The US Treasury Department has acknowledged that crypto mixers can serve legitimate privacy needs for lawful users, marking a notable shift in tone in one of the most closely watched debates in digital asset policy. In a report to Congress released in March 2026, Treasury said lawful users may use mixers to protect sensitive financial information on public blockchains, even as it continued to warn that the same tools can be exploited by criminals, sanctions evaders, and hostile state actors.
The statement matters because it comes from the same department that sanctioned Tornado Cash in 2022 and later removed those sanctions in March 2025 after legal and policy review. Treasury’s new language does not amount to a blanket endorsement of mixers, but it does recognize a principle long argued by privacy advocates: public blockchains can expose personal financial activity in ways many lawful users find unacceptable.
Treasury’s new position on crypto privacy
In its report to Congress, Treasury wrote that “lawful users of digital assets may leverage mixers to enable financial privacy when transacting through public blockchains.” The department said individuals may use mixers to shield information about personal wealth, business payments, charitable donations, and consumer spending habits from public view on blockchain networks.
That language is significant because blockchain transactions are often transparent by design. While wallet addresses may be pseudonymous, transaction histories can often be traced and linked to real-world identities through exchanges, analytics tools, or public disclosures. Treasury’s report effectively recognizes that privacy on public ledgers is not only a concern for criminals, but also for ordinary users and businesses.
At the same time, Treasury did not soften its broader enforcement posture. The report says mixers can also frustrate law enforcement investigations by obscuring the origin, destination, and counterparties involved in digital asset transfers. Treasury paired its privacy acknowledgment with support for stronger tools to detect suspicious activity involving digital assets.
Why the issue matters now
The timing is important. Treasury’s statement arrives after years of legal, political, and technical conflict over whether privacy tools should be treated primarily as neutral software or as high-risk infrastructure for illicit finance. That debate intensified after the Office of Foreign Assets Control sanctioned Tornado Cash in August 2022, saying the mixer had been used to launder proceeds from cybercrime, including funds linked to North Korea’s Lazarus Group.
Treasury and FinCEN have repeatedly argued that mixers pose serious anti-money-laundering and national security risks. In October 2023, FinCEN proposed new recordkeeping and reporting requirements for transactions involving convertible virtual currency mixing, calling it a class of transactions of primary money laundering concern.
But the legal landscape changed in late 2024. On November 26, 2024, the US Court of Appeals for the Fifth Circuit ruled that OFAC had exceeded its authority in sanctioning Tornado Cash’s immutable smart contracts under the International Emergency Economic Powers Act. The Treasury Department then removed Tornado Cash from the sanctions list on March 21, 2025, citing its review of the legal and policy issues involved.
US Treasury says lawful crypto users may use mixers for financial privacy
The phrase at the center of the current debate, “US Treasury says lawful crypto users may use mixers for financial privacy,” reflects a more nuanced federal position than the one seen during the first wave of mixer enforcement. Treasury is now drawing a clearer distinction between legitimate privacy use and illicit abuse.
That distinction could shape future rulemaking in several ways:
- Privacy-preserving tools may gain more policy legitimacy if they can demonstrate compliance features.
- Regulated firms may face higher expectations to identify suspicious mixer-related activity without blocking all privacy-enhancing transactions.
- Developers may push for technical safeguards such as selective disclosure, auditability, or proof-of-innocence mechanisms.
- Courts may continue to scrutinize sanctions authority when it is applied to decentralized or immutable software.
Treasury’s position also aligns with earlier statements from department officials. In 2022, Assistant Secretary Elizabeth Rosenberg said some virtual asset users may want to preserve their privacy when conducting transactions and stressed that Treasury’s goal was not to deter the development of privacy technologies, provided illicit finance risks are addressed.
Impact on crypto users, exchanges, and developers
For crypto users, the new statement offers a measure of policy clarity. It suggests that using privacy tools is not inherently unlawful in the eyes of Treasury, provided the activity itself is legal and does not involve sanctions violations, money laundering, or other prohibited conduct. That is likely to be welcomed by users concerned about exposing salary payments, treasury operations, supplier relationships, or charitable giving on public ledgers.
