1. What did the MEXC FinCEN order do?
The U.S. Treasury Department's Financial Crimes Enforcement Network (FinCEN) on Friday, November 6, issued an order that will bar American financial institutions from processing funds transfers to or from MEXC Global, a crypto exchange Treasury ranks among the 20 largest in the world. The agency alleges that MEXC handled at least $16 billion in illicit transactions linked to Iran, North Korea and Russia.
Once the order takes effect, banks, payment processors and other covered U.S. firms will be prohibited from sending money to the exchange or receiving money from it. The prohibition does not begin immediately. It starts 30 days after the order is published in the Federal Register, the government's official daily journal of rules and notices, which gives covered institutions a window to prepare.
Treasury describes MEXC as a major conduit for sanctions evasion and cybercrime. The measure is one piece of a wider initiative the department calls Operation Economic Outcast. At the time of writing, no public response from MEXC had been reported, so the allegations below are those of the U.S. government and have not been tested in any proceeding.
For a platform of this size, losing access to the U.S. banking system is a heavy penalty. Dollar transfers are the backbone of global finance, and a company that cannot touch them must rely on other jurisdictions and other channels. That is the practical effect Treasury is aiming for with this action.
2. How big is MEXC?
FinCEN's findings put some numbers on the platform's scale. MEXC was founded in 2018 and, according to the agency, processes more than $1 billion in transactions every day. It holds roughly $5 billion in reserves and lists more than 3,000 tokens for trading.
The breadth of that token list matters to regulators. Exchanges that list thousands of assets, many of them thinly traded or newly created, can offer users a wide range of ways to move value quickly across borders. Compliance teams at such venues must therefore monitor a far larger and more varied set of flows than a platform offering a few dozen major coins.
Daily volume above $1 billion also means that even a small share of questionable activity can add up to a very large absolute figure over time. Treasury's $16 billion estimate covers a five-year span, which works out to a modest fraction of total activity at that daily pace but still a sum large enough to draw the attention of national security officials.
The $5 billion in reserves is relevant for a different reason. It indicates how much customer value could be affected if U.S. institutions stop handling the exchange's transfers, although the order itself does not freeze those reserves or address customer balances.
3. What does FinCEN say moved through the exchange?
The agency's accounting covers the period from May 2021 to May 2026. In that window, FinCEN says, the platform moved at least $16 billion tied to illicit activity. Within that total, about $1.5 billion is linked to evasion of Russian sanctions, and $232 million consists of direct transactions with sanctioned entities.
FinCEN also singled out two narrower streams. About $200 million was tied to the A7A5 stablecoin, a ruble-backed token that Treasury has already targeted in earlier actions. Roughly $22 million benefited Iran's central bank and the Islamic Revolutionary Guard Corps (IRGC), the powerful military and economic force that the U.S. has long sought to isolate.
These categories show the range of conduct the agency is attributing to the exchange. Some of it involves Russian networks trying to get around restrictions imposed after the invasion of Ukraine; some involves Iranian state-linked actors; and the agency's overall description also includes North Korea and general cybercrime. Treasury's public description does not break the $16 billion down further by country in the material available.
FinCEN additionally designated MEXC a "primary money laundering concern" in connection with Russian illicit finance. That designation is the legal finding that underpins the transfer ban, and it signals that the agency views the exchange as a systemic risk rather than an isolated compliance lapse.
4. Where did MEXC's compliance controls fall short?
FinCEN concluded that the exchange suffers from "severe deficiencies" in its anti-money-laundering (AML) program. This conclusion stands in contrast to the exchange's own public statements. MEXC has said it maintains AML controls and prohibits users in places such as Iran and North Korea from using the platform.
AML programs at crypto exchanges typically rest on identity verification, transaction monitoring and screening of customers and counterparties against sanctions lists. When those pieces work, an exchange can detect that a customer is located in a prohibited jurisdiction or that a counterparty is a designated entity, and can block or report the activity. FinCEN's findings indicate that, in its judgment, those safeguards did not function adequately at MEXC.
The most pointed example involves Garantex, a Russian exchange that was sanctioned, and its successor Grinex. MEXC continued transacting with both, the agency says, as recently as June 2026. That is more than four years after Garantex was first designated, a gap that investigators regard as hard to explain as an oversight.
