Soda Labs

Egmont Group

How financial intelligence crosses borders

Regulator or standard-setterGlobalRestricts anonymity

Anonymity-enhancing assets or unattributed transfers are barred outright, or barred for regulated firms.

What Egmont Group actually says

Rarely discussed in privacy debates about crypto, and structurally one of the more significant bodies in this section. The Egmont Group is not a rule-maker and runs no investigations; it operates the closed network over which 182 national financial intelligence units exchange information about people and transactions. What makes it matter is the channel itself. Because the material is intelligence rather than evidence, it crosses borders outside the mutual legal assistance route and the judicial gatekeeping that comes with it. The safeguards that do apply are procedural rather than rights-based: reciprocity, use confined to the purpose for which information was requested, and the supplying unit's prior consent before anything is passed on further.

The instruments that matter

186 member FIUs
as of the Baku plenary, July 2026, exchanging over the closed Egmont Secure Web
Outside ordinary channels
FIU-to-FIU exchange moves financial intelligence across borders without the mutual legal assistance gatekeeping that applies to evidence, and paragraph 24 bars refusal on bank secrecy grounds
Principles paragraph 32
information is to be used only for the purpose for which it was sought or provided, and any use beyond that, including judicial use, requires prior authorisation from the supplying FIU
Principles paragraph 26
consent may be refused where disclosure would be clearly disproportionate to the legitimate interests of a natural or legal person

What this means for confidential transactions

Bubble is built for exactly this shape of obligation: amounts and balances live on chain as ciphertexts, computation happens without decryption, and the only disclosure path is an on-chain access list through which an authorized party - an auditor, a supervisor, a counterparty - can request scoped decryption. That is confidentiality from the public, not from the regulator.

Compliant by default.

See how selective disclosure satisfies a supervisor without publishing your book to the world.