FinCEN drops the reporting duty for withdrawals to private wallets: what matters now for European investors

The US financial regulator FinCEN closed two projects on October 5, 2026 that would have made transfers to self-custodied crypto wallets reportable. For you as an investor in Germany, nothing changes immediately. What happens when you withdraw to your own wallet is governed by European law, and European law is currently moving in the opposite direction.

FinCEN is the Financial Crimes Enforcement Network, the anti-money-laundering unit of the US Treasury. It prescribes which data banks and financial service providers must retain about payments and when they must file a report. Two of its proposals would have extended those duties explicitly to crypto transfers to wallets without a custodian for the first time. Both are now off the table.

What FinCEN withdrew on October 5, 2026

On Monday, October 5, 2026, the agency filed two withdrawal notices; publication in the Federal Register, the US official gazette, was scheduled for October 6. Two so-called NPRMs are affected, that is Notices of Proposed Rulemaking. An NPRM is the formal announcement of a planned rule on which anyone affected may comment before it takes effect.

The first project dates from December 23, 2020 and ran under the docket number 1506-AB47. The second was published on October 23, 2023 and carried the number 1506-AB64. The older one had thus sat unresolved for almost six years, the newer one for three. Neither was ever in force; they hung in the state in which an agency has announced a rule but not adopted it.

The $3,000 threshold and the report from $10,000

The December 2020 proposal would have required banks and payment service providers to keep records on crypto transactions involving a self-custodied wallet from $3,000 upwards, including details of the counterparty. From $10,000 a report to FinCEN would have become due. A self-custodied wallet, an unhosted wallet in the agency's English, is a wallet whose private key nobody but you holds; there is no company there that could provide information.

That was precisely where the dispute lay. Anyone sending money to an address with no service provider behind it can say about the recipient only what that recipient states themselves. The criticism of the proposal therefore came down to the duty being either impossible to fulfil or an invitation to guess. In 2021 the industry filed several thousand comments within an unusually short window.

Why the 2023 mixing special measure fell

The second project targeted mixers. A mixer is a service that pools payments from many users and pays them out in a new distribution, so that the trail between deposit and withdrawal can no longer be drawn unambiguously in the blockchain. FinCEN wanted to designate international crypto mixing under section 311 of the USA Patriot Act as a class of transactions of primary money-laundering concern. The consequence would have been a duty to report wallet addresses, transaction hashes and IP addresses.

That it comes to nothing is justified by the agency, according to Decrypt, by the reporting burden and by the objection of many commenters that the broad definition could deter lawful use. FinCEN stated verbatim that it would take no further action on this NPRM. Both withdrawals refer to the White House digital asset report of July 2025 and its sentence that lawful users of digital assets should be able to transact privately on a public blockchain.

The legal basis remains in place

A withdrawal is not a ban on the rule but the end of a single proceeding. Peter Van Valkenburgh of the advocacy group Coin Center said on that point that the underlying statutory authority to create new, similarly bad rules remains. That is the sober reading: what was withdrawn is the proposal, not the power to write a new one.

The same agency tightens the screws on the A7 network the same day

That FinCEN is pulling back across the board cannot be inferred from the day. On October 5, 2026 the same agency published a new finding together with a proposed rule in the Federal Register under the number 1506-AB77. It is directed at companies outside the US controlled by the so-called A7 network, a service for sanctions evasion and money laundering with links to Russia. The legal basis is section 9714(a) of the Combating Russian Money Laundering Act.

What is proposed is a prohibition on certain transmittals of funds by covered financial institutions. The comment period ends on November 4, 2026. The pattern is therefore recognisable: the agency is abandoning blanket capture of private transfers and working instead with targeted prohibitions against named networks.

Proof of ownership from 1,000 euros: how far the EU transfer-of-funds regulation reaches

In the European Union, Regulation (EU) 2023/1113, the transfer-of-funds regulation for crypto assets, has applied since the end of 2024. Its Article 14 requires that, for a transfer to a self-hosted address above 1,000 euros, the originator's crypto service provider take appropriate measures to establish whether that address is owned or controlled by the originator. A self-hosted address is the same thing FinCEN calls an unhosted wallet: an address with no service provider behind it.

In practice that means your exchange wants to see proof above this threshold that the destination address belongs to you. What that proof looks like we set out in a separate assessment of which providers demand which evidence from 1,000 euros. Below the threshold it stays with the details that are collected anyway. Anyone intending to self-custody permanently cannot avoid the question of which device the keys sit on; our hardware wallet comparison sorts the devices by price, handling and supported networks.

