Treasury sent Congress its GENIUS‑Act‑mandated report on “innovative tools” to fight crypto‑enabled illicit finance.
A Crypto’s “Hold Law” And A Privacy ParadoxHowever, it has also urged lawmakers to create a new “digital‑asset‑specific hold law” so platforms can freeze suspicious funds.
Mixers, Privacy And DPRKThe report notes favorably that mixing and similar tools “can be used by lawful users seeking to enhance financial privacy on public blockchains,” including for “protecting sensitive information about personal wealth, business transactions, or charitable donations from public view. It adds that Treasury “recognizes that privacy‑enhancing technologies, including mixers and other obfuscation tools, may serve legitimate purposes when used by compliant actors in line with applicable AML/CFT requirements.”
On the other side, the same report also stresses that North Korea’s cyber units and major ransomware crews rely on mixers, cross‑chain bridges, and rapid swaps as core infrastructure to launder massive hauls from hacks and fraud. The report cites billions of dollars in stolen digital assets tied to DPRK actors and details how those funds are pushed through mixers and into stablecoins before being bridged and cashed out, using the same tools that ordinary users might pick for privacy.
What The “Hold Law” Would DoTherefore, to tackle this paradox, the report proposes a “hold law” that would ensure that legitimate, clean, users keep their privacy while unlawful or suspicious activity can be addressed. Under the proposal, crypto exchanges and other regulated platforms would gain a clear and legal “pause button” for suspicious funds. The report recommends that “Congress establish a digital‑asset‑specific statutory ‘hold’ authority” that would allow platforms “to temporarily retain or delay the movement of digital assets associated with suspected illicit activity while appropriate legal process is pursued.” Firms could temporarily hold or delay those assets when strong red flags appear, with statutory cover for doing so.
The idea would be to give law enforcement time to act against ransomware crews, large fraud schemes, or state‑sponsored hackers, while limiting the tool to narrowly defined, high‑risk cases so routine customer flows are not frozen by default.
Another Piece On The GENIUS Act PuzzleThe report also proposes a preferred tech stack (AI, digital ID, blockchain analytics, APIs) that regulated platforms should deploy under a risk‑based AML approach.

Cover image from ChatGPT, BTCUSD chart from Tradingview

















