The U.S. Financial Crimes Enforcement Network (FinCEN) has withdrawn two proposed rules targeting unhosted crypto wallets and cryptocurrency mixing. The agency announced the decision on October 5, 2026, pulling back proposals that had concerned privacy advocates and crypto businesses for years. Neither proposal had become a final rule, so existing anti-money-laundering obligations remain unchanged.
What FinCEN Withdrew
FinCEN withdrew two separate proposals, both effective October 6, 2026. The first was an unhosted-wallet proposal originally issued in December 2020. The second was a 2023 proposal that would have designated international convertible virtual currency (CVC) mixing, meaning the blending of crypto funds to obscure their origin, as a category of primary money-laundering concern under Section 311 of the USA PATRIOT Act. For related coverage, see SEC Has Two Commissioners: Quorum Rules Explained.
FinCEN said it reviewed comments submitted by the public and described the withdrawals as part of the administration’s deregulatory agenda and an effort to make digital-asset rules fit-for-purpose. For related coverage, see U.S. Regulators Miss GENIUS Act Stablecoin Rules Deadline.
The unhosted-wallet proposal would have required banks and money services businesses to file reports and verify customer identity for certain dealings with unhosted wallets, which are crypto wallets that users control directly rather than through an exchange or custodian. The reporting threshold was set at $10,000, including multiple transactions aggregating above that amount in a 24-hour period. For related coverage, see Fed proposes customer ID rules for some stablecoin issuers.
A separate recordkeeping requirement in the same proposal applied to transfers at or above $3,000. FinCEN has now confirmed it will take no further action on the 2020 wallet notice of proposed rulemaking.
On the mixing side, FinCEN also withdrew its finding that international CVC mixing was a class of transactions of primary money-laundering concern. The agency noted that commenters warned the proposal’s broad definition of CVC mixing risked chilling legitimate activity and creating a significant reporting burden. The proposal had listed six illustrative methods of CVC mixing, a scope critics said was wide enough to capture everyday privacy tools alongside illicit activity. FinCEN separately withdrew a related 2023 crypto-mixing reporting proposal as part of this same action.
Why the Proposed Rules Mattered for Crypto
An unhosted wallet is simply a crypto wallet you control yourself, like a hardware device or a software app where only you hold the private keys. Think of it as the difference between keeping cash in your own wallet versus storing it in a bank account. FinCEN’s proposal would have made financial institutions treat transfers to or from these personal wallets more like large cash transactions requiring paperwork.
CVC mixing refers to services or protocols that blend multiple users’ crypto transactions together, making it harder to trace the origin of funds on a public blockchain. These tools serve both privacy-conscious users and, in some cases, bad actors trying to obscure the trail of illicit funds. Regulators have struggled to write rules that target the latter without blocking the former, a tension that mirrors broader debates about customer identification rules across digital assets.
The potential reach of both proposals was significant. Exchanges, payment processors, and other crypto businesses operating as money services businesses under the Bank Secrecy Act (BSA), the main U.S. law requiring financial institutions to help detect and report money laundering, would have faced new compliance costs and data-collection duties.
What the Withdrawal Means Now
Because neither proposal was ever finalized, their withdrawal does not repeal any existing law. Legal analysis from Cooley confirms that all current BSA and anti-money-laundering obligations for financial institutions remain fully in force. Crypto businesses still must follow existing know-your-customer, transaction-reporting, and recordkeeping requirements that apply to them today.
FinCEN also stated it will continue to monitor mixer activity for signs of illicit finance. That means the agency has not given mixing a regulatory green light, only stepped back from a specific rule it deemed unworkable in its proposed form. Future rulemaking, revised guidance, or enforcement actions remain possible.
For ordinary crypto holders, the practical effect is limited. The withdrawal removes the risk that your exchange would have been required to collect and report extra identity information when you move funds to a personal wallet. It does not change how your exchange handles identity verification today, which is already required under existing rules. Regulatory activity in this space continues on multiple fronts, including ongoing stablecoin rulemaking that missed its own July deadline, so the broader compliance landscape for crypto remains active.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
