regulationsresearchlicense mapjurisdictionsUnited States — License Map

United States — License Map

June 6, 2026

54 min read

The United States presents the most complex licensing environment in digital assets globally. There is no single federal framework equivalent to the EU's MiCA. Instead, regulation is distributed across at least six federal agencies (SEC, OCC, CFTC, FinCEN, FDIC, Federal Reserve) and 50 state regulators, each asserting jurisdiction over different activities and entity types. A firm seeking to operate across custody, stablecoin issuance, and mining must navigate overlapping and sometimes contradictory requirements at both levels.

Regulatory Architecture

Federal Agencies

AgencyPrimary JurisdictionKey Authorities
SECSecurities custody, broker-dealer oversight, investment adviser custody ruleInvestment Advisers Act Rule 206(4)-2, Securities Exchange Act Rule 15c3-3
OCCNational trust bank charters, stablecoin issuer (PPSI) supervisionNational Bank Act 12 U.S.C. 92a, GENIUS Act, Interpretive Letters 1170-1188
CFTCDigital commodities (BTC, ETH), derivatives, collateral programsCommodity Exchange Act, CLARITY Act (House-passed)
FinCENAML/KYC for all digital asset businesses; MSB registrationBank Secrecy Act 31 U.S.C. 5311
FDICFDIC-supervised bank subsidiaries issuing stablecoins12 CFR 303.252 (GENIUS Act NPRM, December 2025)
Federal ReserveBank holding companies, Fed master accounts, payment railsSR Letters (withdrawn 2025), "skinny master account" proposal

Key State Regulators

StateFrameworkRelevance
New York (NYDFS)BitLicense (23 NYCRR Part 200), limited purpose trust charters, stablecoin guidance (June 2022)Most rigorous state regime; required for any virtual currency business serving NY persons
WyomingSPDI charter (W.S. 13-12-101), 12+ blockchain laws, no state income taxMost crypto-friendly state; issued first state stablecoin (FRNT, August 2025)
California (DFPI)Digital Financial Assets Law (DFAL), effective July 1, 2026$20,000 application fee + $500,000 minimum surety bond; miners likely exempt
Texas (PUCT)Grid registration for mining >75 MW on ERCOT; demand-response integrationLeading mining jurisdiction with grid-integration model
KentuckyHB 701 (March 2025) protecting mining rights; sales/excise tax exemptions on mining electricityAmong the most pro-mining states

Landmark Federal Legislation

  • GENIUS Act (S.1582, Public Law 119-27, signed July 18, 2025): First federal digital asset law. Establishes payment stablecoin framework; compliant stablecoins excluded from securities/commodity definitions. Effective January 18, 2027 (or 120 days after final regulations). Multi-agency implementing rulemaking is underway: OCC NPRM (Feb 25, 2026), NCUA NPRM (Feb 11, 2026), FDIC application-procedures NPRM (Dec 16, 2025), FDIC prudential NPRM (Apr 7, 2026), FDIC illicit-finance NPRM (May 22, 2026), and Treasury/FinCEN/OFAC joint AML/sanctions NPRM (Apr 8, 2026; comments due June 9, 2026). The Federal Reserve PPSI prudential NPRM remains outstanding as of June 2026 — the Fed's 2026 press-release index (fetched 2026-06-06) lists no stablecoin or PPSI rulemaking, leaving the Fed the only primary federal payment-stablecoin regulator yet to issue its NPRM.
  • CLARITY Act (H.R. 3633, House-passed July 17, 2025): Divides SEC/CFTC jurisdiction -- SEC for digital securities, CFTC for digital commodities. Awaiting Senate.
  • Executive Order (January 23, 2025): Affirms right to mine cryptocurrency and maintain self-custody. Prohibits CBDC development.

