src/knowledge/cases/enforcement.json

[
  {
    "case_id": "enf-us-001",
    "jurisdiction": "US",
    "regulator": "SEC",
    "case_name": "SEC v. Ripple Labs Inc., No. 1:20-cv-10832 (S.D.N.Y.)",
    "year": 2023,
    "respondent": "Ripple Labs Inc.",
    "violation_type": ["unregistered securities offering"],
    "activity": "Raising $1.3 billion through ongoing sales of XRP to institutional and retail investors without SEC registration since 2013.",
    "outcome": "Mixed ruling in July 2023: institutional sales were unregistered securities offerings, but programmatic sales on exchanges were not. $125 million civil penalty imposed in August 2024, significantly less than the $2 billion sought by the SEC. Injunction against future violations.",
    "penalty_usd": 125000000,
    "key_lesson": "Direct institutional sales of tokens where buyers know they are purchasing from the issuer are more likely to be securities. Secondary market sales where buyers don't know the counterparty may not satisfy Howey. The distinction between primary and secondary market sales is critical for token distribution strategy.",
    "tags": ["XRP", "Ripple", "institutional-sales", "programmatic-sales", "Howey", "landmark-ruling"]
  },
  {
    "case_id": "enf-us-002",
    "jurisdiction": "US",
    "regulator": "SEC",
    "case_name": "SEC v. Telegram Group Inc., No. 1:19-cv-09439 (S.D.N.Y.)",
    "year": 2020,
    "respondent": "Telegram Group Inc.",
    "violation_type": ["unregistered securities offering"],
    "activity": "Raising $1.7 billion from 175 investors via SAFT agreements for Gram tokens on the Telegram Open Network (TON), with planned public distribution.",
    "outcome": "Preliminary injunction granted March 2020 blocking Gram distribution. Court held the entire scheme — from private sale through planned public distribution — was a single integrated offering. Telegram returned $1.2 billion to investors and paid $18.5 million civil penalty. TON project abandoned.",
    "penalty_usd": 18500000,
    "key_lesson": "SAFT structures do not insulate token issuers from securities law when the end distribution to the public effectively constitutes a public offering. Courts will look at the entire scheme as an integrated transaction, not isolated steps. Pre-functional token sales with promised future delivery are high risk.",
    "tags": ["Telegram", "TON", "Gram", "SAFT", "integrated-offering", "injunction"]
  },
  {
    "case_id": "enf-us-003",
    "jurisdiction": "US",
    "regulator": "SEC",
    "case_name": "SEC v. Kik Interactive Inc., No. 1:19-cv-05244 (S.D.N.Y.)",
    "year": 2020,
    "respondent": "Kik Interactive Inc.",
    "violation_type": ["unregistered securities offering"],
    "activity": "Raising $100 million through a two-phase Kin token sale — a pre-sale to accredited investors via SAFT and a public token distribution event in 2017.",
    "outcome": "Summary judgment for SEC in September 2020. Court found the pre-sale and public sale were a single integrated offering. $5 million civil penalty and injunction against future unregistered offerings.",
    "penalty_usd": 5000000,
    "key_lesson": "Courts apply integration analysis to determine whether separate token sale phases are part of a single plan of financing. Labelling tokens as utility tokens does not immunise offerings from securities regulation when economic reality shows investment characteristics.",
    "tags": ["Kik", "KIN", "integration-doctrine", "utility-token-defence", "summary-judgment"]
  },
  {
    "case_id": "enf-us-004",
    "jurisdiction": "US",
    "regulator": "SEC",
    "case_name": "SEC v. LBRY Inc., No. 1:21-cv-00260 (D.N.H.)",
    "year": 2022,
    "respondent": "LBRY Inc.",
    "violation_type": ["unregistered securities offering"],
    "activity": "Selling LBRY Credits (LBC) tokens raising approximately $11 million for a decentralised content-sharing platform. LBC had genuine utility on a functioning network.",
    "outcome": "Summary judgment for SEC in November 2022. Court held LBC was offered as an investment contract despite genuine utility on an operational platform. $111,614 civil penalty. LBRY subsequently ceased operations.",
    "penalty_usd": 111614,
    "key_lesson": "A token can have genuine consumptive utility and still be classified as a security if it is marketed and sold as an investment. How a token is promoted is as important as what it does. Even small projects on functioning networks are not immune from securities classification.",
    "tags": ["LBRY", "LBC", "utility-with-investment", "functioning-network", "marketing"]
  },
  {
    "case_id": "enf-us-005",
    "jurisdiction": "US",
    "regulator": "SEC",
    "case_name": "In the Matter of Kraken (Payward Ventures Inc.)",
    "year": 2023,
    "respondent": "Payward Ventures Inc. / Payward Trading Ltd. (Kraken)",
    "violation_type": ["unregistered securities offering"],
    "activity": "Operating a staking-as-a-service program offering up to 21% annual returns. Kraken pooled customer assets, staked on their behalf, and set payout rates independently of on-chain rewards.",
    "outcome": "Kraken agreed to immediately cease offering staking services to US customers and paid $30 million in disgorgement, prejudgment interest, and civil penalties.",
    "penalty_usd": 30000000,
    "key_lesson": "Intermediated staking services where a third party pools assets, exercises discretion over operations, and determines payout rates are likely investment contracts. The pooling and discretionary elements distinguish these from native on-chain staking.",
    "tags": ["Kraken", "staking", "staking-as-a-service", "pooled-assets", "settlement"]
  },
  {
    "case_id": "enf-us-006",
    "jurisdiction": "US",
    "regulator": "SEC",
    "case_name": "In the Matter of BlockFi Lending LLC",
    "year": 2022,
    "respondent": "BlockFi Lending LLC",
    "violation_type": ["unregistered securities offering", "Investment Company Act violation"],
    "activity": "Offering BlockFi Interest Accounts (BIAs) where customers lent crypto to BlockFi in exchange for variable interest rates up to 9.25% APY. BlockFi then deployed these assets in institutional lending and trading.",
