The United States presents the most complex licensing environment in digital assets globally. There is no single federal framework equivalent to the EU's MiCA. Instead, regulation is distributed across at least six federal agencies (SEC, OCC, CFTC, FinCEN, FDIC, Federal Reserve) and 50 state regulators, each asserting jurisdiction over different activities and entity types. A firm seeking to operate across custody, stablecoin issuance, and mining must navigate overlapping and sometimes contradictory requirements at both levels.
Regulatory Architecture
Federal Agencies
| Agency | Primary Jurisdiction | Key Authorities |
|---|---|---|
| SEC | Securities custody, broker-dealer oversight, investment adviser custody rule | Investment Advisers Act Rule 206(4)-2, Securities Exchange Act Rule 15c3-3 |
| OCC | National trust bank charters, stablecoin issuer (PPSI) supervision | National Bank Act 12 U.S.C. 92a, GENIUS Act, Interpretive Letters 1170-1188 |
| CFTC | Digital commodities (BTC, ETH), derivatives, collateral programs | Commodity Exchange Act, CLARITY Act (House-passed) |
| FinCEN | AML/KYC for all digital asset businesses; MSB registration | Bank Secrecy Act 31 U.S.C. 5311 |
| FDIC | FDIC-supervised bank subsidiaries issuing stablecoins | 12 CFR 303.252 (GENIUS Act NPRM, December 2025) |
| Federal Reserve | Bank holding companies, Fed master accounts, payment rails | SR Letters (withdrawn 2025), "skinny master account" proposal |
Key State Regulators
| State | Framework | Relevance |
|---|---|---|
| New York (NYDFS) | BitLicense (23 NYCRR Part 200), limited purpose trust charters, stablecoin guidance (June 2022) | Most rigorous state regime; required for any virtual currency business serving NY persons |
| Wyoming | SPDI charter (W.S. 13-12-101), 12+ blockchain laws, no state income tax | Most crypto-friendly state; issued first state stablecoin (FRNT, August 2025) |
| California (DFPI) | Digital Financial Assets Law (DFAL), effective July 1, 2026 | $20,000 application fee + $500,000 minimum surety bond; miners likely exempt |
| Texas (PUCT) | Grid registration for mining >75 MW on ERCOT; demand-response integration | Leading mining jurisdiction with grid-integration model |
| Kentucky | HB 701 (March 2025) protecting mining rights; sales/excise tax exemptions on mining electricity | Among the most pro-mining states |
Landmark Federal Legislation
- GENIUS Act (S.1582, Public Law 119-27, signed July 18, 2025): First federal digital asset law. Establishes payment stablecoin framework; compliant stablecoins excluded from securities/commodity definitions. Effective January 18, 2027 (or 120 days after final regulations). Multi-agency implementing rulemaking is underway: OCC NPRM (Feb 25, 2026), NCUA NPRM (Feb 11, 2026), FDIC application-procedures NPRM (Dec 16, 2025), FDIC prudential NPRM (Apr 7, 2026), FDIC illicit-finance NPRM (May 22, 2026), and Treasury/FinCEN/OFAC joint AML/sanctions NPRM (Apr 8, 2026; comments due June 9, 2026). The Federal Reserve PPSI prudential NPRM remains outstanding as of June 2026 — the Fed's 2026 press-release index (fetched 2026-06-06) lists no stablecoin or PPSI rulemaking, leaving the Fed the only primary federal payment-stablecoin regulator yet to issue its NPRM.
- CLARITY Act (H.R. 3633, House-passed July 17, 2025): Divides SEC/CFTC jurisdiction -- SEC for digital securities, CFTC for digital commodities. Awaiting Senate.
- Executive Order (January 23, 2025): Affirms right to mine cryptocurrency and maintain self-custody. Prohibits CBDC development.
Activity Comparison Table
| Dimension | Crypto Custody | Stablecoin Issuance | Crypto Mining | RWA / Security Token Platform | DeFi Protocol Operations |
|---|---|---|---|---|---|
| Legal status | Legal; multi-agency regulation dramatically liberalized 2025-2026 | Legal; GENIUS Act creates dedicated federal framework (effective 2027) | Legal; federally affirmed by January 2025 Executive Order | Legal; regulated as securities under existing SEC framework; no standalone RWA legislation | Legal but no DeFi-specific license; regulated under existing securities, commodities, and BSA frameworks; transitioning from enforcement-driven to principles-based (March 2026 token taxonomy) |
| Primary regulators | SEC, OCC, state banking regulators (NYDFS, Wyoming, South Dakota) | OCC, Fed, FDIC, state regulators (NYDFS, Wyoming) | FinCEN (if transmitting), state energy regulators (TX PUCT), local zoning | SEC (securities issuance, BD/ATS, transfer agent); FINRA (broker-dealer oversight); state securities regulators (blue sky laws) | SEC (DEX as exchange/ATS); CFTC (derivatives, perpetuals, digital commodities); FinCEN (MSB for money transmission); OFAC (sanctions); state MTL regulators |
| License types | OCC national trust bank ($5M-$20M+ setup); Wyoming SPDI ($3M-$10M); NY trust company ($5M-$15M+); BitLicense ($150K-$500K); SEC broker-dealer (varies) | OCC nonbank PPSI ($6M-$28M+ first year); state-qualified PPSI (varies); 49-state MTLs ($1M-$3M first year) | FinCEN MSB (free, if transmitting); state MTLs ($250K-$350K/yr all states); TX PUCT registration (free); NY BitLicense ($150K-$500K) | SEC broker-dealer + ATS registration ($500K-$2M+); transfer agent registration ($100K-$500K); RIA + fund formation ($200K-$1M+); state MTLs for fiat handling | No DeFi-specific license. SEC exchange/ATS or broker-dealer registration if trading securities tokens; CFTC DCM/SEF for derivatives; FinCEN MSB ($0 capital, if transmitting); state MTLs ($250K-$350K/yr); innovation exemption under development |
| Capital requirements | OCC: standard trust bank capital; Wyoming SPDI: $10M+ or 1.25-1.75% of AUC; NY: case-by-case | OCC PPSI: $5M minimum (de novo), 12 months expenses as operational backstop, Tier 1 only; conditionally approved charters: $6.05M-$25M | FinCEN MSB: $0; state MTL bonds: $10K-$500K+ per state; NY BitLicense: up to $500K collateral; CA DFAL: $500K minimum bond | Broker-dealer: net capital per Rule 15c3-1 (varies by activity); transfer agent: no federal capital minimum; RIA: state-specific | FinCEN MSB: $0; state MTL bonds: $10K-$500K+ per state; SEC BD net capital varies by activity; CFTC DCM/SEF: significant capital (millions) |
| Application timeline | OCC: 3-6 months conditional, then pre-opening phase; Wyoming SPDI: ~9 months; NY trust: 12-24 months; BitLicense: 9-24 months; South Dakota: 3-6 months | OCC PPSI: 5-6 months to conditional approval (actual 2025 data); 49-state MTLs: 18-24 months for full coverage | FinCEN MSB: immediate (online filing); state MTLs: 2-18 months per state; BitLicense: 12-24 months; TX PUCT: same-day | BD + ATS: 6--18 months; transfer agent: 3--9 months; RIA: 3--12 months; Reg A+ qualification: 2--6 months; Form D: 15 days | FinCEN MSB: immediate; state MTLs: 2-18 months per state; SEC BD/ATS: 6-18 months; CFTC DCM/SEF: 6-12+ months |
| Annual ongoing cost | OCC: $2M-$7M+ (assessments, SOC audit, BSA/AML, insurance, cybersecurity, legal); Wyoming SPDI: $1M-$3M+; NY trust: $2M-$5M+ | OCC PPSI: $1.5M-$5M+ (monthly attestations, compliance staff, examinations); 49-state MTLs: $225K-$500K | FinCEN MSB: $50K-$200K/yr (AML program); 49-state MTLs: $225K-$280K+/yr; BitLicense: $15K-$80K+/yr; TX PUCT: $0 | $500K--$2M+ (FINRA membership, compliance, Reg ATS reporting, SOC audits, legal, BSA/AML) | $200K-$2M+ depending on registrations; MSB AML program $50K-$200K/yr; state MTLs $225K-$280K+/yr; SEC/CFTC compliance adds $500K-$2M+ |
| Reserve/backing | Client assets must be segregated; no rehypothecation without consent; SAB 122 removed balance-sheet liability | 1:1 reserve in USD, T-bills (93 days or less), repos, government money funds; segregated from operations; no rehypothecation; monthly certified reports | N/A | Tokenized fund assets backed by underlying (e.g., BUIDL: US Treasury bills, repos, cash); Rule 15c3-3 customer protection for BD custody | No specific reserve requirements for DeFi protocols; BD Rule 15c3-3 applies if holding customer assets; liquidity pool risks borne by LPs |
| AML/KYC | Full BSA/AML program; FinCEN MSB registration; Travel Rule ($3,000+ transfers); OFAC screening | Full BSA/AML; FinCEN tailored rules forthcoming; CIP required; SAR/CTR filing | Mining for own account: exempt from FinCEN. Mining pools distributing >$3,000: Travel Rule applies. Custodial mining/exchange: full BSA/AML | Full BSA/AML program; broker-dealer KYC/AML; OFAC screening; 1099-DA reporting from 2025 | FinCEN MSB: full BSA/AML program if money transmission; Travel Rule ($3,000+); OFAC screening; "truly decentralized" protocols may argue exemption but untested |
| Audit requirements | SOC 2 Type II ($100K-$500K+/yr); annual financial statements; OCC semiannual examinations | Monthly attestation by registered CPA; annual audited financials if >$50B outstanding; quarterly financial condition reports | State MTL audits where applicable; no federal audit requirement for pure mining | Annual PCAOB or CPA audit for broker-dealers; SOC 2 Type II for platforms; SEC/FINRA examinations | Smart contract audits expected (not mandated); SOC 2 if operating platform; PCAOB audit if SEC-registered; state MTL audits where applicable |
