Of Hares and Hedgehogs: Two FATF Reports Measure the Enforcement Gap

In the Grimm tale, the hare mocks the hedgehog's crooked legs, and the hedgehog challenges him to a race. He places his wife at the other end of the furrow and never runs a metre himself; the hare runs until he collapses, against a system he takes for a single opponent. The analysis applies that picture to crypto-enabled financial crime: law enforcement and compliance keep running the same race against an organised counterpart that already sits at both ends of the track, fraud factories on one side and laundering networks on the other.

Two FATF publications from July 2026 provide the measurement. The targeted update on the implementation of the FATF standards for virtual assets finds that 83 percent of jurisdictions have legislated the Travel Rule, while 60 percent of those have not taken a single supervisory or enforcement action; of 142 jurisdictions surveyed, four have introduced licensing for DeFi arrangements and two have actually licensed any. The same report describes how, according to FinCEN's findings, the Huione Group laundered at least four billion US dollars between August 2021 and January 2025 and answered a stablecoin freeze by launching its own token, marketed as immune to freezing.

The counter-model comes from the second report, the FATF's global overview of public-private partnerships: at least 84 partnerships, reported by 52 of the jurisdictions surveyed, exchange typologies and risk trends on a standing basis, with operational models such as the UK's JMLIT+, Singapore's COSMIC and Australia's Fintel Alliance. The side that understands the system and anticipates the next moves takes the hedgehog's position.