🇷🇺 Russia Plans 24/7 FSB Access to Crypto Customer Data, Central Bank Rejects Calls to Soften the Rules Russia’s central bank is standing by plans to give the Federal Security Service (FSB) 24/7 remote access to crypto customer data. In responses published in late October, it rejected industry requests to let some providers answer individual data requests instead of installing a permanent surveillance system. A law in force since September 1, 2026 already requires covered crypto providers to keep relevant customer data in Russia for 5 years after the customer relationship ends and comply with lawful FSB data requests. The proposed rules would establish permanent remote access to those records. The data would include customer identities, wallet addresses, balances, transactions and IP addresses, alongside communications held in providers’ systems, where available. FSB officers could search stored records or select a customer or wallet to monitor. The system would then automatically send new information matching their criteria, without a separate request for each update. 🔗 https://weblegis.ru/images/data/gallery/108_1793286782_306_261029-31_1t.pdf 🔗 Read more on Medusa:

Meduza

Russia’s FSB gets round-the-clock access to crypto exchange customer data starting in March — Meduza

Russia’s Federal Security Service (FSB) will gain round-the-clock access to cryptocurrency exchange customers’ personal data starting in Marc...

🇫🇷 France’s €100,000 Self-Custody Reporting Amendment Falls With Budget Rejection France’s National Assembly approved an amendment on November 3 that would require taxpayers to report self-custodied crypto worth €100,000 or more, but the measure fell the following day when lawmakers rejected the 2027 budget bill. "This amendment seeks to introduce a requirement to notify the tax authorities of self-hosted cryptoasset wallets once holdings reach €100,000." Holdings would be valued on December 31, with reporting required even without a sale or realised gain. The measure could still be reintroduced during the budget process. Discussing related proposals with lower reporting thresholds, French lawmaker Paul Midy said crypto entrepreneurs were being assaulted or kidnapped every 3 days in France. "So what?" lawmaker Nicolas Sansu interjected, according to the official parliamentary transcript. In an October 9 report, Cointelegraph cited figures supplied by France’s Interior Ministry showing 90 crypto-related cases involving kidnapping, extortion, threats, and violent theft between January and mid-August 2026. 🔗

PRJLANR5L17BTA0362

🔗

Projet de loi de finances pour 2027 (no 3210) Amendement n°I-2701

🔗

Assemblée nationale

Compte rendu de la deuxième séance du mardi 03 novembre 2026

Consultez le compte rendu de la Deuxième séance du mardi 03 novembre 2026 (Session ordinaire de 2026-2027 - 17e législature). Retrouvez égaleme...

🇬🇷 🇷🇴 Greece and Romania Advance Social Media Age Verification Greece will ban social media access for under-15s from January 1, 2027, while Romania's Senate adopted a similar bill on October 31. Greece: Ahead of the January deadline, the government asked platforms on November 3 to demonstrate how they would verify the ages of new and existing users. The Greek government has proposed using its digital wallet apps, Gov[.]gr Wallet and Kids Wallet, to confirm users’ age eligibility without sharing their names or exact birth dates with social media platforms, while allowing companies to choose other compliant methods, such as age estimations. Romania: The bill to ban under-15s was adopted by the Senate on October 31 and still requires approval from the Chamber of Deputies. Platforms would have 6 months after the law takes effect to verify existing users’ ages where effective checks have not already occurred. The bill leaves the technology open but makes clear that users simply declaring their age would no longer be sufficient. Romania's government supports the adoption despite warning of “impairing adult users’ legitimate access and the risk that age verification solutions could result in excessive processing of personal data.” 🔗 https://api.et.gr/apiLAW/1/2026/5350/pdf 🔗 https://www.senat.ro/legis/PDF/2026/26L514PV.PDF?nocache=true#page=4

🇵🇱 Polish Court Upholds €4.4 Million Fine Against ING Over ID Scans ING Śląski received a €4.4 million GDPR fine for making services conditional on providing scans of identity documents. The Polish data protection authority described the practice as "excessive and unjustified," upholding the fine last week. ING says its requirements are aligned with anti-money laundering obligations. In one documented case, a person reporting an ATM problem was required to have their identity document scanned before the bank would accept their complaint. ING maintains that the scans are necessary for AML compliance and has announced plans to appeal to Poland’s Supreme Administrative Court. 🔗

UODO

WSA przyznał rację Prezesowi UODO w kwestii skanowania dowodów osobistych przez bank

Wojewódzki Sąd Administracyjny w Warszawie podtrzymał decyzję Prezesa UODO Mirosława Wróblewskiego nakładającą karę w wysokości ponad ...