Activity Comparison Table

DimensionCrypto CustodyStablecoin IssuanceCrypto MiningRWA / Security Token PlatformDeFi Protocol Operations
Legal statusLegal; multi-agency regulation dramatically liberalized 2025-2026Legal; GENIUS Act creates dedicated federal framework (effective 2027)Legal; federally affirmed by January 2025 Executive OrderLegal; regulated as securities under existing SEC framework; no standalone RWA legislationLegal but no DeFi-specific license; regulated under existing securities, commodities, and BSA frameworks; transitioning from enforcement-driven to principles-based (March 2026 token taxonomy)
Primary regulatorsSEC, OCC, state banking regulators (NYDFS, Wyoming, South Dakota)OCC, Fed, FDIC, state regulators (NYDFS, Wyoming)FinCEN (if transmitting), state energy regulators (TX PUCT), local zoningSEC (securities issuance, BD/ATS, transfer agent); FINRA (broker-dealer oversight); state securities regulators (blue sky laws)SEC (DEX as exchange/ATS); CFTC (derivatives, perpetuals, digital commodities); FinCEN (MSB for money transmission); OFAC (sanctions); state MTL regulators
License typesOCC national trust bank ($5M-$20M+ setup); Wyoming SPDI ($3M-$10M); NY trust company ($5M-$15M+); BitLicense ($150K-$500K); SEC broker-dealer (varies)OCC nonbank PPSI ($6M-$28M+ first year); state-qualified PPSI (varies); 49-state MTLs ($1M-$3M first year)FinCEN MSB (free, if transmitting); state MTLs ($250K-$350K/yr all states); TX PUCT registration (free); NY BitLicense ($150K-$500K)SEC broker-dealer + ATS registration ($500K-$2M+); transfer agent registration ($100K-$500K); RIA + fund formation ($200K-$1M+); state MTLs for fiat handlingNo DeFi-specific license. SEC exchange/ATS or broker-dealer registration if trading securities tokens; CFTC DCM/SEF for derivatives; FinCEN MSB ($0 capital, if transmitting); state MTLs ($250K-$350K/yr); innovation exemption under development
Capital requirementsOCC: standard trust bank capital; Wyoming SPDI: $10M+ or 1.25-1.75% of AUC; NY: case-by-caseOCC PPSI: $5M minimum (de novo), 12 months expenses as operational backstop, Tier 1 only; conditionally approved charters: $6.05M-$25MFinCEN MSB: $0; state MTL bonds: $10K-$500K+ per state; NY BitLicense: up to $500K collateral; CA DFAL: $500K minimum bondBroker-dealer: net capital per Rule 15c3-1 (varies by activity); transfer agent: no federal capital minimum; RIA: state-specificFinCEN MSB: $0; state MTL bonds: $10K-$500K+ per state; SEC BD net capital varies by activity; CFTC DCM/SEF: significant capital (millions)
Application timelineOCC: 3-6 months conditional, then pre-opening phase; Wyoming SPDI: ~9 months; NY trust: 12-24 months; BitLicense: 9-24 months; South Dakota: 3-6 monthsOCC PPSI: 5-6 months to conditional approval (actual 2025 data); 49-state MTLs: 18-24 months for full coverageFinCEN MSB: immediate (online filing); state MTLs: 2-18 months per state; BitLicense: 12-24 months; TX PUCT: same-dayBD + ATS: 6--18 months; transfer agent: 3--9 months; RIA: 3--12 months; Reg A+ qualification: 2--6 months; Form D: 15 daysFinCEN MSB: immediate; state MTLs: 2-18 months per state; SEC BD/ATS: 6-18 months; CFTC DCM/SEF: 6-12+ months
Annual ongoing costOCC: $2M-$7M+ (assessments, SOC audit, BSA/AML, insurance, cybersecurity, legal); Wyoming SPDI: $1M-$3M+; NY trust: $2M-$5M+OCC PPSI: $1.5M-$5M+ (monthly attestations, compliance staff, examinations); 49-state MTLs: $225K-$500KFinCEN MSB: $50K-$200K/yr (AML program); 49-state MTLs: $225K-$280K+/yr; BitLicense: $15K-$80K+/yr; TX PUCT: $0$500K--$2M+ (FINRA membership, compliance, Reg ATS reporting, SOC audits, legal, BSA/AML)$200K-$2M+ depending on registrations; MSB AML program $50K-$200K/yr; state MTLs $225K-$280K+/yr; SEC/CFTC compliance adds $500K-$2M+
Reserve/backingClient assets must be segregated; no rehypothecation without consent; SAB 122 removed balance-sheet liability1:1 reserve in USD, T-bills (93 days or less), repos, government money funds; segregated from operations; no rehypothecation; monthly certified reportsN/ATokenized fund assets backed by underlying (e.g., BUIDL: US Treasury bills, repos, cash); Rule 15c3-3 customer protection for BD custodyNo specific reserve requirements for DeFi protocols; BD Rule 15c3-3 applies if holding customer assets; liquidity pool risks borne by LPs
AML/KYCFull BSA/AML program; FinCEN MSB registration; Travel Rule ($3,000+ transfers); OFAC screeningFull BSA/AML; FinCEN tailored rules forthcoming; CIP required; SAR/CTR filingMining for own account: exempt from FinCEN. Mining pools distributing >$3,000: Travel Rule applies. Custodial mining/exchange: full BSA/AMLFull BSA/AML program; broker-dealer KYC/AML; OFAC screening; 1099-DA reporting from 2025FinCEN MSB: full BSA/AML program if money transmission; Travel Rule ($3,000+); OFAC screening; "truly decentralized" protocols may argue exemption but untested
Audit requirementsSOC 2 Type II ($100K-$500K+/yr); annual financial statements; OCC semiannual examinationsMonthly attestation by registered CPA; annual audited financials if >$50B outstanding; quarterly financial condition reportsState MTL audits where applicable; no federal audit requirement for pure miningAnnual PCAOB or CPA audit for broker-dealers; SOC 2 Type II for platforms; SEC/FINRA examinationsSmart contract audits expected (not mandated); SOC 2 if operating platform; PCAOB audit if SEC-registered; state MTL audits where applicable
Tax treatmentCustody fees taxed as ordinary income; client crypto treated as propertyStablecoins treated as property (IRS Notice 2014-21); every transaction technically taxable; proposed $200 de minimis exemption not enacted; 1099-DA reporting from 2025Mined crypto = ordinary income at FMV on receipt; equipment depreciable (Section 179/MACRS); later sale = capital gain/loss; 1099-DA broker reporting from 2025Tokenized securities taxed as underlying asset class (dividends, interest, capital gains); 1099-DA broker reporting from 2025DeFi yield (lending, LPing, staking) = ordinary income at FMV on receipt; token swaps = taxable dispositions; 1099-DA broker reporting from 2025; IRS DeFi broker rule under review
PassportingNo US passporting. Each state requires separate license. OCC charter operates nationally for federal purposes but does not substitute for state requirementsNo passporting. GENIUS Act does not preempt state MTLs immediately. Stablecoins circulate globally on-chain but on/off ramp partners need local licensesNo passporting. Each state has own requirements. FinCEN registration is federal-wide but does not replace state MTLsNo passporting. Reg D 506(b)/(c) and Reg A+ Tier 2 preempt state registration under NSMIA. Other offerings require state-by-state blue sky complianceNo passporting. FinCEN MSB is federal but does not replace state MTLs. Each state requires separate license. Protocols operate globally but US-facing operations need full state coverage
Staffing requirementsOCC: CEO, CCO, BSA Officer, CTO, CISO, Chief Trust Officer; 20-50+ compliance/risk FTEs for mid-size custodianOCC PPSI: BSA/AML officer, compliance team, internal audit, risk management, treasury; estimated 9-18 FTEs minimumCompliance officer for MSB; operational staff for grid coordination (TX); no staffing requirement for pure miningCCO, BSA officer, compliance team, legal counsel, technology/operations staff; FINRA-registered representativesBSA/AML officer (if MSB); CCO; legal counsel; smart contract security team; compliance varies by registration type
Key restrictionsOCC trust bank: no deposits, no lending, no FDIC insurance. BitLicense: no fiduciary powers. Broker-dealer: limited to "physical possession" standardInterest payments to holders prohibited; algorithmic stablecoins ineligible for PPSI; non-financial companies barred unless unanimous SCRC approval; reserve rehypothecation bannedNY moratorium on fossil-fuel PoW mining expired Nov 2024; local bans in several GA counties; proposed NY excise tax on mining electricityReg D 506(c): accredited investors only; Reg A+: $75M annual cap; Reg CF: $5M annual cap; no NSMIA preemption for Reg A+ Tier 1 or Reg CFNo explicit "decentralization exemption"; OFAC sanctions apply to smart contracts (Tornado Cash, though Fifth Circuit limited scope); DAO members may face personal liability (Ooki DAO precedent); retail DeFi lending/derivatives restricted without registration
Regulatory directionDecisively pro-custody: SAB 121 rescinded, OCC chartering boom (8 conditional approvals Dec 2025-Feb 2026), SEC custody rule modernization NPRM expected April 2026Positive: GENIUS Act provides statutory certainty; OCC (Feb 25, 2026), NCUA (Feb 11, 2026), FDIC (prudential NPRM Apr 7, 2026) and Treasury/FinCEN/OFAC (joint AML/sanctions NPRM Apr 8, 2026) implementing; bank entry accelerating. Key risk: global USDT (~$174B) compliance by July 2028 sunset — Tether launched a separate compliant US product (USAT, via Anchorage Digital Bank, Jan 27, 2026) rather than restructure USDTFederal loosening (Executive Order, SEC confirms PoW not securities); state divergence (WY/KY/TX pro-mining vs. NY restrictive)Expanding: BlackRock BUIDL >$2.5B AUM; SEC SPBD approvals; institutional adoption accelerating; CLARITY Act (pending) would clarify CFTC/SEC boundaryShifting from enforcement to accommodation: SEC dropped non-fraud crypto cases; SEC/CFTC token taxonomy (March 2026) classifies most DeFi tokens as non-securities; innovation exemption under development; CLARITY Act would clarify jurisdictional boundaries

