Justice Department publishes broad cryptocurrency enforcement framework

The U.S. Department of Justice published an 83-page cryptocurrency enforcement framework on October 8, 2020, consolidating its view of the crimes, legal authorities and investigative challenges associated with digital assets.

Produced by the Attorney General’s Cyber-Digital Task Force, the report mattered because it translated years of separate prosecutions, regulatory guidance and interagency work into a single statement of federal enforcement priorities. It addressed exchanges, peer-to-peer traders, kiosks, casinos, privacy-enhancing services and offshore businesses—not only people using cryptocurrency to commit an underlying crime.

The framework did not enact a statute, adopt a regulation or announce charges against a particular company. Its immediate effect was institutional: it told market participants how the Justice Department understood its existing powers and where prosecutors expected to concentrate attention.

Three categories of illicit activity

The department organized cryptocurrency-related misconduct into three broad categories. The first covered transactions connected to crimes, including purchases of illegal goods, ransomware payments and terrorist financing. The second covered money laundering and attempts to avoid tax, reporting or other legal requirements. The third covered crimes directed at the cryptocurrency market itself, such as theft, fraud and manipulation.

That structure treated cryptocurrency as both a payment mechanism and a potential target of crime. The report also acknowledged legitimate uses and the potential of distributed-ledger technology. Attorney General William Barr described cryptocurrency as potentially transformative while arguing that its development could not be separated from public-safety and national-security concerns.

Part II catalogued authorities distributed across the Justice Department and agencies including the Financial Crimes Enforcement Network, Office of Foreign Assets Control, Securities and Exchange Commission, Commodity Futures Trading Commission and Internal Revenue Service. The document was therefore not a claim that DOJ alone regulated every digital asset. It described an overlapping system in which criminal prosecution, anti-money-laundering supervision, sanctions, commodities law, securities law and tax enforcement could address different conduct.

Compliance obligations beyond conventional exchanges

Part III placed particular emphasis on businesses that transmit or obscure virtual assets. The framework said cryptocurrency-only exchanges could still fall under FinCEN recordkeeping and reporting requirements because those rules cover transfers of value rather than only transactions involving government-issued currency.

It similarly stated that peer-to-peer exchangers operating as businesses were money services businesses subject to Bank Secrecy Act obligations. Operators of mixers and tumblers, which combine funds to make their origins or ownership harder to trace, were described as money transmitters that could face registration and anti-money-laundering requirements. Criminal liability would still depend on the applicable law, evidence and facts of a case; the framework did not declare every privacy-enhancing transaction unlawful.

For the industry, the practical warning was that technical architecture or a decentralized label would not necessarily remove an activity from established financial-crime rules. The report focused on the function performed—transmitting value, serving customers or concealing criminal proceeds—rather than relying exclusively on how a service described itself.

An expansive cross-border position

The Justice Department also articulated a broad view of territorial reach. It said prosecutors generally had jurisdiction when virtual-asset transactions touched financial, data-storage or other computer systems in the United States. It identified additional connections including serving U.S. customers, using U.S. financial institutions, importing contraband or providing illicit services that defrauded U.S. residents.

That position was consequential for offshore exchanges and service providers, although it remained the department’s enforcement interpretation rather than a judicial ruling resolving every possible jurisdictional dispute. Due-process requirements, the language of each criminal statute and the facts connecting conduct to the United States would still matter in court.

The defensible conclusion on October 8 was therefore narrower than the idea of a new cryptocurrency code. DOJ had published a coordinated enforcement roadmap, stressed existing anti-money-laundering duties and warned that operating abroad was not necessarily protection from U.S. prosecution. How courts and independent regulators would apply those positions remained unresolved.