Noncustodial privacy software is money transmission

⚠️ Time-sensitive — not re-verified since `asOf` (2026-07-22). The legal posture described below is a snapshot, and each part of it turns on a single event: that the November 2025 sentences stand unmodified, that no appellate court has ruled on whether non-custodial coordination is money transmission, that pardon advocacy is "active in the source transcript" and "may yet moot the precedential effect," and that privacy tools without operator revenue "remain unprosecuted." A clemency grant, a new indictment, or one ruling changes any of them. asOf records the last verification, not the last edit — any editing since then left the date unchanged because it added no re-verification of the legal timeline. Re-verify against a primary source before relying on the current status of the cases or the campaign. (The companion brief privacy-software-and-the-law carries the same caveat.)

Developing and operating non-custodial privacy software (coinjoin coordination, mixing wallets) constitutes unlicensed money transmission under U.S. law.

For (the state's position, strongest version): The prosecuted operation was not passive code publication: it ran coordination servers, marketed to and profited from illicit-source users, and collected millions in fees while facilitating what the government tallied as over $237 million in criminal proceeds — an ongoing service with operator revenue, which FinCEN's own 2019 framework distinguishes from mere software provision. Guilty pleas and 2025 prison sentences (five and four years) establish that, at minimum, this business model carries criminal exposure in fact.

Against (strongest version as argued): The defendants never possessed or controlled user funds — users held their own keys throughout — and the money-transmission statutes were written for custodians; stretching them to reach coordination software criminalizes publishing code paths, chilling all privacy tooling (the same logic reaches Lightning routing, coinjoin implementations, even node relay). FinCEN's guidance drew the software/service line precisely to protect non-custodial development, and a plea bargain under trial risk is not a judicial resolution of the interpretive question. On this view the prosecutions are the political attack surface the community warned about: privacy for lawful users treated as a proxy crime.

Nuance: The legal question was not settled on the merits — the cases ended in pleas, so no appellate court has ruled on whether non-custodial coordination is money transmission. The defensible narrow reading: operating a fee-earning coordination service with alleged knowledge of criminal clientele is prosecutable in practice; the broad reading ("writing privacy code is illegal") is neither what was charged nor what the pleas establish. Pardon advocacy, active in the source transcript, may yet moot the precedential effect. Jurisdictional scope matters: this is U.S. law; other jurisdictions draw the line differently.

Common misstatements: "They went to prison for writing open-source code" (the charges centered on operating and profiting from a service; the code remains published and legal). "The case proves non-custodial wallets are illegal" (no court ruling reaches that; ordinary non-custodial wallets were not at issue). "They held customer funds" (custody was never alleged; the charge was transmission without a license, a theory that does not require custody as prosecuted).