    "outcome": "BlockFi agreed to pay $100 million ($50 million SEC penalty, $50 million state penalties), cease offering unregistered lending products, and attempt to register a new product under the Securities Act within 60 days. BlockFi subsequently filed for bankruptcy in November 2022 following FTX collapse.",
    "penalty_usd": 100000000,
    "key_lesson": "Crypto lending products offering variable interest rates to retail customers are likely investment contracts and may also trigger Investment Company Act registration requirements. Firms must register yield-bearing crypto products before offering them to the public.",
    "tags": ["BlockFi", "lending", "interest-accounts", "yield", "Investment-Company-Act", "bankruptcy"]
  },
  {
    "case_id": "enf-us-007",
    "jurisdiction": "US",
    "regulator": "SEC",
    "case_name": "In the Matter of Nexo Capital Inc.",
    "year": 2023,
    "respondent": "Nexo Capital Inc.",
    "violation_type": ["unregistered securities offering"],
    "activity": "Offering the Earn Interest Product (EIP) allowing US retail and institutional investors to earn interest on crypto deposited with Nexo, with Nexo using deposits for lending and staking activities.",
    "outcome": "Nexo agreed to pay $22.5 million in civil penalties and an additional $22.5 million in disgorgement to settle with the SEC, totalling $45 million. Nexo also settled with state regulators for a further $22.5 million. Nexo ceased offering EIP to US customers.",
    "penalty_usd": 45000000,
    "key_lesson": "Crypto earn/interest products are securities when customers transfer assets to a platform that exercises discretion in deploying them for profit. Both SEC and state regulators will pursue parallel enforcement, multiplying penalties.",
    "tags": ["Nexo", "earn-product", "interest", "lending", "state-regulators", "parallel-enforcement"]
  },
  {
    "case_id": "enf-us-008",
    "jurisdiction": "US",
    "regulator": "SEC",
    "case_name": "SEC v. Genesis Global Capital LLC and Gemini Trust Company LLC",
    "year": 2023,
    "respondent": "Genesis Global Capital LLC / Gemini Trust Company LLC",
    "violation_type": ["unregistered securities offering"],
    "activity": "Operating the Gemini Earn program where Gemini customers lent crypto to Genesis in exchange for yield. Genesis deployed the assets in lending to institutional borrowers including Three Arrows Capital and Alameda Research.",
    "outcome": "SEC charged both entities in January 2023. Genesis filed for bankruptcy. Gemini settled with the SEC in February 2024, agreeing to return at least $1.1 billion to Earn customers and pay a $37 million civil penalty. Genesis settled for $21 million.",
    "penalty_usd": 37000000,
    "key_lesson": "Both the program operator and the lending counterparty can be liable as co-issuers of an unregistered securities offering. Firms must conduct thorough due diligence on counterparties to whom customer assets are lent, as counterparty failure can cascade to retail customers.",
    "tags": ["Genesis", "Gemini", "Earn", "counterparty-risk", "Three-Arrows", "Alameda", "bankruptcy"]
  },
  {
    "case_id": "enf-us-009",
    "jurisdiction": "US",
    "regulator": "DOJ/CFTC/SEC",
    "case_name": "United States v. Samuel Bankman-Fried (FTX)",
    "year": 2023,
    "respondent": "FTX Trading Ltd. / Alameda Research LLC / Samuel Bankman-Fried",
    "violation_type": ["wire fraud", "securities fraud", "money laundering", "campaign finance violations", "commingling customer funds"],
    "activity": "Operating FTX crypto exchange and affiliated trading firm Alameda Research. Bankman-Fried misappropriated billions in customer deposits, used FTX customer funds to cover Alameda trading losses, and engaged in systemic fraud.",
    "outcome": "FTX filed for bankruptcy November 2022. Bankman-Fried convicted on all seven criminal counts in November 2023 and sentenced to 25 years in prison in March 2024. Caroline Ellison (Alameda CEO) sentenced to 2 years. Gary Wang and Nishad Singh received no prison time for cooperation. FTX estate pursuing recovery of assets for creditors.",
    "penalty_usd": 11000000000,
    "key_lesson": "Commingling customer funds with proprietary trading operations is catastrophically risky and criminal. Proper governance, independent board oversight, and segregation of customer assets are non-negotiable requirements. The FTX collapse accelerated global regulatory action across all jurisdictions.",
    "tags": ["FTX", "Bankman-Fried", "fraud", "commingling", "Alameda", "criminal-conviction", "25-years"]
  },
  {
    "case_id": "enf-us-010",
    "jurisdiction": "US",
    "regulator": "SEC/State Regulators",
    "case_name": "In the Matter of Celsius Network LLC",
    "year": 2023,
    "respondent": "Celsius Network LLC / Alex Mashinsky",
    "violation_type": ["securities fraud", "unregistered securities offering", "market manipulation"],
    "activity": "Operating a crypto lending platform offering Earn program with yields up to 18.6% APY. Celsius CEO Alex Mashinsky allegedly manipulated the price of the CEL token and misled investors about the company's financial health.",
    "outcome": "Celsius filed for bankruptcy in July 2022 owing $4.7 billion to customers. FTC settled with Celsius in July 2023, banning Celsius from handling consumer assets and imposing a $4.7 billion judgment (suspended due to bankruptcy). Mashinsky arrested on fraud charges in July 2023, pleaded guilty in December 2024.",
    "penalty_usd": 4700000000,
    "key_lesson": "Crypto yield platforms must accurately disclose risks and financial condition to depositors. CEOs who publicly tout token values while privately selling create massive securities fraud liability. Customer assets used in risky DeFi strategies require full transparency.",
    "tags": ["Celsius", "Mashinsky", "yield", "fraud", "CEL-token", "market-manipulation", "bankruptcy"]
  },
  {
    "case_id": "enf-us-011",
    "jurisdiction": "US",
    "regulator": "CFTC/NYAG",
    "case_name": "In the Matter of iFinex Inc. (Bitfinex/Tether)",
    "year": 2021,
    "respondent": "iFinex Inc. / Tether Holdings Limited",
    "violation_type": ["misrepresentation", "unlicensed commodity transactions"],
