New York AG Wins Up to $35 Million and a Permanent Industry Ban Against Ex-Celsius CEO
New York Attorney General Letitia James announced on 9 October 2026 that her office had secured up to $35 million from former Celsius Network CEO Alex Mashinsky, along with a permanent ban prohibiting him from participating in the securities, commodities, and cryptocurrency industries. The settlement closes a 2023 state lawsuit that accused Mashinsky of defrauding hundreds of thousands of investors by misrepresenting how Celsius managed depositor funds. For accounting firms, auditors, and CFOs overseeing digital asset operations, the case is a concrete illustration of how state-level enforcement is developing alongside federal action, and what disclosure failures look like when they reach a courtroom. Tools like crypto accounting software that maintain accurate, auditable records of platform activity are no longer a nice-to-have in this environment: they are part of the compliance baseline regulators expect.
Background: What the New York AG Alleged
AG James filed suit against Mashinsky in 2023, arguing that he had systematically misled investors about the safety of deposits held on Celsius and the nature of the platform's investment activities. The core allegation was that Celsius accepted customer funds under representations of security while simultaneously pursuing high-risk investment strategies and concealing losses from depositors. James's office described the conduct as a straightforward fraud on New Yorkers who trusted the platform with savings.
Key Allegations in the 2023 Lawsuit
The AG's complaint centred on three overlapping failures. First, Celsius made affirmative public statements that it operated conservatively, when internal investment activity pointed in the opposite direction. Second, losses were not disclosed in any form that would allow depositors to assess the risk they were carrying. Third, Mashinsky personally made statements the AG characterised as materially misleading about the platform's financial position.
These allegations are relevant beyond the specifics of Celsius. They map directly onto the kinds of disclosures that crypto lending platforms, yield-bearing custodians, and asset managers in the digital asset space routinely make to institutional and retail counterparties alike. The AG's theory of liability does not require a criminal conviction: it rests on whether a reasonable investor was given an accurate picture of what was happening with their money.
The Settlement Terms
The settlement reached in October 2026 requires Mashinsky to pay up to $35 million and permanently bars him from the securities, commodities, and cryptocurrency industries in the United States. This follows two earlier resolutions that set the legal landscape around his conduct.
Prior Federal and Regulatory Resolutions
In April 2026, a separate settlement was announced that included a suspended judgment of $4.7 billion, a $10 million payment, and an 18-year reporting requirement, alongside a bar on future involvement in cryptocurrency and financial services. In June 2026, the Commodity Futures Trading Commission also reached its own settlement with Mashinsky, imposing permanent trading and registration bans. The New York AG settlement is therefore the third major resolution stemming from his conduct at Celsius, each brought by a different authority: the CFTC at the federal derivatives level, another federal proceeding, and now the state AG acting under New York's investor protection powers.
Sitting behind all of this is Mashinsky's federal criminal conviction, for which he is currently serving a 12-year prison sentence.
Creditor Recoveries in the Celsius Bankruptcy
Celsius creditors have received more than $3.4 billion through the company's bankruptcy proceedings. That figure matters to accounting professionals handling client portfolios that held Celsius positions: it sets a reference point for recovery rates and informs the write-down or write-up calculations that firms may still be working through on behalf of affected clients.
Why Multiple Regulators Pursued Mashinsky Concurrently
The parallel tracks here, federal criminal, CFTC civil, and state AG civil, are not redundant. Each authority has a distinct jurisdictional mandate and a different remedial toolkit. The CFTC's reach covers commodity derivatives and associated fraud. The state AG operates under New York's Martin Act, one of the broadest securities fraud statutes in the United States, which does not require the prosecution to prove intent to defraud. And the federal criminal case addresses conduct that crossed into wire fraud and other criminal violations.
The Martin Act and Its Significance for Crypto
The Martin Act is worth understanding because it sets a low evidentiary bar. A firm or individual does not need to have intended to deceive: making materially misleading statements in connection with the sale of securities or investments is enough. New York has applied this statute to crypto assets on the basis that certain tokens or investment products qualify as securities or commodities under state law. For any firm advising clients who operate or invest in crypto yield products, staking arrangements, or lending platforms accessible to New York residents, this is the governing risk framework that applies at the state level, independent of what federal law says.
Understanding how US crypto market structure rules are evolving at both federal and state levels is essential for firms advising clients with exposure to platforms or products that serve New York investors.
Accounting and Compliance Implications for Firms and CFOs
The Mashinsky settlement is not just a story about a convicted CEO. It carries specific lessons for accounting professionals and finance teams working with digital asset businesses or advising clients who do.
