OKX

As of November 2026: The plea, sentence and penalties are as stated in the Justice Department's February 24, 2025 release. The consultant requirement runs to February 2027. The charging document and plea agreement linked from that release were not opened, and the review found no later US enforcement action against OKX through November 2026. The Malta penalty is known from press coverage, not the regulator's own notice. OKX's statements about the settlement are the company's own account.

Also known as: OKX guilty plea · Aux Cayes FinTech · OKEx.

What happened?

OKX is one of the largest cryptocurrency exchanges in the world. The Justice Department says that since at least 2017 it has been run by Aux Cayes FinTech Co. Ltd., a Seychelles-based company. Users there can trade more than three hundred coins, including Bitcoin and Ethereum, and derivative products such as futures.

Since 2017 OKX has had an official policy that US persons may not trade on it. According to the Justice Department’s statement of facts, the policy was not how the business actually ran. From about 2018 to at least early 2024, OKX served US retail and institutional customers who traded over US$1 trillion, earning hundreds of millions of dollars in fees and profits. One institutional customer alone generated more than a trillion dollars in trading. Because it served US customers, prosecutors said, OKX knew US law required it to register with FinCEN as a money services business, and chose not to.

On February 24, 2025, Aux Cayes FinTech pleaded guilty to one count of operating an unlicensed money transmitting business and was sentenced the same day. It agreed to forfeit US$420.3 million and pay a criminal fine of about US$84.4 million.

Which techniques did it use?

OKX was not a laundering scheme built by criminals. Like Binance, it mattered as infrastructure: a large exchange where weak controls let other people move value without being identified. The record describes several gaps that investigators look for in any platform.

• No identity checks at the start. From about 2017 to November 2022, retail customers could open an account, move funds and trade without any know-your-customer process. Until early 2023 existing accounts could keep operating that way.
• A location block that was known to leak. OKX blocked US IP addresses, but prosecutors said it knew cheap, widely available VPN tools could get around the block.
• Anonymous trading through intermediaries. Until about early 2024, customers could trade through third-party “non-disclosure brokers” that gave OKX no identifying information about the people behind the orders.
• Thin monitoring and sanctions screening. Until about May 2023, OKX did not adequately or consistently use commercially available software to detect suspicious activity, and it lacked adequate controls to check whether parties to trades were subject to OFAC sanctions.

For the wider pattern of exchanges that cash out criminal coins, see the techniques section.

How was it found?

The public record does not say how the investigation began. The case was prosecuted by the Illicit Finance and Money Laundering Unit of the US Attorney’s Office in Manhattan, with the FBI’s New York field office. The Justice Department said its finding of more than US$5 billion in suspicious transactions came from a review of third-party transaction data, which is the kind of analysis blockchain analytics firms perform.

The facts also came from inside the company. Prosecutors cited messages in which an OKX employee, in April 2023 and again in January 2024, discussed with prospective US customers how to supply false information during sign-up. In plain terms, some staff were working against the company’s own written policy.

What was the outcome?

• Plea and sentence. One count of operating an unlicensed money transmitting business, handled before US District Judge Katherine Polk Failla on February 24, 2025.
• Money. US$420.3 million in forfeiture and about US$84.4 million in fines, more than US$504 million together. OKX received a 25% reduction off the bottom of the recommended fine range for cooperating and for fixing problems in time.
• A consultant, not a typical monitor. OKX hired an external compliance consultant in early 2024 to advise on controls meant to keep US persons off the platform. Under the plea agreement it must keep the consultant, at its own expense, through February 2027, and cooperate with prosecutors. OKX describes this as voluntary and says there is no government-appointed monitor.
• The company’s account. OKX said Aux Cayes FinTech resolved the investigation by acknowledging it had not obtained a license to operate as a money transmitter, and that the affected US customers were a small percentage of its worldwide customers and have left the platform.
• Affiliate carve-out. The Justice Department stated that the conduct was solely that of Aux Cayes FinTech, and not that of OKCoin USA, a separate exchange registered with FinCEN.

What were the warning signs?

• Policy and practice that did not match. A written ban on US users, alongside advertising in the United States and affiliate marketing that targeted US customers, is a red flag for any regulator.
• Accounts with no verified owner. Trading, deposits and transfers were possible with no identity process at all, so the real person behind much of the activity was unknown.
• Customers who can hide who they are. A platform that is aware of workarounds and does not close them has made a choice.
• Staff who help customers around the rules. The record included employees suggesting false sign-up details to prospective customers.
• Very large volume with few reports. The Justice Department said significant illicit transactions went undetected on the platform, a sign that transaction monitoring was not working.

What changed afterwards?

The plea is part of a run of US cases against large crypto exchanges, alongside the Binance resolution. It shows that an offshore company can be prosecuted in New York when it deliberately serves US customers without registering. It also shows how the cost can be set: the fine was cut for cooperation, and OKX describes the forfeiture as fees earned from US customers.

The reach of the case stayed narrow. It did not involve a money laundering charge, and the consultant arrangement runs to February 2027, so the longer-term effect is still open. OKX relaunched a US-facing business in April 2025 under a new US chief executive, and other regulators have acted separately, including a reported 1.1 million euro fine from Malta in April 2025. The sources reviewed report no later US enforcement action through November 2026. For other exchange cases, see the Bybit hack and the detection overview.

First published November 4, 2026 · Last updated November 4, 2026 · Legal statuses current as of November 2026