FinCEN cuts MEXC off from US finance: what the 24-page order says, and what it does not

Update, 8 November 2026, 05:51 UTC: exchanges are acting before the order applies. Late on Saturday, OKX founder and chief executive Star Xu asked users on X to stop sending funds directly from MEXC to OKX and warned that funds linked to affected platforms “may be frozen”. Users also report extra checks on MEXC transfers to Binance and Gate, and Bitget Wallet’s card top-ups no longer take MEXC funds, according to Wu Blockchain as relayed by Blockonomi and ChainCatcher. The order itself is still not in force: no Federal Register notice had appeared at 05:45 UTC on Sunday, so the start date of the ban remains unknown.

The US Treasury’s Financial Crimes Enforcement Network (FinCEN) issued an order on Friday 6 November that will bar American banks and other covered financial institutions from sending money to, or receiving money from, MEXC Global, the Seychelles-registered crypto exchange. The MEXC FinCEN order rests on section 9714 of the Combating Russian Money Laundering Act and takes effect 30 days after it is published in the Federal Register, which had still not happened at 05:45 UTC on Sunday 8 November. FinCEN says in the 24-page order that MEXC handled USD 16.7 billion in likely illicit activity between May 2021 and May 2026. The Treasury press release puts it at “at least $16 billion”.

This is not a sanctions listing. MEXC has not been added to the list of Specially Designated Nationals kept by the Office of Foreign Assets Control (OFAC), nothing it owns is blocked, and the order is not a section 311 rule of the kind FinCEN used against Cambodia’s Huione Group last year. It is a different tool, and a quicker one: a ban on transfers, addressed to the US institutions that would carry them, imposed by order without the proposal stage of a rule, and with no end date.

MEXC answered overnight on its own announcements page: “MEXC is operating normally, and user assets remain secure.” It says it is reviewing the order with its legal and compliance teams.

OKX holds MEXC deposits before the ban starts

The order binds only US institutions, and only from a date nobody can name yet. Some exchanges are not waiting. On Saturday 7 November, users posted on X that USDT sent from their own MEXC accounts to OKX had been held. One wrote that OKX flagged the deposits as coming from a “potentially high-risk address”. The Defiant and Crypto Briefing reported the complaints; neither gave a number of affected users or a total amount.

At 22:59 UTC that evening, OKX founder and chief executive Star Xu replied on his personal X account. “Please avoid transferring funds directly from MEXC to OKX,” he wrote. OKX, he said, “treats FinCEN special measures with a level of caution similar to sanctions”, and funds associated with affected platforms “may be frozen, and related accounts may be subject to further investigation”. FinCEN has given a 30-day transition period, he noted, but OKX “has already significantly strengthened its controls” instead of waiting for the deadline.

The post comes from the founder’s own account and is not a corporate notice: Coindaro found no OKX help-centre page on MEXC transfers. The post does not say whether OKX’s European entity, which serves customers in the EU, applies the same controls.

OKX is not the only name in the reports. Wu Blockchain, citing users, said transfers from MEXC to Binance, OKX and Gate were being held for verification or credited late; Blockonomi and Coinfomania relayed the post. None of these exchanges has published a notice, and Blockonomi notes that no exchange has confirmed a restriction on all MEXC transfers or said how long the reviews last. The clearest step so far is narrow. Bitget Wallet said its bank-card top-up service does not currently accept funds identified as coming from MEXC, according to ChainCatcher and Blockonomi; that covers card funding, not the wallet as a whole. Coindaro found no notice on MEXC transfers from Coinbase, Kraken or Binance US.

What the MEXC FinCEN order bans, and from when

The operative rule is one sentence. In section VI.B of the text, signed by FinCEN Deputy Director Jimmy L. Kirby, a covered financial institution “is prohibited from engaging in any transmittal of funds from or to MEXC Global.” Covered financial institution takes the wide meaning of “financial institution” in the Bank Secrecy Act rules (31 CFR 1010.100(t)): banks, broker-dealers, money transmitters and the other businesses that definition lists, which include crypto firms registered in the US as money services businesses.

The definition of a transmittal is the line crypto firms will read twice. For this order only, FinCEN defines it as “the sending and receiving of funds, including CVC”, its shorthand for convertible virtual currency. Bitcoin is named as CVC. So the ban is not limited to dollar wires: a US platform that sends a customer’s USDT to an MEXC deposit address, or credits bitcoin arriving from MEXC, would be inside it once the order applies.

