NewsCryptoFinCEN Withdraws Proposed Rules on Unhosted Crypto Wallets and Mixing

FinCEN Withdraws Proposed Rules on Unhosted Crypto Wallets and Mixing

Author: CoinLineup·

Key Takeaways

  • •FinCEN announced on October 5, 2026 that it is withdrawing two proposed crypto rules, with the withdrawals effective October 6, 2026.
  • •The withdrawn 2020 unhosted-wallet proposal would have required banks and money services businesses to report transactions of $10,000 or more and keep records for transfers of $3,000 or more involving self-custodied wallets.
  • •FinCEN also withdrew its 2023 finding that international convertible virtual currency mixing constituted a primary money-laundering concern under Section 311 of the USA PATRIOT Act, along with a related 2023 mixing reporting proposal.
  • •Because neither proposal was ever finalized, all existing Bank Secrecy Act and anti-money-laundering obligations for financial institutions remain fully in force.
  • •FinCEN stated it will continue monitoring mixer activity for illicit finance, leaving open the possibility of future rulemaking, guidance, or enforcement actions.
FinCEN Withdraws Proposed Rules on Unhosted Crypto Wallets and Mixing

The U.S. Financial Crimes Enforcement Network (FinCEN) has formally withdrawn two proposed rules that would have imposed new reporting and recordkeeping obligations on transactions involving unhosted crypto wallets and cryptocurrency mixing services. The agency announced the decision on October 5, 2026, pulling back proposals that had concerned privacy advocates and crypto businesses for years. Because neither proposal ever became a final rule — the step at which requirements become binding under U.S. rulemaking — existing anti-money-laundering obligations remain unchanged.

What FinCEN Withdrew

The withdrawals, both effective October 6, 2026, were published as two separate notices in the Federal Register. The first covers an unhosted-wallet proposal originally issued in December 2020. The second addresses a 2023 proposal that would have designated international convertible virtual currency (CVC) mixing — the blending of crypto funds to obscure their origin — as a category of primary money-laundering concern under Section 311 of the USA PATRIOT Act.

FinCEN said it reviewed comments submitted by the public and described the withdrawals as part of the administration's deregulatory agenda and an effort to make digital-asset rules fit-for-purpose.

The unhosted-wallet proposal would have required banks and money services businesses to file reports and verify customer identity for certain dealings with unhosted wallets, which are crypto wallets that users control directly rather than through an exchange or custodian. The reporting threshold was set at $10,000, including multiple transactions aggregating above that amount within a 24-hour period. A separate recordkeeping requirement in the same proposal applied to transfers at or above $3,000. FinCEN has now confirmed it will take no further action on the 2020 wallet notice of proposed rulemaking.

On the mixing side, FinCEN also withdrew its finding that international CVC mixing constituted a class of transactions of primary money-laundering concern. The agency noted that commenters warned the proposal's broad definition of CVC mixing risked chilling legitimate activity and creating a significant reporting burden. The proposal had listed six illustrative methods of CVC mixing — a scope critics said was wide enough to capture everyday privacy tools alongside illicit activity. FinCEN separately withdrew a related 2023 crypto-mixing reporting proposal as part of the same action.

Why the Proposed Rules Mattered

An unhosted wallet is simply a crypto wallet that a user controls directly — a hardware device or software application in which only the holder possesses the private keys. FinCEN's proposal would have made financial institutions treat transfers to or from these personal wallets more like large cash transactions requiring documentation.

CVC mixing refers to services or protocols that blend multiple users' crypto transactions together, making it harder to trace the origin of funds on a public blockchain. These tools serve both privacy-conscious users and, in some cases, bad actors attempting to obscure the trail of illicit funds. Regulators have struggled to write rules that target the latter without blocking the former — a tension that mirrors broader debates about customer identification rules across digital assets.

The potential reach of both proposals was significant. Exchanges, payment processors, and other crypto businesses operating as money services businesses under the Bank Secrecy Act (BSA) — the main U.S. law requiring financial institutions to help detect and report money laundering — would have faced new compliance costs and data-collection duties.

What the Withdrawal Means Now

Because neither proposal was ever finalized, the withdrawal does not repeal any existing law. Legal analysis from Cooley confirms that all current BSA and anti-money-laundering obligations for financial institutions remain fully in force. Crypto businesses must still follow the existing know-your-customer, transaction-reporting, and recordkeeping requirements that apply to them today.

The action also formally closes a rulemaking that had been open since December 2020, ending nearly six years of uncertainty over whether the proposed wallet obligations would ever take effect.

FinCEN also stated it will continue to monitor mixer activity for signs of illicit finance. That means the agency has not given mixing a regulatory green light; it has only stepped back from specific rules it deemed unworkable in their proposed form. Future rulemaking, revised guidance, or enforcement actions remain possible.

For ordinary crypto holders, the practical effect is limited. The withdrawal removes the risk that an exchange would have been required to collect and report additional identity information when users move funds to a personal wallet. It does not change how exchanges handle identity verification today, which is already required under existing rules.

Regulatory activity in the sector continues on multiple fronts, including ongoing stablecoin rulemaking that missed its own July deadline, meaning the broader compliance landscape for crypto remains active.

Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.