A Win for Financial Privacy - "Unhosted Wallets" Are Self-Custodial Wallets
The general direction seems to be to strip us of our right to financial privacy, but sometimes good news comes along. At the start of October 2026, two lingering privacy infringements were dropped in the US. Nonetheless, Samourai Wallet co-founder Keonne Rodriguez is serving a five-year prison sentence for building Bitcoin privacy software, while Tornado Cash developer Roman Storm still faces sentencing and a retrial over a comparable Ethereum tool.
Why is financial privacy important?
The Universal Declaration of Human Rights (UN, 1948) recognizes the right to privacy in Article 12.
No one shall be subjected to arbitrary interference with his privacy, family, home or correspondence, nor to attacks upon his honour and reputation. Everyone has the right to the protection of the law against such interference or attacks.
Read more: Bitcoin enforces human rights
Financial privacy matters because it protects people's ability to speak up. Think of donating to a political organization or joining a demonstration against an authoritarian government. You would not want the authorities to find out that you funded the opposition.
It's already happening. A Russian court handed a senior programmer a four-year suspended sentence for donating to the Anti-Corruption Foundation. Prosecutors had asked for six years in a penal colony. Leonid Stepanov, 48, made two transfers to the foundation in August 2021, totaling about $21. For those donations, officials charged him with "financing extremism." The court relied on his own bank statements to convict him, a clear example of financial surveillance being turned against dissent.
US rules affect everyone around the globe
FinCEN, the Financial Crimes Enforcement Network, proposed the new rules. It is a bureau inside the US Treasury Department, and its powers come from laws passed by the US Congress. Because of US financial power, banks globally copy US standards to avoid being cut off from the US financial system. That means US regulations become a global standard and affect everyone.
The Travel Rule shows how this works. The US introduced it in 1996, requiring financial institutions to pass on sender and recipient information with larger transfers. In 2019, the Financial Action Task Force (FATF), the global standard setter for anti-money laundering rules, extended it to crypto, and many countries have since adopted it.
Unhosted wallets
Let's start with the manipulative term "unhosted wallet". It sounds as if the wallet is somehow "left to its own devices" and sketchy, when it is simply a self-custodial wallet. FinCEN has used this term for self-custody, where you hold the keys to your bitcoin and own your funds without anyone being able to interfere in your transactions or stop you from spending. If you obtain bitcoin without a regulated exchange or bank that imposes KYC (Know Your Customer) identification on you, you do not have to hand your identity to a company.
Self-custodial wallets are one of the backbones of Bitcoin. Alongside full node operators, miners and developers, people who hold their own keys are important stakeholders in the network. Making self-custody sound sketchy seems to be a tactic to influence people to keep their hands off it.
In December 2020, FinCEN proposed to expand bank-like surveillance to transactions involving self-custodial wallets. Banks and money services businesses would have had to report transactions with self-custodial wallets above $10,000 and keep records of those above $3,000. So even if you self-custody your bitcoin and are not a customer of an exchange, you would have had to identify yourself once you moved larger amounts through the traditional system. On October 5, 2026, FinCEN withdrew the proposal, a very important development for Bitcoin, financial independence and fairness.
Crypto Mixing
The second dropped proposal was a wide-ranging rule on crypto mixing, put forward in October 2023. It was not clearly defined and could mean anything from pooling funds from many users together and paying them out again to splitting a transaction into pieces and sending them separately.
FinCEN proposed labeling crypto mixing that involves a foreign jurisdiction as a "primary money laundering concern." Covered institutions would have had to report any transaction they knew, suspected, or had reason to suspect involved mixing in or involving a jurisdiction outside the US. Reports would have included wallet addresses, transaction hashes, IP addresses and customer identification data.
A win for privacy, but let's not get too excited. FinCEN said it will take no further action on the wallet proposal, and it will keep monitoring mixers and may take steps in the future. The Samourai and Tornado Cash cases show that the pressure on privacy tools has not gone away. More ideas to infringe on our financial agency are looming.
Sources
