US Treasury Cuts Off MEXC Global Over Alleged $16 Billion in Illicit Crypto Flows

Key Takeaways
- FinCEN issued an order under Operation Economic Outcast cutting MEXC Global off from the U.S. financial system over alleged facilitation of at least $16 billion in illicit crypto flows tied to Iran, North Korea, and Russia.
- The U.S. Treasury said nearly $1.5 billion was linked to Russian sanctions evasion, about $1 billion moved through Iranian CVC exchangers, and roughly $22 million benefited Iran's central bank and IRGC-linked actors.
- U.S. financial institutions will be barred from processing funds transfers involving MEXC; the order takes effect 30 days after Federal Register publication and rests on the Combating Russian Money Laundering Act.
- Treasury alleged MEXC still processed transactions with sanctioned Russian entity Garantex and successor Grinex as recently as June 2026, and flagged severe AML control deficiencies despite the exchange's stated KYC rules.
- MEXC said it is reviewing the order, that operations are normal and user assets remain secure, and that it has begun an independent review of its AML and sanctions controls while engaging with regulators.
The U.S. Treasury Department has moved to shut MEXC Global out of the American banking system, alleging the crypto exchange helped move at least $16 billion in illicit digital-asset flows tied to Iranian, North Korean, and Russian sanctions evasion and cybercrime.
In a November 6 press release, Treasury said the Financial Crimes Enforcement Network issued the order as part of Operation Economic Outcast. FinCEN's action prevents U.S. financial institutions from processing funds transfers involving MEXC Global, one of the world's larger convertible virtual currency exchangers.
Decrypt and The Block both confirmed the order, placing it in a broader crackdown on offshore platforms that U.S. officials say bridge sanctioned networks to dollar liquidity. The move lands as other jurisdictions tighten reporting rules, including Hong Kong's new crypto CARF reporting law set to take effect in 2027.
What Treasury and FinCEN alleged
According to the Treasury release, MEXC was founded in 2018 and, as of September 2026, processed more than $1 billion in daily transactions with roughly $5 billion in reserves. Officials described it as one of the top 20 largest CVC exchangers, listing trading in more than 50 currencies and more than 3,000 cryptocurrencies and tokenized assets.
Treasury said the platform claims to maintain AML and KYC controls and to prohibit users from Iran and North Korea. FinCEN nevertheless found "severe deficiencies" in those controls. From May 2021 through May 2026, the agency said, MEXC facilitated at least $16 billion connected to sanctions evasion, cybercrime, and other illicit activity, including direct transactions with sanctioned actors.
On the Russia side, Treasury alleged nearly $1.5 billion linked to Russian sanctions evasion, including $232 million in direct transactions with entities sanctioned by the United States, the European Union, or the United Kingdom. That volume led FinCEN to name MEXC a primary money laundering concern for Russian illicit finance.
The department said MEXC was still processing transactions with sanctioned Russian entity Garantex and its successor Grinex as recently as June 2026. OFAC designated Garantex in April 2022. Treasury also tied at least $26 million to the OFAC-sanctioned A7 sanctions-evasion network and almost $200 million to activity connected to the A7A5 stablecoin.
Iran-related figures were similarly stark. Treasury said MEXC conducted about $1 billion in direct transactions with more than 40 identified Iranian CVC exchangers between May 2021 and May 2026, plus roughly $22 million benefiting the OFAC- and EU-sanctioned Central Bank of Iran and the OFAC-, UK-, and EU-sanctioned IRGC and Qods Force.
Treasury Secretary Scott Bessent framed the action in blunt terms: "Financial institutions cannot have it both ways: Either you support the Iranian regime, or you have access to the U.S. financial system." He added that Treasury "will continue to sever the Iranian regime's economic lifelines and thwart its desperate attempts to circumvent U.S. sanctions using digital assets."
How the FinCEN order works
Unlike a standard OFAC sanctions designation that freezes U.S. persons' dealings with a listed party, this order relies on section 9714(a) of the Combating Russian Money Laundering Act. Decrypt noted that the statute lets FinCEN cut a foreign financial institution off from U.S. dollar rails when it finds a primary money laundering concern.
In practice, the order prohibits U.S. financial institutions from any transmittal of funds from or to MEXC. Violations may bring civil or criminal penalties. Treasury said the restriction becomes effective 30 days after publication in the Federal Register, giving banks a short window to exit processing relationships.
That timing matters for counterparties that still settle MEXC-related fiat flows through U.S. banks or correspondent channels. Once the clock runs out, those institutions face a hard stop rather than a discretionary compliance choice.
Why the crackdown is widening
Decrypt placed the MEXC order next to last month's Treasury action against Russia's A7 Network, which the department designated a transnational criminal organization while proposing to cut front companies off from U.S. finance. Officials have flagged more than $179 billion in transactions through the A7A5 token routed via Garantex and Grinex.
Iran has been another focus. Decrypt and The Block noted that Treasury previously sanctioned Nobitex, which officials said processed more than half of Iran's crypto inflows in 2025, and BitBank over alleged bitcoin transfers to the IRGC. North Korea remains in the same enforcement lane after the FBI tied the recent Binance hack to North Korea's TraderTraitor unit.
For exchanges, the message is that size alone is not a shield. Binance's own incident report on the fake job interview and internal AI tool abuse showed how operational gaps can become national-security stories overnight. FinCEN's MEXC findings push that pressure onto AML architecture, sanctions screening, and whether platforms actually block high-risk counterparties they claim to exclude.
What happens next
MEXC published a statement acknowledging FinCEN's November 6 order. The exchange said it is reviewing the action with its legal and compliance teams, that it is operating normally, and that user assets remain secure.
MEXC also said it takes the concerns seriously, intends to engage constructively with FinCEN and other regulators, and has begun an independent review of its AML and sanctions controls. It promised further updates through official channels.
Even if trading continues elsewhere, loss of U.S. banking access can complicate fiat on- and off-ramps, market-maker settlement, and any counterparties that need dollar clearing. Banks will be watching the Federal Register clock; traders will be watching whether other large offshore venues face similar primary money-laundering findings.
For now, the official record is clear: Treasury and FinCEN say MEXC became a conduit for sanctioned finance at industrial scale, and they are using a Russia-focused money-laundering statute to pull the exchange off U.S. rails. MEXC's first public reply says it is reviewing the order, remediating controls, and still open for business.
DISCLAIMER
This article is for informational purposes only and does not constitute financial advice. Cryptocurrency investments involve substantial risk and extreme volatility - never invest money you cannot afford to lose completely. The author may hold positions in the cryptocurrencies mentioned, which could bias the presented information. Always conduct your own research and consider consulting a qualified financial advisor before making any investment decisions.