Successor platforms are a recurring feature of sanctions enforcement. When one exchange is shut down or designated, operators often relaunch under a new name and attempt to keep their customers and liquidity. Counterparties are expected to recognize such rebrands and treat them as the same risk, and FinCEN's allegation is that MEXC did not.
5. How does Operation Economic Outcast connect to earlier actions?
Treasury presents the MEXC order as the latest step in a sequence rather than a standalone move. The campaign began with Russia's A7 Network and has since reached Iran's crypto sector, with MEXC now sitting at the intersection of those threads.
Last month, Treasury designated the A7 Network a transnational criminal organization and proposed cutting its front companies off from U.S. finance. The department flagged more than $179 billion in transactions that passed through the ruble-backed A7A5 token, a large portion of it routed through Garantex and Grinex. The A7A5 and Grinex links explain why they appear again in the MEXC findings.
The campaign then moved to Iran. Treasury obtained broad authority to sanction anyone operating in Iran's crypto sector, and it blacklisted the exchange Nobitex for funneling cryptocurrency to the IRGC. Taken together with the MEXC order, the actions describe a strategy of working through the exchanges and intermediaries that let sanctioned parties convert and move digital assets, instead of pursuing only the end users.
Seen in that light, MEXC is a bigger target than either Nobitex or the A7 front companies in terms of reach, because it serves a global retail customer base while allegedly also serving as a route for sanctioned actors. Treasury describes it as one of the world's largest venues, which makes the precedent more significant for the industry.
6. Why did Treasury use a money-laundering law rather than a sanctions listing?
The order relies on a provision of the Combating Russian Money Laundering Act rather than a conventional sanctions designation. The difference is meaningful. A standard sanctions listing typically freezes a target's assets under U.S. jurisdiction and bars U.S. persons from dealing with it, whereas this tool is aimed at cutting a foreign institution off from the U.S. financial system by prohibiting transfers.
FinCEN has increasingly turned to this kind of authority against crypto infrastructure that operates outside the traditional correspondent banking system. Correspondent banking is the arrangement through which banks hold accounts at one another to move money across borders. Crypto exchanges often bypass it, which can limit the leverage of conventional measures, so regulators have looked for instruments that still reach the entities involved.
The practical reach of a transfer prohibition depends on how many U.S. institutions sit in the path of an exchange's funds. Many exchanges rely on U.S. banks, payment firms and stablecoin issuers for at least part of their liquidity, and a covered institution that violates the order would face enforcement risk of its own. That secondary pressure is part of what makes such orders effective.
The legal approach also shows that the government can act against an exchange on the basis of its compliance failings and its role in illicit finance, without needing to show that its owners are themselves sanctioned persons. For other offshore platforms, that is a notable signal about how U.S. authorities weigh AML deficiencies.
7. What did Treasury Secretary Bessent say?
Treasury Secretary Scott Bessent framed the action in terms of Iran. He said financial institutions must choose between supporting the Iranian regime and having access to the U.S. financial system, a formulation that puts the burden of the decision on the exchange and its partners.
Bessent also pledged to continue cutting the regime's economic lifelines, including its use of digital assets to evade sanctions. The statement links the MEXC order directly to Washington's pressure campaign on Tehran, even though the exchange's alleged $16 billion in illicit flows also involves Russia and North Korea.
The emphasis reflects how the U.S. government increasingly views crypto as a channel for sanctions evasion. Digital assets can be moved quickly, across borders and without the involvement of a traditional bank, which is why Treasury has directed so much recent effort toward the exchanges that convert them into usable currency.
8. What happens next?
The next fixed milestone is the order's publication in the Federal Register, which starts the 30-day clock. After that period ends, U.S. financial institutions will be barred from transfers to and from MEXC. The material available does not specify the publication date.
In the meantime, covered institutions can be expected to review their exposure to the exchange and to the accounts that interact with it. Other exchanges are likely to read the order as a warning about counterparties tied to Garantex, Grinex and A7A5, the names that recur through Treasury's recent actions.
Treasury has not announced further steps under Operation Economic Outcast in the information available, but the sequence from the A7 Network to Nobitex to MEXC suggests the department is working systematically through the platforms involved. Whether MEXC responds with changes to its compliance program, a legal challenge or other measures remains to be seen.