The Morning Brief: Enforcement surge and ETF inflows drive week's tone

Bitcoin ETF capital is accelerating while law enforcement coordination tightens. The desk's ETF flows board confirms $3.8 billion in net inflows to US spot Bitcoin ETFs over a three-week period, the largest consecutive run of 2026, with the latest week alone drawing nearly $1 billion. Ethereum spot ETFs, by contrast, drew only $25.9 million the same day and have accumulated just $13.185 billion year-to-date, a substantially slower institutional pace. The divergence persists: Bitcoin captured the bulk of inflows while Ether and other altcoin products faced headwinds.

Enforcement activity scaled significantly Friday. The US and UK signed a first-of-its-kind bilateral enforcement agreement targeting crypto investment scam centers, according to the desk's reporting. The arrangement establishes parallel investigations and information-sharing protocols, with a joint private-sector disruption operation planned for London in October. This follows FinCEN's quantification of $12.7 billion in suspicious financial activity tied to crypto investment scams run from Southeast Asian compounds, analyzed across 33,904 reports filed between September 2023 and December 2025. Money services businesses filed 55 percent of those reports, flagging $5.5 billion, while banks filed 41 percent, flagging $6.4 billion. The agency acknowledged potential double-counting and inflation from wider use of its own alert terminology, and noted a $1 billion recovery rate against $1.8 billion interdicted since 2015.

Corporate and regulatory friction on product definition escalated. AMC Entertainment CEO Adam Aron formally opposed Robinhood's tokenized stock tokens on September 3, calling them "contemptible, outrageous, disgusting, detestable, inexcusable, and vile" and instructing outside securities counsel to investigate immediately. Robinhood's product tracks over 190 companies and is structured as tokenized debt securities issued by Robinhood Assets (Jersey) Limited; token holders receive economic exposure to a share price but hold no legal claim on the underlying company. The company has no connection to the tokens and does not condone them, per Aron's statement. Whether AMC pursues legal action depends on grounds its counsel identifies; the structural question unresolved by this dispute remains whether a tokenized synthetic product tracking a company's stock price constitutes an unregistered security under US law when issued offshore and geo-restricted from US persons.

El Salvador's bitcoin holdings cleared one IMF pillar. The IMF confirmed on September 3 that El Salvador has not deployed public funds to accumulate bitcoin since its last program review, with the government citing private donations as the source of post-June 2025 holdings growth. The country transferred majority control of Chivo, its state-backed digital wallet launched in 2021, to a private operator, with public participation largely wound down. The IMF imposed a constraint that no further bitcoin accumulation beyond the documented donations is expected going forward. The private documentation supporting the donations claim has not been made public; verification of the amount held and specific dates and sources remain outside public view.

Institutional rails hardened. SoFi and Kraken parent Payward announced a partnership routing SoFi's digital asset customer orders through Kraken Prime institutional trading and listing SoFiUSD stablecoin on Kraken's exchange. SoFi now bridges retail banking services to 24/7 on-chain settlement infrastructure via prime brokerage order routing, with Kraken Prime using smart order routing to compare prices across multiple venues. The arrangement validates on-chain infrastructure for banking customers without visible modification to the user experience.

Security disclosure widened significantly. Trezor announced on September 4 that an additional 67,000 US customers had names, emails, phone numbers, shipping addresses, and order numbers exposed in a logistics partner breach at ShipMonk. The newly disclosed data spans orders placed between November 2019 and August 2021, extending the breach window far beyond Trezor's stated 90-day data retention policy. The total affected customers now reach approximately 80,700 across multiple regions. The breach timeline reveals a six-year retention of customer data that Trezor believed was being deleted under a 90-day policy.

Criminal prosecution tied crypto flows to drug proceeds. A Mexican national pleaded guilty on September 4 to money laundering conspiracy for accepting approximately $4 million in drug trafficking proceeds into a cryptocurrency wallet he controlled, converting the funds to US dollars in Mexico, and returning bulk cash to money brokers in the United States. Carlos Erick Vazquez Gonzalez, 48, received an estimated $40,000 in commission for moving the proceeds quickly to conceal their origins. He faces up to 20 years in prison at sentencing on December 17, 2026.

The tape reflects mixed institutional positioning. The desk's Whale Watch board shows $135.090 million net moving onto exchanges over the past 24 hours, driven by $80.863 million in bitcoin moving onto exchanges and $54.226 million in ethereum moving onto exchanges. The largest single flows were $209.245 million and $160.467 million in bitcoin moving onto Coinbase Institutional, alongside $120.107 million in USDT moving onto Bitfinex. Over the prior week, however, the picture inverts: the week ending September 5 shows $494 million in bitcoin moving off exchanges, reversing three weeks of accumulation onto exchanges (week ending August 15: $573 million onto exchanges; week ending August 22: $1,125 million onto exchanges; week ending August 29: $596 million onto exchanges). Bitcoin traded at $79,702.42 on Thursday, up 0.04 percent on the day, 0.87 percent on the week, and 24.36 percent on the month. Ethereum was at $2,459.64, up 0.14 percent on the day but down 1.86 percent on the week, while up 32.21 percent on the month. BNB moved the most among major assets on Thursday, up 5.96 percent in 24 hours and 8.05 percent on the week. The Fear and Greed Index stood at 73 on Thursday, in Greed territory, versus a 30-day range of 27 to 74.