The largest exchange admitted compliance failures at scale

Inherited archive entry · retained from the earlier edition. Its factual, legal and policy claims have not all been reverified for 19 September 2026. Research scope.

What the plea documents cover

On 21 November 2023, Binance Holdings Limited pleaded guilty to federal charges and agreed to resolutions with the Department of Justice, Treasury's Financial Crimes Enforcement Network and Office of Foreign Assets Control, and the Commodity Futures Trading Commission, totalling more than $4 billion. Treasury's own announcement states Binance 'willfully failed to establish, implement, and maintain an effective anti-money laundering program', had not filed a single suspicious activity report with FinCEN despite what the announcement describes as over 100,000 suspicious transactions, and between 2017 and 2022 executed 1.67 million trades between U.S. users and users in sanctioned jurisdictions including Iran, North Korea, and Syria. The CFTC's parallel announcement records Binance agreeing to disgorge $1.35 billion and pay a further $1.35 billion penalty, with founder Changpeng Zhao paying $150 million and resigning as chief executive.

What a compliance failure means for a counterparty

None of this is a finding that Binance stole customer assets or that its exchange mechanics failed; it is a finding about who the exchange did and did not screen before letting them trade. Anti-money-laundering and sanctions controls exist to stop specific counterparties, named by regulators or law enforcement, from using a platform at all. Treasury's announcement states the suspicious transactions Binance failed to report or block involved groups including Al Qaeda, ISIS, and Hamas, and darknet market and ransomware proceeds; a customer using an exchange with weak controls of this kind is trading on a platform that made no effort to keep such counterparties out, whatever the direct risk to that customer's own funds.

The boundary of what the plea establishes

A guilty plea and coordinated regulatory settlement record what a company admitted to at a specific date; they are not a comprehensive account of every transaction the company ever processed, and the settlement includes an agreed monitor overseeing Binance's compliance program rather than a finding that every past user was harmed. The size of the penalty reflects the scale of the admitted compliance failure, not a valuation of any particular customer's loss.

Questions to carry forward

• Does an exchange publish information about its screening for sanctioned jurisdictions and suspicious activity reporting?
• What obligations does a monitor imposed by a settlement actually have, and for how long?
• Would knowing a platform's compliance history change an assessment of counterparty risk, separate from custody risk?

The admitted facts concern who was allowed onto the platform and what was reported about them, not whether any individual customer's coins were safe once deposited, a separate question this settlement does not answer.