FinCEN Withdraws Crypto Mixer and Unhosted Wallet Rules
The US Treasury's Financial Crimes Enforcement Network has pulled two significant proposed rules, one targeting convertible virtual currency mixing and another imposing recordkeeping and reporting requirements on unhosted wallet transactions. The withdrawal, announced on 6 October 2026, removes regulatory proposals that had been pending for years and signals a meaningful shift in how the current administration is approaching digital asset compliance. For accounting firms, CFOs, and compliance teams that have been stress-testing these requirements, the news matters immediately, though it does not eliminate the broader AML framework already in force.
What FinCEN Actually Withdrew
Two distinct proposals were on the table, each with a different origin and scope.
The Unhosted Wallet Proposal (December 2020)
The first rule dated back to December 2020. Had it been finalised, it would have required covered financial institutions to collect and retain records, verify customer identities, and file reports for crypto transactions involving unhosted wallets above certain thresholds. Critics argued the requirements were disproportionate and technically unworkable, given that unhosted wallets by definition sit outside any custodial relationship. FinCEN has now formally abandoned that rulemaking entirely.
The Crypto Mixing Proposal (October 2023)
The second rule, originally floated in October 2023, would have classified convertible virtual currency mixing as a category of primary money laundering concern under the Bank Secrecy Act. That designation carries significant weight: it would have triggered mandatory reporting obligations for a wide range of financial institutions that touch mixing-adjacent activity. In its withdrawal notice, FinCEN acknowledged that the rule "could have a chilling effect on legitimate activity and place a large reporting burden on covered financial institutions." That language is notable because it comes from the regulator itself, not from industry lobbying.
Why FinCEN Is Moving Now
The agency's withdrawal notice is explicit about the reason: the Trump administration's deregulatory agenda and an ongoing review to ensure that digital asset regulations are "fit-for-purpose." That phrase matters for compliance officers because it telegraphs a standard the administration intends to apply across the board. Rules that create compliance cost without a proportionate reduction in illicit finance risk are now squarely in the crosshairs.
A Pattern Across Federal Agencies
FinCEN's move did not happen in isolation. On the same day, Commodity Futures Trading Commission Chair Michael Selig indicated the agency was working to propose rules on how crypto firms could operate under its existing statutory authority, without waiting for new legislation from Congress. Taken together, these actions reflect a coordinated pivot across Treasury and financial regulators toward a lighter-touch posture on digital assets, at least where proposed rules have not yet been finalised. Existing enforcement authority remains intact.
Industry Response
Advocacy groups responded positively. The Crypto Council for Innovation described the withdrawal as "positive for the digital asset ecosystem" in a public statement. That reaction is worth noting for professional advisers: client appetite for activities that were previously in a regulatory grey zone, including the use of privacy-preserving protocols, may now increase. That has direct implications for how firms conduct customer due diligence and structure their own AML programmes.
What Remains in Force
Withdrawal of a proposed rule is not the same as deregulation of an entire sector. Several obligations remain fully operative and have not changed.
Existing Bank Secrecy Act Requirements
The Bank Secrecy Act and its implementing regulations continue to apply to money services businesses and other covered entities that deal in convertible virtual currency. Suspicious activity reporting, currency transaction reporting, and customer identification programme requirements all remain on the books. FinCEN's 2013 guidance classifying certain crypto businesses as money services businesses was not touched by this withdrawal.
OFAC Sanctions Remain Active
The Office of Foreign Assets Control's sanctions programmes are entirely separate from the FinCEN rulemaking process. Tornado Cash designations and other OFAC actions are governed by a different legal framework and were not affected by Monday's announcement. Firms that screen transactions for sanctions exposure need to continue doing so with the same rigour.
Accounting and Audit Implications for Firms
For accounting practices and audit teams servicing digital asset clients, the withdrawal reshapes a few near-term priorities.