For exchanges and other virtual asset service providers, however, the message is more complicated. Treasury still expects firms that custody user funds and transmit value to comply with anti-money-laundering and sanctions obligations. FinCEN’s earlier proposal on mixing-related reporting remains an important signal that regulators want more visibility into high-risk transactions, not less.
Developers are also watching closely. The Tornado Cash litigation raised a foundational question about whether autonomous smart contracts can be treated as sanctionable property. The Fifth Circuit’s answer narrowed OFAC’s reach in that context, but it did not settle every question around privacy software, governance structures, or services operated by identifiable persons.
The policy tension: privacy versus illicit finance
The core policy challenge remains unresolved. Treasury’s own materials show both sides of the issue. On one hand, the department now explicitly says lawful users may use mixers for financial privacy. On the other, it continues to describe mixing as a method that can make digital asset flows harder to trace and therefore more attractive to criminals, ransomware operators, and sanctions evaders.
This is not a contradiction so much as a recognition that the same technology can serve different ends. Cash, encryption, and private messaging tools all have lawful uses and criminal misuse. Treasury appears to be moving toward a framework that accepts privacy as a legitimate goal while seeking more targeted ways to address abuse.
According to Treasury’s March 2026 report, the department is also evaluating innovative methods that regulated financial institutions can use to detect illicit activity involving digital assets, with attention to effectiveness, cost, privacy, and cybersecurity trade-offs. That suggests future policy may focus less on blanket prohibitions and more on risk-based controls.
What comes next
The next phase of the debate is likely to center on implementation. Treasury’s acknowledgment of lawful privacy use may encourage lawmakers, regulators, and industry groups to explore standards for privacy-enhancing technologies that preserve user confidentiality while allowing targeted compliance and law enforcement access where legally justified.
Several issues will be closely watched in 2026:
- Whether FinCEN advances or revises its proposed reporting framework for mixing-related transactions.
- Whether Congress creates new statutory authority tailored to digital asset privacy tools.
- Whether courts further limit or clarify the government’s power over decentralized software.
- Whether the crypto industry develops privacy tools with stronger compliance features built in.
For now, the headline is clear: the US Treasury says lawful crypto users may use mixers for privacy, but only within a regulatory environment that remains highly sensitive to illicit finance risks. That balance is likely to define the next chapter of US crypto policy.
Conclusion
Treasury’s March 2026 report marks an important evolution in Washington’s approach to crypto privacy. By acknowledging that lawful users may rely on mixers to protect sensitive financial information on public blockchains, the department has moved closer to a more balanced view of privacy technology. Yet it has not retreated from its long-standing concern that mixers can be abused by criminals and sanctioned actors.
That dual message is likely to shape regulation, litigation, and product design across the digital asset sector. For users, it offers recognition that privacy can be legitimate. For regulators, it reinforces the need for targeted oversight rather than simplistic assumptions. And for the broader market, it signals that the future of crypto policy in the United States may depend on whether privacy and compliance can coexist in practice.
Frequently Asked Questions
What did the US Treasury say about crypto mixers?
Treasury said in a March 2026 report to Congress that lawful users of digital assets may use mixers to enable financial privacy when transacting on public blockchains.
Does this mean crypto mixers are now fully legal in all cases?
No. Treasury’s statement recognizes legitimate privacy uses, but mixers can still raise anti-money-laundering, sanctions, and law-enforcement concerns depending on how they are used.
Why do lawful users want mixers?
Treasury said users may want to protect sensitive information such as personal wealth, business payments, charitable donations, and consumer spending habits from public blockchain visibility.
What happened with Tornado Cash?
OFAC sanctioned Tornado Cash in August 2022. After a Fifth Circuit ruling in November 2024 found OFAC had exceeded its authority over immutable smart contracts, Treasury removed Tornado Cash from the sanctions list on March 21, 2025.
Is Treasury changing its broader enforcement stance on crypto crime?
Not fundamentally. Treasury still says mixers can be used to obscure illicit transactions and continues to support stronger tools for detecting suspicious digital asset activity.
What could happen next?
Regulators may refine reporting rules, courts may further define the limits of sanctions authority, and the industry may develop privacy tools with more built-in compliance features.
Leave a comment