The New York State Department of Financial Services entered a consent order with Paxos Trust Company, LLC on 7 August 2025, requiring the digital asset firm to pay a civil monetary penalty of $26.5 million for systemic failures in its anti-money laundering compliance programme. The order, published on the NYDFS website, represents one of the more significant regulatory enforcement actions taken against a state-chartered digital asset company and sets a clear marker for the standard of AML oversight that New York's regulator expects of firms operating in the cryptocurrency space.
NYDFS found that Paxos failed to conduct sufficient due diligence on its former business partner Binance, the world's largest cryptocurrency exchange by trading volume, which has itself faced extensive regulatory scrutiny across multiple jurisdictions. The regulator also determined that Paxos's transaction monitoring system was deficient, including a failure to regularly assess and tune its surveillance rules to account for high-risk areas of the business. The consent order does not require Paxos to admit wrongdoing but mandates substantial and time-bound remediation spending alongside ongoing supervisory oversight.
REMEDIATION SPENDING AND REPORTING OBLIGATIONS
Under the terms of the consent order, Paxos is required to invest $3.15 million in compliance improvements during 2025 and a further $7.25 million in 2026. The structured spending commitments are designed to ensure that the deficiencies identified by NYDFS are addressed in a systematic and measurable manner rather than left to the company's own discretion and prioritisation. The total mandated remediation investment across the two years reflects the depth and breadth of the compliance programme weaknesses that the examination identified.
Paxos must also submit biannual progress reports to NYDFS for a period of three years, providing the regulator with regular and structured visibility into the firm's remediation efforts and the ongoing effectiveness of its AML controls. The requirement to report twice yearly for three consecutive years reflects the seriousness of the concerns identified and is consistent with the approach NYDFS has used in other consent orders to maintain supervisory pressure on regulated entities beyond the point at which financial penalties have been paid, ensuring that institutional reform is implemented and sustained over time.
CONTEXT AND REGULATORY SIGNIFICANCE
Paxos holds the distinction of being the first company to receive a NYDFS Limited Purpose Trust Charter for Digital Assets, a licence granted in 2015 that allowed it to operate stablecoin issuance, asset tokenisation, settlement services, and cryptocurrency brokerage under New York's regulatory framework. That pioneering regulatory status makes the August 2025 consent order particularly noteworthy: it demonstrates that even the most established and long-regulated digital asset firms are not immune to enforcement action when their compliance infrastructure falls short of the standards that the regulator requires.
The case also reinforces the NYDFS position that business relationships with higher-risk counterparties in the cryptocurrency ecosystem carry substantial due diligence obligations that cannot be waived by virtue of a partner's scale or market prominence. For other New York-chartered digital asset companies, the Paxos settlement serves as a clear precedent: transaction monitoring systems must be actively managed, calibrated to the specific risk profile of the business, and subject to regular reassessment — particularly where the firm's clients or commercial partners operate in segments of the crypto market that carry elevated financial crime exposure.