Federal regulators have officially withdrawn controversial proposals that would have significantly expanded reporting and recordkeeping requirements for cryptocurrency transactions and international funds transfers, bringing a multi-year regulatory debate to a close.
The Treasury Department’s Financial Crimes Enforcement Network (FinCEN) and the Federal Reserve Board of Governors announced Friday that they were rescinding the proposed "Travel Rule" and "Recordkeeping Rule." If enacted, the rules would have lowered the threshold for financial institutions to collect, retain, and transmit information on international funds transfers from the long-standing benchmark of $3,000 down to $250.
The Recordkeeping Rule traditionally mandates that banks and nonbank financial institutions collect and retain comprehensive information on funds transfers and transmittals that either begin or end outside the United States. Meanwhile, the Travel Rule requires those same regulated entities to transmit the gathered information along to the next financial institution in the payment chain.
In their joint filing, FinCEN officials pointed to the heavy volume of public objections and detailed criticisms the agency had received since the proposals were first introduced back in 2020.
Many comments argued that a reporting threshold as low as $250 would impose an overwhelmingly significant regulatory and operational burden on financial institutions, particularly smaller community banks and credit unions. Furthermore, critics warned that such a strict standard could actively disrupt the ability of everyday consumers to send legitimate remittances overseas, potentially driving everyday users away from traditional banking institutions and into less regulated alternative marketplaces.
Industry commenters also argued that expanding the scope of mandatory data collection would dangerously increase the liability exposure of financial institutions required to securely store and maintain vast amounts of personally identifiable information. In addition, numerous stakeholders noted that many potentially illicit transactions falling below the previous $3,000 threshold were already being effectively captured and reported to FinCEN through existing mechanisms such as Suspicious Activity Reports.
The decision to scrap the lower threshold was warmly welcomed by advocacy groups within the digital asset space. The crypto-focused nonprofit Coin Center praised the withdrawal, noting that while the organization does not typically focus on traditional bank regulation, it remains particularly concerned when financial surveillance requirements stretch beyond regulated intermediaries and threaten to burden an individual’s ability to directly hold and self-custody their digital assets.
However, the withdrawal of the FinCEN and Federal Reserve proposals arrives at a complex time for the broader digital finance ecosystem, as traditional banking institutions face mounting pressure to tighten their defenses against illicit finance. On Friday, the Bank Policy Institute (BPI) published an open letter to the banking sector calling on financial institutions to proactively strengthen their anti-money laundering (AML) and countering the financing of terrorism (CFT) safeguards.
In the letter, the BPI argued that modernization efforts in these critical areas have left material gaps in illicit-finance coverage within the digital asset ecosystem. The organization also addressed the regulatory retreat around the travel rule, pointing out that the Treasury Department has not yet demonstrated how it intends to directly impose obligations on digital asset intermediaries to capture the specific customer information that the withdrawn proposals were originally designed to gather, alongside other data points that could assist law enforcement agencies.
The BPI emphasized that these digital asset intermediaries hold relevant customer records, cryptographic wallet information, and transaction details that traditional banks simply cannot access on their own. Consequently, the institute argued that the Treasury should carefully reassess what existing reporting frameworks already provide, determine what additional information authorities genuinely require, identify which specific entities are best positioned to supply that data, and figure out how to gather it efficiently without disrupting the broader financial system.
The timing of the regulators’ announcement also coincides with heightened industry anxiety following a recent, record-setting cyber heist involving the major cryptocurrency exchange Binance, in which malicious actors made off with $6.3 billion. The unprecedented security breach prompted federal banking regulators to urge financial institutions across the country to thoroughly examine their own systems and check for any unusual activity, operational interruptions, or vulnerabilities.
According to Binance’s own public account of the massive incident, the attackers spent months quietly infiltrating its internal systems before finally seizing control of internet-connected wallets and draining the funds. This security failure has renewed industry-wide discussions regarding systemic vulnerabilities, particularly as traditional lenders increasingly explore the integration of stablecoins and other digital tokens issued by third-party institutions.
Industry analysts have noted that a bank’s own internal systems can often remain fully operational even while a specialized service it relies on to move money experiences an outage or a security compromise. This underlying risk has become increasingly prominent as lenders begin to utilize stablecoins issued by outside entities to facilitate faster settlements.
In such arrangements, a designated issuer handles token redemption, a separate custodian safeguards the underlying assets, and a specialized technology platform provides the bank with the interface needed to submit payment instructions. Depending on how these operational responsibilities are divided among providers, an unexpected interruption or breach at just one third-party provider could severely affect a bank’s ability to send a payment, confirm its final destination, or convert the digital tokens back into fiat currency.
