Worked example · 2015-01

Coin.mx first US federal criminal prosecution of unlicensed Bitcoin exchange — Bitcoin — 2015-01-26 (indictment unsealed)

Loss: $0 direct on-chain loss to exchange customers (the enforcement action was criminal prosecution of the operators, not a hack). The exchange allegedly processed over $10M in Bitcoin transactions through an unlicensed money-transmission operation. No customer funds were reported stolen. The loss was structural: the criminal prosecution established that unlicensed Bitcoin exchange operation carries federal criminal liability in the United States.
Recovery: not applicable (no customer funds were stolen). Civil forfeiture of operator assets as part of the criminal disposition.
OAK Techniques observed: OAK-T6.007 (Trust-Substrate Shift / Vendor-Promise Revocation — regulatory-action variant. The Coin.mx criminal prosecution established that Bitcoin exchanges operating in the United States without state money-transmitter licenses and federal FinCEN registration face federal criminal liability. The trust substrate shifted from "Bitcoin exchanges can operate without traditional financial licensing" to "Bitcoin exchanges are money transmitters subject to federal criminal prosecution." The first US federal criminal case establishing the exchange-as-money-transmitter precedent). OAK-T15.005 (Regulatory Enforcement Action — the criminal prosecution of Coin.mx operators was a federal law-enforcement action targeting the exchange's unlicensed-operation surface). OAK-T7.002 (CEX Off-Ramp Laundering — Coin.mx was allegedly used to process ransomware payments and other illicit proceeds; the case established the structural connection between unlicensed exchanges and money-laundering facilitation that would recur at BTC-e (2017) and subsequent exchange-enforcement actions).
Attribution: confirmed via US federal criminal prosecution. Anthony Murgio and associates were indicted in the Southern District of New York (indictment unsealed January 26, 2015). Murgio was convicted and sentenced to 5.5 years in federal prison. The case was prosecuted by the US Attorney's Office for the Southern District of New York (Preet Bharara, then-US Attorney) and investigated by the FBI and US Secret Service.
Key teaching point: The Coin.mx criminal prosecution of January 2015 is the ur-regulatory-action in US cryptocurrency enforcement — the first federal criminal case establishing that Bitcoin exchanges are money transmitters subject to the same licensing, registration, and anti-money-laundering requirements as traditional financial institutions. The structural precedent — "unlicensed Bitcoin exchange = federal crime" — directly shaped the subsequent decade of US cryptocurrency enforcement, from the IRS Coinbase John Doe summons (2016) to the FinCEN Tumblers/Bitzlato actions (2022-2023) to the DOJ Binance settlement (2023).

Summary

Coin.mx was a Bitcoin exchange operated by Anthony Murgio and associates from approximately 2013 through 2015. The exchange operated without state money-transmitter licenses and without registering with FinCEN as a money services business (MSB) — legal requirements for any business that exchanges virtual currency for fiat currency in the United States.

On January 26, 2015, the US Attorney's Office for the Southern District of New York unsealed a federal indictment charging Murgio and his co-defendants with operating an unlicensed money-transmission business in violation of 18 U.S.C. § 1960, money laundering, and related charges. The indictment alleged that Coin.mx processed over $10M in Bitcoin transactions, including transactions connected to ransomware payments (specifically, the Cryptowall ransomware variant) and other illicit activity. The case was significant because it was the first time the US Department of Justice applied federal money-transmitter criminal statutes to a Bitcoin exchange.

The investigation revealed connections between Coin.mx and a broader cybercrime ecosystem: the exchange was allegedly used to launder proceeds from ransomware attacks, and one of the defendants was connected to the 2014 JPMorgan Chase data breach (the largest bank data breach in US history at the time). Murgio was convicted after trial and sentenced to 5.5 years in federal prison. The case established the federal criminal precedent that (a) Bitcoin exchanges are money transmitters, (b) operating a Bitcoin exchange without state licensing and federal MSB registration is a federal crime, and (c) Bitcoin exchanges that process illicit proceeds face money-laundering liability.