Then the clock. The copy on FinCEN’s website is the version submitted to the Office of the Federal Register, and it warns that the published document is the official one and may change slightly in editorial review. The release says the order is effective “30 days after publication in the Federal Register”; the order itself adds “with no cessation date”. A search of the Federal Register’s published documents for “MEXC” at 07:41 UTC on Saturday, and again through its search interface at 05:45 UTC on Sunday, returned no notice, and Bitcoin Magazine found the same on Friday evening, US Eastern time. The public inspection list, where documents usually show up the business day before they are printed, was offline for the weekend, the site said, until 8:45 a.m. Eastern time on Monday 9 November. Until the notice appears, nobody can name the date the ban starts.

FinCEN explains why it skipped the slower route of a regulation. It chose an order “given the imminent threats” posed by the actors whose money MEXC moves, and because transactions it links to Russian illicit finance are still going through the exchange. Before issuing it, FinCEN shared a draft with staff at the Justice and State departments, the Federal Reserve Board, the FDIC, the SEC, the CFTC, the OCC and the NCUA. None objected “based on the information provided to staff at the time”, the order says.

Breaking the ban wilfully can bring civil or criminal penalties under 31 U.S.C. 5321 and 5322, for the institution and for its officers, directors, employees and agents. The order leaves existing duties alone: Bank Secrecy Act obligations, including suspicious activity reports, and OFAC sanctions programmes apply as before. FinCEN also keeps the power to set conditions on some transfers or to grant exemptions. The posted text grants none.

FinCEN alleges USD 16.7 billion of illicit flows through MEXC in five years

Every figure in this section is an assessment by FinCEN, built partly on what the order calls “non-public information available to FinCEN”. No court has tested these numbers, and outsiders cannot fully check them on-chain from public data. In the coverage and statements Coindaro found, MEXC has not disputed them.

Two government documents, two totals. The subtitle of the press release says MEXC “facilitated at least $16 billion in illicit finance”. The order itself, in sections III.B and III.C, gives USD 16.7 billion “in likely illicit activity”. Both cover May 2021 to May 2026; the release gives a rounded floor. We use the order’s figure as FinCEN’s number and quote the release where it is the source.

A second mismatch concerns the size of the exchange. The order says that as of June 2026 MEXC processed more than USD 1 billion a day and held about USD 5 billion in reserve assets. The press release gives the same figures as of September 2026. Treasury has not explained the difference, so both dates are given here. The order adds that MEXC was founded in 2018, is incorporated in the Seychelles without a virtual asset service provider licence, operates in more than 170 countries and is among the 20 largest crypto exchanges in the world. Citing a CoinGecko research paper of 2 May 2026, it puts MEXC at about 9% of global centralised-exchange volume in December 2025. Citing non-public information as of July 2026, it says MEXC offers more than 50 currencies, US dollars and roubles among them, and more than 3,000 crypto and tokenized assets.

Russia: the legal hook

The finding that triggers section 9714 is about Russia. FinCEN says MEXC sent or received nearly USD 1.5 billion with direct and indirect exposure to Russian sanctions evasion, including USD 232 million in direct transactions with entities sanctioned by the US, the EU or the UK. About USD 129 million went through Garantex and USD 4.1 million through its successor Grinex after their designations, with transactions with both as recently as June 2026. OFAC listed Garantex in April 2022.

FinCEN also counts at least USD 26 million that benefited the A7 Network, the Russia-based network linked to Ilan Shor and Promsvyazbank, and almost USD 200 million connected to A7A5, the rouble stablecoin that circulates on Tron and Ethereum. Over a longer window, May 2018 to July 2026, it counts more than USD 13 billion with at least four high-risk exchangers under UK sanctions, plus about USD 2.9 billion with exchangers that, FinCEN says, run no identity checks. Russian darknet markets account for another USD 8.5 million, between September 2020 and July 2026.

Iran, North Korea and ransomware

Iran is where the Treasury put the political weight. The order lists about USD 1.87 billion in transactions with exposure to Iran, including more than USD 1 billion in direct transactions with over 40 Iranian exchangers. It counts about USD 22 million for the Central Bank of Iran and for the Islamic Revolutionary Guard Corps and its Qods Force, and about USD 36 million to or from the Al-Qassam Brigades and other Iran-linked groups.

“Financial institutions cannot have it both ways: Either you support the Iranian regime, or you have access to the U.S. financial system,” Treasury Secretary Scott Bessent said in the release.

For North Korea, the figure is small and precise: about USD 350,000 received between June and September 2025 by Sim Hyon Sop, a North Korean money launderer. OFAC had designated him in April 2023 and listed his crypto addresses at the time. Cybercrime is larger. FinCEN counts at least USD 1.99 billion, more than USD 1 million a day, and more than USD 37.9 million in suspected ransomware payments between January 2022 and July 2024 with exposure to more than 125 ransomware strains. One ransomware-linked deposit address received over USD 1.17 million.

