A dated, sourced log of what changed for privacy-minded crypto users in 2025–2026 — services that shut down or were seized, started asking for ID, delisted Monero or were exploited, plus the rules behind it. Subscribe via RSS.
Act 224 (signed 9 Jul 2026) bans cash deposits at crypto ATMs from 1 Oct 2026. Selling crypto for cash is still allowed.
Spot trading ended 29 Sep 2026 and withdrawals close 22 Dec 2026. Withdraw any remaining balance before the deadline.
The crypto market-structure bill fell short of the 60 votes needed to advance.
While its Swiss regulator re-examines its no-KYC model, only KYC'd or long-reputation sellers with zero lost disputes can sell, and sellers keep control of escrowed BTC.
The regulator suspended the operator's registration, taking its whole kiosk network offline.
The Lightning/Liquid swap service paused swaps citing AI-assisted attacks on its infrastructure. By late September its domain no longer resolved and no restart date had been given.
Under a law signed in May 2026, machines had to go offline by 1 Aug 2026 and be removed by 31 Dec 2026.
Parliament passed a law bringing crypto under the Financial Instruments and Exchange Act, adding an insider-trading ban and tougher penalties for unregistered operators. Takes effect within about a year.
The government withdrew the planned ban in favour of powers to set cash limits.
No extension was granted. ESMA told providers without a MiCA licence to stop onboarding EU clients and wind down.
Tennessee's ban (signed 13 Apr 2026) makes operating a kiosk a Class A misdemeanor; Vermont's Act 142 bans virtual-currency kiosks.
The fix closes the arbitrator-impersonation hole used in the May and June attacks.
XMR, DASH, ZEC and several stablecoins were removed for UAE clients between 16 Jun and 25 Sep 2026.
Attackers impersonated arbitrators during multisig setup (~$2.7M). A second exploit followed on 16 Jun 2026. Trading was suspended until the v1.8.0 fix.
RetoSwap listing → · Haveno listing → · Source: cryptotimes.io
Missing validation in the trade protocol let an attacker take 11.59 BTC from 10 users on altcoin trades (fiat trades and Bisq 2 were unaffected). Victims were reimbursed by 5 Jun; max trade is now 0.25 BTC and XMR auto-confirm is disabled.
Announced in the Spring Economic Update. As of October 2026 we found no evidence the ban has been enacted.
XMR, DASH and ZEC were delisted for clients in India (completed 22 May). Kraken's notice gives month and day only; the year is inferred.
The Zcash wallet team, which left Electric Coin Company in January, renamed the app Zodl. Same app and recovery phrase; the change arrived as a normal update.
Unverified accounts can no longer deposit, withdraw or trade — only view data.
After more than a decade, MyMonero ended its wallet service and pointed users to Cake Wallet. Funds are safe on-chain: restore the 25-word seed in another wallet.
MyMonero listing → · Cake Wallet listing → · Source: docs.cakewallet.com
Exchanges now collect user identity and transaction data for tax authorities; first reports are due in 2027.
Swiss and German police (Operation Olympia, with Europol) seized €25M in BTC and the servers in Zurich.
After guilty pleas to unlicensed money-transmitting conspiracy, Keonne Rodriguez got 5 years (6 Nov) and William Hill 4 years (19 Nov).
The P2P marketplace ended operations after announcing its wind-down on 1 Oct 2025.
A record FINTRAC penalty against Xeltox (Cryptomus); the company is appealing.
About C$56M seized for operating without FINTRAC registration or KYC.
Deposits were paused on 21 Aug 2025 and XMR trading ended 2 Sep 2025.
The notice lists kiosks that allow transactions with no ID or only a phone/email as a red flag.
The no-KYC instant exchange closed effective immediately and promised 30 days of refunds; many users reported pending refunds going unanswered.
The BTC→XMR atomic-swap app was renamed and is now also a full Monero wallet.
Per cash deposit or withdrawal, with enhanced customer checks and mandatory scam warnings.
Days after announcing it would close on 1 May, eXch's servers, 8 TB of data and €34M in crypto were seized by the BKA and Frankfurt prosecutors. Any site using its name now is not the original service.
A Deputy AG memo said prosecutors will no longer target mixers or offline wallets for what their users do (with exceptions), and disbanded the NCET crypto unit.
Treasury removed Tornado Cash from the sanctions list.
US, German and Finnish authorities seized its domains and servers and froze over $26M; successor Grinex was sanctioned on 13 Aug 2025.
Olumide Osunkoya got 4 years. Operating crypto ATMs without FCA registration is illegal in the UK.
Seen a change we missed? Use the Report a problem form on the service's listing, or tell us. Every entry links to its source.