| Tax treatment | Custody fees taxed as ordinary income; client crypto treated as property | Stablecoins treated as property (IRS Notice 2014-21); every transaction technically taxable; proposed $200 de minimis exemption not enacted; 1099-DA reporting from 2025 | Mined crypto = ordinary income at FMV on receipt; equipment depreciable (Section 179/MACRS); later sale = capital gain/loss; 1099-DA broker reporting from 2025 | Tokenized securities taxed as underlying asset class (dividends, interest, capital gains); 1099-DA broker reporting from 2025 | DeFi yield (lending, LPing, staking) = ordinary income at FMV on receipt; token swaps = taxable dispositions; 1099-DA broker reporting from 2025; IRS DeFi broker rule under review |
| Passporting | No US passporting. Each state requires separate license. OCC charter operates nationally for federal purposes but does not substitute for state requirements | No passporting. GENIUS Act does not preempt state MTLs immediately. Stablecoins circulate globally on-chain but on/off ramp partners need local licenses | No passporting. Each state has own requirements. FinCEN registration is federal-wide but does not replace state MTLs | No passporting. Reg D 506(b)/(c) and Reg A+ Tier 2 preempt state registration under NSMIA. Other offerings require state-by-state blue sky compliance | No passporting. FinCEN MSB is federal but does not replace state MTLs. Each state requires separate license. Protocols operate globally but US-facing operations need full state coverage |
| Staffing requirements | OCC: CEO, CCO, BSA Officer, CTO, CISO, Chief Trust Officer; 20-50+ compliance/risk FTEs for mid-size custodian | OCC PPSI: BSA/AML officer, compliance team, internal audit, risk management, treasury; estimated 9-18 FTEs minimum | Compliance officer for MSB; operational staff for grid coordination (TX); no staffing requirement for pure mining | CCO, BSA officer, compliance team, legal counsel, technology/operations staff; FINRA-registered representatives | BSA/AML officer (if MSB); CCO; legal counsel; smart contract security team; compliance varies by registration type |
| Key restrictions | OCC trust bank: no deposits, no lending, no FDIC insurance. BitLicense: no fiduciary powers. Broker-dealer: limited to "physical possession" standard | Interest payments to holders prohibited; algorithmic stablecoins ineligible for PPSI; non-financial companies barred unless unanimous SCRC approval; reserve rehypothecation banned | NY moratorium on fossil-fuel PoW mining expired Nov 2024; local bans in several GA counties; proposed NY excise tax on mining electricity | Reg D 506(c): accredited investors only; Reg A+: $75M annual cap; Reg CF: $5M annual cap; no NSMIA preemption for Reg A+ Tier 1 or Reg CF | No explicit "decentralization exemption"; OFAC sanctions apply to smart contracts (Tornado Cash, though Fifth Circuit limited scope); DAO members may face personal liability (Ooki DAO precedent); retail DeFi lending/derivatives restricted without registration |
| Regulatory direction | Decisively pro-custody: SAB 121 rescinded, OCC chartering boom (8 conditional approvals Dec 2025-Feb 2026), SEC custody rule modernization NPRM expected April 2026 | Positive: GENIUS Act provides statutory certainty; OCC (Feb 25, 2026), NCUA (Feb 11, 2026), FDIC (prudential NPRM Apr 7, 2026) and Treasury/FinCEN/OFAC (joint AML/sanctions NPRM Apr 8, 2026) implementing; bank entry accelerating. Key risk: global USDT (~$174B) compliance by July 2028 sunset — Tether launched a separate compliant US product (USAT, via Anchorage Digital Bank, Jan 27, 2026) rather than restructure USDT | Federal loosening (Executive Order, SEC confirms PoW not securities); state divergence (WY/KY/TX pro-mining vs. NY restrictive) | Expanding: BlackRock BUIDL >$2.5B AUM; SEC SPBD approvals; institutional adoption accelerating; CLARITY Act (pending) would clarify CFTC/SEC boundary | Shifting from enforcement to accommodation: SEC dropped non-fraud crypto cases; SEC/CFTC token taxonomy (March 2026) classifies most DeFi tokens as non-securities; innovation exemption under development; CLARITY Act would clarify jurisdictional boundaries |
Multi-Activity Licensing
The US regulatory patchwork means that each activity is governed by different regulators with different licensing requirements. There is no single license that covers custody, stablecoin issuance, and mining simultaneously.
Entity Structuring for Multi-Activity Operations
Option 1: OCC National Trust Bank (Potential Unified Path)
The OCC national trust bank charter comes closest to a unified license for custody and stablecoin issuance:
- Custody: OCC trust banks may provide fiduciary custody, hold collateral, and conduct riskless principal crypto transactions (IL 1188)
- Stablecoin issuance: The GENIUS Act designates OCC-supervised nonbank entities as Permitted Payment Stablecoin Issuers (PPSIs)
- Mining: Not covered -- mining would require a separate entity or be conducted through an affiliate
Firms like Paxos demonstrate this model: NYDFS trust charter converting to OCC national trust bank, enabling both custody (fiduciary) and stablecoin issuance (USDP, PYUSD for PayPal) from a single regulated entity.
Option 2: Multi-Entity Structure
Most multi-activity firms use separate legal entities per activity:
| Entity | Activity | License |
|---|---|---|
| Trust company / bank subsidiary | Custody | OCC charter or state trust charter |
| PPSI subsidiary | Stablecoin issuance | OCC PPSI or state-qualified PPSI |
| Operating company | Mining | FinCEN MSB (if transmitting); state permits; PUCT registration (TX) |
Coinbase illustrates this: Coinbase Custody Trust Company (NYDFS trust charter, OCC application pending) for custody, separate entities for exchange operations, and licensed across multiple states and countries.
Option 3: State-Level Multi-License Approach
For smaller operations, a combination of:
- NY BitLicense (covers custody, exchange, transmission in NY)
- State MTLs (49 states for stablecoin distribution)
- FinCEN MSB registration (federal AML baseline)
- Local permits for mining operations
This approach costs less upfront ($1M-$3M vs. $6M-$28M+ for OCC) but offers narrower protections and no fiduciary powers.
Real-World Multi-Activity Entity Profiles
| Firm | Custody License | Stablecoin Role | Mining/Other | Structure |
|---|---|---|---|---|
| Paxos | OCC national trust bank (conditional Dec 2025; converting from NYDFS trust) | PPSI issuer: USDP, PYUSD (for PayPal) | N/A | Single entity for custody + stablecoin; first blockchain company with NYDFS limited purpose trust charter (2015) |
| Circle | OCC national trust bank (conditional Dec 2025; First National Digital Currency Bank, N.A.) | PPSI issuer: USDC (~$75.7B in circulation, Sept 2025) | N/A | Dual-license: OCC charter for reserve management + NYDFS trust charter for USDC issuance |
| Coinbase | NYDFS limited purpose trust company (Oct 2018); OCC application pending | Not an issuer; distributes third-party stablecoins | N/A | Separate entities per jurisdiction: US trust, UK FCA, German BaFin, Ireland, Japan, Singapore |
| Kraken | Wyoming SPDI (Sept 2020); Fed master account (March 2026) | N/A | N/A | Single SPDI charter; first crypto bank to receive Fed master account after 5+ year wait |
| BitGo | OCC national trust bank (conditional Dec 2025; converting from SD trust + NY BitLicense) | N/A | N/A | Dual US-EU structure: US OCC charter + German regulatory authorization |
| Fidelity Digital Assets | OCC national trust bank (conditional Dec 2025; converting from state trust) | N/A | Mining operations (ongoing since 2022) | Separate entities: trust company for custody, operating subsidiary for mining |
| Riot Platforms | N/A | N/A | Major mining operator (TX-based, ~1 GW capacity) | No financial license needed for mine-and-hold; TX PUCT registration required |
Approval Data Across Activities
OCC National Trust Bank (Custody + Stablecoin):
- 18 applications filed in 2025 alone (vs. <4/year average 2011-2024)
- 8 conditional approvals (Dec 2025-Feb 2026): Ripple, Circle, BitGo, Fidelity, Paxos, Bridge/Stripe, Protego, Crypto.com
- 0 public denials as of March 2026
- Pending: Coinbase, Morgan Stanley, Payoneer, Zerohash, World Liberty Financial
- Only Anchorage Digital Bank has progressed from conditional approval to fully operational status
NY BitLicense:
- ~34 license holders as of March 2024 (~28 unique businesses)
- At least 1 documented denial (Bittrex -- capital concerns, lax AML)
- At least 15 companies left New York rather than apply
- NY Comptroller audit (January 2024) found missing/outdated financial documentation and incomplete fingerprinting
FinCEN MSB Registration:
- 100% approval rate -- registration is not approval-based; enforcement is post-hoc
The State-by-State Problem
The United States has no federal licensing passport for digital asset businesses. Unlike the EU's MiCA framework, where a license in one member state covers the entire European Economic Area, a US license in one state confers zero rights in another.