Multi-Activity Licensing

The US regulatory patchwork means that each activity is governed by different regulators with different licensing requirements. There is no single license that covers custody, stablecoin issuance, and mining simultaneously.

Entity Structuring for Multi-Activity Operations

Option 1: OCC National Trust Bank (Potential Unified Path)

The OCC national trust bank charter comes closest to a unified license for custody and stablecoin issuance:

  • Custody: OCC trust banks may provide fiduciary custody, hold collateral, and conduct riskless principal crypto transactions (IL 1188)
  • Stablecoin issuance: The GENIUS Act designates OCC-supervised nonbank entities as Permitted Payment Stablecoin Issuers (PPSIs)
  • Mining: Not covered -- mining would require a separate entity or be conducted through an affiliate

Firms like Paxos demonstrate this model: NYDFS trust charter converting to OCC national trust bank, enabling both custody (fiduciary) and stablecoin issuance (USDP, PYUSD for PayPal) from a single regulated entity.

Option 2: Multi-Entity Structure

Most multi-activity firms use separate legal entities per activity:

EntityActivityLicense
Trust company / bank subsidiaryCustodyOCC charter or state trust charter
PPSI subsidiaryStablecoin issuanceOCC PPSI or state-qualified PPSI
Operating companyMiningFinCEN MSB (if transmitting); state permits; PUCT registration (TX)

Coinbase illustrates this: Coinbase Custody Trust Company (NYDFS trust charter, OCC application pending) for custody, separate entities for exchange operations, and licensed across multiple states and countries.

Option 3: State-Level Multi-License Approach

For smaller operations, a combination of:

  • NY BitLicense (covers custody, exchange, transmission in NY)
  • State MTLs (49 states for stablecoin distribution)
  • FinCEN MSB registration (federal AML baseline)
  • Local permits for mining operations

This approach costs less upfront ($1M-$3M vs. $6M-$28M+ for OCC) but offers narrower protections and no fiduciary powers.

