Treasury proposes DeFi AML hold law

TLDR

The U.S. Treasury has outlined new anti-money-laundering rules for DeFi, including a proposed digital asset hold law that would let institutions temporarily freeze suspicious crypto funds.

1. Treasurys report to Congress recommends applying full AML/CTF obligations to many DeFi services and introduces a digital asset hold law safe harbor for freezing suspect funds without an immediate court order.
2. If implemented, the hold law would strengthen law enforcement leverage over on and off ramps, mixers and some DeFi front ends, but also raises major concerns about user privacy and due process.
3. Nothing changes immediately, but DeFi teams and users should watch how Congress and regulators define DeFi and financial institution, which will decide who must KYC, monitor, and freeze assets.

Deep Dive

1. What Treasury Is Proposing

Treasury has sent a report to Congress under the GENIUS Act recommending that standard AML and counter?terrorist financing rules be extended to DeFi platforms and related services, treating them more like traditional financial institutions. The same report outlines a proposed digital asset hold law, described as a safe harbor that would let institutions temporarily freeze suspicious crypto funds during investigations without first obtaining a court order, similar in spirit to how banks can place holds on suspect transfers, but customized for digital assets. The report cites FBI estimates of roughly 9 billion dollars in crypto fraud losses in 2024 as the main policy justification for tighter controls and freezing powers, positioning DeFi and privacy tools as key risk vectors, according to this Treasury DeFi AML report summary.

2. How A Hold Law Could Affect DeFi

In practice, a hold law would primarily bite where crypto touches regulated chokepoints, for example centralized exchanges, custodians, stablecoin issuers, and any DeFi front end or operator that gets classified as a financial institution. Those entities could be expected to build workflows and smart contract hooks that can pause or deny withdrawals linked to flagged addresses, including from mixers or privacy tools, while a case is investigated. For DeFi users, that means more frequent freezes or delays when moving funds through regulated rails, more aggressive use of deny lists, and potentially wider collection of identity data around suspicious patterns.

Risk note: The broad language around DeFi and privacy tools could, if implemented aggressively, push some activity into more opaque or offshore venues, increasing fragmentation and jurisdictional risk.

3. What To Watch Next

First, Congress would need to turn these recommendations into legislation, defining how long assets can be held, what evidence is needed, and what remedies users have if funds are frozen incorrectly. Second, regulators like FinCEN could separately use the report as a roadmap for rulemaking that expands who counts as a financial institution in DeFi, for example treating certain front ends, aggregators, or maker/">DAO-operated services as obliged entities. Third, DeFi protocols will have to choose how to adapt, for example adding KYC-gated front ends, geo?blocking U.S. users, or pushing further toward fully autonomous, governance-minimized designs that minimize any identifiable operator regulators can regulate.

Conclusion

Treasurys DeFi AML and hold law proposal aims to make crypto rails look more like the banking system from an enforcement standpoint, particularly around freezing suspect flows. For crypto users and builders, the key variables are how widely financial institution is defined and how much discretion intermediaries get to hold funds, which will shape the balance between compliance, usability, and censorship resistance in U.S.-facing DeFi.