FinCEN killed the mixer rule and handed banks the tracing bill

A first-of-its-kind mandate, withdrawn quietly

On October 5, 2026, FinCEN withdrew its 2023 proposal↗ to treat international crypto mixing as a class of primary money-laundering concern, the first class-wide use of section 311 rather than a named bank or country ¹⁶. A 2020 self-custody wallet rule went with it, both notices signed by Deputy Director Jimmy L. Kirby ⁵⁶. Advocates of crypto privacy called it a win ⁵⁶.

What 15,000 institutions were spared

FinCEN had priced its own mandate: about 15,000 filers, 98 hours each, 1.47 million hours a year ¹. The mandate died. The suspicious-activity duty did not: banks and exchanges still file reports and screen for sanctioned wallets ¹⁵. No listed pure-play sells that tracing layer; the closest listed read is Zscaler▲+1.99% — Zscaler, up 1.99 percent today, which paired its ThreatLabz unit with TRM Labs this month ³.

The risk moved before the rule did

The withdrawal notice↗ concedes "illicit actors continue to use mixers" ¹, and Treasury's 2026 risk assessment still lists them among the tools criminals commonly use ¹. The notice also leans on a sentence it attributes to a July 2025 White House report. That sentence appears nowhere in the document, and Treasury declined to answer on the record ¹.

The threat had shifted anyway. Ransomware actors' mixer use fell 37% across 2024 and 2025 while their cross-chain bridge use grew 66%, and Elliptic agrees bridges displaced mixers as the dominant obfuscation technique ¹. FinCEN's own December 2025 ransomware analysis does not mention mixers ¹.

The vendors already set the price

The countermeasure on the bridge route is the same shelf of tracing software, priced per license. FinCEN's own proposal put spotting indirect mixer exposure at analytics tools costing "in excess of tens of thousands of dollars per license" ¹. What the mandate would have forced at a capped, public cost is now bought voluntarily, at list price.

TRM's chief policy officer Ari Redbord made the case on the record: the risks are "real", mixers "have been used to launder billions for North Korea's hackers", but broad mandates would "bury investigators in low-value data" while tools now "flag exposure to mixers and sanctioned wallets before funds settle" ¹. The man sells the tools.

TRM's $950 million count became a UK sanction

This week's enforcement ran on them. On October 8 the UK sanctioned Cryptomus, Heleket and TokenSpot in a 38-entity Russia package↗, on TRM's finding that TokenSpot moved more than $950 million to the sanctioned Grinex, Garantex and A7 network ²⁴. Zscaler's ThreatLabz report, built with TRM, counted $327.8 million of known ransom payments↗ from April 2025 through March 2026, an average of $431,900 per victim, up 5.3% ³. Its revenue is up 81% since the quarter the mixer rule was proposed ⁷.

The other side is not wrong

FinCEN itself expected the smallest added burden at exchanges, so the withdrawal buys them little, whatever the 3% pop in Coinbase shares↗ suggested ¹⁵. The community-bank lobby, the only bank trade group to comment in 2024, wanted the rule to go further and calls the withdrawal disappointing ¹. FinCEN keeps section 311 and "may take appropriate steps in the future" ¹⁵.

Watch the bridge count, not the mixer rule

TRM's next report prices whether bridge growth kept compounding past 66% ¹, and whether its counts keep converting into designations the way they did on October 8 ²⁴. The mandate died on Monday. The meter did not.