🔴 Anti-war political party, Diem25, just had its bank accounts shutdown “They shut down our account without a warning, without an explanation, with no recourse to an appeal”

🇲🇩 Moldova Breach Exposes Data Linked to ~750,000 National ID Numbers On October 23, Moldovan authorities temporarily disconnected 82 digital public services to contain a breach that exposed personal and financial data. Attackers extracted data linked to around 750,000 national ID numbers. The exposed information included family, pension and financial details, with exposure varying by person. Authorities warn that the stolen information could make phishing messages and scam calls more convincing, increasing the risk of fraud. 🔗

Agenția de Guvernare Electronică

Aproximativ un milion de IDNP-uri vizate în tentative de extragere a datelor cu caracter personal. Autoritățile continuă verificările și măsurile de securizare

Chișinău, 27 octombrie - Investigațiile preliminare privind atacul cibernetic anunțat pe 24 octombrie asupra sistemelor informaționale guverna...

🇺🇸 U.S. Treasury Makes IDme Mandatory Despite Past Privacy Concerns TreasuryDirect, the US Treasury's savings bond platform, is effectively mandating the use of private ID verification platform IDme. Those who do not complete IDme verification cannot access their accounts online. In 2022, IDme admitted comparing users’ biometric data against a database of others, known as "one-to-many," despite previously claiming it only matched data against the user's identity documents. Senators warned that false matches could wrongly prevent legitimate users from accessing government services, warning that "one-to-many" was prone to racial bias. An Insider investigation that June raised further concerns about how those records were handled. Former employees said support staff could retrieve documents and selfies belonging to users they were not assisting, while sensitive documents circulated in an internal Slack channel. Despite these earlier concerns, Treasury has required investors to verify their identity through IDme since October 28 to access TreasuryDirect. Senators are demanding that Treasury explain how it will deal with facial recognition civil liberties concerns, and investigating whether Treasury authorizes IDme to retain biometric data and compare users’ biometric data against that of others. "Americans should not have to provide sensitive personal information to IDme as the price of accessing essential government services," the senators wrote. 🔗 https://www.wyden.senate.gov/imo/media/doc/10292026_102726_letter_to_bessent_and_bisignano_on_idme.pdf 🔗

Biometric Update | Biometrics News, Companies and Explainers

US Treasury makes ID.me mandatory as federal policy shifts toward Login.gov | Biometric Update

Treasury makes ID.me mandatory for online bond accounts as senators question its continued use despite Login.gov's IAL2 certification.

🔴 Rage Weekly 44/26 The FBI is warning “DeFi” services and node operators “to block transactions with or derived from addresses TraderTraitor actors are using” to launder stolen assets. The ordering of non-custodial services to act on behalf of US law enforcement appears at odds with the administration's statements on industry protections. 🔗 Find these news and more in this week’s newsletter. Subscribe for free or read all issues online

The Rage

Rage Weekly 44/26

Rage Weekly is a weekly linkdump bringing the best content on financial surveillance and beyond directly to your inbox. Subscribe for free or read ...

✉️ New: Samourai Wallet developer Keonne Rodriguez recounts a 29-day prison transfer 13 days in Oklahoma City’s lockdown transit hub, 18 days caged 23 hours a day at USP Lewisburg, where he learns his grandmother has died. By Keonne Rodriguez 🔗 Read the full story:

The Rage

Letter #8: Notes From the Inside

Samourai Wallet developer Keonne Rodriguez recounts a 29-day prison transfer: 13 days in Oklahoma City’s lockdown transit hub, 18 days caged 23 h...

🔴 Kraken Backs Down After Questioning Customers About Their Monero Withdrawals On October 23, users reported that Kraken was emailing people who withdrew Monero, asking what they planned to do with their coins. The requests included questions on employment details, bank statements, and proof of the origin of the funds used to buy XMR. In response, Kraken co-CEO Arjun Sethi confirmed the exchange had sent the emails. He said the requests were wrong, that no rule required them, and that affected customers had been told they no longer needed to respond. “Where your money came from is a fair question. What you do with it after it leaves is not,” Sethi said. The exchange can still request information about the source of customers’ funds. It also maintains a withdrawal limit of $1,500 in XMR per individual account over a rolling 30-day period.