Real-World Multi-Activity Entity Profiles

FirmCustody LicenseStablecoin RoleMining/OtherStructure
PaxosOCC national trust bank (conditional Dec 2025; converting from NYDFS trust)PPSI issuer: USDP, PYUSD (for PayPal)N/ASingle entity for custody + stablecoin; first blockchain company with NYDFS limited purpose trust charter (2015)
CircleOCC national trust bank (conditional Dec 2025; First National Digital Currency Bank, N.A.)PPSI issuer: USDC (~$75.7B in circulation, Sept 2025)N/ADual-license: OCC charter for reserve management + NYDFS trust charter for USDC issuance
CoinbaseNYDFS limited purpose trust company (Oct 2018); OCC application pendingNot an issuer; distributes third-party stablecoinsN/ASeparate entities per jurisdiction: US trust, UK FCA, German BaFin, Ireland, Japan, Singapore
KrakenWyoming SPDI (Sept 2020); Fed master account (March 2026)N/AN/ASingle SPDI charter; first crypto bank to receive Fed master account after 5+ year wait
BitGoOCC national trust bank (conditional Dec 2025; converting from SD trust + NY BitLicense)N/AN/ADual US-EU structure: US OCC charter + German regulatory authorization
Fidelity Digital AssetsOCC national trust bank (conditional Dec 2025; converting from state trust)N/AMining operations (ongoing since 2022)Separate entities: trust company for custody, operating subsidiary for mining
Riot PlatformsN/AN/AMajor mining operator (TX-based, ~1 GW capacity)No financial license needed for mine-and-hold; TX PUCT registration required

Approval Data Across Activities

OCC National Trust Bank (Custody + Stablecoin):

  • 18 applications filed in 2025 alone (vs. <4/year average 2011-2024)
  • 8 conditional approvals (Dec 2025-Feb 2026): Ripple, Circle, BitGo, Fidelity, Paxos, Bridge/Stripe, Protego, Crypto.com
  • 0 public denials as of March 2026
  • Pending: Coinbase, Morgan Stanley, Payoneer, Zerohash, World Liberty Financial
  • Only Anchorage Digital Bank has progressed from conditional approval to fully operational status

NY BitLicense:

  • ~34 license holders as of March 2024 (~28 unique businesses)
  • At least 1 documented denial (Bittrex -- capital concerns, lax AML)
  • At least 15 companies left New York rather than apply
  • NY Comptroller audit (January 2024) found missing/outdated financial documentation and incomplete fingerprinting

FinCEN MSB Registration:

  • 100% approval rate -- registration is not approval-based; enforcement is post-hoc

The State-by-State Problem

The United States has no federal licensing passport for digital asset businesses. Unlike the EU's MiCA framework, where a license in one member state covers the entire European Economic Area, a US license in one state confers zero rights in another.

Scale of the Problem

DimensionDetail
States requiring MTLs49 (Montana is the only state with no MTL requirement)
Year 1 all-state MTL cost$250,000-$350,000 (application fees ~$115K + surety bonds ~$120K-$160K + registered agents ~$15K-$30K)
Annual maintenance (all states)$225,000-$280,000+ (renewal fees ~$80K-$120K + bond premiums ~$130K+ + admin ~$15K-$30K)
Time to full coverage18-24 months
Highest-cost state applicationsTexas ($10,000), Hawaii ($10,000), Colorado ($7,500)
Highest annual maintenanceCalifornia ($12,275), Texas ($8,168), Pennsylvania ($5,100)
Slowest processingNew York BitLicense (12-24+ months), California, Massachusetts, Pennsylvania (9-18 months)

Workarounds

  • NMLS (Nationwide Multistate Licensing System): A single portal for managing multi-state MTL applications. Reduces administrative burden but does not reduce the number of licenses needed.
  • GENIUS Act state preemption (future): Once the SCRC certifies state regimes as "substantially similar" and PPSI status is granted, the GENIUS Act may partially preempt state MTL requirements for stablecoin issuers. Timeline: earliest 2027.
  • OCC federal charter: National trust bank charters operate under federal authority, preempting some state licensing requirements for banking activities. However, states may still require separate licensing for non-banking activities.

State-Level Complexity for Mining Operations

Mining faces a distinct state-by-state challenge beyond financial licensing -- energy regulation and local zoning:

StateElectricity RateRegulatory BurdenMining Climate
Texas$0.04-$0.06/kWh (industrial)Moderate -- PUCT registration for >75 MW on ERCOT; penalty up to $25,000/violation/dayPro-mining; demand-response integration; ERCOT estimates mining could use ~2,600 MW
Wyoming$0.04-$0.06/kWhMinimal -- no state income tax, purpose-built crypto lawsMost favorable; tailored high-load electric service agreements
Kentucky$0.05-$0.07/kWhMinimal + tax incentives -- HB 701 prevents discriminatory zoningPro-mining; sales/excise tax exemptions on mining electricity
Georgia$0.06-$0.08/kWhLow (state) / Variable (local) -- VASP regulations exempt individual minersCaution: Gilmer County and Hiawassee have outright bans; multiple counties have noise/size restrictions
New York$0.10-$0.15/kWhHigh -- BitLicense + environmental; fossil-fuel PoW moratorium expired Nov 2024Hostile; Draft GEIS projects $10.6B in mining damages (2024-2050); proposed excise tax
California$0.20-$0.35/kWhHigh -- DFAL from July 2026 (miners likely exempt)Economically unviable due to highest electricity costs

Operating While Applying

JurisdictionCan You Operate Before Licensed?
FinCEN MSBYes -- register within 180 days; operations begin immediately
State MTLsGenerally no -- most states require license before commencing money transmission
NY BitLicenseNo -- license required before conducting virtual currency business in NY
CA DFALLikely yes during initial rollout -- applications open March 9, 2026; enforcement July 1, 2026
TX PUCTYes -- register within 1 business day of receiving electric service; operations not halted
OCC charterNo -- conditional approval followed by pre-opening requirements; operations begin only after final authorization
GENIUS Act PPSIs12-month waiver available for applicants with substantially complete applications as of effective date

Consolidated Banking Access

The 2023 closures of Silvergate Bank and Signature Bank -- the two primary banking partners for crypto businesses -- created a severe banking access crisis. The landscape has partially recovered but remains challenging, particularly for firms without federal charters.

