US Treasury report acknowledges legitimate uses for crypto mixers

For the better part of three years, the US government treated crypto mixers like they were exclusively tools for money laundering. On March 5, the Treasury Department quietly published a 32-page report that essentially says: “Actually, some of this is fine.”

The report to Congress formally acknowledges that mixing services serve legitimate purposes, including protecting personal wealth, shielding business payment details, and enabling anonymous charitable donations. It’s a remarkable pivot from an agency that, not long ago, was sanctioning mixer protocols and pursuing criminal charges against their developers.

What the report actually says

Here’s the thing. The Treasury isn’t throwing open the doors and declaring privacy tools a free-for-all. The report threads a very specific needle.

On one side, it recognizes that public blockchains create a transparency problem that traditional finance never had. Every transaction on Ethereum or Bitcoin is visible to anyone with a block explorer. In English: imagine if your bank statement was posted on a public billboard. Mixers exist partly because people don’t want their spending habits broadcast to the world.

On the other side, the report doesn’t shy away from the darker reality. North Korean cybercriminals stole roughly $2.8 billion in digital assets between January 2024 and September 2025, and mixing services were a primary laundering channel. Cross-chain bridges alone have processed over $1.6 billion in mixed assets since May 2020, with a significant portion tied to illicit activity.

The proposed solution isn’t more blanket bans. Instead, the Treasury recommends what it calls “hold laws” — legislative mechanisms that would allow temporary freezing of suspect assets during investigations. Think of it as a regulatory pause button rather than a permanent off switch.

Compliant custodial mixers would still be required to report activity to FinCEN, the Treasury’s financial crimes enforcement arm. The framework essentially creates two tiers: mixers that play by the rules and those that don’t.

A sharp reversal from the enforcement era

To appreciate how significant this is, rewind to 2022-2023. The Treasury’s Office of Foreign Assets Control sanctioned Tornado Cash in August 2022, marking the first time the US government placed sanctions on a piece of open-source software rather than a person or entity. The move sent shockwaves through the crypto industry and sparked a constitutional debate about whether code is speech.

Tornado Cash co-founder Roman Storm was convicted in August 2025 for knowingly facilitating the transmission of over $1 billion in criminal proceeds through unlicensed activity. That conviction still stands. But the regulatory winds were already shifting by then.

The removal of Tornado Cash from the US sanctions list — which preceded this report — offered the first concrete signal that Washington was reconsidering its approach. This new report provides the intellectual framework for why that reconsideration is happening.

The logic isn’t complicated. As digital payments become the norm, ordinary users increasingly need tools to protect their financial privacy. The Treasury appears to have concluded that banning the technology outright creates more problems than it solves, particularly when compliant alternatives can be built with proper oversight baked in.

What this means for investors

The market has already started pricing in this shift. Privacy coins collectively reached a market capitalization of $24 billion in early 2026. Monero, the largest privacy-focused token, hit an all-time high of $790.91 and now accounts for over $14 billion of that total — roughly 58% of the entire privacy coin market.

Protocol-level privacy infrastructure is seeing even more dramatic growth. Railgun, which provides privacy features for DeFi transactions, holds approximately $800 million in total value locked. Aztec Network, which builds privacy layers for Ethereum, has surpassed $1.2 billion in TVL as of mid-2026. For context, Ethereum itself was trading around $2,123 in early March — well below its all-time high near $5,000 — which makes the growth in privacy-focused protocols all the more notable against a relatively flat broader market.

Look, the investment case here is nuanced. The Treasury’s report doesn’t make privacy tokens “safe” in a regulatory sense. It makes them less risky than they were six months ago, which is a meaningful distinction.

Institutional players that previously avoided privacy infrastructure due to reputational concerns now have political cover to participate. When the US Treasury itself says these tools have legitimate uses, compliance departments at major firms have something to point to during internal debates. That’s how capital flows change direction — not through enthusiasm, but through risk committees getting comfortable.

The key risk hasn’t disappeared, though. North Korea’s $2.8 billion theft spree demonstrates that illicit actors will continue exploiting these tools regardless of regulatory frameworks. Any major hack or laundering scandal involving a previously “compliant” mixer could trigger another enforcement crackdown. The policy pendulum swings both ways.

Investors should watch two things closely. First, whether Congress actually passes the “hold laws” the Treasury recommends. Reports are suggestions; legislation is reality. Second, whether major exchanges begin listing or re-listing privacy tokens in response to the softened stance. Exchange access remains the single biggest driver of liquidity for these assets.

The protocols best positioned are those designed with compliance architecture from the ground up. Railgun and Aztec have both built systems that can provide privacy while still enabling regulatory cooperation when legally required. That dual capability — privacy for users, transparency for regulators when warranted — is likely the template for what survives long-term.

Pure privacy plays with no compliance hooks face a different future. They might benefit from the current sentiment shift, but they remain one enforcement action away from significant drawdowns.

Bottom line: The US Treasury just told Congress that wanting financial privacy doesn’t make you a criminal. That’s a sentence nobody in Washington would have written two years ago, and it fundamentally reshapes the regulatory landscape for an entire category of crypto infrastructure. Whether this translates into lasting policy depends on Congress, but the intellectual groundwork for legitimate privacy tooling is now sitting on lawmakers’ desks.