The Ruling
On August 18, 2019, The New York Times published a landmark investigative report by financial journalist Nathaniel Popper that sent shockwaves through both the cryptocurrency industry and the global regulatory community. Titled “Terrorists Turn to Bitcoin for Funding, and They’re Learning Fast,” the article documented in unsettling detail how terrorist organizations — including Al Qaeda and its affiliated networks — were increasingly turning to Bitcoin and other cryptocurrencies to finance their operations.
The report revealed that militant groups had moved beyond rudimentary Bitcoin wallet usage and were developing increasingly sophisticated methods for soliciting, transferring, and laundering cryptocurrency donations. The timing was particularly striking: it arrived on the exact same day that Finland’s FIN-FSA registration deadline for all virtual currency providers took effect, underscoring the urgent global tension between cryptocurrency innovation and national security imperatives.
Bitcoin traded at approximately $10,346 on August 18, according to CoinMarketCap data, with Ethereum at $194.49. The broader cryptocurrency market posted a broad-based rally that day, with Kraken’s daily market report showing gains of 2-9% across most major digital assets. ETH climbed 7.07% to $195.50, XRP surged 9.41% to $0.2876, and Bitcoin Cash gained 5.07% to reach $320.40. The rally appeared disconnected from the regulatory headlines, driven instead by broader market dynamics.
International Precedents
The NYT investigation did not emerge in a vacuum. It arrived amid a global regulatory tightening around cryptocurrency that accelerated throughout mid-2019. The Financial Action Task Force had published its updated guidance on virtual asset service providers on June 21, 2019, establishing new standards for how nations should regulate cryptocurrency businesses to prevent money laundering and terrorist financing. The FATF guidance introduced the so-called “travel rule,” requiring virtual asset service providers to collect and share information about the originators and beneficiaries of cryptocurrency transfers.
Finland’s aggressive regulatory posture — requiring all crypto providers to register by August 18 or cease operations — represented one of the most concrete national implementations of the FATF framework. The country’s Act on Virtual Currency Providers (572/2019) went beyond the minimum requirements of the EU’s Fifth Anti-Money Laundering Directive, expanding the definition of regulated exchange services to include crypto-to-commodity trading and imposing registration requirements without EEA passporting rights.
Other jurisdictions were moving in parallel. In the United States, the SEC had been ramping up enforcement actions against token issuers throughout 2019, while FinCEN continued to apply existing money transmission regulations to cryptocurrency businesses. The combination of the NYT exposé and the Finnish deadline highlighted the growing recognition among policymakers that self-regulation within the crypto industry was insufficient to address the risk of terrorist financing.
The report also came just days after Ripple’s investment subsidiary Xpring announced a grant of 1 billion XRP — worth approximately $264 million at the time — to Coil Technologies, a micropayments platform for content creators. That same week, Walmart filed a patent application for a blockchain-backed drone communication system, signaling the technology’s expanding corporate adoption even as regulatory scrutiny intensified.
Enforcement Reality
The enforcement landscape revealed by the NYT report exposed significant gaps in the global cryptocurrency regulatory architecture. While blockchain transactions are pseudonymous rather than fully anonymous, terrorist organizations were exploiting the relative speed and borderless nature of cryptocurrency transfers to move funds across jurisdictions with less friction than traditional banking channels. The report noted that these groups were becoming more technically proficient, learning to use mixing services and privacy-focused techniques to obscure transaction trails.
For regulators, the challenge is fundamentally one of jurisdiction. Cryptocurrency transactions operate on decentralized networks that do not respect national borders, but regulatory authority remains firmly anchored in geography. A cryptocurrency exchange operating from one jurisdiction can serve users globally, creating enforcement gaps that terrorist organizations have proven adept at exploiting. The FATF’s travel rule represents an attempt to bridge this gap by imposing information-sharing requirements on service providers, but its effectiveness depends entirely on the quality and consistency of national implementation.
The Finnish model offers one vision of how this implementation might work. By requiring comprehensive registration documentation — including customer due diligence procedures, risk assessments, cybersecurity protocols, and recovery plans — the FIN-FSA framework forces providers to build compliance infrastructure from the ground up. The November 1, 2019 assessment deadline adds a mechanism for enforcing quality standards: providers whose applications fall short face the prospect of being forced to wind down their Finnish operations.
