Washington Dropped Its Crypto Surveillance Rules - Your Wallet Can Still Give You Away
Bitcoin privacy just got a little breathing room in Washington - and one careless transaction can still undo all of it.
Washington blinked
FinCEN, the Treasury's financial crimes unit, withdrew a 2020 rule aimed at "unhosted" wallets and a 2023 plan to label international crypto mixing a "primary money laundering concern." The notices were signed by Deputy Director Jimmy L. Kirby and posted Monday, with formal publication set for Tuesday.
Neither rule was ever finalized, so killing them changes no existing bank obligation.
The 2020 wallet rule would have forced firms to keep records on counterparties for transfers above $3,000 and file reports above $10,000. The 2023 mixing plan went further, defining mixing as anything hiding a transaction's source, destination, or amount - sweeping in pooled funds, split transfers, single-use wallets, and even simple swaps.
Commenters warned the definition could have "a chilling effect on legitimate activity." Coin Center, which fought both rules, called the withdrawal "a significant victory for financial privacy."
Your wallet can rat you out
Here is the part that still bites. Seth for Privacy, COO of Cake Wallet, explained on a podcast how one sloppy send can expose an entire history.
Bitcoin wallets do not hold one balance. They hold a stack of separate unspent outputs - UTXOs - each tied to a past transaction. Send more than one UTXO covers, and the wallet quietly combines several as inputs.
That is where it breaks. If your wallet merges coins bought through an ID-verified exchange with coins you got peer-to-peer, the transaction links them all to your verified identity. One payment, whole history exposed.
Coin control is the fix
The fix is coin control, sometimes called UTXO management. It lets you pick exactly which coins go into a transaction instead of letting the wallet decide.
- Label where every UTXO came from before you need to spend it
- Never combine KYC and non-KYC coins in one send
FinCEN said it will keep watching mixers and may act again later. Section 311 of the USA PATRIOT Act had never been used against a whole class of transactions before, so the playbook now exists.
Why this matters
For anyone self-custodying or trading on-chain, the near-term win is real: fewer reporting triggers over your transfers. But the surveillance fight is only half the story. Most people leak their own privacy long before a regulator does.