Over the past three years, major cryptocurrency exchanges have systematically delisted Monero from their platforms. Coinbase removed XMR trading in 2023, followed by Kraken, Bitstamp, and most regional exchanges. The stated reason is consistent: regulatory pressure and compliance demands from financial authorities who view privacy coins as inherently high-risk for money laundering and sanctions evasion. For users who held Monero on these platforms or relied on them for price discovery and liquidity, the delisting created an immediate practical problem: how to move XMR safely without a centralized on-ramp, and where to store it once held.

This regulatory squeeze has repositioned non-custodial wallets from a privacy preference to an operational necessity. Cake Wallet, the open-source wallet trusted by over 1 million users since its 2018 launch, has become one of the few accessible tools for users to retain control of Monero holdings outside of regulated intermediaries. But the delisting cascade also raises a harder question: what legal and operational risks do users face when the primary method of moving and storing a restricted asset is a non-custodial application, and how durable is that model when regulatory attention intensifies?

Why exchanges are delisting Monero despite its legitimate uses

The delisting pattern began not with outright bans but with escalating compliance costs. Regulatory bodies, particularly the Financial Action Task Force (FATF) and national financial intelligence units (FIUs), issued guidance treating privacy coins as higher-risk assets. The FATF’s 2019 recommendations specifically flagged anonymity-enhancing technologies, and subsequent regulatory interpretations have pushed exchanges to choose between maintaining Monero pairs and satisfying compliance officers who view the asset class as unnecessarily difficult to monitor.

The ostensible justification is anti-money laundering (AML) and know-your-customer (KYC) requirements. Monero’s inherent privacy features—ring signatures, stealth addresses, and RingCT—obscure sender, recipient, and transaction amount on the blockchain itself. A regulated exchange cannot transparently verify whether a user withdrawal goes to a sanctioned entity or complies with travel rule obligations, because those details are mathematically unavailable. From a compliance officer’s perspective, delisting removes the liability surface rather than accepting technological risk.

What is often omitted from these justifications is that Monero’s privacy also serves legitimate users: journalists in hostile countries, activists avoiding identification, individuals in weak currencies protecting savings from capital controls, and users in jurisdictions where financial surveillance is routine or politically weaponized. The privacy is not intrinsically correlated with criminal intent. But regulatory frameworks increasingly treat privacy itself as a compliance failure rather than distinguishing between privacy and illicit use.

The delisting cascade creates a secondary effect: reduced liquidity and price discovery. When Monero trading vanishes from major exchanges, the asset becomes harder to price and trade in volume. This incentivizes remaining users to move XMR away from retail venues and into peer-to-peer or decentralized methods. Ironically, the regulatory pressure meant to contain Monero’s use may push it toward the exact infrastructure—unregulated exchanges, mixing services, and dark-web markets—that justified the original concern.

How non-custodial wallets become the default infrastructure

A non-custodial wallet like Cake Wallet does not depend on an exchange’s permission to exist or operate. The user controls the private key, broadcasts transactions directly to the Monero network through a selected node, and retains funds without trusting a platform to hold or return them. When centralized exchanges disappear as an option, non-custodial software becomes the remaining on-ramp and storage solution for users who already hold Monero or who can access it through peer-to-peer channels.

This shift has concrete operational advantages. A user holding XMR in a Cake Wallet instance cannot have it frozen by regulatory order, delisted due to compliance drift, or seized by an exchange failure. The private key is mathematically under the user’s control. Background synchronization and subaddress support mean users can receive payments without repeatedly exposing the same public address, adding another privacy layer beyond Monero’s protocol. The open-source architecture also means the code is auditable; users are not relying on trust in a corporation but on the transparent behavior of the application itself.

However, this operational resilience comes with a different kind of dependency. Users must now manage key security, node selection, and transaction verification without the intermediary. There is no customer support to recover a forgotten password, no insurance against theft, and no dispute resolution if a counterparty claims non-receipt. The removal of custodial risk simultaneously removes custodial protection. That trade-off is favorable for security-conscious users but introduces a higher barrier to adoption for those accustomed to regulated-exchange convenience.

The delisting cascade has also accelerated development of infrastructure that Cake Wallet and similar tools depend on. Decentralized exchanges, non-custodial swaps, privacy-first payment processors, and peer-to-peer liquidity pools have become more visible and more accessible. Users can now move Monero to Bitcoin, Ethereum, or stablecoins without touching a regulated exchange, though usually with higher fees and lower liquidity than a centralized venue would offer. The cost of regulatory avoidance is real, but for many users it is acceptable compared to the risk of holding XMR on a platform that may delist it tomorrow.

The legal ambiguity facing users and wallet providers

Using a non-custodial Monero wallet exists in a complicated legal space that varies by jurisdiction. In the United States and European Union, possessing and transferring Monero is not illegal. The asset is listed on the SEC’s list of digital assets, and individuals can buy, hold, and sell XMR without violating financial regulations simply by virtue of the transaction. However, regulatory guidance has become increasingly hostile toward tools and services that facilitate Monero use, even if the underlying activity is legal.