Scale of the Problem
| Dimension | Detail |
|---|---|
| States requiring MTLs | 49 (Montana is the only state with no MTL requirement) |
| Year 1 all-state MTL cost | $250,000-$350,000 (application fees ~$115K + surety bonds ~$120K-$160K + registered agents ~$15K-$30K) |
| Annual maintenance (all states) | $225,000-$280,000+ (renewal fees ~$80K-$120K + bond premiums ~$130K+ + admin ~$15K-$30K) |
| Time to full coverage | 18-24 months |
| Highest-cost state applications | Texas ($10,000), Hawaii ($10,000), Colorado ($7,500) |
| Highest annual maintenance | California ($12,275), Texas ($8,168), Pennsylvania ($5,100) |
| Slowest processing | New York BitLicense (12-24+ months), California, Massachusetts, Pennsylvania (9-18 months) |
Workarounds
- NMLS (Nationwide Multistate Licensing System): A single portal for managing multi-state MTL applications. Reduces administrative burden but does not reduce the number of licenses needed.
- GENIUS Act state preemption (future): Once the SCRC certifies state regimes as "substantially similar" and PPSI status is granted, the GENIUS Act may partially preempt state MTL requirements for stablecoin issuers. Timeline: earliest 2027.
- OCC federal charter: National trust bank charters operate under federal authority, preempting some state licensing requirements for banking activities. However, states may still require separate licensing for non-banking activities.
State-Level Complexity for Mining Operations
Mining faces a distinct state-by-state challenge beyond financial licensing -- energy regulation and local zoning:
| State | Electricity Rate | Regulatory Burden | Mining Climate |
|---|---|---|---|
| Texas | $0.04-$0.06/kWh (industrial) | Moderate -- PUCT registration for >75 MW on ERCOT; penalty up to $25,000/violation/day | Pro-mining; demand-response integration; ERCOT estimates mining could use ~2,600 MW |
| Wyoming | $0.04-$0.06/kWh | Minimal -- no state income tax, purpose-built crypto laws | Most favorable; tailored high-load electric service agreements |
| Kentucky | $0.05-$0.07/kWh | Minimal + tax incentives -- HB 701 prevents discriminatory zoning | Pro-mining; sales/excise tax exemptions on mining electricity |
| Georgia | $0.06-$0.08/kWh | Low (state) / Variable (local) -- VASP regulations exempt individual miners | Caution: Gilmer County and Hiawassee have outright bans; multiple counties have noise/size restrictions |
| New York | $0.10-$0.15/kWh | High -- BitLicense + environmental; fossil-fuel PoW moratorium expired Nov 2024 | Hostile; Draft GEIS projects $10.6B in mining damages (2024-2050); proposed excise tax |
| California | $0.20-$0.35/kWh | High -- DFAL from July 2026 (miners likely exempt) | Economically unviable due to highest electricity costs |
Operating While Applying
| Jurisdiction | Can You Operate Before Licensed? |
|---|---|
| FinCEN MSB | Yes -- register within 180 days; operations begin immediately |
| State MTLs | Generally no -- most states require license before commencing money transmission |
| NY BitLicense | No -- license required before conducting virtual currency business in NY |
| CA DFAL | Likely yes during initial rollout -- applications open March 9, 2026; enforcement July 1, 2026 |
| TX PUCT | Yes -- register within 1 business day of receiving electric service; operations not halted |
| OCC charter | No -- conditional approval followed by pre-opening requirements; operations begin only after final authorization |
| GENIUS Act PPSIs | 12-month waiver available for applicants with substantially complete applications as of effective date |
Consolidated Banking Access
The 2023 closures of Silvergate Bank and Signature Bank -- the two primary banking partners for crypto businesses -- created a severe banking access crisis. The landscape has partially recovered but remains challenging, particularly for firms without federal charters.
Current Banking Partners by Activity
| Bank | Custody | Stablecoins | Mining | Notes |
|---|---|---|---|---|
| Customers Bancorp | Yes | Yes | Yes | Leading crypto bank post-Silvergate; cubiX platform; ~$2T digital asset transaction volume projected 2025 |
| Cross River Bank | -- | Yes | -- | Stablecoin payments infrastructure; Visa USDC settlement partner on Solana |
| BNY Mellon | Yes | Yes (reserve custody) | -- | Digital Asset Custody platform live for BTC/ETH; custody partner for Ripple's RLUSD |
| U.S. Bancorp | Yes (resumed Sept 2025) | Yes (pilot on Stellar) | -- | Selected for Anchorage Digital Bank stablecoin reserve custody |
| JPMorgan Chase | Institutional | Exploring (deposit tokens) | Selective | Plans to accept BTC/ETH as collateral; selective about crypto clients |
| Mercury | -- | -- | Yes | Serves Web3 companies; applied for OCC charter (Dec 2025); $3.5B valuation |
| Western Alliance Bank | -- | -- | Yes | Serves crypto businesses alongside traditional clients |
| SoFi Bank | -- | Yes (issuer) | -- | First national bank to offer open-access stablecoin (SoFiUSD) |
Federal Reserve Access
| Institution | Status | Details |
|---|---|---|
| Kraken Financial (Wyoming SPDI) | Approved March 4, 2026 | First crypto-native bank to receive Fed master account; limited-purpose, one-year account; Tier 3 applicant |
| Custodia Bank (Wyoming SPDI) | Denied (final, March 2026) | Applied Oct 2020; Tenth Circuit ruled 7-3 that Reserve Banks have discretion to deny |
| "Skinny Master Account" proposal | Expected Q4 2026 | Limited-purpose accounts: Fedwire, FedNow, NSS access; overnight balance cap $500M or 10% of assets; 90-day processing target |
Key Barriers
- 44% of financial institutions say they are ready to offer accounts to crypto businesses; 21% are already active (Elliptic 2025)
- ESG compliance increasingly a prerequisite for banking partnerships
- OCC-chartered entities face fewer banking access challenges than non-bank crypto firms
- Federal Reserve proposed permanently eliminating "reputation risk" as a supervisory factor (February 2026), which would structurally prevent future debanking episodes
Total Cost: Multi-Activity Operation
Scenario: US Entity Providing Custody + Stablecoin Issuance + Mining
Federal Path (OCC Charter + Mining Subsidiary)
| Cost Category | Year 1 | Annual Ongoing |
|---|---|---|
| OCC national trust bank charter (custody + stablecoin PPSI) | $6M-$28M+ (legal, compliance buildout, minimum capital $5M-$25M) | $2M-$7M+ (assessments, SOC audit, BSA/AML, insurance, legal) |
| Stablecoin-specific compliance (monthly attestation, reserve management) | Included in OCC setup | $300K-$600K (12 monthly attestation reports) + $500K-$1.5M (audit if >$50B) |
| Mining operation (TX-based, 50 MW) | PUCT registration: $0; local permits: $10K-$50K; equipment/facility: variable | $0 regulatory cost (PUCT); electricity: $0.04-$0.06/kWh; compliance: minimal |
| FinCEN MSB (if mining entity transmits) | $0 (registration free); AML program setup: $50K-$100K | $50K-$200K (compliance program) |
| Total regulatory/compliance | $6M-$28M+ | $2.5M-$9M+ |
State Path (Multi-License)
| Cost Category | Year 1 | Annual Ongoing |
|---|---|---|
| NY BitLicense (custody + exchange) | $150K-$500K | $15K-$80K+ |
| 49-state MTLs (stablecoin distribution) | $250K-$350K (fees + bonds) + $500K-$1M (legal) | $225K-$500K |
| Mining operation (KY or WY, favorable state) | Local permits: $5K-$20K; tax exemptions available | Minimal regulatory cost |
| FinCEN MSB | $0-$1.5K | $50K-$200K |
| Total regulatory/compliance | $1M-$2M | $300K-$800K |
Trade-offs: The federal path costs 5-15x more upfront but provides fiduciary powers, qualified custodian status, potential Fed payment rail access, and a stronger "regulatory moat" for institutional clients. The state path is accessible to smaller firms but lacks fiduciary authority and requires managing 49 separate state relationships.