    "activity": "Tether claimed USDT was backed 1:1 by US dollar reserves. CFTC found Tether held sufficient reserves only 27.6% of the time during the 2016-2018 period. NY Attorney General found Bitfinex used Tether reserves to cover $850 million in losses from payment processor Crypto Capital.",
    "outcome": "CFTC settlement: $41 million penalty. NY Attorney General settlement: $18.5 million penalty and requirement to cease serving NY customers, provide quarterly transparency reports on USDT reserves for two years. Tether subsequently increased reserve attestation frequency.",
    "penalty_usd": 59500000,
    "key_lesson": "Stablecoin issuers must maintain and accurately represent their reserve backing at all times. Multiple regulators (federal and state) may pursue parallel enforcement for reserve misrepresentation. Transparency and independent attestation of reserves are essential for stablecoin credibility.",
    "tags": ["Tether", "USDT", "Bitfinex", "reserves", "misrepresentation", "stablecoin", "NYAG"]
  },
  {
    "case_id": "enf-us-012",
    "jurisdiction": "US",
    "regulator": "SEC",
    "case_name": "SEC v. Coinbase Inc., No. 1:23-cv-04738 (S.D.N.Y.)",
    "year": 2023,
    "respondent": "Coinbase Inc. / Coinbase Global Inc.",
    "violation_type": ["unregistered exchange", "unregistered broker", "unregistered clearing agency", "unregistered securities offering"],
    "activity": "Operating a crypto trading platform listing at least 13 alleged crypto-asset securities, providing brokerage and clearing services for those tokens, and operating a staking-as-a-service program.",
    "outcome": "SEC filed suit June 2023. Motion to dismiss denied in March 2024 — court found SEC plausibly alleged tokens traded on Coinbase were investment contracts. Case remains ongoing as of 2024. No financial penalty yet determined.",
    "penalty_usd": 0,
    "key_lesson": "Major compliant exchanges are not immune from SEC enforcement. The SEC's theory is that the tokens listed — not the exchange itself — are securities, triggering exchange, broker, and clearing agency registration requirements. This has existential implications for the US crypto exchange model.",
    "tags": ["Coinbase", "unregistered-exchange", "13-tokens", "staking", "motion-to-dismiss", "ongoing"]
  },
  {
    "case_id": "enf-us-013",
    "jurisdiction": "US",
    "regulator": "DOJ/CFTC/FinCEN/OFAC",
    "case_name": "United States v. Binance Holdings Limited",
    "year": 2023,
    "respondent": "Binance Holdings Limited / Changpeng Zhao (CZ)",
    "violation_type": ["BSA violations", "unlicensed money transmission", "sanctions violations", "AML failures"],
    "activity": "Operating the world's largest crypto exchange while allegedly facilitating transactions by US persons without registering as an MSB, failing to implement adequate AML controls, and processing transactions involving sanctioned jurisdictions including Iran, Cuba, and Syria.",
    "outcome": "Binance pleaded guilty and agreed to pay $4.3 billion — the largest corporate penalty in DOJ history at the time. CZ pleaded guilty to BSA violations and was sentenced to 4 months in prison. Binance agreed to a 5-year monitorship. FinCEN penalty: $3.4 billion. OFAC penalty: $968 million.",
    "penalty_usd": 4300000000,
    "key_lesson": "Global crypto exchanges cannot evade US jurisdiction by operating offshore if they serve US customers. AML/CFT compliance and sanctions screening are absolute requirements — the penalties for non-compliance are existential. Founder-CEOs face personal criminal liability for institutional compliance failures.",
    "tags": ["Binance", "CZ", "DOJ", "AML", "sanctions", "BSA", "record-penalty", "monitorship", "criminal"]
  },
  {
    "case_id": "enf-us-014",
    "jurisdiction": "US",
    "regulator": "CFTC/DOJ/FinCEN",
    "case_name": "United States v. Hayes et al. (BitMEX)",
    "year": 2022,
    "respondent": "HDR Global Trading Limited (BitMEX) / Arthur Hayes / Benjamin Delo / Samuel Reed",
    "violation_type": ["BSA violations", "failure to implement AML program", "operating unregistered trading platform"],
    "activity": "Operating BitMEX crypto derivatives exchange serving US customers without implementing legally required AML/KYC programs or registering with the CFTC. BitMEX knowingly served US customers while claiming to block them.",
    "outcome": "BitMEX settled with CFTC and FinCEN for $100 million. Hayes pleaded guilty and was sentenced to 6 months home detention and 2 years probation. Delo pleaded guilty and was sentenced to 30 months probation. Reed pleaded guilty and was sentenced to probation. BitMEX implemented comprehensive AML/KYC program.",
    "penalty_usd": 100000000,
    "key_lesson": "Offshore derivatives platforms cannot serve US customers without CFTC registration and BSA compliance. Token geo-blocking that is easily circumvented will not satisfy regulators. Founders face personal criminal liability for institutional AML failures.",
    "tags": ["BitMEX", "Hayes", "derivatives", "AML-failure", "geo-blocking", "CFTC", "criminal"]
  },
  {
    "case_id": "enf-us-015",
    "jurisdiction": "US",
    "regulator": "OFAC",
    "case_name": "OFAC Designation of Tornado Cash",
    "year": 2022,
    "respondent": "Tornado Cash (smart contract protocol)",
    "violation_type": ["sanctions evasion facilitation"],
    "activity": "Operating an Ethereum-based mixing protocol that obfuscated the origin and destination of crypto transactions. OFAC alleged Tornado Cash was used to launder over $7 billion in crypto including $455 million stolen by North Korea's Lazarus Group.",
    "outcome": "OFAC added Tornado Cash and associated smart contract addresses to the SDN List in August 2022. Developer Alexey Pertsev convicted in the Netherlands in May 2024 for money laundering and sentenced to 5 years 4 months. Developer Roman Storm facing criminal charges in the US. In November 2024, the Fifth Circuit ruled that OFAC exceeded its authority in sanctioning immutable smart contracts, partially overturning the designation.",
    "penalty_usd": 0,
    "key_lesson": "Privacy-preserving protocols face extreme regulatory scrutiny. Developers of mixing protocols may face personal criminal liability. The legal status of sanctioning immutable code remains contested, but the compliance implication is clear: interacting with sanctioned addresses carries severe risk.",
