--- title: "FinCEN killed the mixer rule and handed banks the tracing bill" description: "FinCEN killed the first class-wide money-laundering mandate it ever proposed, while conceding criminals still use mixers. The reporting duty survived, the laundering moved to cross-chain bridges, and the tracing bill now lands per license on the banks." publisher: "The Inference" section: "Policy" published: 2026-10-09T03:08:11.640Z modified: 2026-10-09T03:08:11.640Z canonical: https://theinference.org/article/fincen-killed-the-mixer-rule-and-handed-banks-the-tracing-bill language: en keywords: "Policy, Crypto, Money Laundering, Sanctions, Regulation" --- # FinCEN killed the mixer rule and handed banks the tracing bill > FinCEN killed the first class-wide money-laundering mandate it ever proposed, while conceding criminals still use mixers. The reporting duty survived, the laundering moved to cross-chain bridges, and the tracing bill now lands per license on the banks. ## A first-of-its-kind mandate, withdrawn quietly On October 5, 2026, FinCEN [withdrew its 2023 proposal](https://cointelegraph.com/news/fincen-crypto-mixing-rule-legitimate-activity) to treat international crypto mixing as a class of primary money-laundering concern, the first class-wide use of section 311 rather than a named bank or country [1][6]. A 2020 self-custody wallet rule went with it, both notices signed by Deputy Director Jimmy L. Kirby [5][6]. Advocates of crypto privacy called it a win [5][6]. ## What 15,000 institutions were spared FinCEN had priced its own mandate: about 15,000 filers, 98 hours each, 1.47 million hours a year [1]. The mandate died. The suspicious-activity duty did not: banks and exchanges still file reports and screen for sanctioned wallets [1][5]. No listed pure-play sells that tracing layer; the closest listed read is [Zscaler](https://theinference.org/markets/companies/zscaler), which paired its ThreatLabz unit with [TRM Labs](https://theinference.org/markets/companies/trm-labs) this month [3]. ## The risk moved before the rule did [The withdrawal notice](https://www.americanbanker.com/news/fincen-scraps-crypto-mixer-rule-built-to-fight-ransomware) concedes "illicit actors continue to use mixers" [1], and Treasury's 2026 risk assessment still lists them among the tools criminals commonly use [1]. The notice also leans on a sentence it attributes to a July 2025 White House report. That sentence appears nowhere in the document, and Treasury declined to answer on the record [1]. The threat had shifted anyway. Ransomware actors' mixer use fell 37% across 2024 and 2025 while their cross-chain bridge use grew 66%, and Elliptic agrees bridges displaced mixers as the dominant obfuscation technique [1]. FinCEN's own December 2025 ransomware analysis does not mention mixers [1]. ## The vendors already set the price The countermeasure on the bridge route is the same shelf of tracing software, priced per license. FinCEN's own proposal put spotting indirect mixer exposure at analytics tools costing "in excess of tens of thousands of dollars per license" [1]. What the mandate would have forced at a capped, public cost is now bought voluntarily, at list price. TRM's chief policy officer Ari Redbord made the case on the record: the risks are "real", mixers "have been used to launder billions for North Korea's hackers", but broad mandates would "bury investigators in low-value data" while tools now "flag exposure to mixers and sanctioned wallets before funds settle" [1]. The man sells the tools. ## TRM's $950 million count became a UK sanction This week's enforcement ran on them. On October 8 [the UK sanctioned Cryptomus, Heleket and TokenSpot in a 38-entity Russia package](https://cryptobriefing.com/uk-sanctions-cryptomus-heleket-tokenspot/), on TRM's finding that TokenSpot moved more than $950 million to the sanctioned Grinex, Garantex and A7 network [2][4]. [Zscaler's ThreatLabz report, built with TRM, counted $327.8 million of known ransom payments](https://www.zscaler.com/blogs/partner/trm-labs-and-zscaler-threatlabz-join-forces-track-cybercrime-and-nation-state) from April 2025 through March 2026, an average of $431,900 per victim, up 5.3% [3]. Its revenue is up 81% since the quarter the mixer rule was proposed [7]. *Chart: **Zscaler revenue up 81% since the mixer rule was proposed** Line chart of Zscaler quarterly revenue rising from $496.7M in the quarter ended October 2023 to $898.19M in the quarter ended July 2026, with the mixer-rule proposal marked at the start and the withdrawal dated October 5, 2026, after the final plotted quarter* *Quarterly revenue in USD millions from Zscaler's SEC filings, 12 fiscal quarters ended October 31, 2023, through July 31, 2026; fiscal year ends July 31. The mixer-rule withdrawal was posted October 5, 2026, after the last plotted quarter ended. Zscaler is the listed proxy for the tracing layer; the TRM partnership is one part of a much larger security business. [7]* ## The other side is not wrong FinCEN itself expected the smallest added burden at exchanges, so the withdrawal buys them little, whatever [the 3% pop in Coinbase shares](https://247wallst.com/investing/cryptocurrency/2026/10/05/treasury-just-chose-crypto-privacy-over-surveillance-investors-should-read-the-fine-print/) suggested [1][5]. The community-bank lobby, the only bank trade group to comment in 2024, wanted the rule to go further and calls the withdrawal disappointing [1]. FinCEN keeps section 311 and "may take appropriate steps in the future" [1][5]. ## Watch the bridge count, not the mixer rule TRM's next report prices whether bridge growth kept compounding past 66% [1], and whether its counts keep converting into designations the way they did on October 8 [2][4]. The mandate died on Monday. The meter did not. ## Takeaway The withdrawal killed FinCEN's first class-wide laundering mandate, not the laundering: bridges displaced mixers, and tracing now reaches banks as voluntary, per-license software spend. ## Sources 1. [American Banker, Carter Pape: Fincen scraps crypto mixer rule built to fight ransomware, 6 October 2026](https://www.americanbanker.com/news/fincen-scraps-crypto-mixer-rule-built-to-fight-ransomware) 2. [The Block (@TheBlockCo) on X: UK sanctions Cryptomus, Heleket and TokenSpot; TRM Labs counts $950M+ from TokenSpot, 8 October 2026](https://x.com/TheBlockCo/status/2108207768134103535) 3. [Zscaler ThreatLabz blog (partner post with TRM Labs): TRM Labs and Zscaler ThreatLabz Join Forces, October 2026](https://www.zscaler.com/blogs/partner/trm-labs-and-zscaler-threatlabz-join-forces-track-cybercrime-and-nation-state) 4. [Crypto Briefing, John Chen: UK sanctions crypto payment processors Cryptomus, Heleket, and exchange TokenSpot, 8 October 2026](https://cryptobriefing.com/uk-sanctions-cryptomus-heleket-tokenspot/) 5. [24/7 Wall St., Sam Daodu: Treasury Just Chose Crypto Privacy Over Surveillance. Investors Should Read the Fine Print, 5 October 2026](https://247wallst.com/investing/cryptocurrency/2026/10/05/treasury-just-chose-crypto-privacy-over-surveillance-investors-should-read-the-fine-print/) 6. [Cointelegraph, Turner Wright: US Treasury's FinCEN withdraws proposed rules on unhosted wallets, mixers, 5 October 2026](https://cointelegraph.com/news/fincen-crypto-mixing-rule-legitimate-activity) 7. [Zscaler, quarterly revenue from its SEC filings, retrieved 9 October 2026](https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0001713683) --- FinCEN killed the mixer rule and handed banks the tracing bill — The Inference. Canonical: https://theinference.org/article/fincen-killed-the-mixer-rule-and-handed-banks-the-tracing-bill