Regulatory Direction
Federal Trend: Decisively Pro-Crypto (2025-2026)
The federal regulatory posture has undergone a fundamental shift since January 2025:
- January 2025 Executive Order: Affirms right to mine and self-custody; establishes Strategic Bitcoin Reserve (~200,000 BTC)
- March 2025: OCC IL 1183 removes bank non-objection requirements; SEC confirms PoW mining is not securities activity
- April 2025: DOJ memo ends "regulation by prosecution"; FDIC and Fed withdraw restrictive crypto guidance
- July 2025: GENIUS Act signed into law (68-30 Senate, 308-122 House) -- first federal digital asset legislation
- December 2025: OCC conditionally approves 5 national trust bank charters; CFTC launches digital asset collateral pilot; FDIC issues PPSI application NPRM
- January-March 2026: SEC-CFTC sign historic MOU harmonizing jurisdiction; OCC issues GENIUS Act NPRM (Feb 25, 2026); NCUA issues GENIUS Act NPRM (Feb 11, 2026); Kraken receives first crypto-native Fed master account (March 4, 2026)
- April-May 2026: FDIC issues GENIUS Act prudential NPRM (April 7, 2026) and illicit-finance NPRM (May 22, 2026); Treasury (FinCEN + OFAC) issue joint AML/sanctions NPRM treating PPSIs as BSA "financial institutions" and mandating an effective sanctions compliance program (April 8, 2026; Federal Register April 10; comments due June 9, 2026); Digital Asset PARITY Act (H.R. 8899) formally introduced (May 19, 2026) — first dedicated digital-asset tax bill (proposed, not enacted)
State Trend: Diverging
- Pro-crypto states strengthening: Wyoming (12+ blockchain laws, SPDI charter, state stablecoin), Kentucky (HB 701 mining protections, tax exemptions), Texas (grid integration model)
- Restrictive states maintaining pressure: New York (Draft GEIS projects $10.6B in mining damages; proposed excise tax on mining electricity; $48.5M Paxos settlement), some local jurisdictions adding mining bans
- New compliance layers: California DFAL (July 2026) adds licensing requirement with $500K minimum bond, though pure miners likely exempt
Key Risks
- Political durability: Nearly all federal changes were made through sub-legislative mechanisms (interpretive letters, staff guidance, no-action letters, executive action) rather than durable legislation. Only the GENIUS Act is statutory. A future administration could reverse much of the framework.
- Tether compliance: The July 18, 2028 sunset for non-PPSI stablecoins creates a forcing function. Global USDT (
$174B) holds reserves that include bitcoin, gold, and secured loans — assets not permitted under the GENIUS Act. Rather than restructure USDT, Tether launched a separate, GENIUS-Act-compliant US product — USAT — on January 27, 2026, issued by Anchorage Digital Bank (a federally chartered institution) with Cantor Fitzgerald as designated reserve custodian. USAT remains small-scale ($20M at launch versus USDC's ~$75B); whether it can scale, and what becomes of global USDT distribution to US persons after July 2028, are now the open questions. - Rulemaking delays: If final GENIUS Act regulations miss the July 2026 deadline, the January 2027 backstop date applies, compressing implementation timelines.
- Tax friction: IRS still treats all stablecoins as property despite GENIUS Act exclusion from securities/commodity definitions. No de minimis exemption has been enacted. The Digital Asset PARITY Act (H.R. 8899), formally introduced May 19, 2026, would add a stablecoin de minimis / deemed-basis safe harbor, extend wash-sale rules to digital assets, and create a five-year staking/mining deferral election — but it is newly introduced proposed legislation that has not advanced out of committee.
Upcoming Milestones
| Date | Event |
|---|---|
| April 2026 | SEC Custody Rule Modernization NPRM expected |
| May 1, 2026 | OCC GENIUS Act NPRM comment period closes |
| June 9, 2026 | Treasury (FinCEN + OFAC) joint AML/sanctions NPRM comment period closes |
| July 1, 2026 | California DFAL licensure deadline |
| July 18, 2026 | Statutory deadline for GENIUS Act final regulations |
| August 2026 | CFTC technical rulemaking for blockchain-adapted collateral, margin, clearing |
| Q4 2026 | Fed "skinny master accounts" potentially available |
| January 18, 2027 | GENIUS Act fully effective (backstop date) |
| July 18, 2028 | Foreign stablecoin (non-PPSI) sunset -- deadline for global USDT distribution to US persons (Tether's compliant US product USAT launched Jan 27, 2026) |
Enforcement Precedents Across Activities
Major enforcement actions illustrate the consequences of non-compliance and define the boundaries of acceptable conduct:
| Case | Amount | Activity | Key Lesson |
|---|---|---|---|
| Terraform Labs / Do Kwon (SEC, 2024) | $4.47 billion | Stablecoin (algorithmic UST) | Algorithmic stablecoins sold via investment schemes are securities; largest crypto enforcement ever |
| Tai Mo Shan / Jump Trading (SEC, 2024) | $123 million | Stablecoin (UST peg manipulation) | Market-making to artificially maintain stablecoin peg constitutes securities fraud |
| Tether (CFTC, 2021) | $41 million | Stablecoin reserves | Tether had sufficient fiat reserves only 27.6% of the time over 26 months; reserve misrepresentation heavily penalized |
| Tether/Bitfinex (NYAG, 2021) | $18.5 million | Stablecoin/custody commingling | Commingling customer and operational funds; ~$850M in customer funds went missing through Crypto Capital Corp |
| Paxos/BUSD (NYDFS, 2025) | $48.5 million | Stablecoin AML | ~$1.6B in suspicious transactions undetected; deficient AML/KYC program; failure to oversee Binance partnership |
| Anchorage Digital Bank (OCC, 2022) | Consent order | Custody BSA/AML | BSA/AML deficiencies at OCC-chartered custodian; order lifted after remediation |
Tax Reporting Obligations
Licensing and tax reporting are structurally linked in the United States: licensed brokers are the entities required to file information returns with the IRS. The Infrastructure Investment and Jobs Act (IIJA, P.L. 117-58, November 2021) imposed broker reporting obligations via IRC Section 6045, and final regulations (T.D. 9989, July 2024) designated Form 1099-DA as the information return for digital asset transactions. The firms that hold these licenses are the firms that must report.
Form 1099-DA -- Broker Reporting
The IRS introduced Form 1099-DA as the standardized information return for digital asset dispositions:
| Requirement | Effective Date |
|---|---|
| Gross proceeds reporting by custodial brokers | January 1, 2025 |
| Cost basis reporting by custodial brokers | January 1, 2026 |
| Real estate transactions involving digital assets | January 1, 2026 |
Who must file: Brokers that take possession of customer digital assets, including custodial digital asset trading platforms, digital asset hosted wallet providers, digital asset kiosks (ATMs), and certain processors of digital asset payments (PDAPs).
DeFi exclusion: Treasury Decision 10021 (December 2024) would have extended 1099-DA reporting to DeFi participants, but Congress repealed it via H.J. Res. 25 (signed April 10, 2025) under the Congressional Review Act. The IRS is permanently prohibited from issuing a substantially similar rule.
Key data elements reported on Form 1099-DA:
- Gross proceeds from dispositions
- Cost basis (from January 1, 2026)
- Date of acquisition and date of disposition
- Gain or loss amount
- Digital asset type and quantity
- Wash sale loss disallowed (Box 1i -- accommodates potential future legislation)
- Transaction ID
Reporting thresholds: There is no de minimis threshold for Form 1099-DA -- all reportable transactions by covered brokers must be filed regardless of amount. Backup withholding (24%) applies if the customer fails to furnish a valid TIN.
Transition Relief
| Notice | Relief Provided |
|---|---|
| Notice 2024-56 | No penalties for good-faith noncompliance during 2025 reporting year |
| Notice 2025-7 | Temporary cost basis identification relief for 2025 (allowing allocation methods for pre-2025 holdings) |
| Notice 2025-33 | Additional transition relief for backup withholding through 2027 |
| Notice 2024-57 | Excluded transactions (staking, wrapping, lending, liquidity provision) do not require 1099-DA reporting until further guidance |
On March 5, 2026, Treasury and IRS issued proposed regulations allowing brokers to furnish 1099-DA statements to customers electronically rather than requiring paper copies.
Penalties for Non-Compliance
Brokers that fail to file correct and timely Form 1099-DA returns face graduated penalties under IRC Sections 6721 (failure to file with IRS) and 6722 (failure to furnish to payee):
| Correction Timing | Penalty Per Return | Annual Maximum |
|---|---|---|
| Filed within 30 days | $60 | $660,500 |
| Filed by August 1 | $130 | $1,978,500 |
| After August 1 or not filed | $310 | $3,783,000 |
Intentional disregard of filing requirements carries a penalty of the greater of $630 per return or 10% of the amount required to be reported, with no annual cap.
Section 6050I -- $10,000+ Digital Asset Cash Reporting
IIJA Section 80603 amended IRC Section 6050I(d) to extend cash transaction reporting to digital assets. Businesses receiving more than $10,000 in digital assets in a single transaction (or related transactions) would be required to file Form 8300 within 15 days, reporting the sender's name, address, SSN, and transaction details.