🔴 France Proposes New Social Media Censorship Powers The French government just introduced an amendment that requires websites, social media platforms, and hosting providers to remove content within 1 hour of an administrative takedown request.The law targets "content that directly incites the commission of intentional acts against human life, intentional acts causing physical harm, sexual assaults, theft, or the destruction, damage, or deterioration of property, where such content could cause a serious disturbance to public order." Second, it "establishes an emergency procedure to order the immediate removal of content that calls for an attack, insurrection, or taking up arms against the State and/or a segment of the population."Providers would have 24 hours to comply with a removal request, and one hour to comply with a removal request relating to insurrection.Failure to comply may lead to the sites concerned being blocked and delisted in the country.The amendment does not define how authorities will distinguish between criticism of the government, calls to protest and incitement to violence. It does not define how lawful dissent would be protected from being censored. https://pbs.twimg.com/media/HVkWsHJW8AAwYXm?format=jpg&name=large https://pbs.twimg.com/media/HVkWuUwXIAAdZQc?format=jpg&name=large

On the same day the US Treasury abolished a cryptocurrency mixer rule, SDNY weaponized a newly set precedent against Tornado Cash developer Roman Storm. It could deem anyone using mixer-like technologies as engaged in a conspiracy to launder criminal proceeds. 🔗 Full story:

The Rage

The Mixer Rule is Dead, Long Live Outlawing Mixers

On the same day the US Treasury abolished a cryptocurrency mixer rule, SDNY weaponized a newly set precedent that could criminalize the use of fina...

Rage Weekly is back: your newsletter on all things surveillance that you should be very angry about.

Data leaks have real world consequences. WRENCHED – a documentary by @Jake Hanrahan and The Rage. COMING SOON 🔪

🔦 NEW: A bill introduced for markup today suggests that the Strategic Bitcoin Reserve does not exist.

The Rage

The Strategic Reserve of Fugazi

A bill introduced for markup today suggests that Congress treats the Strategic Bitcoin Reserve as factually non-existent.

🚨New: Treasury Secretary Scott Bessent tells Congress he is pushing for passage of the Clarity Act to seek out the evasion of KYC

🚨NEW: EVERYTHING YOU NEED TO KNOW ABOUT THE COLDCARD HACK How a dismissed reddit post turned out to be the start of the largest self-custody theft in Bitcoin's history: What led to the vulnerability, and what you can do if you're affected. 🔗 Full story:

The Rage

Everything You Need to Know About the COLDCARD Hack

How a dismissed reddit post turned out to be the start of the largest self-custody theft in Bitcoin's history: How it happened, and what you can do...

🚨NEW: SENATE REPUBLICANS UNVEIL NEW CLARITY ACT DRAFT The newest Clarity draft includes ethics provisions and increased law enforcement capabilities. Democrats remain unfazed. 🔗 Full story:

The Rage

Senate Republicans Unveil New Clarity Act Draft

The newest Clarity draft includes ethics provisions and increased law enforcement capabilities. Democrats remain unfazed.

🚨NEW: FRENCH FINANCE MINISTRY SUED OVER GLOBAL SURVEILLANCE DATABASE The bitcoin exchange Bull Bitcoin is suing the French finance ministry over its implementation of a crypto asset reporting framework that establishes a global surveillance database of cryptocurrency transactions. Full story:

The Rage

French Finance Ministry Sued Over Global Surveillance Database

The bitcoin exchange Bull Bitcoin is suing the French finance ministry over its implementation of a crypto asset reporting framework that establish...

🚨NEW IN TORNADO CASH: DATES SET FOR STORM RETRIAL The Court has approved the Government's pretrial schedule, confirming that SDNY will be retrying Roman Storm on charges of conspiracy to commit money laundering and conspiracy to commit sanctions evasion this fall. The Court is yet to rule on Storm's post-trial Rule 29 motion, which challenges the validity of evidence and theories presented against him, and could exonerate Storm of the unlicensed money transmission conviction handed down last August. A ruling favorable to Storm in post-trial motions could continue to prevent the retrial from taking place.