Current Banking Partners by Activity

BankCustodyStablecoinsMiningNotes
Customers BancorpYesYesYesLeading crypto bank post-Silvergate; cubiX platform; ~$2T digital asset transaction volume projected 2025
Cross River Bank--Yes--Stablecoin payments infrastructure; Visa USDC settlement partner on Solana
BNY MellonYesYes (reserve custody)--Digital Asset Custody platform live for BTC/ETH; custody partner for Ripple's RLUSD
U.S. BancorpYes (resumed Sept 2025)Yes (pilot on Stellar)--Selected for Anchorage Digital Bank stablecoin reserve custody
JPMorgan ChaseInstitutionalExploring (deposit tokens)SelectivePlans to accept BTC/ETH as collateral; selective about crypto clients
Mercury----YesServes Web3 companies; applied for OCC charter (Dec 2025); $3.5B valuation
Western Alliance Bank----YesServes crypto businesses alongside traditional clients
SoFi Bank--Yes (issuer)--First national bank to offer open-access stablecoin (SoFiUSD)

Federal Reserve Access

InstitutionStatusDetails
Kraken Financial (Wyoming SPDI)Approved March 4, 2026First crypto-native bank to receive Fed master account; limited-purpose, one-year account; Tier 3 applicant
Custodia Bank (Wyoming SPDI)Denied (final, March 2026)Applied Oct 2020; Tenth Circuit ruled 7-3 that Reserve Banks have discretion to deny
"Skinny Master Account" proposalExpected Q4 2026Limited-purpose accounts: Fedwire, FedNow, NSS access; overnight balance cap $500M or 10% of assets; 90-day processing target

Key Barriers

  • 44% of financial institutions say they are ready to offer accounts to crypto businesses; 21% are already active (Elliptic 2025)
  • ESG compliance increasingly a prerequisite for banking partnerships
  • OCC-chartered entities face fewer banking access challenges than non-bank crypto firms
  • Federal Reserve proposed permanently eliminating "reputation risk" as a supervisory factor (February 2026), which would structurally prevent future debanking episodes

Total Cost: Multi-Activity Operation

Scenario: US Entity Providing Custody + Stablecoin Issuance + Mining

Federal Path (OCC Charter + Mining Subsidiary)

Cost CategoryYear 1Annual Ongoing
OCC national trust bank charter (custody + stablecoin PPSI)$6M-$28M+ (legal, compliance buildout, minimum capital $5M-$25M)$2M-$7M+ (assessments, SOC audit, BSA/AML, insurance, legal)
Stablecoin-specific compliance (monthly attestation, reserve management)Included in OCC setup$300K-$600K (12 monthly attestation reports) + $500K-$1.5M (audit if >$50B)
Mining operation (TX-based, 50 MW)PUCT registration: $0; local permits: $10K-$50K; equipment/facility: variable$0 regulatory cost (PUCT); electricity: $0.04-$0.06/kWh; compliance: minimal
FinCEN MSB (if mining entity transmits)$0 (registration free); AML program setup: $50K-$100K$50K-$200K (compliance program)
Total regulatory/compliance$6M-$28M+$2.5M-$9M+

State Path (Multi-License)

Cost CategoryYear 1Annual Ongoing
NY BitLicense (custody + exchange)$150K-$500K$15K-$80K+
49-state MTLs (stablecoin distribution)$250K-$350K (fees + bonds) + $500K-$1M (legal)$225K-$500K
Mining operation (KY or WY, favorable state)Local permits: $5K-$20K; tax exemptions availableMinimal regulatory cost
FinCEN MSB$0-$1.5K$50K-$200K
Total regulatory/compliance$1M-$2M$300K-$800K

Trade-offs: The federal path costs 5-15x more upfront but provides fiduciary powers, qualified custodian status, potential Fed payment rail access, and a stronger "regulatory moat" for institutional clients. The state path is accessible to smaller firms but lacks fiduciary authority and requires managing 49 separate state relationships.

Regulatory Direction

Federal Trend: Decisively Pro-Crypto (2025-2026)

The federal regulatory posture has undergone a fundamental shift since January 2025:

  • January 2025 Executive Order: Affirms right to mine and self-custody; establishes Strategic Bitcoin Reserve (~200,000 BTC)
  • March 2025: OCC IL 1183 removes bank non-objection requirements; SEC confirms PoW mining is not securities activity
  • April 2025: DOJ memo ends "regulation by prosecution"; FDIC and Fed withdraw restrictive crypto guidance
  • July 2025: GENIUS Act signed into law (68-30 Senate, 308-122 House) -- first federal digital asset legislation
  • December 2025: OCC conditionally approves 5 national trust bank charters; CFTC launches digital asset collateral pilot; FDIC issues PPSI application NPRM
  • January-March 2026: SEC-CFTC sign historic MOU harmonizing jurisdiction; OCC issues GENIUS Act NPRM (Feb 25, 2026); NCUA issues GENIUS Act NPRM (Feb 11, 2026); Kraken receives first crypto-native Fed master account (March 4, 2026)
  • April-May 2026: FDIC issues GENIUS Act prudential NPRM (April 7, 2026) and illicit-finance NPRM (May 22, 2026); Treasury (FinCEN + OFAC) issue joint AML/sanctions NPRM treating PPSIs as BSA "financial institutions" and mandating an effective sanctions compliance program (April 8, 2026; Federal Register April 10; comments due June 9, 2026); Digital Asset PARITY Act (H.R. 8899) formally introduced (May 19, 2026) — first dedicated digital-asset tax bill (proposed, not enacted)