FinCEN does not claim to see the whole of MEXC’s business. It writes that it “does not have full insight” into the exchange’s legitimate activity, assumes part of it is legitimate, and judges that the risk outweighs it. Honest customers, it argues, “could readily find alternatives” at regulated platforms. On paper, MEXC’s anti-money-laundering and know-your-customer rules already ban users from Iran and North Korea. FinCEN says those controls are “insufficient” and failed to stop the flows. It also cites three regulators that had flagged MEXC as unlicensed: an enforcement action by the Seychelles Financial Services Authority against MX Global Ltd on 26 May 2026, a Hong Kong SFC warning of 15 March 2024 and a Japanese FSA listing of 13 April 2023.

Section 9714, section 311 and OFAC: three different US tools

Readers who follow US sanctions news meet three tools that look alike from a distance. An OFAC designation blocks a target’s property under US jurisdiction and bars US persons from dealing with it. A section 311 action, under 31 U.S.C. 5318A, lets FinCEN name a foreign institution or jurisdiction of primary money laundering concern and choose among five special measures, from extra record-keeping to a ban on correspondent accounts; it usually goes through a proposal and then a final rule.

Section 9714 borrows that framework for one theme. It lets FinCEN make the same finding about a foreign institution tied to Russian illicit finance. As amended by section 6106(b) of the National Defense Authorization Act for fiscal year 2022, it also lets FinCEN prohibit, or place conditions on, transmittals of funds: the measure used here. That is why the MEXC order speaks of Russia in its legal finding while the press release leads on Iran. The order says MEXC served Iran, North Korea and cybercrime “in parallel” to its Russian business.

FinCEN first used section 9714 against the crypto exchange Bitzlato in January 2023. FinCEN said then that Bitzlato moved funds for Russian ransomware groups such as Conti and did much of its business with the Hydra darknet market. The Bitzlato order was published in the Federal Register on 23 January and took effect on 1 February 2023; it covered transfers to or from Bitzlato and any account or address administered on its behalf. A second section 9714 order, against the Russian exchanger PM2BTC, was published on 11 October 2024 and took effect the same day.

Huione Group is the useful contrast. FinCEN cut the Cambodian payments group off with a section 311 final rule announced on 14 October 2025, published two days later and effective on 17 November 2025, after a proposal in May 2025. That rule bars correspondent accounts and requires due diligence against indirect use. MEXC skips the proposal stage and goes straight to a ban on sending and receiving funds, crypto included.

MEXC is a far larger target than either, on FinCEN’s own top-20 ranking. The action belongs to a Treasury campaign called Operation Economic Outcast, which Decrypt reports also covered the Iranian exchange Nobitex. The same banner was on the 1 October 2026 release in which OFAC designated the A7 Network as a transnational criminal organisation, the order notes, and FinCEN proposed a rule on A7 sub-agents on 5 October (91 FR 63208).

What changes for US banks, US exchanges and MEXC users

The order itself freezes nothing, and it is not in force yet. MEXC’s assets are not blocked, customer balances are not seized, and customers outside the United States are not bound by it. The legal obligations fall on US financial institutions, and only once the order applies. Exchanges are moving earlier under their own rules, though: OKX warns that MEXC-linked funds may be frozen, and users report held deposits at other platforms.

US retail customers are not supposed to be on MEXC in the first place. MEXC already lists the United States among the jurisdictions it does not serve, Bitcoin Magazine reported; Coindaro has not checked MEXC’s terms page. The weight therefore lands on US banks, payment firms and exchanges that move money to or from MEXC, and on indirect dollar routes. FinCEN says it rejected a ban on correspondent accounts alone because MEXC could still reach dollars through indirect relationships with other foreign institutions. The first visible effects, however, come from exchanges applying their own compliance rules: OKX, by its founder’s account, and Binance and Gate, according to user reports.

What section VI says, and what it leaves out

There is a loose end in the text. In section IV.B, which explains the choice of measure, FinCEN writes that it “elected to provide within this order for the rejection of certain transmittals of CVC” that come from MEXC, and to “outline the steps” an institution should take. It lists cases where an institution may use its discretion, for instance when coins from MEXC sat in an unhosted wallet for a long time. A footnote concedes there are “few, if any, readily available ways” to refuse incoming crypto before it lands.

Section VI, headed “Order”, is the part that binds. Its prohibition, VI.B, reads in full: “A covered financial institution is prohibited from engaging in any transmittal of funds from or to MEXC Global.” The rest of section VI gives definitions, the order period, a reservation of authority “to impose conditions” and “to grant appropriate exemptions”, other obligations, penalties and a validity clause. Coindaro read it line by line and found no rejection procedure.

