The US Crypto Regulatory Landscape: Five Federal Regulators
The United States has the world's most complex crypto regulatory environment, characterised by multiple overlapping federal agencies, a patchwork of 50 different state regimes, and an ongoing legislative evolution that accelerated with FIT21 in 2024. Understanding which regulator has jurisdiction over your specific business activity is the first and most critical step.
No single federal agency regulates all crypto activities. Instead, jurisdiction depends on what you're doing: trading commodity-type assets (CFTC), issuing or trading securities (SEC), handling money transmission and AML (FinCEN/Treasury), engaging in banking activities (OCC/Fed/FDIC), or providing consumer financial products (CFPB). Most crypto businesses fall under multiple agencies simultaneously.
Regulates digital assets that qualify as securities under the Howey test. Applies to ICOs, certain token offerings, and exchanges trading digital securities. Requires registration of securities offerings and exchanges.
Regulates digital commodities including Bitcoin and Ethereum. Oversees crypto derivatives, futures, and swaps. Under FIT21, gains expanded spot-market oversight for digital commodity exchanges.
Part of the Treasury Department. Requires Money Services Business (MSB) registration for all crypto exchanges and transmitters. Enforces the Bank Secrecy Act (BSA), AML programs, and the Travel Rule.
Regulates national banks and federal savings associations. Issued guidance permitting national banks to provide crypto custody, stablecoin reserves, and blockchain node operations. Relevant for bank-affiliated crypto services.
Oversees consumer protection in financial services. Has expanded oversight of peer-to-peer crypto payment platforms and crypto-linked consumer products. Relevant for B2C crypto businesses serving retail US customers.
Treats cryptocurrency as property for US tax purposes (Rev. Rul. 2019-24). Requires reporting of all crypto transactions. Broker reporting rules expanded under the Infrastructure Act require crypto exchanges to file 1099-DA forms from 2025.
FIT21 Digital Assets Act 2024 — What Changes?
The Financial Innovation and Technology for the 21st Century Act (FIT21) represents the most significant federal crypto legislation in US history. Passed by the House with bipartisan support in May 2024 and advancing through the Senate, it creates the first comprehensive statutory framework for distinguishing between digital commodities (CFTC) and digital securities (SEC), ending a decade of regulatory ambiguity.
The core innovation of FIT21 is the "decentralisation test": a digital asset whose underlying blockchain is sufficiently decentralised is classified as a digital commodity (CFTC jurisdiction). One that is not sufficiently decentralised — typically because a single developer or issuing entity retains significant control — is treated as a digital security (SEC jurisdiction) until it becomes sufficiently decentralised.
- Blockchain must be "functional" and "decentralised" (no single person controls >20% of tokens/voting)
- Bitcoin and Ethereum classified as digital commodities
- Exchanges trading digital commodity spot markets register with CFTC as Digital Commodity Exchanges (DCEs)
- Retail market access permitted under CFTC oversight
- Lighter-touch disclosure obligations vs SEC
- CFTC sets trading rules for commodity exchanges
- Assets where issuer/developer controls >20% tokens or votes
- Most ICO/token sale assets remain SEC-regulated securities
- Exchanges trading digital securities register as Alternative Trading Systems (ATS) or National Securities Exchanges
- Full Securities Act disclosure requirements apply
- Issuers must file registration statements or qualify for exemptions
- Path to "migrate" to CFTC jurisdiction as network decentralises
FIT21 status in 2026: FIT21 advanced through the Senate with amendments and was signed into law. Implementing regulations from CFTC and SEC are being developed. Until final rules are effective, businesses should continue operating under existing interpretive guidance while preparing for the new framework.
FinCEN MSB Registration — Who Needs It & How
Any business that exchanges or transmits virtual currency — regardless of where in the world it is based, if it serves US customers — must register as a Money Services Business (MSB) with FinCEN. This is one of the most commonly overlooked compliance requirements for foreign crypto businesses expanding to the USA.
The MSB registration itself is free and completed online at the BSA E-Filing System. However, registration triggers ongoing obligations under the Bank Secrecy Act that require real infrastructure: a written AML program, a designated compliance officer, suspicious activity report (SAR) filing, currency transaction report (CTR) filing, and Travel Rule compliance for transactions above $3,000.
Identify which MSB category applies to your business. Crypto exchanges and OTC desks are typically "Dealer in Foreign Exchange" and/or "Money Transmitter." Crypto ATM operators are Money Transmitters. Crypto custodians holding customer assets may also qualify.
Week 1Draft and implement a written AML program that includes: customer identification (CIP), ongoing monitoring, transaction screening against OFAC SDN lists, SAR and CTR filing procedures, and employee training. This must be risk-based and tailored to your business model.
Weeks 2–6Complete and submit FinCEN Form 107 (Registration of Money Services Business) via the BSA E-Filing System. Registration is free. New registrations must be submitted within 180 days of becoming an MSB. Registration must be renewed every two years.
Week 1–2 (can file immediately)For transactions of $3,000 or more, the Bank Secrecy Act Travel Rule requires you to collect and transmit originator and beneficiary information with the transfer. Implement a Travel Rule solution (Notabene, Sygna, VerifyVASP, or similar) that can communicate with counterparty VASPs.
