1/ After a long wait, FinCEN has finally issued its new proposed rule extending AML regulation to non-custodial wallets.

It could've been worse (really), but it's still a terrible rule in both process & substance.

Here's what it says, what's wrong with it, & what we do next 👇

2/ The rule would impose new obligations on virtual asset service providers (VASPs) like exchanges & custodians.

For deposits & withdrawals > $3k involving a non-custodial wallet, VASPs would have to record the name & physical address of the wallet owner.
https://t.co/H4UR4t11GX
3/ VASPs would also have to report any deposit or withdrawal > $10k to FinCEN in the form of a currency transaction report (CTR).

FinCEN says these requirements are necessary to "combat the financing of global terrorism," "address transnational money laundering...." You get it.
4/ Before now, the Travel Rule only imposed these record-keeping & reporting requirements on transactions from VASP-to-VASP.

Today's proposal follows a global trend of extending AML regulation to transactions from VASP-to-wallet, as we've seen from Switzerland, France, & others.
5/ Let's look on the bright side for a minute.

This doesn't require KYC for every transaction with a non-custodial wallet. It isn't an outright ban on self-custody. It doesn't prohibit the act of using a permissionless network.

It really -- REALLY -- could have been much worse.
6/ But it's still an awful rule. I'll give you three reasons why. (There are more.)

First, it does nothing to accomplish its stated goals. Even if illicit activity was a major problem (it isn't), this won't stop the flow of funds to bad actors or help law enforcement do its job.
7/ It doesn't stop VASP customers from transacting with bad guys. It just forces them to pay an extra fee to withdraw to their own wallet first.

It also doesn't give investigators any new information. VASPs already KYC their customers & keep records of transactions.
8/ Second, it infringes on US citizens' financial privacy rights.

Today, law enforcement has to subpoena VASPs to get information about customers. VASPs can, should, & often do challenge these.

This rule would force VASPs to hand over that information automatically, every time.
9/ Considering the FinCEN Files leak & recent hacks, government hasn't really shown that it's using our information effectively or storing it safely.

Now isn't the time to expand government's warrantless mass surveillance & data collection operations.
https://t.co/pBVKoFlPzz
10/ Third, the rule is vague & ambiguous.

How exactly can a VASP obtain the name & physical address of the owner of a non-custodial wallet? How does someone prove that they "own" a private key? What about non-custodial smart contracts -- who owns them?

The rule doesn't say.
11/ Without a clear path to compliance, it'll be left to the discretion of regulators & prosecutors to decide if a VASP's efforts are "good enough."

We've seen this before: institutions don't know how to comply, so they "de-risk" by prohibiting the uncertain activity completely.
12/ Put this together & you have the definition of bad regulation.

The rule would impose huge burdens on VASPs, their customers, & society at large, perhaps infringing constitutional rights, without conveying any benefit to government in general or law enforcement in particular.
13/ Substance isn't the only issue, though.

Federal agency rulemaking also has to follow a certain process, one designed so that members of the public, like you & me, can explain why a rule is flawed or how it can be improved.

The process for this rule is entirely out of order.
14/ The Administrative Procedures Act (APA) requires agencies to provide notice of proposed rules & give the public "an opportunity to participate in the rulemaking through submission of written data, views, or arguments."

The law says these mandates are "not mere formalities."
15/ Regular order calls for an agency to accept public comment for at least 60 days for "significant" rules. It can be longer.

FinCEN is giving us 15. At the end of December. With one month left before a new president is sworn in.

There's a name for this: "midnight rulemaking."
16/ Midnight rulemaking implies that an agency isn't giving the public a genuine opportunity to participate in the rulemaking process, but rather trying to force through a predetermined result.

Courts don't take kindly to this. Midnight rules are often struck down under the APA.
17/ So, we have an awful rule crafted in a bad process. What now?

To start, we should take advantage of our limited public comment period & make our voices heard loud & clear.

I expect there will be a template comment form with suggested language to make this easy. Stay tuned.
18/ For my part, I'll be helping @BlockchainAssn evaluate grounds to challenge the rule under the APA. They've hired one of the best lawyers in the country for this.

If you're a crypto company in the US & haven't talked to them about joining, do it now.
https://t.co/sf73V6bTM1
19/ For everyone else, the best thing you can do to help in the fight for financial privacy & self-custody is to *do it yourself.*

Walk the walk. Learn to protect your own privacy & safely hold your own keys. Run a node. Use products & services that respect these principles too.
20/ Most importantly, keep calm & carry on.

Despite today's news, what strikes me most about this situation is how many people stepped up from every corner of our world to push back against this, from industry leaders to members of Congress.

We've become extremely anti-fragile.
21/ Sure, it'd be better if the Treasury Secretary wasn't out to get us.