    "tags": ["Tornado-Cash", "OFAC", "sanctions", "mixer", "Lazarus-Group", "smart-contract", "developer-liability"]
  },
  {
    "case_id": "enf-us-016",
    "jurisdiction": "US",
    "regulator": "SEC",
    "case_name": "SEC v. Terraform Labs Pte. Ltd. and Do Hyeong Kwon",
    "year": 2024,
    "respondent": "Terraform Labs Pte. Ltd. / Do Kwon",
    "violation_type": ["securities fraud", "unregistered securities offering"],
    "activity": "Creating and marketing Terra/Luna ecosystem including algorithmic stablecoin TerraUSD (UST) and governance token LUNA, which collectively reached $60 billion market cap before collapsing in May 2022.",
    "outcome": "Jury found Terraform Labs and Do Kwon liable for securities fraud in April 2024. Settlement reached in June 2024 for $4.47 billion (largely uncollectible due to Terraform's bankruptcy). Kwon arrested in Montenegro in March 2023, extradited to the US in December 2024 to face criminal charges.",
    "penalty_usd": 4470000000,
    "key_lesson": "Algorithmic stablecoins marketed as safe investments create massive fraud liability when they collapse. Founders cannot flee jurisdiction — international cooperation will pursue them. The Terra/Luna collapse triggered global regulatory acceleration across all major jurisdictions.",
    "tags": ["Terraform", "Terra", "Luna", "UST", "algorithmic-stablecoin", "fraud", "Do-Kwon", "collapse"]
  },
  {
    "case_id": "enf-us-017",
    "jurisdiction": "US",
    "regulator": "SEC",
    "case_name": "In the Matter of Bittrex Inc.",
    "year": 2023,
    "respondent": "Bittrex Inc. / Bittrex Global GmbH",
    "violation_type": ["unregistered exchange", "unregistered broker", "unregistered clearing agency"],
    "activity": "Operating a crypto trading platform that listed tokens the SEC deemed to be securities without registering as a national securities exchange, broker-dealer, or clearing agency.",
    "outcome": "SEC filed charges in April 2023. Bittrex filed for bankruptcy in May 2023 and subsequently agreed to pay $24 million to settle SEC charges in August 2023. Bittrex ceased US operations.",
    "penalty_usd": 24000000,
    "key_lesson": "Even mid-tier crypto exchanges face SEC scrutiny for listing tokens deemed to be securities. The regulatory pressure can be existential for smaller exchanges that lack the resources to litigate. Proactive token review and delisting of potential securities is essential for exchange compliance.",
    "tags": ["Bittrex", "unregistered-exchange", "bankruptcy", "token-listing", "settlement"]
  },
  {
    "case_id": "enf-uk-001",
    "jurisdiction": "UK",
    "regulator": "FCA",
    "case_name": "FCA Supervisory Notice — Binance Markets Limited",
    "year": 2021,
    "respondent": "Binance Markets Limited",
    "violation_type": ["inability to be effectively supervised", "AML concerns"],
    "activity": "Binance Markets Limited (UK entity of Binance group) sought to conduct regulated crypto activities in the UK. The FCA determined BML was not capable of being effectively supervised due to the complexity of the Binance group and AML concerns.",
    "outcome": "FCA issued supervisory notice in June 2021 requiring BML to cease all regulated activity in the UK without prior FCA written consent. Consumer warnings published stating no Binance entity was authorised in the UK. BML remains subject to the restrictions.",
    "penalty_usd": 0,
    "key_lesson": "The FCA will bar firms from the UK market where it has concerns about the firm's supervisability, even without a specific identified breach. Global group complexity and opaque governance are red flags. Firms must demonstrate transparent governance structures that allow effective regulatory oversight.",
    "tags": ["Binance", "FCA", "supervisory-notice", "consumer-warning", "effective-supervision", "AML"]
  },
  {
    "case_id": "enf-uk-002",
    "jurisdiction": "UK",
    "regulator": "FCA",
    "case_name": "FCA Consumer Warning — FTX UK",
    "year": 2022,
    "respondent": "FTX Trading Ltd (UK operations)",
    "violation_type": ["operating without registration"],
    "activity": "FTX offered crypto trading services to UK consumers. FTX's UK entity was not registered with the FCA under the MLR 2017 for cryptoasset activities.",
    "outcome": "FCA published consumer warning in November 2022 following FTX's bankruptcy. FCA confirmed FTX was not registered in the UK and UK consumers using FTX were not protected by the FSCS or FOS. FCA worked with administrators to facilitate claims by UK creditors.",
    "penalty_usd": 0,
    "key_lesson": "UK consumers using unregistered overseas crypto platforms have no regulatory protection, no access to the FSCS, and limited recourse. The FCA's consumer warnings serve as critical public education about the risks of using unregistered platforms.",
    "tags": ["FTX", "UK", "consumer-warning", "unregistered", "no-FSCS-protection", "bankruptcy"]
  },
  {
    "case_id": "enf-uk-003",
    "jurisdiction": "UK",
    "regulator": "FCA",
    "case_name": "FCA MLR Registration Actions 2020-2024",
    "year": 2023,
    "respondent": "Multiple cryptoasset firms (200+ refused/withdrawn)",
    "violation_type": ["inadequate AML controls", "failure to meet registration standards"],
    "activity": "Over 200 firms applied for cryptoasset registration under the MLR 2017. The FCA applied rigorous assessment standards focusing on AML/CFT controls, governance, and operational readiness.",
    "outcome": "Only approximately 42 firms were granted full registration as of September 2023, representing roughly a 15-20% approval rate. Common deficiencies included inadequate CDD procedures, insufficient transaction monitoring, lack of qualified MLROs, and deficient risk assessments.",
    "penalty_usd": 0,
    "key_lesson": "The FCA sets an extremely high bar for crypto firm registration. Firms must invest significantly in compliance infrastructure before seeking registration. The most common failures are in fundamental AML/KYC controls — not technology or business model issues.",
    "tags": ["FCA", "MLR-registration", "high-rejection-rate", "AML-deficiencies", "MLRO", "compliance-standards"]
  },
  {
    "case_id": "enf-uk-004",
    "jurisdiction": "UK",