OngoingFile SARs for suspicious transactions within 30 days of detection. File CTRs for cash transactions over $10,000. Retain all records for 5 years. Conduct annual AML program reviews and employee training. Cooperate with FinCEN examinations.
Ongoing (annual review)State Money Transmitter Licenses — The 50-State Challenge
FinCEN MSB registration is federal and necessary but not sufficient. Each of the 50 states (plus DC and territories) has its own money transmission law, and most require a separate state money transmitter license (MTL) for crypto businesses serving state residents. This creates the most complex and expensive element of US market access.
Timelines range from 1–3 months for straightforward states (Texas, Wyoming, Nevada) to 18–24 months for New York's unique BitLicense regime. Costs range from a few hundred dollars for simple state filings to $500,000+ for the New York BitLicense including legal preparation. Most businesses prioritise the high-population states first (California, Texas, Florida, New York) and build out from there.
| State | License Type | Timeline | Surety Bond | Min. Net Worth | Notes |
|---|---|---|---|---|---|
| 🗽 New York | BitLicense (VC) / MTL | 18–24 months | $500K+ | Varies | Unique BitLicense for virtual currency businesses. Most demanding in USA. |
| ☀️ California | DFPI MTL | 6–12 months | $250K–$7M | $500K+ | New Digital Financial Assets Law (DFAL) adds additional crypto requirements from 2025. |
| 🤠 Texas | Money Transmission License | 3–6 months | $300K min | $500K | DoB oversight. Virtual currency specifically addressed in guidance. Reasonable timeline. |
| 🌞 Florida | Money Transmitter License | 3–6 months | $50K+ | Varies | OFR-licensed. Florida has been relatively welcoming to crypto businesses. |
| 🦬 Wyoming | SPDI / MTL / DAO LLC | 2–6 months | $500K | $5M (SPDI) | Most crypto-forward US state. SPDI enables crypto banking. DAO LLC law. |
| 🎰 Nevada | Money Transfer License | 3–6 months | $50K min | Varies | FID-licensed. Generally business-friendly regulatory environment. |
| 🌊 Washington | Money Transmitter License | 4–8 months | $10K–$550K | $35K min | DFI oversight. Washington requires specific virtual currency addendum. |
NMLS Licensing: Most state MTL applications are filed through the Nationwide Multistate Licensing System (NMLS), which allows a single application to be submitted to multiple states simultaneously. Working with an attorney familiar with NMLS significantly accelerates the multi-state strategy.
USA Crypto Oversight: A Fragmented Framework
Regulator Coverage and Enforcement Authority
SEC Enforcement 2024–2026: What Exchanges Must Know
The SEC's approach to crypto enforcement shifted meaningfully following the FIT21 legislative progress and SEC leadership changes in 2025. The previous administration's "regulation by enforcement" approach — exemplified by high-profile cases against Coinbase, Kraken, Binance, and numerous token issuers — gave way to a more framework-oriented approach under new leadership.
However, this does not mean the SEC is inactive. Securities law still applies to any digital asset that meets the Howey test (investment of money in a common enterprise with expectation of profits from others' efforts). Unregistered token offerings, exchanges trading unregistered securities, and unregistered broker-dealer activity remain enforcement priorities.
- If your exchange lists tokens that could be classified as securities, you must either register as a national securities exchange or operate as an ATS with registered broker-dealer status.
- Token issuers conducting offerings to US retail investors must register under the Securities Act or qualify for an exemption (Reg D, Reg S, Reg CF, or Reg A+).
- Staking programs that pool customer assets and generate returns may be characterised as securities offerings under the Howey test — obtain specific legal analysis.
- Crypto lending and interest-bearing products have been subject to enforcement; verify whether these constitute securities or banking activities under applicable law.
- Even without direct US offices, if you actively solicit US investors or customers, US securities laws may apply under the effects and conduct doctrines.
Operating in the USA: A Practical Compliance Roadmap
For a foreign crypto business seeking to enter the US market legally, the compliance stack is significant but manageable with proper planning. Here is the standard sequencing we recommend to clients.
Before anything else, have a qualified US attorney conduct a securities law analysis of every token you list or service you offer. This determines which agencies have jurisdiction and what registrations are required. This review typically takes 4–8 weeks and costs $20,000–$50,000 depending on the breadth of your token portfolio.
Establish a US legal entity (Delaware C-Corp or LLC is standard) to hold your US regulatory licenses. This entity will be the regulated party for FinCEN MSB and state MTLs. Ensure it is adequately capitalised — most state MTL applications require demonstrated financial strength.
Register as an MSB with FinCEN and implement your full BSA/AML program simultaneously. You need a designated BSA/AML compliance officer, written policies and procedures, KYC/CIP processes, transaction monitoring, and OFAC screening. Budget 8–12 weeks for a solid AML program build-out.
File MTL applications in your top 5–10 states by customer concentration first. Use NMLS for multi-state filing efficiency. New York BitLicense should be started early and run in parallel given its 18-24 month timeline. Aim for initial market coverage in 3–6 months using states with faster processing.
Once operational, maintain ongoing compliance: annual BSA/AML audits, state exam readiness, SAR/CTR filing, and active monitoring of FIT21 implementing regulations. As the CFTC and SEC finalise their rules under FIT21, your compliance stack will need updating — build regulatory flexibility into your infrastructure from the start.