But if you believe in the future of this technology as I do, you know this is just the beginning of a long, messy, inevitable transition from the old system to the new.

Ultimately, we will prevail.

[end]

More from Law

This issue was repeatedly highlighted bu Judge Totenberg:

Dominion’s system “does not produce a voter-verifiable paper ballot or a paper ballot marked with the voter’s choices in a format readable by the voter because the votes are tabulated solely from the unreadable QR code.”


Judge also found that Dominion's QR codes are NOT encrypted:

“Evidence plainly contradicts any contention that the QR codes or digital signatures are encrypted,”

This was “ultimately conceded by Mr. Cobb and expressly acknowledged later by Dr. Coomer during his testimony.”

Judge Totenberg said there was “demonstrable evidence” that the implementation of Dominion’s systems by Georgia placed voters at an “imminent risk of deprivation of their fundamental right to cast an effective vote,” which she defined as a “vote that is accurately counted.”

Judge Totenberg found that Dominion Systems inherently could not be audited.

She noted that auditors are severely limited and “can only determine whether the BMD printout was tabulated accurately, not whether the election outcome is correct.“

Totenberg stated in her ruling that a BMD printout “is not trustworthy” and the application of an Risk-Limiting audit (RLA) to an election that used BMD printouts “does not yield a true risk-limiting audit.”

Georgia used RLAs to claim no fraud...

You May Also Like

शमशान में जब महर्षि दधीचि के मांसपिंड का दाह संस्कार हो रहा था तो उनकी पत्नी अपने पति का वियोग सहन नहीं कर पायी और पास में ही स्थित विशाल पीपल वृक्ष के कोटर में अपने तीन वर्ष के बालक को रख के स्वयं चिता पे बैठ कर सती हो गयी ।इस प्रकार ऋषी दधीचि और उनकी पत्नी की मुक्ति हो गयी।


परन्तु पीपल के कोटर में रखा बालक भूख प्यास से तड़पने लगा। जब कुछ नहीं मिला तो वो कोटर में पड़े पीपल के गोदों (फल) को खाकर बड़ा होने लगा। कालान्तर में पीपल के फलों और पत्तों को खाकर बालक का जीवन किसी प्रकार सुरक्षित रहा।

एक दिन देवर्षि नारद वहां से गुजर रहे थे ।नारद ने पीपल के कोटर में बालक को देख कर उसका परिचय मांगा -
नारद बोले - बालक तुम कौन हो?
बालक - यही तो मैं भी जानना चहता हूँ ।
नारद - तुम्हारे जनक कौन हैं?
बालक - यही तो मैं भी जानना चाहता हूँ ।

तब नारद ने आँखें बन्द कर ध्यान लगाया ।


तत्पश्चात आश्चर्यचकित हो कर बालक को बताया कि 'हे बालक! तुम महान दानी महर्षि दधीचि के पुत्र हो । तुम्हारे पिता की अस्थियों का वज्रास्त्र बनाकर ही देवताओं ने असुरों पर विजय पायी थी।तुम्हारे पिता की मृत्यु मात्र 31 वर्ष की वय में ही हो गयी थी'।

बालक - मेरे पिता की अकाल मृत्यु का क्या कारण था?
नारद - तुम्हारे पिता पर शनिदेव की महादशा थी।
बालक - मेरे उपर आयी विपत्ति का कारण क्या था?
नारद - शनिदेव की महादशा।
इतना बताकर देवर्षि नारद ने पीपल के पत्तों और गोदों को खाकर बड़े हुए उस बालक का नाम पिप्पलाद रखा और उसे दीक्षित किया।
Great article from @AsheSchow. I lived thru the 'Satanic Panic' of the 1980's/early 1990's asking myself "Has eveyrbody lost their GODDAMN MINDS?!"


The 3 big things that made the 1980's/early 1990's surreal for me.

1) Satanic Panic - satanism in the day cares ahhhh!

2) "Repressed memory" syndrome

3) Facilitated Communication [FC]

All 3 led to massive abuse.

"Therapists" -and I use the term to describe these quacks loosely - would hypnotize people & convince they they were 'reliving' past memories of Mom & Dad killing babies in Satanic rituals in the basement while they were growing up.

Other 'therapists' would badger kids until they invented stories about watching alligators eat babies dropped into a lake from a hot air balloon. Kids would deny anything happened for hours until the therapist 'broke through' and 'found' the 'truth'.

FC was a movement that started with the claim severely handicapped individuals were able to 'type' legible sentences & communicate if a 'helper' guided their hands over a keyboard.
These 10 threads will teach you more than reading 100 books

Five billionaires share their top lessons on startups, life and entrepreneurship (1/10)


10 competitive advantages that will trump talent (2/10)


Some harsh truths you probably don’t want to hear (3/10)


10 significant lies you’re told about the world (4/10)