    "regulator": "FCA",
    "case_name": "FCA Enforcement — Blockchain.com",
    "year": 2023,
    "respondent": "Blockchain.com",
    "violation_type": ["non-compliant financial promotions"],
    "activity": "Blockchain.com promoted crypto services to UK consumers after the October 2023 financial promotions regime came into effect. The FCA identified concerns about compliance with the new financial promotion rules.",
    "outcome": "FCA issued consumer alert and engaged with the firm regarding compliance with the financial promotions regime. Blockchain.com adjusted its UK marketing to comply with the new rules, including adding required risk warnings and appropriateness assessments.",
    "penalty_usd": 0,
    "key_lesson": "The FCA is actively monitoring and enforcing the new crypto financial promotions regime from its October 2023 effective date. All firms marketing to UK consumers must display prescribed risk warnings, conduct appropriateness assessments, and provide cooling-off periods for first-time investors.",
    "tags": ["Blockchain.com", "financial-promotions", "risk-warnings", "consumer-alert", "compliance-adjustment"]
  },
  {
    "case_id": "enf-uk-005",
    "jurisdiction": "UK",
    "regulator": "FCA",
    "case_name": "FCA Financial Promotions Takedowns (Oct-Dec 2023)",
    "year": 2023,
    "respondent": "Multiple overseas crypto firms (221 alerts issued)",
    "violation_type": ["non-compliant financial promotions", "operating without registration"],
    "activity": "Following the October 2023 financial promotions regime, numerous overseas crypto firms continued marketing to UK consumers without compliance. Platforms used social media, influencers, and direct advertising without FCA authorisation or required risk warnings.",
    "outcome": "FCA issued 221 consumer alerts regarding non-compliant crypto promotions in Q4 2023 alone. Firms were directed to remove or amend non-compliant promotions. Some firms geo-blocked UK users rather than comply. FCA stated it would pursue criminal prosecution where necessary under Section 25 FSMA (up to 2 years imprisonment).",
    "penalty_usd": 0,
    "key_lesson": "The FCA enforces the financial promotions regime extraterritorially against overseas firms targeting UK consumers. Firms that cannot comply must geo-block UK users. Criminal prosecution is available for persistent non-compliance, making this a high-consequence area.",
    "tags": ["financial-promotions", "overseas-firms", "consumer-alerts", "geo-blocking", "Section-25", "criminal"]
  },
  {
    "case_id": "enf-sg-001",
    "jurisdiction": "SG",
    "regulator": "MAS",
    "case_name": "MAS Enforcement — Three Arrows Capital",
    "year": 2022,
    "respondent": "Three Arrows Capital Pte. Ltd.",
    "violation_type": ["exceeding AUM threshold", "providing false information to regulator"],
    "activity": "Operating as a registered fund management company in Singapore while managing assets far exceeding the SGD 250 million AUM limit for registered (vs licensed) fund managers. 3AC failed to notify MAS and provided misleading AUM figures.",
    "outcome": "MAS issued reprimands against 3AC in September 2022. Referred to Commercial Affairs Department for criminal investigation. 3AC had already been ordered into liquidation by a BVI court in June 2022 owing over $3.5 billion to creditors. Arrest warrants issued for co-founders Zhu Su and Kyle Davies.",
    "penalty_usd": 0,
    "key_lesson": "Fund managers must accurately report AUM and upgrade their regulatory status when thresholds are breached. Providing false information to regulators triggers criminal referral. The 3AC collapse demonstrated systemic risk from concentrated leverage in crypto markets.",
    "tags": ["Three-Arrows-Capital", "3AC", "AUM-breach", "false-information", "MAS", "criminal-referral", "liquidation"]
  },
  {
    "case_id": "enf-sg-002",
    "jurisdiction": "SG",
    "regulator": "MAS",
    "case_name": "MAS Response — Terraform Labs / Terra-Luna",
    "year": 2022,
    "respondent": "Terraform Labs Pte. Ltd.",
    "violation_type": ["regulatory gap — not classified as regulated product"],
    "activity": "Terraform Labs was incorporated in Singapore and operated the Terra/Luna ecosystem including algorithmic stablecoin UST. MAS assessed that Terra/Luna did not fall within its regulatory perimeter as UST was algorithmic (not reserve-backed) and LUNA was a governance token.",
    "outcome": "MAS did not take direct enforcement action as the products were outside its regulatory scope. Singapore Police Force opened fraud investigations. The collapse prompted MAS to publish consultation papers on stablecoin regulation (October 2022) and accelerate consumer protection measures. MAS finalised its stablecoin regulatory framework in August 2023.",
    "penalty_usd": 0,
    "key_lesson": "Regulatory gaps can leave consumers unprotected. The Terra/Luna collapse prompted Singapore to close gaps by creating a specific stablecoin framework. Algorithmic stablecoins pose unique risks that require dedicated regulatory treatment.",
    "tags": ["Terraform", "Terra", "Luna", "regulatory-gap", "algorithmic-stablecoin", "MAS", "stablecoin-framework"]
  },
  {
    "case_id": "enf-sg-003",
    "jurisdiction": "SG",
    "regulator": "MAS",
    "case_name": "MAS Enforcement — Hodlnaut Pte. Ltd.",
    "year": 2023,
    "respondent": "Hodlnaut Pte. Ltd.",
    "violation_type": ["misrepresentation of exposure", "AML concerns"],
    "activity": "Operating a crypto lending platform in Singapore under a transitional exemption. Hodlnaut offered yields of up to 7.25% APY on crypto deposits. The platform had significant undisclosed exposure to the Terra/Luna ecosystem.",
    "outcome": "Hodlnaut suspended withdrawals in August 2022 after Terra/Luna losses. MAS revoked Hodlnaut's exemption in March 2023 citing concerns about misrepresentation of its Terra/Luna exposure. Placed under interim judicial management. Co-founders investigated by Singapore police for potential fraud and cheating. Estimated customer losses of approximately $190 million.",
    "penalty_usd": 0,
