The $10,000 Private-Wallet Rule Is Dead After Six Years — What It Actually Changes for US Crypto Holders

Moving crypto to your own wallet could have meant giving a financial institution more than your identity: the abandoned federal proposal also sought counterparties’ names and physical addresses. That prospect hung over US self-custody for nearly six years. Its withdrawal now closes that proceeding. (Federal Register)

FinCEN also withdrew a separate proposal targeting crypto mixing. Neither proposal ever became an effective final rule, so the immediate benefit is the removal of pending requirements rather than a change to yesterday’s transfer procedure. (Bitcoin.com)

What ended on October 6

FinCEN, the Treasury Department’s Financial Crimes Enforcement Network, announced both withdrawals on October 5, 2026. It cited public comments, the Trump administration’s deregulatory agenda, and efforts to make digital asset regulation appropriate to its purpose. (FinCEN)

The notices entered public inspection that day and appeared in the Federal Register on October 6, when the withdrawals took effect. Document 2026-20430, published at 91 FR 63514, ends the wallet proceeding originating in December 2020. Document 2026-20429, at 91 FR 63513, withdraws both the mixing proposal published in October 2023 and its associated section 311 finding. FinCEN Deputy Director Jimmy L. Kirby signed both notices. (Wallet withdrawal, mixing withdrawal)

The United States did not have a self-custody ban for this action to lift. What disappeared was a proposed expansion of financial surveillance around certain wallet transactions. (Bitcoin.com)

What the private-wallet proposal would have collected

Treasury introduced the proposal in December 2020, near the end of the first Trump administration, when Steven T. Mnuchin was Treasury secretary. Its obligations would have fallen on banks and money services businesses, or MSBs, handling specified convertible virtual currency, or CVC, and legal-tender digital asset transactions. (Treasury)

An unhosted wallet meant a wallet whose transactions did not require a financial institution. The proposal also covered certain wallets at institutions outside the Bank Secrecy Act’s reach in foreign jurisdictions designated by FinCEN. The proposed thresholds were distinct:

• More than $10,000: A qualifying transaction, or transactions totaling more than $10,000 within 24 hours, would trigger reporting to FinCEN and customer identity verification.
• More than $3,000: A qualifying transaction would trigger recordkeeping and customer identity verification.
• Within 15 days: A required report would have to be submitted after the reporting obligation arose. (2020 proposal)

The information demanded extended beyond an amount and wallet address. It included the customer’s name and address, asset type, quantity, transaction time, dollar value at the contemporaneous exchange rate, payment instructions, and each counterparty’s name and physical address. Identifying transaction or account information and relevant customer forms were also included. (2020 proposal)

That counterparty requirement explains the privacy stakes. An institution’s reporting could reach someone who was not its customer. Coin Center, a policy advocacy organization, opposed this expansion of sensitive financial data collection and argued that the proposal imposed unequal treatment on crypto transactions. (Coin Center)

Why the mixing proposal reached beyond a named service

The 2023 proposal used section 311 to identify international CVC mixing involving foreign jurisdictions as a transaction class presenting a primary money laundering concern. It proposed special measure one: additional records, information collection, and reporting. (2023 proposal)

Its reporting trigger covered transactions that regulated institutions knew, suspected, or had reason to suspect involved mixing inside or outside the United States. Reports would include asset amounts and types, the mixer used, customer wallet addresses, transaction hashes, transaction dates, IP addresses, and an explanatory narrative. Institutions would also retain identifying customer information. (2023 proposal)

The proposed definition covered six techniques: pooling assets; using programmed or algorithmic transaction coordination; splitting assets across separate transfers; chaining transactions through disposable wallets, addresses, or accounts; exchanging between digital assets; and facilitating delays initiated by users. Its definition of a mixer extended to people, groups, services, software, tools, and functions enabling those activities. (2023 proposal)

The scope therefore depended on transaction techniques as well as service identity. In withdrawing the proposal, FinCEN acknowledged commenters’ concerns that this breadth could discourage legitimate activity and impose substantial reporting burdens. The agency still considers mixers tools that illicit actors use to obstruct investigations; it will continue monitoring for illicit finance and may act again. (Mixing withdrawal)