State Trend: Diverging

  • Pro-crypto states strengthening: Wyoming (12+ blockchain laws, SPDI charter, state stablecoin), Kentucky (HB 701 mining protections, tax exemptions), Texas (grid integration model)
  • Restrictive states maintaining pressure: New York (Draft GEIS projects $10.6B in mining damages; proposed excise tax on mining electricity; $48.5M Paxos settlement), some local jurisdictions adding mining bans
  • New compliance layers: California DFAL (July 2026) adds licensing requirement with $500K minimum bond, though pure miners likely exempt

Key Risks

  1. Political durability: Nearly all federal changes were made through sub-legislative mechanisms (interpretive letters, staff guidance, no-action letters, executive action) rather than durable legislation. Only the GENIUS Act is statutory. A future administration could reverse much of the framework.
  2. Tether compliance: The July 18, 2028 sunset for non-PPSI stablecoins creates a forcing function. Global USDT ($174B) holds reserves that include bitcoin, gold, and secured loans — assets not permitted under the GENIUS Act. Rather than restructure USDT, Tether launched a separate, GENIUS-Act-compliant US product — USAT — on January 27, 2026, issued by Anchorage Digital Bank (a federally chartered institution) with Cantor Fitzgerald as designated reserve custodian. USAT remains small-scale ($20M at launch versus USDC's ~$75B); whether it can scale, and what becomes of global USDT distribution to US persons after July 2028, are now the open questions.
  3. Rulemaking delays: If final GENIUS Act regulations miss the July 2026 deadline, the January 2027 backstop date applies, compressing implementation timelines.
  4. Tax friction: IRS still treats all stablecoins as property despite GENIUS Act exclusion from securities/commodity definitions. No de minimis exemption has been enacted. The Digital Asset PARITY Act (H.R. 8899), formally introduced May 19, 2026, would add a stablecoin de minimis / deemed-basis safe harbor, extend wash-sale rules to digital assets, and create a five-year staking/mining deferral election — but it is newly introduced proposed legislation that has not advanced out of committee.

Upcoming Milestones

DateEvent
April 2026SEC Custody Rule Modernization NPRM expected
May 1, 2026OCC GENIUS Act NPRM comment period closes
June 9, 2026Treasury (FinCEN + OFAC) joint AML/sanctions NPRM comment period closes
July 1, 2026California DFAL licensure deadline
July 18, 2026Statutory deadline for GENIUS Act final regulations
August 2026CFTC technical rulemaking for blockchain-adapted collateral, margin, clearing
Q4 2026Fed "skinny master accounts" potentially available
January 18, 2027GENIUS Act fully effective (backstop date)
July 18, 2028Foreign stablecoin (non-PPSI) sunset -- deadline for global USDT distribution to US persons (Tether's compliant US product USAT launched Jan 27, 2026)

Enforcement Precedents Across Activities

Major enforcement actions illustrate the consequences of non-compliance and define the boundaries of acceptable conduct:

CaseAmountActivityKey Lesson
Terraform Labs / Do Kwon (SEC, 2024)$4.47 billionStablecoin (algorithmic UST)Algorithmic stablecoins sold via investment schemes are securities; largest crypto enforcement ever
Tai Mo Shan / Jump Trading (SEC, 2024)$123 millionStablecoin (UST peg manipulation)Market-making to artificially maintain stablecoin peg constitutes securities fraud
Tether (CFTC, 2021)$41 millionStablecoin reservesTether had sufficient fiat reserves only 27.6% of the time over 26 months; reserve misrepresentation heavily penalized
Tether/Bitfinex (NYAG, 2021)$18.5 millionStablecoin/custody comminglingCommingling customer and operational funds; ~$850M in customer funds went missing through Crypto Capital Corp
Paxos/BUSD (NYDFS, 2025)$48.5 millionStablecoin AML~$1.6B in suspicious transactions undetected; deficient AML/KYC program; failure to oversee Binance partnership
Anchorage Digital Bank (OCC, 2022)Consent orderCustody BSA/AMLBSA/AML deficiencies at OCC-chartered custodian; order lifted after remediation

Tax Reporting Obligations

Licensing and tax reporting are structurally linked in the United States: licensed brokers are the entities required to file information returns with the IRS. The Infrastructure Investment and Jobs Act (IIJA, P.L. 117-58, November 2021) imposed broker reporting obligations via IRC Section 6045, and final regulations (T.D. 9989, July 2024) designated Form 1099-DA as the information return for digital asset transactions. The firms that hold these licenses are the firms that must report.

Form 1099-DA -- Broker Reporting

The IRS introduced Form 1099-DA as the standardized information return for digital asset dispositions:

RequirementEffective Date
Gross proceeds reporting by custodial brokersJanuary 1, 2025
Cost basis reporting by custodial brokersJanuary 1, 2026
Real estate transactions involving digital assetsJanuary 1, 2026

Who must file: Brokers that take possession of customer digital assets, including custodial digital asset trading platforms, digital asset hosted wallet providers, digital asset kiosks (ATMs), and certain processors of digital asset payments (PDAPs).