Disclosure Accuracy as a Legal Obligation
The AG's case rested almost entirely on the gap between what Celsius told depositors and what was actually happening inside the business. From an accounting standpoint, this is a question of whether the financial disclosures, risk disclosures, and public statements made by management were consistent with the underlying books. Auditors and CFOs have a professional obligation to ensure that what is communicated externally aligns with what the records show internally. Where there is a mismatch, the Mashinsky case illustrates exactly how that mismatch can be characterised by a regulator: as fraud, not as a disclosure error.
Record-Keeping and Audit Trails
One practical takeaway is the importance of maintaining complete, timestamped records of investment activity, risk positions, and internal communications about financial strategy. In any enforcement investigation, regulators will compare public statements against internal documentation. Firms using robust digital asset accounting software to log transactions, positions, and valuation changes in real time are in a materially better position when that comparison is made. Gaps in records, or records that cannot be reconciled to public disclosures, are precisely the kind of evidence that enforcement actions are built on.
Client Portfolio Considerations
For accounting firms with clients who held Celsius positions, the confirmed $3.4 billion-plus creditor recovery creates a concrete basis for updating loss recognition entries. If clients wrote off Celsius holdings at the point of the platform's collapse in 2022, some of those write-downs may need to be partially reversed as distributions are confirmed. The timing of recognition will depend on the applicable accounting standard, whether that is US GAAP or IFRS, and the specific nature of the client's claim. Firms should review each affected client's treatment on a case-by-case basis now that recovery figures are documented.
Registration and Counterparty Risk Screening
The permanent industry ban on Mashinsky also has a practical use: it appears in public regulatory records. Any firm conducting counterparty due diligence on a crypto platform or individual should be running checks against regulatory bar orders, CFTC and SEC enforcement lists, and state AG settlement databases as standard practice. This is not an exotic compliance step: it is the same due diligence that applies in traditional finance and that regulators will expect to see documented if they ever review a firm's onboarding procedures.
The CFTC's own role in this resolution reinforces the need to track CFTC crypto enforcement and registration obligations as the regulatory perimeter around digital assets continues to expand.
What the AG's Statement Signals for Future Enforcement
AG James used the settlement announcement to make a pointed statement: "I will not allow scammers to use cryptocurrencies to prey on unsuspecting New Yorkers." She also specifically referenced barring Mashinsky from the securities industry to prevent him from taking advantage of investors again. The language is deliberate. It positions the AG's office as an active crypto enforcement authority, not one that defers to federal agencies, and it signals that conduct involving New York investors will attract state-level scrutiny regardless of whether a federal agency has already acted.
For firms with clients operating crypto products or platforms accessible to New York residents, this is the practical enforcement environment they are operating in. The Martin Act means the threshold for state action is lower than many firms appreciate, and the combination of monetary penalties, disgorgement, and permanent bans shows that state enforcement can be genuinely consequential even when a federal case is already running.
Maintaining accurate, auditable records through reliable crypto bookkeeping software is one of the clearest steps a firm can take to ensure that any regulatory review, at the state or federal level, finds documentation that supports rather than undermines the disclosures a client has made.
Frequently Asked Questions
What did the New York AG settlement with Alex Mashinsky require?
The settlement requires Mashinsky to pay up to $35 million and permanently bans him from the securities, commodities, and cryptocurrency industries. It resolved a 2023 lawsuit by AG Letitia James alleging that he defrauded investors by misrepresenting Celsius Network's safety and investment practices.
How does this settlement relate to Mashinsky's federal prison sentence?
The NY AG settlement is a civil resolution, separate from the federal criminal case that resulted in Mashinsky's 12-year prison sentence. The criminal conviction addressed federal offences; the AG's action was brought under New York state law, primarily the Martin Act, which covers investor protection independently of federal criminal law.
What is the Martin Act and why does it matter for crypto firms?
The Martin Act is a New York state securities fraud statute that does not require proof of intent to defraud. Making materially misleading statements in connection with investment products accessible to New York investors is sufficient to trigger liability. New York has applied it to crypto assets, making it a significant risk for any platform or product serving the New York market.
How should accounting firms handle client Celsius positions given the confirmed creditor recoveries?
With creditor recoveries confirmed at more than $3.4 billion, firms should review any client accounts where Celsius holdings were fully written off. Depending on the applicable accounting standard and the nature of the claim, partial reversals of earlier write-downs may be required. Each case should be assessed individually based on the confirmed distribution the client has received or is entitled to receive.
What compliance steps should firms take in response to this enforcement action?
Firms should ensure counterparty due diligence processes include checks against CFTC, SEC, and state AG enforcement and bar order databases. They should also audit whether any client-facing or investor-facing disclosures about digital asset strategies, risk profiles, or liquidity accurately reflect the underlying records. The Mashinsky case shows that the gap between disclosure and reality is where enforcement liability originates.
Source: The Block