Current status: As of March 2026, this requirement is not yet in effect. IRS Announcement 2024-04 stated it will not apply until final regulations are issued. Once effective, failure to comply carries penalties of up to $25,000 per violation and potential criminal penalties (up to 5 years imprisonment) for willful violations.
OECD CARF Implementation
The United States has committed to the OECD Crypto-Asset Reporting Framework (CARF). On November 14, 2025, Treasury submitted proposed regulations to the White House Office of Information and Regulatory Affairs (OIRA) for review.
The U.S. has indicated a longer implementation timeline than other jurisdictions: formal adoption is targeted for 2027-2029, with first automatic exchanges of taxpayer information between jurisdictions expected 2028-2029. This contrasts with the EU and many OECD members that began CARF implementation from January 1, 2026.
CARF will require Reporting Crypto-Asset Service Providers (RCASPs) -- which includes licensed exchanges, custodians, and brokers -- to collect and report user transaction data to the IRS for automatic exchange with treaty partner jurisdictions.
How Licensing Creates the Tax Reporting Infrastructure
The US tax reporting framework is built on top of the licensing infrastructure: only entities that take custody of customer assets are classified as brokers for 1099-DA purposes. This means that the same licenses that authorize digital asset activity also impose the obligation to serve as the IRS's information collection layer.
| License Type | Holder Examples | Tax Reporting Obligations |
|---|---|---|
| OCC National Trust Bank | Paxos, Circle, BitGo, Fidelity | Full Form 1099-DA filing (gross proceeds from 2025, cost basis from 2026); backup withholding (24%); FATCA/CRS reporting for foreign accountholders; CARF reporting when effective |
| Wyoming SPDI | Kraken | Full Form 1099-DA filing; backup withholding; CARF reporting when effective |
| NY BitLicense / Trust Charter | Coinbase (trust), Gemini (trust) | Full Form 1099-DA filing; backup withholding; NYDFS may impose additional state reporting |
| State MTLs (49-state) | Money transmitters distributing stablecoins | Form 1099-DA if acting as custodial broker; Form 8300 ($10K+ transactions, when effective); state-specific reporting varies |
| SEC Broker-Dealer | Firms custodying digital asset securities | Form 1099-DA for digital asset securities; existing 1099-B obligations for securities; full FATCA compliance |
| FinCEN MSB | Exchanges, kiosk operators, payment processors | Form 1099-DA if custodial; SAR/CTR filing (BSA); Form 8300 ($10K+ transactions, when effective); no standalone tax reporting obligation from MSB status alone |
| CFTC-Regulated (CLARITY Act) | Digital commodity intermediaries (pending Senate) | Expected Form 1099-DA obligations once CLARITY Act fully enacted; CFTC reporting requirements for derivatives |
| Mining Operations (no custody) | Riot Platforms, Marathon Digital | No Form 1099-DA obligation (not brokers); self-reporting of mined coins as ordinary income on own tax returns; no third-party reporting duty unless operating a custodial mining pool |
Key insight: DeFi protocols and non-custodial wallets are explicitly excluded from broker reporting following the CRA repeal of T.D. 10021. This means the tax reporting burden falls entirely on licensed, custodial entities -- reinforcing the regulatory advantage of operating within the licensing framework while creating a compliance gap for decentralized activity.
RWA / Security Token Platform Licensing
The United States regulates tokenized real-world assets through existing securities laws -- there is no standalone RWA or security token legislation. Tokenized securities (bonds, equities, fund units) are subject to the Securities Act of 1933 and the Securities Exchange Act of 1934. The SEC treats tokenized securities identically to their traditional counterparts under technological neutrality.
License Details
| Attribute | Detail |
|---|---|
| License name(s) | SEC broker-dealer registration + ATS (for secondary marketplace); SEC transfer agent registration (for maintaining securityholder records); RIA registration + fund formation (for managing tokenized funds); Form D / Form 1-A / Form C filing (for exempt issuance) |
| Regulatory authority | SEC, FINRA, state securities regulators |
| Legal basis | Securities Act of 1933, Securities Exchange Act of 1934, Regulation D, Regulation A+, Regulation CF, Regulation ATS, Investment Company Act of 1940, Investment Advisers Act of 1940 |
Requirements
| Requirement | Detail |
|---|---|
| Capital (broker-dealer) | Net capital per Rule 15c3-1; varies by activity type; ATS operators subject to Reg ATS requirements |
| Capital (transfer agent) | No federal minimum capital requirement |
| Capital (RIA) | State-specific requirements; SEC-registered RIAs (>$100M AUM) have no federal capital minimum |
| Prospectus/offering | Full SEC registration or exemption required: Reg D (accredited investors, no cap), Reg A+ ($75M/year cap), Reg CF ($5M/year cap) |
| Staffing | CCO, BSA/AML officer, FINRA-registered representatives, compliance team |
Application Process
| Registration | Timeline | Cost |
|---|---|---|
| Broker-dealer + ATS | 6--18 months | $500K--$2M+ |
| Transfer agent | 3--9 months | $100K--$500K |
| RIA + fund formation | 3--12 months | $200K--$1M+ |
| Reg A+ qualification | 2--6 months | $50K--$500K+ |
| Form D (Reg D) | 15 days | $50K--$500K+ (legal/compliance) |
| State MTLs (for fiat) | 3--24 months per state | $50K--$500K per state |
Ongoing Obligations
- FINRA membership and examination compliance for broker-dealers
- Reg ATS reporting (Form ATS-N) for marketplace operators
- SEC Rule 15c3-3 customer protection and reserve requirements
- BSA/AML program, SAR/CTR filing, OFAC screening
- Form 1099-DA broker reporting from 2025 (gross proceeds); cost basis from 2026
- Annual audited financial statements; SOC 2 Type II certification
Passporting
No US-wide passporting. Reg D 506(b)/(c) offerings and Reg A+ Tier 2 offerings preempt state registration under NSMIA. Reg A+ Tier 1, Reg CF, and non-covered securities require state-by-state blue sky compliance. State notice filing fees typically $150--$750 per state.
Banking Access
SEC-registered broker-dealers and RIAs have established banking relationships. Institutional tokenized fund operators (BlackRock, Franklin Templeton) leverage existing banking infrastructure. Smaller tokenization startups face moderate banking difficulty similar to other fintech entities.
Key Holders
| Firm | Registration Type | Activity |
|---|---|---|
| Securitize Markets, LLC | BD, ATS, Transfer Agent | BlackRock BUIDL tokenization platform; secondary marketplace |
| tZERO Securities, LLC | BD, ATS, SPBD | Tokenized securities trading platform |
| Prometheum Ember Capital LLC | SPBD | Special purpose broker-dealer for digital asset securities |
| INX Securities, LLC | BD | Tokenized securities issuance and trading |
| BlackRock (BUIDL) | RIA + 3(c)(7) fund exemption | Largest tokenized fund globally (>$2.5B AUM) |
| Franklin Templeton (FOBXX) | SEC-registered fund | Tokenized US Government Money Fund (~$594M AUM) |
Transition
The SEC under the 2025-2026 administration has adopted a more permissive stance toward tokenized securities: SAB 121 was rescinded (removing balance-sheet barriers for custodied crypto), OCC is issuing conditional trust bank approvals at an accelerated pace, and the CLARITY Act (pending Senate passage) would clarify the CFTC/SEC jurisdictional boundary for digital assets. The institutional RWA tokenization market is growing rapidly, led by BlackRock BUIDL (>$2.5B), Franklin Templeton FOBXX, and expanding adoption by banks and asset managers.
See US RWA Regulation for full details on SEC registration requirements, exemption frameworks, institutional tokenization projects, and the CLARITY Act.
DeFi Protocol Licensing
Regulatory Approach
The United States has no DeFi-specific license. DeFi protocols are regulated under existing financial laws applied on an activity-by-activity basis. The regulatory approach has shifted dramatically from enforcement-driven (2021-2024) to principles-based accommodation (2025-2026), anchored by the SEC/CFTC joint five-category token taxonomy published March 17, 2026.
Available License Types
| License/Registration | Regulator | Relevance to DeFi | Capital/Cost |
|---|---|---|---|
| FinCEN MSB | FinCEN | Required if protocol facilitates money transmission (e.g., fiat on/off ramps, custodial bridging) | $0 federal registration; AML program $50K-$200K/yr |
| State MTLs | 49 state regulators | Required for money transmission activities in each state; may apply to DeFi front-ends handling user funds | Bonds $10K-$500K+ per state; $250K-$350K/yr total |
| SEC Exchange/ATS | SEC | Required if DEX facilitates trading in tokens classified as securities | BD net capital varies; $500K-$2M+ setup |
| SEC Broker-Dealer | SEC/FINRA | Required for intermediation in securities token trading | Net capital per Rule 15c3-1; FINRA membership |
| CFTC DCM/SEF | CFTC | Required for DeFi derivatives platforms (perpetuals, futures, options) | Significant capital (millions); ongoing compliance |
| NY BitLicense | NYDFS | Required for any virtual currency business activity involving NY residents | $150K-$500K setup; up to $500K collateral |
| Innovation exemption | SEC Crypto Task Force | Under development (2026); would provide conditional relief for DeFi protocols meeting decentralization criteria | TBD |
DeFi-Specific Requirements
- Smart contract audits: Not federally mandated but effectively required for institutional participation and expected by regulators in enforcement contexts. SEC has cited lack of audits as evidence of inadequate controls.
