suspicious activity reports, and screen against sanctions lists. What ended on October 6, 2026 is the chance that these two drafts would be finished in the form they were written.

Single-Use Wallets Sat Inside the Mixing Net

The 2023 mixing notice did not stop at classic tumbler services. FinCEN defined CVC mixing as activity that hides the source, destination, or amount of one or more crypto transfers, no matter the protocol. A CVC mixer was any person, group, service, code, tool, or function that made that activity easier.

HOW THE 2023 NOTICE DEFINED MIXING

• Pooling: Combining crypto from multiple people, wallets, addresses, or accounts.
• Code tricks: Using programmatic or algorithmic code to coordinate, manage, or reshape a transfer.
• Splitting: Breaking crypto into pieces and sending it as a series of separate transfers.
• One-time wallets: Creating single-use wallets, addresses, or accounts and moving coins through them in a series of transfers.
• Asset swaps: Exchanging between types of crypto or other digital assets.
• Delays: Helping a user insert delays into transactional activity.

That list is why the file could not be saved with a narrower edit. Address rotation, timed sends, and simple coin swaps sit inside ordinary wallet hygiene. Risk teams at banks would have had to treat a huge share of crypto flow as a maybe-mixer event, then decide whether a foreign nexus existed on a public chain that does not carry a clean location stamp.

While FinCEN maintains that illicit actors continue to use mixers and other tools and methods to hinder law enforcement investigations, this withdrawal is informed by the concerns from commentors that the expansive definition of CVC mixing in the proposed rule could have a chilling effect on legitimate activity and place a large reporting burden on covered financial institutions.

FinCEN, mixer withdrawal notice, October 5, 2026

The same notice, in the Federal Register public inspection file, uses that chilling effect on legitimate activity as the stated reason for dropping both the finding and the special measure. FinCEN still says criminals use mixers to slow investigations. It also says it will keep watching mixer activity for money laundering, terrorist financing, or other illicit finance, and that it may take steps later.

The breadth was the policy. A rule that counts a delayed send or a one-time address as mixing does not need a named tumbler on the other side of the trade. Comment letters from Coin Center and bank groups had warned that risk-averse firms would over-report, including on domestic transfers, rather than guess wrong about where a mix occurred.

The $10,000 Report Was a 2020 Trump Proposal

The unhosted-wallet plan is the longer ghost. On December 18, 2020, in the closing weeks of the first Trump administration, Treasury put out reporting requirements for unhosted wallets and for wallets hosted at foreign firms outside the Bank Secrecy Act in jurisdictions FinCEN would list. The notice of proposed rulemaking then published on December 23, 2020.

Unhosted, in that draft, meant a wallet from which a financial institution is not required to conduct the transfer. In practice it pointed at self-custody: keys the user holds, not an exchange account. The draft also swept in those foreign-hosted wallets FinCEN treated as “otherwise covered.”

Banks and money services businesses would have verified their own customer, kept records of the transfer and the other side of the trade above $3,000, and sent FinCEN a report above $10,000. Multiple transfers in 24 hours that added up past $10,000 would have counted as one reportable event. The original Treasury notice gave firms 15 days after a reportable transfer to file.

Coin Center objected at the time on a double-standard point: crypto moving to a wallet the customer already controls would have pulled extra files, including on people who were not the bank’s customer, through the Bank Secrecy Act’s warrantless reporting system. The draft then sat. Five years and nine months passed between the December 23, 2020 publication and the October 6, 2026 withdrawal.

THE ROAD FROM PROPOSAL TO WITHDRAWAL

1. December 18, 2020: Treasury asks for comment on record, identity, and reporting duties for certain crypto transfers that touch unhosted or listed foreign-hosted wallets.
2. December 23, 2020: The unhosted-wallet NPRM publishes at 85 FR 83840.
3. October 19, 2023: FinCEN announces a Section 311 plan aimed at international crypto mixing, naming risks tied to Hamas, Palestinian Islamic Jihad, and North Korea.
4. October 23, 2023: The mixing NPRM publishes at 88 FR 72701.
5. January 31, 2025: Executive Order 14178, Strengthening American Leadership in Digital Financial Technology, appears in the Federal Register at 90 FR 8647.
6. July 2025: The President’s Working Group on Digital Asset Markets report tells Treasury to consider next steps on the mixing file and backs lawful private transfers on public chains.
7. October 5, 2026: FinCEN files both withdrawal notices, signed by Jimmy L. Kirby.
8. October 6, 2026: The withdrawals publish in the Federal Register and take effect.

The wallet withdrawal cites that July 2025 working-group report as the policy hook, not a new fact pattern about self-custody crime. FinCEN is closing a first-term draft with a second-term fitness test. The overlay is the same White House report the mixer notice quotes when it says the administration supports the ability of lawful users of digital assets to privately transact on a public blockchain.

Covered Banks Would Have Identified Non-Customers

Privacy groups took the public win. The text FinCEN actually cited is operational. Commenters said the mixing definition would freeze lawful activity and dump a large reporting load on covered financial institutions. That load sat on banks, broker-dealers, money services businesses, and other firms already inside the Bank Secrecy Act, not on the mixer code itself.

Under the mixing draft, those firms would have filed when they knew, suspected, or had reason to suspect a transfer involved international mixing. There was no dollar floor in that suspicion test. Bank trade comments in 2024 warned that the only way to catch that activity was to review crypto transfers at large, then build a paper trail for a thin slice that might be mixing.

The unhosted-wallet draft had a different friction. The hard part was the other person in the transfer. A customer sending coins from an exchange to a hardware wallet still has an account at the firm. The person on a self-hosted address may not. Collecting a name and physical address for that counterparty, then verifying the firm’s own customer, would have turned a withdrawal into a second identity event.