    "key_lesson": "Crypto lending platforms must accurately disclose their investment strategies and risk exposures to customers and regulators. Concealing exposure to risky protocols while offering attractive yields is fraudulent. MAS will revoke exemptions and refer cases for criminal investigation.",
    "tags": ["Hodlnaut", "Singapore", "misrepresentation", "Terra-exposure", "judicial-management", "withdrawal-suspension"]
  },
  {
    "case_id": "enf-sg-004",
    "jurisdiction": "SG",
    "regulator": "MAS",
    "case_name": "MAS Enforcement — Zipmex Pte. Ltd.",
    "year": 2022,
    "respondent": "Zipmex Pte. Ltd.",
    "violation_type": ["failure to safeguard customer assets"],
    "activity": "Operating a crypto exchange and yield platform in Singapore. Zipmex offered ZipUp+ yield products where customer deposits were lent to third parties including Babel Finance, which defaulted.",
    "outcome": "Zipmex suspended withdrawals on ZipUp+ accounts in July 2022 due to $53 million exposure to Babel Finance's default. MAS directed Zipmex to prioritise the return of customer assets. Zipmex applied for moratorium from creditors. MAS subsequently tightened requirements for DPT service providers regarding counterparty risk management and disclosure of third-party lending activities.",
    "penalty_usd": 0,
    "key_lesson": "Crypto yield platforms must conduct thorough due diligence on counterparties to whom customer funds are lent. Concentrated counterparty exposure creates systemic risk for customers. Regulators expect clear disclosure of how customer assets are deployed and the associated risks.",
    "tags": ["Zipmex", "Singapore", "counterparty-risk", "Babel-Finance", "yield", "withdrawal-suspension", "moratorium"]
  },
  {
    "case_id": "enf-sg-005",
    "jurisdiction": "SG",
    "regulator": "MAS",
    "case_name": "MAS Enforcement — Vauld (Defi Payments Pte. Ltd.)",
    "year": 2022,
    "respondent": "Defi Payments Pte. Ltd. (Vauld)",
    "violation_type": ["failure to safeguard customer assets", "potential unlicensed activity"],
    "activity": "Operating a crypto lending and trading platform in Singapore. Vauld offered yields on crypto deposits and operated under a transitional exemption while its PS Act licence application was pending.",
    "outcome": "Vauld suspended withdrawals, trading, and deposits in July 2022 citing financial difficulties and challenging market conditions with a $70 million shortfall. MAS directed Vauld to return customer assets. Vauld placed under creditor protection and pursued acquisition by Nexo, which subsequently fell through. MAS assessed the entity's licence application unfavourably.",
    "penalty_usd": 0,
    "key_lesson": "Operating under transitional exemptions does not remove the obligation to safeguard customer assets. Crypto lending platforms that intermingle customer assets with risky DeFi strategies face existential risk. Regulators will direct firms to prioritise customer asset recovery.",
    "tags": ["Vauld", "Singapore", "withdrawal-suspension", "transitional-exemption", "customer-assets", "creditor-protection"]
  },
  {
    "case_id": "enf-sg-006",
    "jurisdiction": "SG",
    "regulator": "MAS",
    "case_name": "MAS Licence Revocations and Withdrawals 2020-2024",
    "year": 2023,
    "respondent": "Multiple DPT service provider applicants (150+ rejected)",
    "violation_type": ["inadequate AML/CFT controls", "insufficient operational readiness", "unfit key personnel"],
    "activity": "Over 170 entities applied for DPT service provider licences under the PS Act during the transitional period. MAS conducted rigorous assessment of each application against comprehensive criteria.",
    "outcome": "Only approximately 19 entities received full DPT licences by September 2023, representing roughly an 11% approval rate. Over 150 applications were refused or withdrawn. Common grounds included inadequate AML/CFT frameworks, insufficient technology risk management, poor governance, and concerns about key personnel fitness.",
    "penalty_usd": 0,
    "key_lesson": "MAS maintains one of the most stringent licensing standards globally for crypto businesses. The extremely low approval rate demonstrates that a licence application is not a formality — it requires substantial investment in compliance infrastructure, technology, and qualified personnel before applying.",
    "tags": ["MAS", "licensing", "approval-rate", "11-percent", "AML", "technology-risk", "governance"]
  },
  {
    "case_id": "enf-ae-001",
    "jurisdiction": "AE",
    "regulator": "VARA",
    "case_name": "VARA Enforcement — FTX MENA",
    "year": 2022,
    "respondent": "FTX MENA Ltd.",
    "violation_type": ["failure to maintain regulatory standards", "group-level collapse"],
    "activity": "FTX MENA operated in Dubai under a Minimum Viable Product (MVP) licence from VARA. FTX's global collapse and bankruptcy exposed systemic governance failures across the group.",
    "outcome": "VARA suspended FTX MENA's MVP licence immediately following FTX's global bankruptcy filing in November 2022 and subsequently revoked it. VARA stated that FTX MENA's Dubai operations were ring-fenced with segregated customer assets. The incident prompted VARA to strengthen its licensing framework, moving from MVP to comprehensive full licensing requirements.",
    "penalty_usd": 0,
    "key_lesson": "Group-level failures cascade to licensed subsidiaries even when operations are ring-fenced. Regulators must assess parent company governance and intercompany fund flows. The FTX collapse led VARA to abandon its phased MVP approach in favour of more rigorous upfront licensing.",
    "tags": ["FTX", "VARA", "MVP-licence", "revocation", "ring-fencing", "Dubai", "licensing-reform"]
  },
  {
    "case_id": "enf-ae-002",
    "jurisdiction": "AE",
    "regulator": "VARA",
    "case_name": "VARA Enforcement — BitOasis",
    "year": 2023,
    "respondent": "BitOasis Technologies FZE",
    "violation_type": ["non-compliance with licence conditions"],
    "activity": "BitOasis was one of the earliest crypto exchanges operating in the UAE and was granted a provisional VASP licence by VARA. BitOasis was required to meet specific conditions to progress to a full operational licence.",