Yet even robust national frameworks face inherent limitations. The lack of passporting across the EEA means that a provider registered in Finland cannot simply extend its compliance infrastructure to other European markets. Each jurisdiction requires a separate application process, creating a fragmented regulatory landscape that sophisticated actors can exploit by shifting operations to less stringent jurisdictions.
Market Shockwaves
Despite the gravity of the NYT report and the concurrent Finnish regulatory deadline, the cryptocurrency market showed remarkable resilience on August 18. Bitcoin’s 2.10% gain and the broader rally across altcoins suggested that market participants either discounted the regulatory risk or viewed it as already priced in. The total cryptocurrency market capitalization stood at approximately $270 billion on August 18, with Bitcoin dominance at roughly 68%.
This market indifference reflects a pattern that has characterized cryptocurrency’s relationship with regulatory news throughout its history. Major regulatory announcements — whether restrictive or accommodating — tend to produce short-term price volatility that quickly gives way to broader technical and fundamental drivers. The August 18 rally, for instance, was more likely driven by Bitcoin’s recovery from a late-week sell-off that had pushed prices below $10,000 earlier in the week, with the cryptocurrency finding support near the $9,800 level before rallying back above $10,300.
For institutional investors, however, the regulatory trajectory matters significantly more than daily price action. The combination of the NYT investigation, the Finnish registration deadline, and the FATF guidance creates a clear directional signal: cryptocurrency regulation is tightening globally, and compliance costs for legitimate businesses will continue to rise. This has implications for market structure, potentially favoring larger, well-capitalized operators who can absorb compliance costs over smaller, more nimble competitors.
Closing Thoughts
The events of August 18, 2019, capture a defining tension in the cryptocurrency ecosystem. The technology’s core promise — permissionless, borderless, censorship-resistant value transfer — is simultaneously its greatest asset and its most significant vulnerability. When that promise is co-opted by malicious actors for terrorist financing, it triggers the very regulatory response that threatens to undermine the characteristics that make cryptocurrency valuable in the first place.
The path forward requires balancing legitimate privacy concerns with the imperative to prevent cryptocurrency from becoming a preferred tool for terrorist finance. Finland’s regulatory framework, while aggressive, represents a genuine attempt to strike this balance — requiring registration and compliance without banning cryptocurrency activity outright. The FATF’s travel rule, if consistently implemented across jurisdictions, could create a global standard that raises the cost of using cryptocurrency for illicit purposes without destroying the utility that drives legitimate adoption.
What remains uncertain is whether the pace of regulatory development can keep up with the speed of technological innovation in the cryptocurrency space. As terrorist organizations continue to develop more sophisticated methods for using digital assets — potentially shifting toward privacy coins like Monero, which traded at $85.00 on August 18 — regulators face a perpetual game of catch-up. The events of this single day in August 2019 illustrate both the urgency of the challenge and the complexity of crafting solutions that work within the constraints of national legal systems operating in a globally interconnected digital economy.
Disclaimer: This article is for informational purposes only and does not constitute legal, financial, or investment advice. The views expressed are based on publicly available reporting and regulatory documents as of August 2019. Readers should consult qualified professionals for guidance on regulatory compliance or investment decisions.
nathaniel popper doing the reporting here gives it credibility. most “terrorists use bitcoin” stories are lazy but this one had actual wallet forensics
the timing with Finland’s registration deadline the same day is wild. regulators reading that NYT piece and thinking “see, we told you”
popper is one of the few mainstream journalists who actually understands crypto well enough to write about it without sensationalizing. the wallet forensics in that piece were solid
BTC at $10,346 when this dropped. The market barely flinched despite the NYT headline. Tells you how desensitized everyone was to regulatory FUD by August 2019.
al qaeda using public blockchains for fundraising is honestly the dumbest possible opsec. every transaction is traceable forever. cash is still king for that reason
exactly. chainalysis and elliptic exist because public ledgers make tracking easier not harder. the terrorists using btc story always ignores this
finland registering crypto providers on the same day the nyt piece dropped was peak regulatory timing. coincidences like that dont happen by accident