pull down to refresh

I'm a legal counsel and I stack sats. Let me cut through the acronyms.

Every year the FATF drops a report about crypto, the headlines scream about "illicit finance," and nobody explains what any of it means. This year's report just landed. So here's the plain-English version, and the part that should make every stacker grin.

Who even is the FATF?Who even is the FATF?

Paris-based intergovernmental body. They write the global rulebook for anti-money-laundering.

Here's the trick most people miss: the FATF can't pass a single law. It has zero direct power over you.

So why does everyone obey? The grey list. The FATF grades every country on how well it follows the "recommendations." Score badly and your whole nation gets treated as toxic by international banks, correspondent banking dries up, borrowing gets expensive, capital runs. So countries fall in line to avoid financial exile.

Soft power, hard consequences. The FATF suggests. Nation-states comply. That's the machine.

What the report saysWhat the report says

It's the 7th update on "Virtual Assets and VASPs." The numbers:

  • 83% of surveyed jurisdictions have now passed "Travel Rule" laws (up from 73%).
  • 11 are still writing theirs.
  • Translation: they think it's going too slow and criminals are slipping through.

Two terms you need:

VASP = the middlemen. Exchanges, custodial wallets: anyone who holds or moves coins for you. Coinbase is a VASP. Your Coldcard is not.

The Travel Rule: this is the one. It forces VASPs to attach your identity to transfers: name, address, the works, at both ends. It's the old bank-wire surveillance rule pasted onto crypto. Goal: no coin moves between regulated businesses without a name stapled to it.

The three things keeping them up at nightThe three things keeping them up at night

1. Offshore exchanges. Set up in a loose jurisdiction, serve customers everywhere, dodge the strict rules. Regulators hate what they can't touch. Expect more of these getting cut off from banking.

2. Stablecoins. Flagged as a growing laundering vector because nearly all of them run on centralized issuers who can freeze your address on command.

3. The freeze-proof scam-coin. Here's the tell. The report singles out a stablecoin from a Cambodia-based laundering operation that was marketed as immune to asset freezing. The FATF treats this like a five-alarm fire.

Now notice what's really going onNow notice what's really going on

The FATF isn't scared of decentralization in the abstract. It's scared of a centralized token that cosplayed as censorship-resistant so criminals could park money in it. A laundering node minting an IOU. A scam in a freedom costume.

Meanwhile, the exact property they're panicking about, money that can't be frozen by decree, is something Bitcoin has had natively since block 0. No issuer. No compliance desk. No freeze button, because nobody holds the keys but you. Bitcoin doesn't need to market itself as freeze-resistant. It just is, when you self-custody.

So read the whole report through one lens: it is a document about intermediaries. Every tool in it, licensing, the Travel Rule, VASP registration, offshore crackdowns, works only at the points where crypto touches the fiat system. Exchanges. Custodians. Ramps. Issuers.

That's not a coincidence. It's the only place their machine can reach. A standards body can lean on a regulated business. It cannot subpoena a seed phrase in your head.

What it means for your stackWhat it means for your stack

  • Tighter KYC on exchanges. Lower thresholds, more flags. The ramps are the battlefield.
  • Withdrawing to self-custody stays legal but expect more friction, delays, and questions when you pull to an "unhosted wallet" (their word for your wallet, and yes, it's explicitly on the watch list).
  • Centralized stablecoins are freezable by** design. That's the feature, from where they sit.
  • The pressure is on the perimeter, not the protocol. Nothing here touches coins you hold yourself.

Fraud and laundering are real problems, I'll grant that. But every net has a mesh size, and this one is woven tight around custodians and middlemen. The harder they pull it, the louder the case for holding your own keys gets.

Not your keys, not your coins. Not your VASP, not their Travel Rule.

So I'll open the floor, because I'm curious where stackers land on this:

  • Are offshore exchanges a feature or a bug for us: pressure valve against overreach, or a liability that invites harder crackdowns on everyone?
  • And the big one: does regulatory heat on stablecoins and custodians ultimately push people toward self-custodial Bitcoin, or just scare normies out of the space entirely?

Tell me where I'm right and where I'm missing it. 👇

I write plain-English legal Bitcoin news, the regulation actually shaping this space, in my newsletter: thebitcoinact.xyz. 🫡

i still use exchanges, i just don't like leaving bitcoin there any longer than i have to

reply

You can use P2P exchanges that are not targeted by these rules.

reply
1 sat \ 1 reply \ @AG 20 Jul

This is fantastic! Hips can operate businesses and trade with confidence when they are aware of the game's rules. I appreciate you sharing and educating us on this legalese subject, which not many people know the details about.

Do you think HODL wallets are safe then, or would they be limited to spending in certain places in the future if no kyc is provided?

How do you see the future of self-custody going?

reply

Appreciate that. Here's the fuller version of what exit actually means legally, because the distinction matters more than people think.

Bitcoin's base layer has no defendant. There's no issuer, no custodian, no company whose doors a court can order shut. When OFAC tried to sanction Tornado Cash's smart contracts in 2022, the Fifth Circuit shot it down in Van Loon v. Treasury (Nov. 2024), immutable code that nobody owns isn't "property" under IEEPA, so it can't be blocked. Treasury delisted Tornado Cash in March 2025 rather than fight that further. That's the whole game in miniature: you can't seize what nobody holds title to. Bitcoin's settlement layer is that same problem, one level cleaner, no dev multisig, no upgrade key, no foundation to subpoena. A valid signed transaction with a fee gets mined. (Small honest caveat: individual miners can choose not to include a specific transaction and a few pools briefly filtered OFAC-listed addresses post-2022 but with hashpower spread globally, that transaction just lands in the next block from someone else. Censorship at the mining layer has never actually stuck.)

So are wallets safe? Yes, in the sense that matters: no court order freezes a UTXO, no regulator blacklists an address the way Circle or Tether can freeze their own tokens, because there's no counterparty standing behind the asset to compel. That's structurally different from anything issuer-based.

But your second instinct is right too, and this is where "no KYC" gets real. The law can't touch the coins sitting in your cold wallet. It absolutely can, and increasingly does, touch every point where that wallet talks to the regulated world. The EU's Transfer of Funds Regulation already requires exchanges to verify you actually control a self-hosted address before moving more than €1,000 to or from it. And Article 37 of that same regulation forces the European Commission to publish a full review of whether self-hosted wallets need even tighter restrictions.

The US is currently moving the opposite direction. FinCEN's 2020 proposal to force reporting on unhosted wallet transfers was formally withdrawn in August 2024, no replacement filed. States are actively legislating the other way: New Hampshire just signed its Blockchain Basic Laws affirmatively protecting self-custody and digital asset businesses; Texas stood up a state Bitcoin reserve; and a federal bill (the BITCOIN Act, reintroduced this year as ARMA) would write "the right to self-custody shall not be infringed" directly into statute. None of that is law yet at the federal level but the direction of travel is the opposite of Brussels.

Where this goes: self-custody as a legal category gets harder to touch, not easier, the asset itself isn't the fight anymore. The fight moves entirely to the on/off-ramps: exchanges, card issuers, payroll rails, merchant processors. Every one of those is a counterparty, and every counterparty is a chokepoint for KYC, Travel Rule data, and sanctions screening, with pressure only increasing there.

Your keys, your coins holds up in court. Your bank, your exchange, your card, those were never yours to begin with. Plan around that boundary, not around the myth that either side of it works the same way.

reply
1 sat \ 0 replies \ @Troser 20 Jul -30 sats

nothing here makes me want to keep more bitcoin with a third party