    "outcome": "VARA imposed conditions on BitOasis's licence and restricted certain activities after identifying compliance shortfalls. BitOasis was required to implement remedial measures including enhanced AML controls, governance improvements, and technology upgrades. VARA subsequently allowed BitOasis to continue operating under amended conditions while working toward full compliance.",
    "penalty_usd": 0,
    "key_lesson": "Provisional or conditional licences come with strict requirements, and regulators will restrict operations if conditions are not met. Established market presence does not guarantee regulatory forbearance. Firms must treat licence conditions as binding obligations with active deadlines.",
    "tags": ["BitOasis", "VARA", "provisional-licence", "conditions", "remedial-measures", "compliance-shortfalls"]
  },
  {
    "case_id": "enf-ae-003",
    "jurisdiction": "AE",
    "regulator": "VARA",
    "case_name": "VARA Enforcement Actions Against Unlicensed Operators (2023)",
    "year": 2023,
    "respondent": "Multiple unlicensed VASPs operating in Dubai",
    "violation_type": ["operating without VARA licence", "unlicensed marketing"],
    "activity": "Multiple entities promoted and operated virtual asset services in Dubai without obtaining the required VARA licence, including unlicensed exchanges, OTC desks, and advisory services targeting Dubai residents.",
    "outcome": "VARA issued cease-and-desist notices to multiple unlicensed operators and published public warnings. Some entities were referred to Dubai Police for criminal investigation. VARA coordinated with the Dubai Economic Department to restrict the issuance of trade licences to entities claiming to provide virtual asset services without VARA authorisation. VARA imposed fines on entities that continued to operate without licence.",
    "penalty_usd": 0,
    "key_lesson": "VARA actively enforces licensing requirements and coordinates with other Dubai authorities to prevent unlicensed crypto activities. Firms must obtain proper VARA authorisation before commencing any virtual asset service in Dubai. Unlicensed operation may result in criminal referral.",
    "tags": ["VARA", "unlicensed", "cease-and-desist", "Dubai-Police", "trade-licence", "enforcement"]
  },
  {
    "case_id": "enf-ae-004",
    "jurisdiction": "AE",
    "regulator": "VARA",
    "case_name": "VARA Marketing Enforcement Actions (2023-2024)",
    "year": 2024,
    "respondent": "Multiple VASPs violating marketing rules",
    "violation_type": ["non-compliant marketing", "misleading promotions"],
    "activity": "Several licensed and unlicensed entities conducted virtual asset marketing in Dubai that did not comply with VARA's Marketing and Promotions Rulebook, including influencer promotions without required disclosures and misleading claims about returns.",
    "outcome": "VARA issued enforcement notices requiring removal of non-compliant marketing materials, imposed fines on repeat offenders, and published guidance clarifying marketing obligations. VARA also engaged with social media platforms to flag non-compliant crypto advertising targeting Dubai residents.",
    "penalty_usd": 0,
    "key_lesson": "VARA enforces its marketing rules against both licensed and unlicensed entities promoting virtual assets in Dubai. Influencer marketing requires clear disclosure of commercial relationships. Risk warnings must be prominently displayed in all marketing materials.",
    "tags": ["VARA", "marketing", "influencer", "non-compliant-promotions", "enforcement", "risk-warnings"]
  },
  {
    "case_id": "enf-eu-001",
    "jurisdiction": "EU",
    "regulator": "Multiple EU NCAs",
    "case_name": "Binance EU Market Exits (2021-2023)",
    "year": 2023,
    "respondent": "Binance Holdings Limited (various EU entities)",
    "violation_type": ["regulatory non-compliance", "operating without authorisation"],
    "activity": "Binance operated across multiple EU member states while facing regulatory scrutiny over its corporate structure, AML controls, and ability to meet licensing requirements in individual jurisdictions.",
    "outcome": "Binance exited or restricted services in multiple EU markets including Germany (BaFin concerns), Netherlands (DNB refused registration), Belgium (FSMA ordered cessation), Italy (Consob warnings), and others. Binance subsequently restructured to obtain licences in France (registered with AMF in 2022 as first EU registration) and other jurisdictions to prepare for MiCA compliance.",
    "penalty_usd": 0,
    "key_lesson": "Operating across the EU without proper authorisation in each member state is unsustainable. Pre-MiCA, each country applied its own rules. Under MiCA, a single licence will passport across the EU, but the bar for authorisation is high. Strategic regulatory engagement is essential for global exchanges entering the EU market.",
    "tags": ["Binance", "EU", "market-exits", "BaFin", "DNB", "AMF", "MiCA-preparation", "passporting"]
  },
  {
    "case_id": "enf-eu-002",
    "jurisdiction": "EU",
    "regulator": "DNB (De Nederlandsche Bank)",
    "case_name": "DNB Refusal — Binance Netherlands Registration",
    "year": 2022,
    "respondent": "Binance Holdings Limited (Netherlands operations)",
    "violation_type": ["failure to meet AML registration requirements"],
    "activity": "Binance applied for registration as a crypto service provider with the Dutch Central Bank (DNB) under the Netherlands' implementation of AMLD5. DNB assessed Binance's AML/CFT controls and corporate governance.",
    "outcome": "DNB refused Binance's registration application in June 2022, citing concerns about Binance's corporate governance structure, AML/CFT compliance framework, and the difficulty of supervising the Binance group's complex and opaque global corporate structure. Binance was ordered to cease offering crypto services to Dutch residents. DNB fined Binance EUR 3.3 million for operating without proper registration.",
    "penalty_usd": 3500000,
    "key_lesson": "EU member states' central banks and regulators conduct thorough assessments of crypto firm AML controls. Complex, opaque global corporate structures are a red flag for supervisability. Firms must demonstrate clear governance, transparent reporting lines, and effective AML programs to obtain registration.",
    "tags": ["Binance", "Netherlands", "DNB", "registration-refusal", "AML", "corporate-governance", "fine"]
