U.S. regulatory guidance on virtual currencies: FinCEN and OFAC actions (2013–2021)

1. FinCEN defines roles in virtual currency systems

   Mar 18, 2013Labels: FinCEN Guidance, Money Transmitters

   FinCEN issued interpretive guidance explaining how the Bank Secrecy Act (BSA) applies to “virtual currencies.” It distinguished users (generally not regulated as money services businesses) from administrators and exchangers (generally treated as money transmitters with registration, AML program, and reporting duties). This became a foundational reference point for later FinCEN enforcement actions tied to crypto business models.

   • FinCEN Guidance

2. FinCEN clarifies treatment of virtual currency mining

   Jan 30, 2014Labels: FinCEN Ruling, Cryptocurrency Mining

   FinCEN published an administrative ruling addressing whether mining activity makes a person a “money transmitter.” It explained that mining and using mined virtual currency for one’s own purposes generally makes the miner a “user,” not a money transmitter—unless the activity crosses into transmitting value for others. The ruling helped translate the 2013 framework into a concrete, common crypto activity.

   • FinCEN Release
   • FIN 2014 R001

3. FinCEN takes first major action against a crypto exchanger

   May 5, 2015Labels: FinCEN Enforcement, Ripple Labs

   FinCEN assessed a civil money penalty against Ripple Labs and its subsidiary for acting as an unregistered money services business and for Bank Secrecy Act compliance failures. The case signaled that FinCEN would apply traditional AML expectations—registration, an effective AML program, and suspicious activity reporting—to virtual currency businesses operating in the U.S. It also showed that enforcement could be coordinated with federal prosecutors.

   • FinCEN Release
   • CRS Report

4. FinCEN penalizes BTC-e in major exchange case

   Jul 27, 2017Labels: FinCEN Enforcement, BTC-e

   FinCEN assessed a $110 million civil money penalty against BTC-e, describing it as a foreign-located money transmitter that willfully violated U.S. AML laws. The action emphasized that FinCEN expected BSA compliance even for platforms based outside the U.S. when they did business involving U.S. customers or U.S.-linked transactions. It helped push the industry toward stronger AML controls and clearer jurisdictional risk planning.

   • FinCEN Release
   • DOJ Release

5. FinCEN issues consolidated guidance for convertible virtual currency

   May 9, 2019Labels: FinCEN Guidance, Convertible Virtual

   FinCEN released guidance addressing multiple business models involving “convertible virtual currency” (CVC), such as peer-to-peer exchangers, wallet providers, kiosks/ATMs, and decentralized applications. FinCEN framed the document as a consolidation and clarification of existing interpretations rather than new rules. This guidance became a practical compliance roadmap for many FinTech and crypto businesses.

   • FinCEN Release
   • FIN 2019 G001

6. FinCEN warns financial institutions about CVC illicit finance typologies

   May 9, 2019Labels: FinCEN Advisory, Illicit Finance

   Alongside its consolidated CVC guidance, FinCEN issued an advisory describing how criminals may exploit convertible virtual currency for money laundering, sanctions evasion, and other illicit finance. The advisory was designed to help institutions spot red flags and file better Suspicious Activity Reports (SARs). It reinforced the message that crypto risks should be handled with the same seriousness as risks in traditional payments.

   • FinCEN Advisory
   • ABA Summary

7. OFAC issues ransomware sanctions risk advisory

   Oct 1, 2020Labels: OFAC Advisory, Ransomware Guidance

   OFAC issued an advisory warning that ransomware payments can create sanctions risk, including when the recipient is a sanctioned person or linked to a comprehensively sanctioned jurisdiction. The advisory emphasized that U.S. sanctions can operate on a strict liability basis in civil cases, meaning lack of knowledge may not eliminate liability. It also highlighted that a strong compliance program and cooperation with law enforcement can be mitigating factors.

   • OFAC Advisory

8. FinCEN penalizes operator of Helix and Coin Ninja mixers

   Oct 19, 2020Labels: FinCEN Enforcement, Mixers Operator

   FinCEN assessed a $60 million civil money penalty against Larry Dean Harmon for operating Helix and Coin Ninja, described as convertible virtual currency “mixers” (services intended to obscure transaction tracing). FinCEN alleged willful BSA violations, including operating as an unregistered money services business and failures tied to AML obligations. The action underscored FinCEN’s view that privacy-enhancing services can still be “money transmission” with full BSA duties.

   • FinCEN Release
   • CoinDesk

9. OFAC updates ransomware guidance and expands mitigation focus

   Sep 21, 2021Labels: OFAC Advisory, Ransomware Guidance

   OFAC issued an updated advisory on ransomware payment sanctions risks, highlighting steps that can reduce enforcement exposure. It emphasized reporting to and cooperation with relevant U.S. government agencies and encouraged companies to strengthen preventive measures such as sanctions compliance controls and cybersecurity. The update reflected growing use of virtual currency in ransomware payments and a stronger policy push to reduce that flow of funds.

   • AHA Copy
   • Crowell Alert

10. OFAC sanctions SUEX, first designated virtual currency exchange

    Sep 21, 2021Labels: OFAC Sanctions, SUEX OTC

    OFAC added SUEX OTC, S.R.O. to the Specially Designated Nationals (SDN) list in connection with facilitating ransomware-related financial activity. The designation marked a shift from general warnings to direct sanctions pressure on a crypto exchange tied to illicit payments. It also clarified that companies dealing with virtual currency transfers must screen counterparties and manage sanctions exposure like other cross-border financial activity.

    • Axios
    • Crowell Alert

11. FinCEN–OFAC approach coalesces around AML plus sanctions compliance

    Dec 1, 2021Labels: FinCEN Guidance, OFAC Policy

    By late 2021, FinCEN’s BSA-focused guidance and enforcement actions, combined with OFAC’s ransomware advisories and exchange designation, created a clearer “two-lens” expectation for many crypto businesses. Firms were expected to maintain AML programs and reporting (FinCEN) while also managing sanctions screening and escalation when ransomware or sanctioned actors could be involved (OFAC). This period helped establish virtual-currency compliance as a combined AML-and-sanctions discipline rather than separate checklists.

    • FinCEN Guidance
    • OFAC Advisory