On November 6, 2026, the Financial Crimes Enforcement Network (FinCEN) issued an order designed to cut MEXC Global off from the U.S. financial system. The order prohibits covered U.S. financial institutions from sending funds to or receiving funds from the cryptocurrency exchange once it becomes effective. For banks, the immediate task is to translate that prohibition into payment controls, customer reviews, and escalation procedures, not simply add another name to a sanctions-screening list.
What FinCEN Found and What the Order Prohibits
FinCEN determined that MEXC Global, a Seychelles-based convertible virtual currency (CVC) exchanger, is a financial institution of primary money laundering concern in connection with Russian illicit finance. According to the order, MEXC facilitated $16.7 billion in funds connected to Russian illicit finance and other illicit activities between May 2021 and May 2026, including sanctions evasion and cybercrime. FinCEN also identified activity benefiting Iran and its proxies, North Korean financial facilitators, and other cybercrime actors.
The operative prohibition is straightforward: “A covered financial institution is prohibited from engaging in any transmittal of funds from or to MEXC Global.” The order defines transmittals as sending and receiving funds, including CVC. It is not limited to traditional wire transfers, dollar payments, or transfers involving an institution’s own correspondent account.
The target definition includes MEXC’s non-U.S. branches, subsidiaries, and offices operating as financial institutions, as well as successor entities. Successors include persons that acquire all or part of MEXC’s assets or carry on its affairs under a new name. U.S.-located branches, subsidiaries, and offices are expressly excluded from that target definition. That exclusion does not permit a U.S. bank to route a prohibited MEXC transfer through a domestic intermediary. The order takes effect December 10, 30 days after publication in the Federal Register, and has no stated expiration date.
A Russian-Illicit-Finance Authority in an Iran-Focused Campaign
The legal basis is Section 9714 of the Combating Russian Money Laundering Act, as amended. It permits the Treasury, upon the required Russian-illicit-finance finding, to impose special measures or to prohibit or condition certain transmissions involving a targeted foreign financial institution. FinCEN exercises that delegated authority here.
This is broader than simply restricting correspondent accounts under the fifth special measure of Section 311 of the USA PATRIOT Act. FinCEN explains that correspondent-account restrictions alone would leave other routes available, including indirect access through foreign financial institutions. Additional reporting would document the activity without stopping it. The agency therefore selected a transmittal prohibition.
Treasury expressly placed the MEXC action within Operation Economic Outcast, the campaign launched on August 24, 2026, against Iran and its enablers. The connection is practical, not a change in statutory authority: FinCEN’s Russian-illicit-finance finding supplies the legal predicate, while the exchange’s alleged role in Iran-related activity connects the action to the broader campaign.
The A7 Network illustrates that overlap. Treasury sanctioned the network as a significant transnational criminal organization on October 1. FinCEN separately proposed restrictions on transactions involving its overseas sub-agents. The MEXC order states that the exchange facilitated at least $26 million benefiting A7 and almost $200 million connected to the A7A5 token. Banks should distinguish the MEXC order and existing sanctions from the separate A7 sub-agent proposal, which should not be treated as a final prohibition merely because comments have closed.
What Banks Should Do Now
The required outcome is to prevent prohibited transmittals once the order is effective. The following controls are practical implementation recommendations, not a claim that FinCEN has prescribed a particular screening product or a new universal reporting requirement:
- Assign ownership. Give the Bank Secrecy Act (BSA) officer, payments operations, sanctions personnel, and digital-asset teams defined responsibilities. Test controls before the effective date and document the results. Willful violations can expose institutions and individuals to civil or criminal penalties.
- Expand screening beyond the brand name. Incorporate the order’s named entities and relevant aliases, including MEXC Global Ltd/MX Global Ltd, MEXC Estonia OÜ, GIDA Technology AG, and MXC Global Ltd. Establish a process to assess successor entities and geographic exclusions rather than relying on exact-name matches. Validate available account and wallet attribution data; OFAC-list screening alone is not a substitute for implementing a FinCEN order.
- Review indirect exposure. Examine customers, foreign correspondents, payment processors, and cryptocurrency-related relationships for transfers from or to MEXC. Use targeted information requests and enhanced due diligence where risk warrants, including questions about underlying counterparties and payment purposes. A bank without a direct MEXC relationship may still encounter MEXC-originated or MEXC-destined funds through intermediaries.
- Prepare for incoming cryptocurrency. FinCEN acknowledges that technical limitations may prevent institutions from declining incoming CVC before it is received. Establish prompt legal and compliance escalation procedures, preserve transaction and attribution details, and determine the lawful disposition before releasing or returning funds.
- Review activity and preserve SAR obligations. Conduct a risk-based lookback for MEXC exposure and suspicious routing changes, investigate alerts, and file Suspicious Activity Reports (SARs) when applicable requirements are met. The order preserves existing BSA and OFAC obligations; it does not make every historical MEXC transaction a violation or automatically require a SAR for every match. Train relevant personnel and retain the rationale for transaction and filing decisions.
The lesson for banks is broader than a single exchange: FinCEN special measures and OFAC sanctions require coordinated but distinct controls. Banks should use the implementation window to demonstrate that their systems can identify the targeted activity and stop prohibited transfers, even when an intermediary stands between the bank and the exchange.