AML Programme Documentation
Many firms had begun scoping the compliance infrastructure needed to meet the unhosted wallet reporting requirements. That work, including gap analyses, technology assessments, and policy drafts, can be suspended. However, firms should retain documentation showing they monitored the proposal and made a reasoned decision to pause implementation. Regulators occasionally reverse course again, and a documented compliance posture is always preferable to an absent one.
Client Risk Assessments
Clients that interact with mixing services or privacy protocols may now present a different risk profile than they did last week. The withdrawal does not make those services risk-free from an AML perspective: suspicious activity reporting obligations remain, and international counterparties may apply stricter standards under FATF guidance. Firms should update their client risk assessments to reflect the changed regulatory status without treating the withdrawal as a blanket clearance.
Digital Asset Accounting Software and Transaction Monitoring
Firms using crypto accounting software to track and categorise digital asset flows should note that the transaction categorisation logic built around the anticipated unhosted wallet rules may need to be revisited. Labels or flags applied to unhosted wallet transactions in anticipation of reporting thresholds should be reviewed so that the underlying data remains accurate for tax and financial reporting purposes, even if the regulatory reporting trigger no longer applies.
Tax Reporting Is Unaffected
It is worth separating AML reporting from tax reporting clearly. The IRS's digital asset reporting framework, including the broker reporting rules that took effect in 2025 and the Form 1099-DA regime, was set by different statutory authority and is entirely unaffected by FinCEN's withdrawal. Clients who ask whether this means they no longer need to report crypto transactions to the IRS need a clear answer: they do. The two regimes are legally and operationally distinct.
Practical Next Steps for Compliance Teams
Three immediate actions are worth taking before the end of this week. First, brief your digital asset clients on the withdrawal and make clear what it does and does not change. Second, update your firm's internal AML risk register to reflect that the unhosted wallet and mixing proposals are withdrawn, and document your rationale for any programme changes. Third, monitor FinCEN's Federal Register notices closely: the agency noted it considered public comments before withdrawing, which suggests future rulemakings in this space will go through a similar comment process. Early engagement pays.
For firms tracking the broader regulatory trajectory, the Japan Garantex sanctions case and the AML considerations it raised for crypto businesses remain relevant even as domestic US proposals are pulled back. International compliance obligations are converging even where domestic rules are retreating. Similarly, firms advising on on-chain activity should revisit the key questions for evaluating on-chain risk providers in light of the changed domestic landscape.
Source: Cointelegraph
Frequently Asked Questions
Does the withdrawal mean crypto mixing is now legal in the US?
Not exactly. FinCEN has withdrawn its proposal to designate mixing as a primary money laundering concern, but the underlying Bank Secrecy Act still applies. Suspicious activity reporting obligations remain in place, and OFAC sanctions on specific mixing services are unaffected. Legal counsel should always be consulted before a firm or client engages with mixing protocols.
Do businesses still need to collect information on unhosted wallet transactions?
The specific proposed reporting and recordkeeping requirements from December 2020 have been withdrawn, so there is no pending federal rule mandating that collection. However, existing BSA customer identification and due diligence obligations still apply to covered entities. State-level requirements may also differ, so firms should check local MSB rules.
Does this affect IRS crypto tax reporting requirements?
No. The IRS broker reporting rules and the Form 1099-DA regime operate under a completely separate statutory authority and are not touched by the FinCEN withdrawal. Taxpayers and brokers must continue to meet those obligations.
Should accounting firms update their AML programmes right away?
Firms should update risk registers and pause implementation work tied specifically to the withdrawn rules, but they should not dismantle existing AML controls. Documenting the rationale for any changes is important. The broader BSA framework remains operative and FinCEN could revisit this topic through future rulemaking.
What does "fit-for-purpose" regulation mean for future digital asset rules?
FinCEN's notice used this phrase to describe the standard the administration is applying when reviewing existing and proposed crypto rules. In practice, it suggests that future proposals will need to demonstrate a proportionate reduction in illicit finance risk relative to their compliance burden. Firms and industry groups that submit detailed comments during notice-and-comment periods are now likely to have more influence over final rule design.