- Governance framework: DAO governance tokens may be classified as securities if they confer profit expectations. The Ooki DAO enforcement action (CFTC, 2023) established that DAO token holders who vote on protocol operations can be held jointly and severally liable as an "unincorporated association."
- Decentralization threshold: The SEC/CFTC March 2026 taxonomy establishes that "sufficiently decentralized" protocols may fall outside securities regulation, but no bright-line test exists. The taxonomy allows non-security tokens initially sold as investment contracts to "graduate" as networks mature.
- OFAC compliance: Smart contracts interacting with sanctioned addresses risk enforcement. The Fifth Circuit ruled in Van Loon v. Treasury (November 2024) that OFAC exceeded its authority in sanctioning immutable Tornado Cash smart contracts, but mutable contracts remain sanctionable.
Key Enforcement Actions
| Case | Year | Agency | Outcome |
|---|---|---|---|
| Ooki DAO | 2023 | CFTC | $643K penalty; DAO members held liable as unincorporated association |
| Tornado Cash | 2022-2024 | OFAC/DOJ | OFAC sanctions partially struck down (Fifth Circuit); developer Alexey Pertsev convicted in Netherlands |
| Uniswap | 2024-2025 | SEC | Wells notice issued April 2024; investigation closed February 2025 under new administration |
| Mango Markets (Eisenberg) | 2023-2024 | DOJ/CFTC | Avraham Eisenberg convicted of fraud and market manipulation for $110M DeFi exploit |
Application Timeline
- FinCEN MSB: Immediate (online filing)
- State MTLs: 2-18 months per state; 18-24 months for full 49-state coverage
- SEC BD/ATS: 6-18 months
- CFTC DCM/SEF: 6-12+ months
- Innovation exemption: Not yet available; SEC Crypto Task Force developing framework
Cross-Reference
See United States DeFi Regulation for full details on SEC/CFTC jurisdiction, the five-category token taxonomy, Howey test application to DeFi, enforcement actions, DAO liability frameworks, and the innovation exemption under development.
Sources: SEC/CFTC Joint Interpretive Release, Token Taxonomy (March 17, 2026); CFTC v. Ooki DAO, No. 3:22-cv-05416 (N.D. Cal. 2023); Van Loon v. Dept. of Treasury, No. 23-50669 (5th Cir. 2024)
Insurance / Risk Transfer Licensing
Overview
The United States has no federal mandate requiring crypto businesses to carry insurance against loss of customer digital assets. Insurance regulation is state-based, with each of the 50 states maintaining its own Department of Insurance. The absence of a federal framework means that digital asset insurance is governed by the same patchwork of state insurance laws that apply to all commercial insurance. The NAIC (National Association of Insurance Commissioners) has provided guidance through INT 21-01 (2021), which addresses the accounting treatment of crypto-asset holdings by insurers but does not create insurance requirements for crypto businesses themselves.
Regulatory Authority
| Body | Role |
|---|---|
| State Departments of Insurance (50 states) | Primary regulation of insurance companies and intermediaries; licensing, solvency, market conduct |
| NAIC | Model law development, coordination among state regulators; INT 21-01 guidance on insurer crypto-asset holdings |
| Federal Insurance Office (FIO) | Monitoring, not regulation; no licensing authority; systemic risk analysis |
| OCC / State banking regulators | Indirectly relevant: OCC trust bank charters and state trust charters set operational standards that drive insurance procurement decisions |
Insurance Provider Licensing
Entities seeking to underwrite digital asset insurance in the US require:
- State insurance license in each state where policies are issued or risks are located -- there is no federal insurance license
- Surplus lines licensing for non-admitted carriers writing specialty digital asset policies (most crypto insurance is placed on a surplus lines basis because admitted market capacity is limited)
- Captive insurance options available in domiciles such as Vermont, Utah, and Hawaii for crypto firms seeking to self-insure portions of their risk
| Requirement | Detail |
|---|---|
| Admitted insurer capital | Varies by state; typically USD 2M-10M minimum surplus for property/casualty lines |
| Surplus lines | Licensed surplus lines brokers place coverage with non-admitted carriers (e.g., Lloyd's syndicates operating via US surplus lines); 15-day filing requirements in most states |
| Captive domiciles | Vermont (leading US captive domicile), Utah, Hawaii; minimum capital typically USD 250K-500K for pure captives |
| Application timeline | Admitted insurer: 6-18 months per state; surplus lines broker: 30-90 days; captive formation: 3-6 months |
| Passporting | No federal passport; each state requires separate licensing; NAIC accreditation provides some reciprocity for solvency standards |
Insurance Requirements for Crypto Businesses
| Dimension | Detail |
|---|---|
| Federal insurance mandate | No -- there is no federal requirement for crypto custodians, exchanges, or stablecoin issuers to carry insurance |
| FDIC coverage | Does not extend to crypto assets; FDIC insures deposits at member banks, not digital asset holdings; the GENIUS Act explicitly excludes stablecoins from FDIC coverage |
| SIPC coverage | Does not extend to crypto assets held by broker-dealers, unless they qualify as securities (in which case standard SIPC protection applies to the securities component) |
| OCC trust bank expectations | OCC-chartered trust banks (Paxos, Circle, BitGo, Fidelity) are expected to maintain appropriate insurance as part of safety and soundness requirements, though no specific coverage levels are prescribed |
| NY BitLicense | NYDFS does not mandate specific insurance coverage levels but assesses risk management practices including insurance as part of the licensing examination |
| State MTL bonds | Surety bonds (USD 10K-500K+ per state) are required for money transmitter licenses but these are not insurance against customer loss -- they protect the state, not customers |
| NAIC INT 21-01 | Provides accounting guidance for insurers holding crypto assets on their own balance sheets; restricts insurer crypto holdings to admitted assets only if certain conditions are met; does not address insurance requirements for crypto businesses |
Captive Insurance Options
US crypto firms increasingly use captive insurance structures to address coverage gaps:
- Pure captives owned by a single crypto firm to insure its own risks (custody loss, crime, errors & omissions)
- Cell captives (protected cell companies) available in Vermont, Utah, and other domiciles for smaller firms sharing captive infrastructure
- Advantages: customised coverage terms, potential cost savings, retained underwriting profit, coverage for risks that commercial markets decline
- Limitations: capital must be committed; regulatory approval required; not a substitute for third-party insurance in the eyes of institutional counterparties
Named Insurance Providers Active in the US
| Provider | Type | Digital Asset Activity |
|---|---|---|
| Lloyd's syndicates (via surplus lines) | Non-admitted | Primary source of crime/specie/custody coverage for US crypto firms; placed through licensed surplus lines brokers |
| Evertas | Lloyd's coverholder | Specialist digital asset insurance; crime, custody, and staking coverage |
| Aon, Marsh, WTW | Licensed brokers | Major intermediaries placing digital asset insurance; Aon and Marsh have dedicated digital asset practices |
| Arch Insurance | Admitted/surplus lines | Crime/specie policies for institutional crypto custodians |
| Canopius | Lloyd's syndicate (surplus lines) | Digital asset crime and custody coverage |
| Relm Insurance | Bermuda-domiciled, surplus lines | Crypto-native policies; D&O, professional liability, crime/theft |
| Kinsale Capital | Surplus lines | Emerging carrier for digital asset E&O and cyber |
| BitGo (self-insured + commercial) | Captive + Lloyd's | Maintains USD 250M custody insurance programme combining captive and commercial placements |
Estimated Insurance Costs for Crypto Businesses
| Coverage Type | Estimated Annual Premium | Notes |
|---|---|---|
| Crime / specie (custody) | 0.5%-3.0% of insured assets | Higher rates than UK due to fragmented regulatory landscape and surplus lines taxes |
| Directors & officers | USD 20,000-250,000+ | Driven by SEC/CFTC enforcement risk and personal liability exposure |
| Cyber / technology E&O | USD 10,000-100,000+ | Standard for technology firms; crypto-specific endorsements available |
| Surety bonds (state MTLs) | USD 5,000-50,000/year (all states) | Required for money transmitter licenses; not customer protection insurance |
| Captive formation | USD 100,000-250,000 setup; USD 50,000-100,000/year ongoing | For firms self-insuring portions of risk |
Regulatory Direction
- No federal insurance mandate for crypto businesses is expected in the near term; the GENIUS Act and CLARITY Act do not address insurance requirements
- The NAIC continues to monitor crypto-asset insurance through its Innovation, Cybersecurity, and Technology Committee but has not proposed model insurance requirements for crypto businesses
- State insurance regulators are increasingly scrutinising surplus lines placements for digital asset risks
- Captive insurance adoption by crypto firms is accelerating as commercial market capacity remains constrained relative to industry asset growth
- The SEC Custody Rule Modernization NPRM (expected April 2026) may address insurance expectations for qualified custodians of digital assets
Cross-Reference
See US Digital Asset Insurance for full details on state-based insurance regulation, surplus lines market structure, NAIC INT 21-01, captive insurance options, and institutional custody insurance programmes.
