In October 2026, FinCEN withdrew two proposed rules aimed at crypto mixing and unhosted wallets. Two days later, a Manhattan jury convicted a hacker whose stolen funds had passed through a mixer. The rules changed. The job of tracing the money did not.
Digital asset investigations rarely fail because the blockchain hides the truth. They fail because of how the work is approached. These are the gaps we see most often.
1. Stopping at the mixer
A mixer breaks the visible link between one address and the next. It does not erase the person behind the money. In the Uranium Finance case, prosecutors say funds taken from a crypto platform were moved through a series of transactions including Tornado Cash. The trail that mattered came later, when the money was spent on collectibles. Investigations that treat the mixer as the end of the road miss the place where the money lands.
2. Treating a tool's output as the answer
Blockchain analytics software is essential, but it produces leads, not conclusions. Clustering can be wrong, labels can be out of date, and a clean result only means the tool did not recognise the address. Findings need to be tested against other evidence.
3. Never connecting the wallet to a real person
An address is not an identity. The step that makes a case usable is linking on-chain activity to off-chain facts: exchange records, corporate and property records, open source intelligence, and interviews. Many matters stall because the trace was careful but the identification was never done.
4. Moving too slowly
Funds can cross several chains and services in minutes. When preservation requests, freezes and evidence capture start days after discovery, the best opportunities are already gone. Early involvement of specialists changes the outcome.
5. Assuming the program works because it exists
In October 2026, 34 state regulators announced a $2.5 million settlement with the crypto kiosk operator Coinme over Bank Secrecy Act and anti-money laundering violations. The company must end its kiosk operations in the affected states by 1 January 2027 or pay an additional $4 million, and hire an independent consultant to review its BSA/AML program. The message is that crypto businesses are expected to meet the same standards as any other money transmitter, and that someone independent should test whether the controls actually work.
What still works
- Start with the money’s destination, not its route.
- Use analytics for leads, then corroborate with records and open source intelligence.
- Link every address of interest to a person, company or service before drawing conclusions.
- Act early: preserve evidence and send freeze requests quickly.
- Have an independent party test monitoring and investigation processes against real cases.
When rules loosen, risk does not. Organisations that handle digital assets still need to be able to follow the money, and to prove it.
How CAT Investigators can help
Which of these gaps would your team find first? Contact CAT Investigators to talk through how your investigations and controls hold up.
Sources
- FinCEN, “FinCEN Announces Withdrawals of Proposed Digital Asset Related Rules”, 5 Oct 2026: https://www.fincen.gov/news/news-releases/fincen-announces-withdrawals-proposed-digital-asset-related-rules
- US Attorney’s Office, Southern District of New York, charging release, Uranium Finance: https://www.justice.gov/usao-sdny/pr/maryland-man-charged-defrauding-crypto-exchange-over-50-million-hacks
- Decrypt, report on the 7 Oct 2026 verdict: https://decrypt.co/380401
- Illinois Department of Financial and Professional Regulation, news release on the multistate Coinme settlement, 8 Oct 2026: https://idfpr.illinois.gov/news/2026/idfpr-joins-settlement-with-crypto-kiosk-op.html
This article is for general information and does not constitute legal advice.