DeFi exclusion: Treasury Decision 10021 (December 2024) would have extended 1099-DA reporting to DeFi participants, but Congress repealed it via H.J. Res. 25 (signed April 10, 2025) under the Congressional Review Act. The IRS is permanently prohibited from issuing a substantially similar rule.

Key data elements reported on Form 1099-DA:

  • Gross proceeds from dispositions
  • Cost basis (from January 1, 2026)
  • Date of acquisition and date of disposition
  • Gain or loss amount
  • Digital asset type and quantity
  • Wash sale loss disallowed (Box 1i -- accommodates potential future legislation)
  • Transaction ID

Reporting thresholds: There is no de minimis threshold for Form 1099-DA -- all reportable transactions by covered brokers must be filed regardless of amount. Backup withholding (24%) applies if the customer fails to furnish a valid TIN.

Transition Relief

NoticeRelief Provided
Notice 2024-56No penalties for good-faith noncompliance during 2025 reporting year
Notice 2025-7Temporary cost basis identification relief for 2025 (allowing allocation methods for pre-2025 holdings)
Notice 2025-33Additional transition relief for backup withholding through 2027
Notice 2024-57Excluded transactions (staking, wrapping, lending, liquidity provision) do not require 1099-DA reporting until further guidance

On March 5, 2026, Treasury and IRS issued proposed regulations allowing brokers to furnish 1099-DA statements to customers electronically rather than requiring paper copies.

Penalties for Non-Compliance

Brokers that fail to file correct and timely Form 1099-DA returns face graduated penalties under IRC Sections 6721 (failure to file with IRS) and 6722 (failure to furnish to payee):

Correction TimingPenalty Per ReturnAnnual Maximum
Filed within 30 days$60$660,500
Filed by August 1$130$1,978,500
After August 1 or not filed$310$3,783,000

Intentional disregard of filing requirements carries a penalty of the greater of $630 per return or 10% of the amount required to be reported, with no annual cap.

Section 6050I -- $10,000+ Digital Asset Cash Reporting

IIJA Section 80603 amended IRC Section 6050I(d) to extend cash transaction reporting to digital assets. Businesses receiving more than $10,000 in digital assets in a single transaction (or related transactions) would be required to file Form 8300 within 15 days, reporting the sender's name, address, SSN, and transaction details.

Current status: As of March 2026, this requirement is not yet in effect. IRS Announcement 2024-04 stated it will not apply until final regulations are issued. Once effective, failure to comply carries penalties of up to $25,000 per violation and potential criminal penalties (up to 5 years imprisonment) for willful violations.

OECD CARF Implementation

The United States has committed to the OECD Crypto-Asset Reporting Framework (CARF). On November 14, 2025, Treasury submitted proposed regulations to the White House Office of Information and Regulatory Affairs (OIRA) for review.

The U.S. has indicated a longer implementation timeline than other jurisdictions: formal adoption is targeted for 2027-2029, with first automatic exchanges of taxpayer information between jurisdictions expected 2028-2029. This contrasts with the EU and many OECD members that began CARF implementation from January 1, 2026.

CARF will require Reporting Crypto-Asset Service Providers (RCASPs) -- which includes licensed exchanges, custodians, and brokers -- to collect and report user transaction data to the IRS for automatic exchange with treaty partner jurisdictions.

How Licensing Creates the Tax Reporting Infrastructure

The US tax reporting framework is built on top of the licensing infrastructure: only entities that take custody of customer assets are classified as brokers for 1099-DA purposes. This means that the same licenses that authorize digital asset activity also impose the obligation to serve as the IRS's information collection layer.

License TypeHolder ExamplesTax Reporting Obligations
OCC National Trust BankPaxos, Circle, BitGo, FidelityFull Form 1099-DA filing (gross proceeds from 2025, cost basis from 2026); backup withholding (24%); FATCA/CRS reporting for foreign accountholders; CARF reporting when effective
Wyoming SPDIKrakenFull Form 1099-DA filing; backup withholding; CARF reporting when effective
NY BitLicense / Trust CharterCoinbase (trust), Gemini (trust)Full Form 1099-DA filing; backup withholding; NYDFS may impose additional state reporting
State MTLs (49-state)Money transmitters distributing stablecoinsForm 1099-DA if acting as custodial broker; Form 8300 ($10K+ transactions, when effective); state-specific reporting varies
SEC Broker-DealerFirms custodying digital asset securitiesForm 1099-DA for digital asset securities; existing 1099-B obligations for securities; full FATCA compliance
FinCEN MSBExchanges, kiosk operators, payment processorsForm 1099-DA if custodial; SAR/CTR filing (BSA); Form 8300 ($10K+ transactions, when effective); no standalone tax reporting obligation from MSB status alone
CFTC-Regulated (CLARITY Act)Digital commodity intermediaries (pending Senate)Expected Form 1099-DA obligations once CLARITY Act fully enacted; CFTC reporting requirements for derivatives
Mining Operations (no custody)Riot Platforms, Marathon DigitalNo Form 1099-DA obligation (not brokers); self-reporting of mined coins as ordinary income on own tax returns; no third-party reporting duty unless operating a custodial mining pool

Key insight: DeFi protocols and non-custodial wallets are explicitly excluded from broker reporting following the CRA repeal of T.D. 10021. This means the tax reporting burden falls entirely on licensed, custodial entities -- reinforcing the regulatory advantage of operating within the licensing framework while creating a compliance gap for decentralized activity.