Payment / Transfer Service License
Overview
The United States has no single federal payment license for crypto. Instead, crypto payment providers must navigate a three-layer licensing structure: (1) federal FinCEN MSB registration for AML/BSA compliance, (2) individual state money transmitter licenses (MTLs) in 49 states plus DC, and (3) optional federal charters (OCC national trust bank or GENIUS Act PPSI) that provide a higher-cost but more unified path. New York's BitLicense adds a fourth, crypto-specific layer. The GENIUS Act (signed July 18, 2025) creates a dedicated federal framework for payment stablecoin issuers but does not eliminate state MTL requirements.
License Details
| Attribute | Detail |
|---|---|
| License name(s) | FinCEN MSB registration (federal); state money transmitter licenses (49 states + DC); New York BitLicense (23 NYCRR Part 200); OCC national trust bank charter / GENIUS Act PPSI (federal); California DFAL license (effective July 2026) |
| Enabling statutes | Bank Secrecy Act (31 U.S.C. 5311 et seq.); state money transmission statutes (varies by state); 23 NYCRR Part 200 (NY BitLicense); National Bank Act (12 U.S.C. 1 et seq.); GENIUS Act (S.1582, signed July 18, 2025); California DFAL (effective July 1, 2026) |
| Regulatory authority | FinCEN (federal AML); 49 state banking departments + DC; NYDFS (New York); OCC (national charter/PPSI); Federal Reserve (master account access); FDIC (state nonmember bank subsidiaries) |
| License scope | FinCEN MSB: AML/BSA compliance for money transmission. State MTLs: acceptance and transmission of currency, funds, or value (including crypto). BitLicense: all virtual currency business activity in NY. OCC PPSI: payment stablecoin issuance. DFAL: digital financial asset business activity in CA |
Requirements
| Requirement | Detail |
|---|---|
| Who can apply | FinCEN MSB: any person doing business as money transmitter. State MTLs: entities incorporated or registered in each state. BitLicense: any entity conducting virtual currency business involving NY. OCC PPSI: nonbank entities or uninsured national banks |
| Capital — FinCEN MSB | None imposed by FinCEN |
| Capital — state MTLs | Surety bonds: $10,000--$1,000,000+ per state (varies by state and business volume); net worth: $100,000--$1,000,000+ aggregate |
| Capital — NY BitLicense | $500,000 net capital minimum; $500,000+ surety bond |
| Capital — OCC PPSI | $5 million minimum (de novo); 12 months operating expenses as backstop; Tier 1 capital only |
| Staffing requirements | FinCEN MSB: BSA/AML compliance officer. State MTLs: compliance officer, qualified officers. BitLicense: CCO, BSA officer, CISO (NYDFS Part 500). OCC PPSI: BSA/AML officer, compliance team, internal audit, risk management, treasury; 9--18 FTEs minimum |
| Physical presence | FinCEN: no federal requirement beyond US nexus. States: registered agent in each state required. NY: office presence expected. OCC: physical headquarters |
| Technology requirements | NYDFS Part 500 cybersecurity requirements (BitLicense); OCC IT safety-and-soundness standards; FinCEN AML monitoring systems |
| Insurance requirements | No federal insurance mandate. State MTL surety bonds required (protect the state, not customers). FDIC/SIPC coverage does not extend to crypto assets. OCC expects appropriate insurance as safety-and-soundness matter |
Application Process
| Step | Detail |
|---|---|
| FinCEN MSB | Electronic filing (Form 107); must register within 180 days of commencing operations; free; renewal every 2 years |
| State MTLs | File through NMLS (Nationwide Multistate Licensing System); each state reviews independently; 49 separate applications |
| NY BitLicense | Apply to NYDFS; $5,000 application fee; statutory timeline not specified |
| OCC PPSI | Apply to OCC; conditional approval followed by pre-opening requirements |
| Timeline — FinCEN MSB | Immediate (online filing) |
| Timeline — state MTLs | 3 months (smaller states) to 12--18 months (CA, NY, TX, IL, PA); 18--24 months for full nationwide coverage |
| Timeline — NY BitLicense | 12--24+ months actual |
| Timeline — OCC PPSI | 5--6 months to conditional approval (actual 2025 data); pre-opening phase additional |
| Total cost — nationwide MTL coverage | $500,000--$3,000,000+ (including legal fees, bonds, application fees) |
| Annual ongoing compliance cost | $200,000--$500,000+ (audit, reporting, compliance personnel, bond renewals) for state MTLs; $1.5M--$5M+ for OCC PPSI |
| Approval data | FinCEN MSB: 100% (registration, not approval). BitLicense: ~34 holders (~28 unique businesses); at least 1 documented denial (Bittrex); at least 15 companies left NY rather than apply. OCC PPSI: 8 conditional approvals Dec 2025--Feb 2026; 0 public denials |
Ongoing Obligations
| Obligation | Detail |
|---|---|
| Annual fees | State MTL renewals: $80,000--$120,000/year total (all states); bond premiums: $130,000+/year; NY BitLicense assessment: $1,000+/year |
| Audit requirements | State MTLs: annual financial audit and compliance reporting per state. BitLicense: bi-annual independent AML and cybersecurity audits. OCC: semiannual examinations; monthly reserve attestation by registered CPA; annual audited financials if >$50B outstanding |
| Reporting | FinCEN: SAR/CTR filing, Travel Rule ($3,000+ transfers); IRS: Form 1099-DA (gross proceeds from 2025, cost basis from 2026); state-specific reporting varies |
| Compliance program | Written BSA/AML program (policies, procedures, internal controls); designated BSA compliance officer; ongoing employee training; independent audit/review; OFAC sanctions screening |
| Annual compliance cost estimate | FinCEN MSB AML program: $50,000--$200,000/year. State MTLs all-state: $225,000--$500,000/year. NY BitLicense: $15,000--$80,000+/year. OCC PPSI: $1.5M--$5M+/year |
Passporting & Cross-Border
| Dimension | Detail |
|---|---|
| Federal passporting | None -- FinCEN MSB registration is federal-wide for AML purposes but does not replace state MTLs |
| State passporting | None -- each state license is independent; no state-to-state recognition |
| GENIUS Act preemption | Federal PPSI charter preempts state chartering/licensure requirements (but not state consumer protection laws). State-qualified PPSIs capped at $10B outstanding; must transition to federal oversight within 360 days of exceeding cap |
| MTMA harmonization | 31 states have adopted the Model Money Transmission Modernization Act (CSBS) in full or part; provides model standards but does not eliminate per-state licensing |
| Reverse solicitation | No formal reverse solicitation framework; foreign firms must obtain US licenses to serve US customers |
Banking Access
| Dimension | Detail |
|---|---|
| Difficulty level | Moderate to high; significantly improved since 2025 policy reversals (OCC IL 1183, FDIC FIL-7-2025, Fed withdrawal of pre-approval requirements) |
| Known banking partners | Customers Bancorp (leading crypto bank post-Silvergate; ~$2T digital asset volume); Cross River Bank (stablecoin infrastructure); BNY Mellon (digital asset custody); U.S. Bancorp; JPMorgan Chase (institutional, selective); Mercury (Web3 companies); Western Alliance Bank |
| Fed access | Kraken Financial (Wyoming SPDI) received first crypto-native Fed master account (March 2026); Custodia Bank denied; "skinny master accounts" proposed for Q4 2026 |
| Onboarding timeline | 44% of financial institutions report readiness to serve crypto businesses (Elliptic 2025); OCC-chartered entities face fewer banking access challenges |
Key License Holders
| Firm | License Type | Approval |
|---|---|---|
| Circle | OCC conditional approval (First National Digital Currency Bank, N.A.); NYDFS trust charter | December 2025 (OCC conditional) |
| Paxos | OCC conditional approval (converting from NYDFS trust) | December 2025 (OCC conditional) |
| Coinbase | NYDFS limited purpose trust company; OCC application pending | October 2018 (NYDFS trust) |
| Kraken | Wyoming SPDI; Fed master account | September 2020 (SPDI); March 2026 (Fed) |
| BitGo | OCC conditional approval (converting from SD trust + NY BitLicense) | December 2025 (OCC conditional) |
| Ripple | OCC conditional approval | December 2025 |
| Gemini | NYDFS limited purpose trust company; BitLicense | 2015 (trust charter) |
Transition / Grandfathering
| Dimension | Detail |
|---|---|
| Can you operate while applying? | FinCEN MSB: yes (register within 180 days). State MTLs: generally no (license before commencing). BitLicense: no. OCC: no (conditional approval then pre-opening). GENIUS Act: 12-month waiver for applicants with substantially complete applications |
| GENIUS Act timeline | Signed July 18, 2025; regulations due July 18, 2026; effective January 18, 2027 (or 120 days after final regulations); non-compliant stablecoin sunset July 2028 |
Cross-Reference
See United States Crypto Payment Regulation for full details on FinCEN MSB registration, state MTL requirements, NY BitLicense, GENIUS Act PPSI framework, Operation Choke Point 2.0 reversal, and the federal/state licensing patchwork.