Compliance desks had been living with that overhang without ever shipping the software. A proposed rule that never posts a final text still shows up in exam prep, vendor roadmaps, and legal memos. Killing the NPRM is the first time FinCEN has said, in the Register, that this version of the wallet filing duty will not be built.

The Bank Secrecy Act Stays Where It Was

Nothing in either notice lowers the existing bar. Customer identification programs still apply when a firm opens an account. Suspicious activity reports still go to FinCEN when a transfer looks like crime. Sanctions screening still runs against wallets and names the government has listed. The withdrawals are silent on those duties because they were never the subject of these two drafts.

WHAT STILL BINDS BANKS AND EXCHANGES

• Suspicious activity reports: Firms still file when they detect suspected money laundering, fraud, or other illicit finance, including patterns that involve mixers.
• Customer identity programs: Hosted accounts at banks and money services businesses still require identity checks under existing Bank Secrecy Act rules.
• Sanctions screening: Office of Foreign Assets Control lists still bind U.S. persons, including crypto businesses, on named wallets and entities.
• Mixer watch: FinCEN says it will keep monitoring mixer activity and may take steps later, even after dropping the 2023 finding.

The mixer notice is the clearer split. FinCEN is withdrawing the class-wide finding that international mixing is of primary money laundering concern. It is not withdrawing the claim that mixers hinder investigators. The July 2025 working-group report, at the pages the notice cites, held both thoughts at once: illicit actors use mixers to hide and launder funds, and lawful users may use mixers for financial privacy on public chains.

That is a thinner result than a privacy statute. A working-group line can justify a withdrawal. It does not bar a later, narrower special measure, a different Section 311 target, or ordinary enforcement against a named service. The wallet notice is firmer on the draft it kills and quieter on what a future Secretary could still attempt under other Bank Secrecy Act headings.

Coin Center Says the Statute Can Still Bite

Coin Center, which filed against both drafts, called the withdrawals a major win for financial privacy and said official withdrawal finally closes the door those pending files had left open. The group had argued that the mixing definition was so broad it swept in common privacy steps, and that firms unsure of a mix’s location would report domestic transfers too.

Peter Van Valkenburgh, Coin Center’s executive director, put the mixer problem in wallet language: the special measure would have treated steps people take to keep a public chain from advertising their full history, including not reusing addresses, as a primary money-laundering risk subject to extra surveillance at financial institutions. He also said the statute that let Treasury write those drafts is still on the books.

It's been a hard month for privacy and your right to use crypto. There's a bright spot.

Two rules at Treasury that Coin Center has vehemently opposed over the last several years have been officially withdrawn.

The "unhosted wallet rule" that would have made Coinbase and…

— Peter Van Valkenburgh (@valkenburgh) October 5, 2026

That leftover authority is the part of the docket that did not move. Section 311 still lets Treasury brand a foreign jurisdiction, a foreign institution, a class of cross-border transactions, or a type of account as a primary money laundering concern, then hang special measures on the finding. FinCEN used that tool on a class of crypto activity in 2023. It has now taken the finding down. It has not asked Congress to narrow the tool.

Self-custody users do not, as of the October 6, 2026 publication, face a dedicated FinCEN report when they pull more than $10,000 to a wallet they control. Mixer counterparties do not face the 2023 special measure’s extra file. Investigators still have chain analytics, suspicious activity reports, and the option of a later rule that does not try to treat every delayed send as mixing.

Frequently Asked Questions

What Is Section 311 of the USA PATRIOT Act?

Section 311, codified at 31 U.S.C. 5318A, lets the Treasury Secretary find that a foreign jurisdiction, a foreign financial institution, a class of transactions involving a foreign jurisdiction, or a type of account is of primary money laundering concern. After that finding, Treasury may impose one or more of five special measures, from extra recordkeeping and reporting up to blocking U.S. correspondent or payable-through accounts. FinCEN holds that delegated authority, and the 2023 mixing plan was special measure one on a class of transactions rather than on a named bank or country.

How Fast Would Banks Have Filed the $10,000 Reports?

The December 18, 2020 Treasury notice said banks and money services businesses would have had 15 days from the date of a reportable crypto transfer to send FinCEN the filing. That clock applied to the unhosted-wallet draft’s $10,000 report, including 24-hour aggregates, and never started because the rule was not finalized.

Did the Unhosted-Wallet Plan Cover Foreign Accounts Too?

Yes. Beside self-custody wallets, the 2020 draft covered “otherwise covered” wallets hosted at financial institutions that are not subject to the Bank Secrecy Act and that sit in foreign jurisdictions FinCEN identified. The withdrawal notice repeats that foreign-hosted category and does not republish the older jurisdiction list.

What Would a Mixer Report Have Contained?

Covered firms would have sent FinCEN the amount and type of crypto, the mixer if known, customer wallet addresses, transaction hashes, dates, IP addresses, and a narrative of the activity, plus the customer’s full name, date of birth, address, email, or unique identifying numbers. Those fields were on top of any suspicious activity report the firm already filed on the same transfer.

Disclaimer: This article is news reporting on completed U.S. Treasury rulemaking notices and is for information only. It is not legal, tax, investment, or compliance advice, and it does not tell readers how to hold crypto, use mixing tools, or meet Bank Secrecy Act duties. Speak with a qualified attorney or financial-crime compliance professional before acting on U.S. reporting or sanctions rules. Figures, definitions, and legal statuses come from the FinCEN notices and related public documents tied to the October 6, 2026 Federal Register publication and can change if agencies issue new proposals or findings.