The two earlier section 9714 orders had one. In the Bitzlato order and in the PM2BTC order as published in the Federal Register, paragraph B.2, titled “Rejection of Funds and Condition on the Transfer of Rejected Funds”, says an institution “will be deemed not to have violated this Order” if it rejects crypto that came from the exchange and returns it. Both also extended the ban to accounts and addresses administered on the exchange’s behalf.

This is Coindaro’s reading of a pre-publication copy, not a legal opinion. FinCEN says the Federal Register version may differ slightly, and section VI.D lets it add conditions or exemptions at any time. If section VI is published as it stands, the discretion described in section IV.B would sit in the order’s explanation, not in its operative text.

No MEXC deposit addresses appear in the order (the only addresses in it are the A7A5 token contracts), so spotting MEXC wallets is left to each institution’s own tools. It does name entities, in a list it says is not exhaustive: MEXC Global Ltd and MX Global Ltd (Seychelles), MEXC Estonia OÜ, GIDA Technology AG (Switzerland), MXC Global Ltd (UK), the formerly Singapore-registered MEXC Global Foundation Ltd and MEXC Singapore Pte Ltd, and any successors. Branches or affiliates located in the United States are expressly excluded.

A centralised platform lives on its banking and payment links. Our guide to how a centralised exchange works explains custody, and what happens to customer deposits when those links are cut.

MEXC’s own MX token traded at about $1.46 at 05:38 UTC on Sunday 8 November, down 2.03% over 24 hours and 9.59% over seven days, according to Coindaro’s market snapshot. No source links that move to the order.

MEXC says it is operating normally and has started a review of its controls

The exchange’s reply is short. In a “Statement Regarding FinCEN’s November 6 Order”, posted overnight on its announcements page, MEXC says it is aware of the order and is reviewing it with its legal and compliance teams. It says it intends to “engage constructively with FinCEN, as well as other relevant regulators”, and adds: “We have also begun an independent review of our AML and sanctions controls.” It promises further updates on its official channels. On Friday, Bitcoin Magazine and Bitcoin.com had reported no response from the exchange.

The statement does not mention withdrawals or US customers. It does not dispute FinCEN’s figures, does not say whether MEXC will challenge the order, and does not name any US bank or payment firm it still works with. Its chief executive has since said more.

Vugar Usi, MEXC’s chief executive, said on X that deposits and withdrawals keep running normally, that withdrawal volume has risen but stayed orderly and that the team is helping users complete transactions, PANews and ChainCatcher reported on 7 November. The same two outlets report that Elliptic, a blockchain analytics firm whose risk scores exchanges use to screen deposits, has put MEXC Global back in its “exchange” category and removed a special risk classification. By 05:50 UTC on Sunday, Coindaro had found no public reply from MEXC to OKX’s warning.

Bitcoin.com also reported that MEXC had been winding down service for users in Russia and Belarus in October; Coindaro has not verified this. KuCoin made a similar move this autumn: on 29 October it ended all services in Russia and Belarus.

In Europe, MEXC Estonia is named and the French exit clock keeps running

Europe is named in the text. MEXC Estonia OÜ, an EU-registered company, is listed among the affiliates US institutions must treat as MEXC, alongside the Swiss GIDA Technology AG. The order’s list of regulators that flagged MEXC as unlicensed covers the Seychelles, Hong Kong and Japan. It does not cite France’s AMF.

French customers already face a separate deadline. As Coindaro reported on 29 October, MEXC is leaving France in four batches, with withdrawals ending on 5 March 2027. Legally, the US order adds no obligation for a French or Italian customer. The two timetables are independent: one depends on a Federal Register date plus 30 days, the other was set by MEXC after the French MiCA transition ended. In practice, the US order already reaches European users who move coins out of MEXC, because the receiving exchange decides whether to credit, hold or review a deposit. OKX asks users to avoid direct transfers from MEXC, and no source says whether its EU entity treats them differently.

By 05:50 UTC on Sunday 8 November, Coindaro had found no statement on the FinCEN order from the AMF, Consob or the Banca d’Italia. Under MiCA, an exchange needs an EU licence to serve European customers; our guide to the MiCA regulation explains how to check whether a platform holds one.

Next dates: Federal Register publication, then 30 days

The first date to watch is the day the order appears in the Federal Register. The ban applies 30 days later, and the published text will show whether FinCEN adds the CVC rejection procedure that its own reasoning describes but section VI leaves out.

After that, watch for exemptions or conditions under section VI.D, the further updates MEXC says it will post, any legal challenge, notices from US banks and exchanges to their customers, whether OKX keeps holding MEXC-origin deposits and whether other platforms publish rules of their own, and the next steps of Operation Economic Outcast.