The key legal risk is not possession but facilitation. A provider that makes it easy to acquire or trade Monero, or that offers liquidity for Monero transactions, may be treated as a money services business (MSB) or money transmitter subject to registration and compliance obligations. The distinction between a software application and a service is becoming contested. If a wallet provider also operates nodes, offers exchange routing, or collects user data, regulators may argue they are engaged in transmission and thus subject to licensing requirements.

For Cake Wallet specifically, the open-source, non-custodial model provides some legal cover. The application does not hold user funds, does not process transactions on behalf of users, and does not collect identifying information or maintain transaction histories. The code is publicly available, and users download and run the software themselves rather than accessing a service. These characteristics align with software distribution rather than financial services transmission. However, this distinction has not been tested in court, and regulatory interpretation continues to evolve.

Users face a subtler legal exposure. If a Monero transaction is later traced through chain analysis, mixing analysis, or network observation back to a user, that individual could face questions about the source of funds or the destination. Monero’s privacy is cryptographic privacy—on the blockchain itself. It does not prevent network-level surveillance, does not necessarily hide the fact that a transaction occurred (metadata can still reveal timing and volume), and does not protect a user whose Monero was obtained through a regulated exchange that kept KYC records. The privacy is only as strong as the entire transaction history preceding the private transfer.

Regulatory approaches in major jurisdictions

The regulatory response to Monero varies significantly. The European Union’s Markets in Crypto-assets (MiCA) regulation does not explicitly ban privacy coins, but it requires stricter controls on exchanges that do list them. This has effectively motivated most EU-regulated platforms to delist Monero rather than implement enhanced monitoring. The UK’s Financial Conduct Authority (FCA) has also indicated that Monero poses a higher money-laundering risk and encouraged platforms to restrict or remove it.

Japan’s approach has been more permissive. The Financial Services Agency (FSA) does not categorically ban Monero exchanges but requires compliance with AML and KYC rules. This has allowed some Japanese exchanges to maintain XMR trading pairs, though with higher regulatory scrutiny. South Korea and Singapore have similarly maintained a middle position, neither banning privacy coins outright nor treating them as equivalent to standard cryptocurrencies.

The United States occupies an interesting middle ground. The Treasury Department’s Office of Foreign Assets Control (OFAC) does not list Monero itself as prohibited, but it has issued guidance indicating that transactions involving privacy coins may trigger enhanced reporting obligations or scrutiny. Some states have moved toward stricter interpretations. New York’s BitLicense framework, for example, implicitly discourages privacy-coin trading by raising compliance costs. Other jurisdictions have not yet taken formal positions, creating a patchwork that Cake Wallet and other providers must navigate.

The absence of an explicit ban in most jurisdictions is not the same as regulatory acceptance. Authorities appear to be pursuing a strategy of making privacy-coin infrastructure difficult rather than illegal. Delisting from major exchanges, restricting bank access for platforms that do offer Monero, and increasing compliance costs for service providers create a pressure environment that does not require a formal prohibition. Users who still hold or trade Monero must do so through smaller, less liquid platforms or peer-to-peer methods, accepting higher costs and less transparency in exchange for reduced regulatory exposure.

Privacy tools and their limitations under scrutiny

Monero’s privacy mechanisms are mathematically robust but not immune to real-world investigation. Chain analysis firms have developed statistical models to de-anonymize transactions under certain conditions, particularly when a user consolidates funds from a transparent blockchain (such as Bitcoin) into Monero, or when timing and quantity patterns leak information. Similarly, network-level monitoring can sometimes identify which IP addresses are broadcasting Monero transactions, even if the transaction details themselves remain obscured.

Cake Wallet addresses some of these vectors. Tor-only mode routes transactions through the Tor network, reducing the direct exposure of a user’s IP address to nodes and observers. Background synchronization allows the wallet to retrieve transaction data without broadcasting a specific address lookup pattern repeatedly. Support for custom nodes means users can operate their own full node or route through a trusted instance rather than relying on a default public node.

However, these protections have boundaries. Using Tor does not make a user completely anonymous if the Monero address itself has been linked to that user through a prior transaction, exchange record, or disclosure. Custom nodes are useful only if the user understands node operation or has a trusted provider. Default settings matter; a user who does not actively configure privacy options will have a less private transaction history than one who understands the mechanisms and chooses subaddresses, custom nodes, and network routing.

The most important limitation is behavioral. Monero’s privacy protects the blockchain level, but users can expose themselves through careless spending patterns, address reuse, timing, or disclosure to counterparties. If a user receives Monero through a regulated exchange and immediately spends it in a context where their identity is known, the privacy is nullified. If they consolidate multiple sources of Monero, analysis may re-link transactions. The cryptography is not the weak point; the human decisions around its use are.

The likelihood of wallet-level regulatory pressure

As exchanges have delisted Monero, regulatory attention has begun to shift toward the tools that users now rely on instead. Authorities may eventually pursue enforcement against wallet providers, either through pressure on app stores to remove applications or through direct jurisdiction arguments claiming that certain wallet activities constitute financial transmission.