  },
  {
    "case_id": "enf-eu-003",
    "jurisdiction": "EU",
    "regulator": "FSMA (Belgium)",
    "case_name": "FSMA Order — Binance Belgium",
    "year": 2023,
    "respondent": "Binance Holdings Limited (Belgium operations)",
    "violation_type": ["providing financial services without authorisation"],
    "activity": "Binance offered crypto exchange services to Belgian residents without proper authorisation from the Belgian Financial Services and Markets Authority (FSMA).",
    "outcome": "FSMA ordered Binance to immediately cease all activities relating to the provision of virtual currency services to Belgian clients in June 2023. FSMA published a public warning on its website identifying all Binance entities and advising Belgian consumers that Binance was not authorised. Binance complied with the order and redirected Belgian users.",
    "penalty_usd": 0,
    "key_lesson": "EU member states can and do order global exchanges to cease serving local customers. Public warnings by national authorities have significant reputational impact. Compliance with each EU country's national rules was essential pre-MiCA and remains critical during the transition period.",
    "tags": ["Binance", "Belgium", "FSMA", "cessation-order", "consumer-warning", "unauthorised"]
  },
  {
    "case_id": "enf-eu-004",
    "jurisdiction": "EU",
    "regulator": "BaFin (Germany)",
    "case_name": "BaFin Warning — Crypto Token Offerings",
    "year": 2022,
    "respondent": "Multiple crypto token issuers",
    "violation_type": ["prospectus violations", "operating without BaFin authorisation"],
    "activity": "Multiple crypto token issuers offered security tokens to German investors without publishing a prospectus approved by BaFin as required under the EU Prospectus Regulation and German Securities Prospectus Act.",
    "outcome": "BaFin issued multiple warnings and cease-and-desist orders against token issuers. BaFin classified several tokens as securities requiring prospectus publication and issuer authorisation. Firms were ordered to cease offers and, in some cases, to offer repurchase of tokens to German investors. BaFin maintained a public database of warnings.",
    "penalty_usd": 0,
    "key_lesson": "German securities law applies to tokens classified as securities, requiring BaFin-approved prospectuses. BaFin's substance-over-form approach means that token classification depends on economic characteristics, not marketing labels. Germany has been among the most active EU member states in crypto enforcement.",
    "tags": ["BaFin", "Germany", "prospectus", "security-tokens", "cease-and-desist", "classification"]
  },
  {
    "case_id": "enf-us-018",
    "jurisdiction": "US",
    "regulator": "SEC",
    "case_name": "SEC v. Impact Theory LLC",
    "year": 2023,
    "respondent": "Impact Theory LLC",
    "violation_type": ["unregistered securities offering"],
    "activity": "Selling Founder's Key NFTs as a tiered collection (Legendary, Heroic, Relentless) raising approximately $30 million. Impact Theory marketed the NFTs as investments and tied holder benefits to the company's growth.",
    "outcome": "SEC settled with Impact Theory in August 2023 for $6.1 million. Impact Theory agreed to destroy remaining NFTs, publish notice of the order, and establish a fund to reimburse investors. This was one of the SEC's first NFT-related enforcement actions.",
    "penalty_usd": 6100000,
    "key_lesson": "NFTs can be securities when marketed as investments with expected appreciation based on the issuer's efforts. The SEC looks at how NFTs are sold and promoted, not just their technical format. Tiered NFT collections marketed as access to a growing business create strong Howey arguments.",
    "tags": ["NFT", "Impact-Theory", "investment-contract", "Howey", "SEC", "first-NFT-enforcement"]
  },
  {
    "case_id": "enf-us-019",
    "jurisdiction": "US",
    "regulator": "FinCEN",
    "case_name": "FinCEN Enforcement — Larry Dean Harmon (Helix)",
    "year": 2020,
    "respondent": "Larry Dean Harmon / Helix",
    "violation_type": ["operating unlicensed money transmitting business", "BSA violations"],
    "activity": "Operating Helix, a Bitcoin tumbling/mixing service that processed over 354,468 BTC (approximately $311 million at the time). Helix partnered with darknet marketplace AlphaBay to launder proceeds.",
    "outcome": "FinCEN assessed a $60 million civil money penalty against Harmon in October 2020 — the first FinCEN enforcement action against a crypto mixer. Harmon also pleaded guilty to money laundering conspiracy charges and was sentenced to 3 years in federal prison.",
    "penalty_usd": 60000000,
    "key_lesson": "Crypto mixing services are money transmission businesses under US law requiring MSB registration. Operators face both civil FinCEN penalties and criminal prosecution. The first mixer enforcement set the precedent for subsequent actions against Tornado Cash and other privacy tools.",
    "tags": ["mixer", "tumbler", "Helix", "FinCEN", "BSA", "money-transmission", "darknet", "criminal"]
  },
  {
    "case_id": "enf-us-020",
    "jurisdiction": "US",
    "regulator": "SEC",
    "case_name": "In the Matter of Stoner Cats 2 LLC",
    "year": 2023,
    "respondent": "Stoner Cats 2 LLC (Mila Kunis, Ashton Kutcher affiliated)",
    "violation_type": ["unregistered securities offering"],
    "activity": "Selling NFTs tied to an animated web series featuring celebrity voices. Raised $8.2 million in 35 minutes from selling 10,420 NFTs. Marketing emphasised secondary market profit potential and celebrity involvement.",
    "outcome": "SEC settled for $1 million in September 2023. Stoner Cats agreed to destroy remaining NFTs, establish a fair fund for investors, and publish notice of the order. No admission or denial of findings.",
    "penalty_usd": 1000000,
    "key_lesson": "Celebrity-backed NFT projects face heightened SEC scrutiny. Marketing NFTs based on profit potential from secondary market trading and celebrity involvement creates investment contract characteristics. Even pop culture projects must consider securities classification.",
    "tags": ["NFT", "Stoner-Cats", "celebrity", "investment-contract", "secondary-market", "SEC"]
  }
]