The US rules and institutions that remain in place

The Bank Secrecy Act remains the existing compliance framework. Banks and money transmitters still face anti-money-laundering obligations, suspicious activity reporting rules, and applicable customer identification requirements. Withdrawing these notices of proposed rulemaking, or NPRMs, does not rewrite effective BSA rules. OFAC sanctions operate under a separate legal framework and are also outside these withdrawals. (Bitcoin.com)

For a US holder, this distinction explains why an institution can still request identity information or transaction records after October 6. Existing obligations continue to support compliance checks. An exchange’s withdrawal procedures and address allowlisting policies also reflect its own risk controls. Neither withdrawal removes those policies or creates a general exemption from scrutiny for transfers to a personal wallet. (Bitcoin.com)

Section 311 of the USA PATRIOT Act, codified at 31 U.S.C. 5318A, also survives. It authorizes the Treasury secretary to make findings concerning foreign jurisdictions, foreign financial institutions, transaction classes involving foreign jurisdictions, and account types. A qualifying finding can support the imposition of special measures. Closing a particular proceeding leaves this underlying statutory authority intact. (31 U.S.C. 5318A)

The statute provides five special measures. Measures one through four concern additional recordkeeping, information collection, and reporting. Measure five permits prohibitions or conditions on opening or maintaining correspondent accounts or payable-through accounts in the United States. These are different regulatory powers; the withdrawn mixing proposal selected the first measure. It did not propose using every measure available under the statute. (31 U.S.C. 5318A, 2023 proposal)

The Federal Register publication gives the withdrawals their formal procedural significance. The wallet notice expressly closes further action on that NPRM, while the mixing notice withdraws both the proposed measure and its supporting finding. Publication records the specific proceedings being ended and the effective withdrawal date, beyond the policy announcement in a press release. (Wallet withdrawal, mixing withdrawal)

Withdrawal of an NPRM is not repeal of an existing rule. Neither proposal had taken effect. The procedural consequence is that renewed regulation would require a new rulemaking, rather than continued work toward finalizing the withdrawn documents. That changes the path for future requirements while leaving current compliance duties in place. (Bitcoin.com)

Financial privacy becomes an explicit policy consideration

The policy context comes from the President’s Working Group on Digital Asset Markets, established under Executive Order 14178 in 2025. Its July 2025 report supported lawful users’ ability to transact privately on public blockchains. It recognized both criminal use of mixers to obscure and launder funds and legitimate use to protect financial privacy, and recommended that Treasury reconsider its next steps on the mixing proposal. FinCEN cited that report in its withdrawal. (Mixing withdrawal)

Coin Center’s Jason Somensatto welcomed the decision on October 5 as a major advance for financial privacy. The group’s objection to the mixing proposal was that its definition swept common privacy techniques into an excessively broad reporting framework. (Coin Center)

The meaningful policy shift is the recognition that protecting privacy can itself be a legitimate reason for using these techniques. Future proposals can be assessed against that position: how precisely do they distinguish the activity authorities want to investigate from lawful users’ financial privacy?

What changes for your wallet and tax records

For transfers between an exchange and your own wallet, October 6 did not introduce a new procedure. Neither abandoned proposal had governed those transfers. The immediate change concerns expectations: compliance teams no longer need to prepare for these particular pending proposals to become final. (Bitcoin.com)

Tax reporting remains separate. Gains and losses from disposing of digital assets still need to be reported under IRS guidance. The FinCEN withdrawals do not alter that obligation. (IRS digital asset guidance)

Form 1099-DA remains relevant. Broker reporting of gross proceeds applies to digital asset transactions beginning January 1, 2025; basis reporting applies to certain sales beginning January 1, 2026. Investors still need complete acquisition-date and cost records. Ending a proposed financial surveillance requirement does not supply missing tax information or erase reporting responsibilities. (IRS Form 1099-DA instructions)

The unresolved cost of a proposal left hanging

The wallet proposal remained unresolved from December 2020 until October 2026. Its withdrawal ends that particular period of uncertainty, with FinCEN stating it will pursue no further action on the NPRM. (Wallet withdrawal)

The unanswered question is what prolonged uncertainty costs a compliance system. A proposal can shape preparation without ever becoming enforceable. Its removal matters because institutions and users can finally stop treating that document as unfinished business.

The next test is the design of any replacement. The authority remains; these proposals are closed. A durable privacy policy will depend on how future rules translate the acknowledged legitimacy of private transactions into limits on what institutions must collect.