Incident sheet · SIG-3800 · /security

Signal
SIG-3800
Filed
Read
3 min · 614 words
Severity
Routine

US Treasury Cuts Off MEXC Exchange Over $16 Billion in Illicit Flows

FinCEN's November 6 order cuts MEXC off from US finance over $16 billion in illicit flows, including $226 million tied to Russia's A7 network. MEXC disputes nothing.

Cam feed · SIG-3800SEC
US bans MEXC crypto exchange over sanctions evasion, cybercrime links
FeedUS bans MEXC crypto exchange over sanctions evasion, cybercrime links — geralt / pixabay

Event log

  1. FinCEN banned MEXC Global on November 6, 2026, over at least $16 billion in illicit transactions from May 2021 to May 2026.
  2. MEXC processed at least $226 million tied to the OFAC-sanctioned Russia-based A7 network and dealt with Garantex and Grinex as recently as June 2026.
  3. MEXC sent or received roughly $1 billion with more than 40 identified Iranian crypto exchangers over five years.
  4. MEXC serves 40 million users in 170+ countries and lists about 3,000 cryptocurrencies; it disputes none of the figures.

The US Treasury has severed MEXC Global from the American financial system, citing at least $16 billion in illicit transactions processed between May 2021 and May 2026. The FinCEN order, issued November 6, 2026, exposes any US institution or individual moving funds through the exchange to secondary sanctions. MEXC says it is operating normally and that user assets remain secure. Skepticism is warranted on both claims.

What does the order actually allege?

MEXC is not a marginal operator. Founded in 2018 and registered in Seychelles, it serves more than 40 million users across 170-plus countries and lists roughly 3,000 cryptocurrencies and tokenized assets. FinCEN puts its illicit throughput at no less than $16 billion over five years — about $3.2 billion per year, or roughly $8.8 million per day in criminal-linked value.

The Treasury Department's language is unusually broad. "MEXC Global has not only facilitated Russian illicit finance but has also served as a hub for other types of illicit financial activity, including Iranian and DPRK sanctions evasion, ransomware and scam payments, and Russian and other darknet market activity," the department said.

Which sanctioned networks were involved?

The order names names. As recently as June 2026, MEXC was still processing transactions with sanctioned Russian entities Garantex and Grinex. It also facilitated or processed at least $226 million tied to the Russia-based, OFAC-sanctioned A7 sanctions evasion network — a sum comparable to the annual budget of a mid-sized national cyber program.

The Iran exposure is quantified too. "Between May 2021 and May 2026, MEXC Global had sent or received approximately $1 billion in direct transactions with more than 40 identified Iranian CVC exchangers, some of which are subject to U.S. and international sanctions," Treasury said.

FinCEN attributes the failures to deficiencies in MEXC's anti-money laundering program and its customer identification and verification policies. That is a polite way of saying the controls were not doing their job across a half-decade. What FinCEN does not say is whether any MEXC executives face personal liability, or whether the review period ends deliberately in May 2026.

What does the ban mean in practice?

The measure works by contagion, not by direct enforcement. US banks and individuals now risk secondary sanctions or enforcement actions for any transfer to or from MEXC. In practice, that pressures correspondent banks and payment processors worldwide to drop the exchange or lose dollar access — the same mechanism used against Garantex itself.

For compliance officers, the exposure question is retrospective. Any firm that routed client funds through MEXC during the five-year window should assume those flows are now on FinCEN's radar.

How has MEXC responded?

MEXC's statement follows the standard crisis template. "MEXC is aware of the order issued by the U.S. Financial Crimes Enforcement Network (FinCEN) on November 6, 2026, and is reviewing it closely in coordination with our legal and compliance teams. MEXC is operating normally, and user assets remain secure," the exchange said.

The company added: "We take the concerns raised seriously and intend to engage constructively with FinCEN, as well as other relevant regulators and competent authorities worldwide. We have also begun an independent review of our AML and sanctions controls."

Note what is missing. MEXC does not dispute the $16 billion figure, the Garantex and Grinex transactions, or the $1 billion in Iranian exchanger flows. The promised "independent review" has no named auditor, no scope and no deadline. An exchange that processed $226 million for one sanctioned network now says it will audit itself. Treasuries rarely issue orders this specific without a follow-on enforcement case in motion. Expect further action, not a quiet resolution.

via bleepingcomputer.com (Source)

Filed under

  • mexc
  • fincen
  • anti-money-laundering
  • cryptocurrency-exchange
  • sanctions
Share this article:

More from Daniel Okafor

Daniel Okafor

Show full bio

Staff writer covering technology and product news in enterprise information technology and the leaders who run at CIO Monitor.

130 articles

The newsroom digest

One email a day with the stories that matter. No noise.

By subscribing you agree to the privacy policy.

Cross-references

‹ Previous articleNext article ›