Apple and Google have already shown willingness to restrict cryptocurrency applications under regulatory pressure. Both companies have removed mixing services, privacy-focused applications, and Monero-specific wallets from their respective app stores in certain jurisdictions. Cake Wallet’s availability on mainstream app stores remains intact, partly because its open-source model and non-custodial architecture provide legal defensibility, and partly because it has not faced the same targeted campaigns as some other privacy tools.

However, the precedent is not reassuring. If regulators succeed in framing Cake Wallet as a service rather than software, or if they coordinate with app store operators to restrict its distribution, users would lose the most accessible method of managing Monero. Users could still compile the open-source code themselves or download it from alternative sources, but this raises the technical barrier significantly. The effect would be to move privacy tools from mainstream accessibility to a more specialized, technical audience.

The liability question also matters for the developers. If Cake Wallet’s maintainers are based in a jurisdiction with aggressive financial regulations, they could face legal pressure despite the application’s non-custodial design. The open-source model provides some protection—the code is distributed, not controlled by a single entity—but developers can still be prosecuted in their home jurisdictions. Some privacy-focused developers have responded by relocating to friendlier jurisdictions or operating anonymously, a strategy that itself indicates the level of regulatory risk they perceive.

Strategic responses and the future of privacy infrastructure

One plausible regulatory endpoint is a two-tier system: privacy tools remain available to technically sophisticated users but are removed from mainstream distribution and face increasing legal scrutiny, while casual users are funneled toward regulated, non-private alternatives. This would not eliminate Monero or Cake Wallet but would make them less convenient and higher-risk to use. Users who still value privacy would pay higher costs in time, technical knowledge, and legal uncertainty to access it.

Alternatively, regulators may accept a compromise where privacy coins remain available through decentralized infrastructure but are subject to stricter on-ramp and off-ramp controls. Users could hold and transfer Monero freely, but converting between Monero and fiat currency would require regulated platforms to implement enhanced AML monitoring. This would allow privacy at the transaction level while maintaining some regulatory visibility at the edges of the financial system.

A third scenario involves technological accommodation. If privacy tools adopt more selective privacy features, allowing regulators to have some visibility under exceptional circumstances (such as legal orders), mainstream platforms might be willing to continue supporting them. This would require changes to Monero’s protocol or the introduction of escrow-like mechanisms that weaken privacy in exchange for regulatory compliance. The Monero community has largely rejected this approach, viewing it as a fundamental betrayal of the technology’s purpose.

The most likely outcome is a gradual restriction rather than an outright ban. Monero continues to exist and function, but its use becomes concentrated among users who are willing to accept higher friction, lower liquidity, and legal uncertainty. Non-custodial wallets like Cake Wallet remain available but are increasingly sidelined in mainstream distribution. Regulatory pressure on service providers (exchanges, payment processors, node operators) makes the entire Monero ecosystem smaller but does not eliminate it. Users who still hold Monero would rely on peer-to-peer networks, smaller platforms, and self-hosted infrastructure.

What users should understand about the risks and mitigations

For a user considering Monero holdings and Cake Wallet as their management tool, the practical risk profile has five dimensions. First is regulatory risk: the possibility that holding or transferring Monero could attract regulatory scrutiny, either directly or if a user later converts to fiat through a regulated platform that flags the transaction. This risk varies by jurisdiction but is not zero anywhere.

Second is software risk. The open-source model reduces certain risks but does not eliminate them. A user must still verify that they are downloading Cake Wallet from the correct source, that they are not running a compromised version, and that they understand the security implications of the device they are using. Biometric login and hardware wallet integration (such as Ledger support) raise the security bar, but they do not replace fundamental practices like backing up recovery phrases securely offline.

Third is operational risk. Without a custodian to recover a lost password or recover a stolen device, users must be disciplined about key management. A forgotten recovery phrase means lost funds. A device compromised by malware can expose private keys. These risks are higher than on a regulated exchange but lower than the risk of exchange closure or account freezing.

Fourth is liquidity risk. The delisting cascade has reduced Monero’s liquidity on remaining platforms. Selling a large position quickly may be difficult without accepting significant slippage. Users who need emergency access to fiat or stablecoins may face practical constraints that an exchange user would not.

Fifth is counterparty risk. If a user obtains Monero through peer-to-peer channels or less-established exchanges, the risk of fraud or non-delivery is higher than on major platforms. Regulatory pressure has eliminated some of the safeguards that centralized exchanges provided, even as it reduced other risks.

Mitigation involves accepting these trade-offs consciously. Users should verify their jurisdiction’s specific stance on Monero, understand that they bear full responsibility for key security, maintain tested backups stored offline, and treat Monero as an asset they can afford to hold long-term without needing immediate liquidity. For high-value holdings, hardware wallet integration or air-gapped signing offers stronger isolation. For routine transactions, the web version of Cake Wallet provides fast Monero transfers and easy access, though with the typical security trade-offs of any hot wallet. The decision to hold Monero should be deliberate, not accidental; the decision to use Cake Wallet should be informed about both its strengths and the regulatory environment in which it operates.