So the EU demands precisely what the US is now dropping: an attribution of transfers to wallets without a custodian. The difference is the direction of access. The American rule would have produced a report to the agency. The European one produces a duty of verification at the service provider, the result of which is documented there.

The anti-money-laundering regulation from July 10, 2027 and the end of anonymous accounts

The second building block is not yet in force. Regulation (EU) 2024/1624, the EU anti-money-laundering regulation, applies from July 10, 2027. Its Article 79 prohibits credit institutions, financial institutions and crypto service providers from keeping anonymous accounts. At the same time it prohibits dealing in anonymity-enhancing coins, that is crypto assets whose protocol systematically conceals sender, recipient or amount. Monero is the best-known case.

For regulated exchanges in the EU that means taking such coins out of their offering. What exactly this prohibition captures and what holders can do until then we treated separately in an assessment of the privacy coin ban from 2027. What stands for today's occasion is this: while surveillance of private transfers is being rolled back in Washington, a deadline is running in the EU after which a part of private transfers will not be possible at all through regulated providers.

Which provider sits under which supervision is therefore no longer a formality but decides which coins you will still be able to trade there in two years. Our overview of regulated crypto exchanges lists who holds an authorisation under the European crypto market regulation MiCA and in which member state it was granted.

What happens on a withdrawal to your own wallet in Germany

The procedure differs by provider, but the components are the same everywhere. You enter the destination address, and above the 1,000-euro threshold the provider asks for proof that it belongs to you. Common forms are a signed message from the wallet, a screenshot of the address in the wallet software, or a small test transfer. Some providers additionally work with an allowlist on which a new address only becomes usable after a waiting period.

The American withdrawal changes nothing about that, for a simple reason: the duty falls on your service provider, and your service provider is as a rule based in the EU or serves you under European supervision. A provider licensed in Germany follows the transfer-of-funds regulation, not whatever FinCEN plans or drops. Anyone trading with a provider outside the EU leaves that framework; then what applies there applies, and the way back to a German bank account runs through the European rules again.

These five details to check before your next withdrawal

Before you pull holdings off an exchange and onto your own wallet, five points are worth a look, as they cause most of the delays in practice.

1. The amount threshold. If the withdrawal is above 1,000 euros, the duty of proof under Article 14 applies. Anyone staying just below it to avoid that runs into the opposite: a series of conspicuously small transfers is a pattern any money-laundering desk examines.
2. The network. The same coin often exists on several networks. A withdrawal on the wrong network does not arrive and in many cases cannot be recovered.
3. The form of the proof. If the provider demands a signed message, your wallet has to be able to do it. Not every app offers the function, and with a hardware wallet it sometimes sits in the companion software rather than in the device.
4. The waiting period on the allowlist. If a newly entered address only becomes usable after hours, a withdrawal is not something for the evening before a deadline.
5. The records. Acquisition date, acquisition cost and the transaction number belong saved before you leave the account. Anyone requesting them from the exchange later gets them in the best case; in the worst, the provider is gone.

In tax terms the withdrawal changes nothing in Germany

A transfer between two of your own wallets is not a sale and in itself produces no taxable gain. What it does produce is documentation work: after the move, the holdings sit where no service provider draws up an annual statement any more. The duty to be able to evidence the acquisition date and acquisition cost stays with you. Tools that read addresses along permanently and build a statement from that we set side by side in the crypto tax tool comparison.

That a reorganisation of crypto taxation is being negotiated in Berlin at the same time is a separate matter and has nothing to do with the American reporting duties. For the question of where your coins sit it is nonetheless not immaterial: the longer a holding sits with you yourself, the more important it becomes that the origin of every position stays traceable.

Self-custody: What to take away

The news from Washington is a relief for American financial service providers and a signal to everyone who treats self-custody as a case for suspicion. A change in your situation in Germany it is not. Three steps follow from it.

1. Settle where your keys are to sit. Anyone wanting to take holdings off an exchange permanently decides on the device first and only then on the timing. Our hardware wallet comparison names the differences that matter in doing so.
2. Check your provider's authorisation. From July 2027 it decides which coins remain tradable there. The overview of regulated crypto exchanges shows who holds a MiCA authorisation.
3. Secure the records before you move. Acquisition data and transaction numbers are harder to obtain after leaving the account than before; a tax tool keeps them together permanently.

(As of October 6, 2026. This article is not investment advice. Prices and fee structures change; check the terms with the provider before you buy.)

Sources for further reading: the withdrawn proposal of December 2020 in the Federal Register and the mixing special measure of October 2023 in the same place.