The structural precedent of Coin.mx shaped every subsequent US cryptocurrency-enforcement action. The legal theory — Bitcoin exchanges are money transmitters under the Bank Secrecy Act — became the foundation for the FinCEN actions against BTC-e (2017, $110M+ civil penalty against Alexander Vinnik), the DOJ action against Bitzlato (2022), the FinCEN designation of Tornado Cash (2022), and the DOJ Binance settlement (2023, $4.3B). The professionalization of crypto-exchange compliance — KYC/AML programs, state money-transmitter licensing, FinCEN MSB registration, blockchain-analytics integration — was retro-engineered against the legal framework that Coin.mx established in case law.

Timeline (UTC unless noted)

When	Event	OAK ref
~2013 → 2015-01	Coin.mx operates as an unlicensed Bitcoin exchange without state money-transmitter licenses or FinCEN MSB registration; processes over $10M in transactions	(standing T15.005 surface)
2013–2015 (investigation period)	FBI and US Secret Service investigate Coin.mx; uncover connections to ransomware payments and JPMorgan Chase breach	(federal investigation)
2015-01-26	SDNY unseals indictment against Anthony Murgio and co-defendants; charges include operating unlicensed money-transmission business (18 U.S.C. § 1960) and money laundering	T6.007 (regulatory-action trust-substrate shift) + T15.005
2015 → 2017	Criminal prosecution proceeds in SDNY; Murgio convicted at trial	(criminal adjudication)
~2017	Murgio sentenced to 5.5 years in federal prison	(sentencing — confirmed attribution)
2015 onward	Coin.mx legal precedent established: Bitcoin exchanges are money transmitters; unlicensed operation = federal crime; shapes all subsequent US crypto-enforcement actions through the OAK v0.1 cutoff	(structural precedent — continuing through 2026)

Realised extraction

No on-chain customer-fund loss. The case was a criminal prosecution of the exchange operators, not a theft or hack. The loss was structural — the precedent established that unlicensed Bitcoin-exchange operation carries federal criminal liability. The enforcement action did not result in customer restitution (no customer funds were stolen). The operational impact was on the broader exchange ecosystem: every US-facing Bitcoin exchange was on notice after January 2015 that state money-transmitter licensing and federal MSB registration were not optional.

What defenders observed

Pre-event: Bitcoin exchanges in the 2013-2014 period often operated without clear regulatory guidance on whether they qualified as money transmitters. The dominant operational assumption was that Bitcoin's classification as a "virtual currency" rather than "money" might exempt exchanges from traditional money-transmitter requirements. Coin.mx established that this assumption was legally incorrect — Bitcoin exchanges are money transmitters under federal law.
At-event (indictment): the SDNY indictment applied 18 U.S.C. § 1960 (unlicensed money transmission) to a Bitcoin exchange for the first time. The legal theory was that exchanging Bitcoin for fiat currency (and vice versa) constitutes "money transmission" regardless of Bitcoin's classification as property, commodity, or currency. The OAK lesson is that the functional activity (exchanging value for value) determines money-transmitter status, not the asset's legal classification.
At-event (money-laundering charges): the indictment included money-laundering charges connected to Coin.mx's processing of ransomware payments. This established the structural connection between unlicensed-exchange operation and money-laundering facilitation — a connection that would recur at BTC-e (2017) and every subsequent exchange-enforcement action. The OAK lesson for T7.002 (CEX Off-Ramp Laundering) is that unlicensed exchanges are a standing money-laundering surface.
Post-event: the Coin.mx precedent directly shaped the compliance infrastructure of every subsequent US-facing cryptocurrency exchange. The professionalization of exchange compliance — KYC/AML programs, blockchain-analytics integration, state money-transmitter licensing, FinCEN MSB registration — was the direct industry response to the Coin.mx criminal liability precedent. The OAK lesson for T6.007 is that regulatory-action trust-substrate shifts can be permanent and structural, not temporary or reversible.

