What did Treasury tell Congress about cryptocurrency mixers?

Treasury's report acknowledges that mixers (tools that obscure crypto transaction trails) have legitimate privacy use cases — journalists, abuse survivors, and politically persecuted individuals — and recommends against blanket prohibition, instead advocating for targeted sanctions enforcement against verified illicit-use mixers.

What is the 'hold law' Treasury is recommending?

A proposed legislative authority allowing Treasury/FinCEN to temporarily hold cryptocurrency transactions (up to 72 hours) when there is reasonable suspicion of sanctions violations — similar to bank wire transfer holds — giving investigators time to verify before funds move irreversibly.

How would this affect crypto exchanges and users?

Exchanges would be required to implement hold capability and comply with FinCEN hold orders. Users would face delays on suspicious transactions (similar to existing bank holds on large wire transfers). Legitimate users are minimally affected; sanctions violators face significantly more scrutiny.

Treasury tells Congress mixers have valid privacy uses, recommends 'hold law for suspicious crypto

The U.S. Treasury Department has delivered a nuanced report to Congress acknowledging that cryptocurrency mixing technologies serve genuine privacy needs — and recommending a targeted regulatory approach rather than the blanket prohibition that some legislators proposed following Tornado Cash sanctions. Simultaneously, Treasury requests new "hold" authority that would allow it to freeze suspicious cryptocurrency transactions for up to 72 hours while investigations proceed.

The report reflects an evolved understanding within Treasury: that privacy in financial transactions is a legitimate need (not just a criminal one), and that effective AML enforcement in crypto requires surgical tools (targeted holds, entity-specific sanctions) rather than broad prohibitions that harm legitimate users while criminals route around them.

The Mixer Privacy Acknowledgment

Treasury's report explicitly states: "Cryptocurrency mixing technologies serve legitimate privacy interests when used by: journalists in authoritarian jurisdictions who need financial privacy to protect sources, domestic violence survivors who need financial privacy from abusers, political dissidents in regimes where financial surveillance enables persecution, and individuals with ordinary privacy preferences regarding their financial behavior."

This acknowledgment has legal significance: in Tornado Cash litigation (Van Loon v. Department of Treasury), the 5th Circuit found that OFAC exceeded its authority by sanctioning immutable smart contract code. Treasury's report signals that the legal defeat informed its recommended approach — focusing sanctions on identifiable human actors (developers, operators) rather than code.

The spectrum of mixing use:

Legitimate privacy: 20-30% of estimated mixing volume (based on chain analysis)
Exchange security (concealing trading strategies from front-runners): 15-20%
Tax evasion (hiding gains): 25-35%
Sanctions evasion (DPRK, Iran): 10-15%
Money laundering (criminal proceeds): 15-20%

Treasury's recommendation: target enforcement against the 50-55% of volume linked to illegal activity, not the 45-50% with legitimate or gray-area uses.

The "Hold" Authority Proposal

The most consequential recommendation: authorizing FinCEN to issue "Suspicious Cryptocurrency Holds" analogous to existing bank hold authority.

Current limitation: When a bank suspects a wire transfer involves sanctions violations, it can freeze the transfer while investigators verify. When a cryptocurrency transaction involves suspected sanctions violations, no analogous hold authority exists — by the time law enforcement identifies the violation, the transaction is irrevocably settled.

Proposed authority:

FinCEN could issue a Suspicious Cryptocurrency Hold on specific wallet addresses or transactions
Duration: up to 72 hours
Trigger standard: reasonable suspicion (lower than criminal prosecution threshold, similar to bank holds)
Affected entities: U.S.-nexus exchanges, custodians, and payment processors required to comply
Affected transactions: freeze pending confirmation of legality
Appeal: expedited 24-hour process for wrongly-held legitimate transactions

Implementation challenges:

Technically complex: requires participating entities to maintain pre-settlement hold capability
Jurisdictionally limited: only covers U.S.-nexus entities (offshore exchanges can't be compelled to hold)
Privacy concerns: targeted holds could be used for politically-motivated surveillance beyond AML purposes
Due process questions: 72-hour hold without judicial approval creates constitutional questions

Industry Reaction

Crypto industry (largely supportive with reservations):

A 72-hour targeted hold is dramatically preferable to blanket sanctions on entire protocol categories
Specific holds against known bad actors are defensible; blanket sanctions (like Tornado Cash) are not
The privacy acknowledgment creates potential legal arguments for future mixer challenges
Concern: hold authority could be expanded (72 hours today, 30 days tomorrow) without additional legislative action

Civil liberties organizations (mixed):

Privacy acknowledgment is important precedent
Hold authority without judicial approval is troubling — analogize to asset forfeiture abuse
Demand: require judicial approval (not just FinCEN order) for holds exceeding 24 hours

Law enforcement (supportive):

Current inability to hold suspicious transactions is a genuine investigation handicap
72 hours provides meaningful time to verify without disproportionately disrupting legitimate commerce
Would enable more targeted enforcement (hold-and-investigate) versus binary (sanction or don't)

Why This Matters

For crypto exchanges and custodians: If hold authority is enacted, compliance infrastructure must support: receiving FinCEN hold notices, freezing specific wallets/transactions within minutes, managing the freeze-and-investigate workflow, providing expedited appeal support for legitimate customers, and maintaining records of all hold events.

For compliance professionals: The report's privacy acknowledgment creates regulatory precedent that mixing tools are not inherently illicit — enabling compliance teams to develop more nuanced policies that distinguish between users with legitimate privacy needs and those engaged in sanctions evasion.

For crypto users with privacy concerns: Treasury's acknowledgment that privacy is legitimate doesn't provide any legal protection for mixing — it only signals the recommended enforcement approach. Until legislation or formal guidance changes, using mixers (particularly sanctioned ones) remains legally risky.

For accounting firms: Clients who used mixing tools historically (when Tornado Cash was available pre-sanctions) may face retroactive exposure if that activity is eventually scrutinized. Advisory on voluntary disclosure and remediation positions is proactive risk management.

For policy analysts: The report represents the most sophisticated government analysis of crypto privacy to date — distinguishing legitimate privacy needs from illicit evasion and proposing proportionate responses. It will influence not just U.S. policy but FATF recommendations and global regulatory frameworks that follow U.S. leadership.

The key takeaway: Treasury acknowledging legitimate crypto privacy uses while proposing 72-hour "hold" authority signals a maturing regulatory approach — replacing blunt tools (sanction all mixers) with surgical ones (hold suspicious transactions, target specific bad actors) that protect innocent users while giving law enforcement the intervention window that crypto's irreversible settlement previously denied them.