Sources: FinCEN MSB Registration Rule; CSBS NMLS; NYDFS BitLicense; GENIUS Act (S.1582, Public Law 119-27); OCC GENIUS Act NPRM; Federal Reserve 2026 press releases
NFT & Digital Collectibles
Activity type: NFT marketplace operation, NFT issuance, fractionalized NFT platforms
| Dimension | Details |
|---|---|
| Applicable license(s) | No federal NFT-specific license. FinCEN MSB registration (if platform holds/transmits funds); SEC broker-dealer/ATS registration (if NFTs are securities); state money transmitter licenses (49+ states); New York BitLicense (23 NYCRR Part 200); California DFAL license (effective July 2026) |
| Regulatory authority | SEC, CFTC, FinCEN (federal); NYDFS, DFPI, state banking departments (state) |
| Capital requirements | State MTLs: $10,000--$2,000,000+ surety bonds; net worth $100,000--$1,000,000+; NY BitLicense: case-by-case capital + surety bond; CA DFAL: $500,000 minimum surety bond |
| Timeline (actual) | FinCEN MSB: 180 days from commencing business; NY BitLicense: 12--24 months; CA DFAL: TBD (opens Q1 2026); state MTLs: 3--18 months per state; nationwide licensing: $500,000--$2,000,000+ total |
| Key requirements | Howey test analysis for securities classification; AML/BSA compliance programme; state-by-state MTL compliance; customer fund segregation; cybersecurity programme |
| NFT-specific notes | SEC/CFTC joint interpretation (March 2026) classifies "digital collectibles" as neither securities nor commodities if genuinely unique and not marketed as investments; fractionalized NFTs likely securities under Howey; SEC closed OpenSea investigation (Feb 2025) without action; collectible NFTs potentially subject to 28% capital gains rate per IRS Notice 2023-27 |
| Cross-reference | Full NFT regulation details |
For Full Details
- Custody: United States -- Institutional Crypto Custody Regulations
- Stablecoin Issuance: United States -- Stablecoin Regulations
- Mining: United States -- Crypto Mining Regulations
- Digital Asset Taxation: United States — Digital Asset Taxation
- RWA Regulation: United States — RWA Regulation -- SEC registration, exemption frameworks, broker-dealer/ATS requirements, BlackRock BUIDL, institutional tokenization
- DeFi Regulation: United States — DeFi Regulation -- SEC/CFTC jurisdiction, token taxonomy, Howey test, enforcement actions, DAO liability
- Digital Asset Insurance: US Digital Asset Insurance -- state-based insurance regulation, surplus lines, NAIC INT 21-01, captive insurance, institutional custody programmes
- Crypto Payment Regulation: US Crypto Payment Regulation -- FinCEN MSB, state MTLs, NY BitLicense, GENIUS Act, OCC PPSI, banking access, cross-border payments
<!-- related-coverage:BEGIN — auto-generated by related_coverage.py; edit via --apply re-run, not by hand -->
Related coverage
United States — License Map in other research domains:
- CBDC Frameworks
- Crypto Mining Regulations
- DeFi Regulation & Liability Frameworks
- Digital Asset Insurance & Risk Transfer
- Digital Asset Taxation
- Institutional Crypto Custody Regulations
- NFT & Digital Collectibles Regulations
- Payment Services & Crypto Payment Regulation
- Stablecoin Regulations & License Regimes
- Tokenized Real-World Assets (RWA) Regulation
Verification Notes
This file was refreshed and reconciled on 2026-06-04 against the nine refreshed deep-research source-domain files for the United States (all dated modified: 2026-06-04). Licence types, regulators, fees, capital, bond, timeline, and effective-date facts were cross-checked against those sources; remaining facts were verified against primary regulator/legislative sources.
Corrections made this cycle (Correction Protocol)
-
GENIUS Act source URL — fixed. The Payment / Transfer Service License section previously linked the GENIUS Act to
congress.gov/bill/119th-congress/senate-bill/394/text(S.394, an earlier February 2025 version, not the enacted bill). Corrected to the enacted bill, S.1582 (Public Law 119-27), at congress.gov/bill/119th-congress/senate-bill/1582. Confirmed via the refreshed stablecoin-regulations source (lines 33, 50, 53) which records S.394 as the February 4, 2025 earlier version and S.1582 as the May 21, 2025 final version signed July 18, 2025. -
Tether compliance — corrected stale framing. The Key Risks and Activity Comparison sections previously stated that "whether Tether ($174B USDT) can comply" was "the largest open question," with no mention of Tether's response. Corrected to record that Tether launched a separate, GENIUS-Act-compliant US product — USAT, issued by Anchorage Digital Bank with Cantor Fitzgerald as reserve custodian — on January 27, 2026 (~$20M at launch vs. USDC ~$75B), rather than restructuring global USDT. Per refreshed stablecoin-regulations source (lines 400, 651, 880, 1001).
Developments added (2026-03-20 → 2026-06-04)
- FDIC GENIUS Act prudential NPRM — April 7, 2026 and FDIC illicit-finance NPRM — May 22, 2026. Per refreshed stablecoin-regulations source (line 993).
- Treasury (FinCEN + OFAC) joint AML/sanctions NPRM — issued April 8, 2026; Federal Register April 10, 2026; comments due June 9, 2026. Treats PPSIs as Bank Secrecy Act "financial institutions" and, for the first time in federal law, mandates that this category of US persons maintain an effective sanctions compliance program (five OFAC core elements). Verified via Treasury press release sb0435 (search-confirmed) and Federal Register 2026-06963.
- Digital Asset PARITY Act (H.R. 8899) — formally introduced May 19, 2026. First dedicated digital-asset tax bill: would extend wash-sale rules to digital assets, add a stablecoin de minimis / deemed-basis safe harbor, a five-year staking/mining deferral election, and a dealer mark-to-market election. Proposed legislation, not enacted — newly introduced, not advanced out of committee. Per refreshed digital-asset-taxation source (lines 77, 446, 451).
- OCC GENIUS Act NPRM dated to February 25, 2026 and NCUA NPRM to February 11, 2026 (previously stated only as "Jan–Mar 2026"). OCC date verified via OCC Bulletin 2026-3 (fetched 2026-06-04); NCUA per refreshed stablecoin-regulations source (line 993).
Unverified / flagged
- All cost, fee, capital, bond, timeline, and premium figures are self-reported or estimated (industry estimates, regulator-published where available). OCC charter application fees are NOT publicly disclosed; the "$5M–$28M+" all-in setup and "$6M–$28M+ first-year" PPSI figures are industry estimates flagged as such in the refreshed crypto-custody and stablecoin-regulations sources. State MTL all-state cost ranges ($250K–$350K Year 1; $225K–$280K+ annual) are aggregated industry estimates.
- BitLicense holder count. This file cites "~34 license holders (~28 unique businesses), as of March 2024"; the refreshed crypto-payment-regulation source cites "~25 entities holding BitLicenses or trust charters" as of 2025. The two figures count differently (license holders vs. BitLicense + trust charters) and use different vintages; both retained with their stated dates rather than silently merged.
- Federal Reserve PPSI prudential NPRM had not been issued as of 2026-06-06 — confirmed this cycle against the Fed's 2026 press-release index (no stablecoin/PPSI rulemaking listed). The Fed remains the only primary federal payment-stablecoin regulator yet to issue its NPRM. (Negative status verified against a primary; see gap-closure entry below.)
Targeted gap-closure pass (2026-06-06)
Two carried-forward gaps were closed against fetched primary sources this cycle:
- Federal Reserve PPSI prudential NPRM status — confirmed outstanding (CLOSED). Previously flagged as outstanding but resting on cross-cutting facts rather than a live primary check. Re-confirmed this run by fetching the Federal Reserve Board's 2026 press-release index (fetched 2026-06-06), which lists no GENIUS Act / stablecoin / payment-stablecoin-issuer rulemaking among 2026 releases. Status carried forward unchanged (no Fed NPRM as of 2026-06-06); the difference is that the negative is now backed by a fetched primary rather than inference.
- GENIUS Act statutory identity (S.1582 / Public Law 119-27) — verified via govinfo, bypassing the congress.gov 403 (CLOSED). The prior cycle could not fetch congress.gov (HTTP 403). This run fetched the enacted slip-law HTML at govinfo.gov PLAW-119publ27, which confirms: Public Law 119-27, originating bill S. 1582, short title "Guiding and Establishing National Innovation for U.S. Stablecoins Act" (GENIUS Act), approved July 18, 2025. The file's existing identity claims were correct; the source citation in the consolidated Sources block was switched from the 403-blocked congress.gov page to the fetched govinfo slip law.