What this example tells contributors writing future Technique pages

Coin.mx is the foundational T6.007 regulatory-action anchor for US cryptocurrency enforcement. The case established the legal precedent that Bitcoin exchanges are money transmitters — the structural-legal foundation for every subsequent US exchange-enforcement action. Contributors writing regulatory-action T6.007 analysis should cite Coin.mx as the chronological anchor.
The exchange-as-money-transmitter precedent is a one-way trust-substrate shift. Once the Coin.mx precedent established that Bitcoin exchanges are money transmitters, no exchange could credibly claim exemption from money-transmitter requirements. The trust substrate shifted permanently from "maybe exchanges don't need licenses" to "exchanges definitely need licenses." Contributors writing trust-substrate-shift analysis should distinguish between reversible shifts (Ledger Recover, partially recovered) and permanent shifts (Coin.mx, Tornado Cash sanctions pre-circuit-court-ruling).
The case established the structural template for exchange-enforcement actions. The Coin.mx template — unlicensed-operation charge + money-laundering charge + connection to broader cybercrime investigation — recurred at BTC-e (2017), Bitzlato (2022), and Binance (2023). Contributors writing exchange-enforcement worked examples should reference the Coin.mx template as the structural ancestor.

Public references

[sdnycoinmx2015] — US Attorney's Office, Southern District of New York. Indictment unsealed against Anthony Murgio and others for operating unlicensed Bitcoin exchange. January 26, 2015. Primary-source federal criminal indictment.
[dojcoinmx2015] — US Department of Justice. Press release: "Operator of Unlicensed Bitcoin Exchange Convicted." 2017. Primary-source federal prosecution disposition.
[reuterscoinmx2015] — Reuters. "U.S. charges operator of unlicensed Bitcoin exchange." January 26, 2015. Contemporaneous press coverage.
[wsjcoinmx2015] — Wall Street Journal. "Bitcoin Exchange Operator Charged in Connection With JPMorgan Hack." January 2015. Coverage of the Coin.mx connection to the JPMorgan Chase breach investigation.
[fincenmsbguidance2013] — FinCEN. "Application of FinCEN's Regulations to Persons Administering, Exchanging, or Using Virtual Currencies" (FIN-2013-G001). March 18, 2013. The pre-Coin.mx FinCEN guidance establishing that virtual-currency exchangers are money transmitters; the Coin.mx prosecution was the first criminal application of this guidance.
[bhararacoinmx2015] — Preet Bharara, US Attorney for SDNY. Public statements on the Coin.mx indictment. January 2015. Primary-source prosecutorial framing.

Discussion

Coin.mx January 2015 is the foundational US regulatory-action anchor in the OAK record — the ur-enforcement-action that established Bitcoin exchanges as money transmitters subject to federal criminal prosecution. The case's structural significance is not in the dollar magnitude (no customer funds were stolen; the exchange processed ~$10M+ in transactions) but in the legal precedent: every subsequent US cryptocurrency-enforcement action, from the IRS Coinbase John Doe summons (2016) through the DOJ Binance settlement (2023, $4.3B), traces its legal lineage to the Coin.mx precedent.

The case is structurally paired with the IRS Coinbase John Doe summons (November 2016) as the two foundational US regulatory actions that defined the compliance obligations of cryptocurrency exchanges. Coin.mx established the criminal-liability surface (unlicensed operation = federal crime); Coinbase IRS established the information-disclosure surface (exchange customer records are subject to broad IRS information demands). Together, the two 2015-2016 regulatory actions created the compliance framework that every subsequent US exchange was required to navigate.

For OAK's T6.007 coverage, Coin.mx represents the regulatory-action variant in its purest form — a federal criminal prosecution that permanently shifted the trust substrate for Bitcoin exchange operations in the United States. The trust-substrate shift was permanent and structural: after Coin.mx, no US-facing exchange could credibly claim exemption from money-transmitter licensing. Contributors writing regulatory-action T6.007 analysis should cite Coin.mx as the chronological anchor and the IRS Coinbase John Doe summons (2016) as the structural successor.