The United States Treasury carried out a risk assessment of decentralized finance (DeFi) and found the sector lacking in several ways, Assistant Treasury Secretary for Terrorist Financing and Financial Crime Elizabeth Rosenberg reminded an audience at the Atlantic Council think tank on April 21. Get ready for more regulation, she said.

Rosenberg was referring to a report released earlier in April by the Treasury that found scammers, money launderers and North Korean hackers benefitting from the lack of Anti-Money Laundering (AML) and Countering the Financing of Terrorism (CFT) compliance in the sector. That report was part of the Treasury’s response to U.S. President Joe Biden’s executive order on the responsible development of digital assets.

The report also found that DeFi was not always very decentralized. “There are generally persons and firms associated with those [DeFi] services to which AML/CFT obligations may already apply,” Rosenberg said. The assessment report established that all DeFi services are liable to comply with the Bank Secrecy Act, including AML/CFT.

“We will assess enhancements to our domestic AML/CFT regulatory regime as applied to DeFi services and monitor responsible innovation of AML/CFT and sanctions compliance tools,” Rosenberg said. She continued:

“I want to offer a specific message to the private sector. ‘DeFi innovation’ should not only occur in the technical, financial domain — there is an enormous need and potential for innovation in compliance mechanisms that could help all players in the digital ecosystem ensure they remain on the right side of the law.”

Rosenberg and her team were freshly back from the Financial Action Task Force (FATF) Virtual Assets Contact Group meeting in Tokyo, she said. The team presented the results of the Treasury’s DeFi risk assessment there as well.

Related: FATF agrees on roadmap or implementation of crypto standards

The timing of Rosenberg’s speech is also notable because the European Parliament passed the Markets in Crypto-Assets legislation a day earlier. The MiCA legislation included provisions for tracing or blocking certain payments using crypto assets. This AML/CFT practice is already used in traditional finance and is known as the “Travel Rule” by the FATF. It was also a key part of the Treasury‘s risk assessment.

Magazine: US enforcement agencies are turning up the heat on crypto-related crime