RWA / Security Token Platform Licensing

The United States regulates tokenized real-world assets through existing securities laws -- there is no standalone RWA or security token legislation. Tokenized securities (bonds, equities, fund units) are subject to the Securities Act of 1933 and the Securities Exchange Act of 1934. The SEC treats tokenized securities identically to their traditional counterparts under technological neutrality.

License Details

AttributeDetail
License name(s)SEC broker-dealer registration + ATS (for secondary marketplace); SEC transfer agent registration (for maintaining securityholder records); RIA registration + fund formation (for managing tokenized funds); Form D / Form 1-A / Form C filing (for exempt issuance)
Regulatory authoritySEC, FINRA, state securities regulators
Legal basisSecurities Act of 1933, Securities Exchange Act of 1934, Regulation D, Regulation A+, Regulation CF, Regulation ATS, Investment Company Act of 1940, Investment Advisers Act of 1940

Requirements

RequirementDetail
Capital (broker-dealer)Net capital per Rule 15c3-1; varies by activity type; ATS operators subject to Reg ATS requirements
Capital (transfer agent)No federal minimum capital requirement
Capital (RIA)State-specific requirements; SEC-registered RIAs (>$100M AUM) have no federal capital minimum
Prospectus/offeringFull SEC registration or exemption required: Reg D (accredited investors, no cap), Reg A+ ($75M/year cap), Reg CF ($5M/year cap)
StaffingCCO, BSA/AML officer, FINRA-registered representatives, compliance team

Application Process

RegistrationTimelineCost
Broker-dealer + ATS6--18 months$500K--$2M+
Transfer agent3--9 months$100K--$500K
RIA + fund formation3--12 months$200K--$1M+
Reg A+ qualification2--6 months$50K--$500K+
Form D (Reg D)15 days$50K--$500K+ (legal/compliance)
State MTLs (for fiat)3--24 months per state$50K--$500K per state

Ongoing Obligations

  • FINRA membership and examination compliance for broker-dealers
  • Reg ATS reporting (Form ATS-N) for marketplace operators
  • SEC Rule 15c3-3 customer protection and reserve requirements
  • BSA/AML program, SAR/CTR filing, OFAC screening
  • Form 1099-DA broker reporting from 2025 (gross proceeds); cost basis from 2026
  • Annual audited financial statements; SOC 2 Type II certification

Passporting

No US-wide passporting. Reg D 506(b)/(c) offerings and Reg A+ Tier 2 offerings preempt state registration under NSMIA. Reg A+ Tier 1, Reg CF, and non-covered securities require state-by-state blue sky compliance. State notice filing fees typically $150--$750 per state.

Banking Access

SEC-registered broker-dealers and RIAs have established banking relationships. Institutional tokenized fund operators (BlackRock, Franklin Templeton) leverage existing banking infrastructure. Smaller tokenization startups face moderate banking difficulty similar to other fintech entities.

Key Holders

FirmRegistration TypeActivity
Securitize Markets, LLCBD, ATS, Transfer AgentBlackRock BUIDL tokenization platform; secondary marketplace
tZERO Securities, LLCBD, ATS, SPBDTokenized securities trading platform
Prometheum Ember Capital LLCSPBDSpecial purpose broker-dealer for digital asset securities
INX Securities, LLCBDTokenized securities issuance and trading
BlackRock (BUIDL)RIA + 3(c)(7) fund exemptionLargest tokenized fund globally (>$2.5B AUM)
Franklin Templeton (FOBXX)SEC-registered fundTokenized US Government Money Fund (~$594M AUM)

Transition

The SEC under the 2025-2026 administration has adopted a more permissive stance toward tokenized securities: SAB 121 was rescinded (removing balance-sheet barriers for custodied crypto), OCC is issuing conditional trust bank approvals at an accelerated pace, and the CLARITY Act (pending Senate passage) would clarify the CFTC/SEC jurisdictional boundary for digital assets. The institutional RWA tokenization market is growing rapidly, led by BlackRock BUIDL (>$2.5B), Franklin Templeton FOBXX, and expanding adoption by banks and asset managers.

See

US RWA Regulation for full details on SEC registration requirements, exemption frameworks, institutional tokenization projects, and the CLARITY Act.

DeFi Protocol Licensing

Regulatory Approach

The United States has no DeFi-specific license. DeFi protocols are regulated under existing financial laws applied on an activity-by-activity basis. The regulatory approach has shifted dramatically from enforcement-driven (2021-2024) to principles-based accommodation (2025-2026), anchored by the SEC/CFTC joint five-category token taxonomy published March 17, 2026.

Available License Types

License/RegistrationRegulatorRelevance to DeFiCapital/Cost
FinCEN MSBFinCENRequired if protocol facilitates money transmission (e.g., fiat on/off ramps, custodial bridging)$0 federal registration; AML program $50K-$200K/yr
State MTLs49 state regulatorsRequired for money transmission activities in each state; may apply to DeFi front-ends handling user fundsBonds $10K-$500K+ per state; $250K-$350K/yr total
SEC Exchange/ATSSECRequired if DEX facilitates trading in tokens classified as securitiesBD net capital varies; $500K-$2M+ setup
SEC Broker-DealerSEC/FINRARequired for intermediation in securities token tradingNet capital per Rule 15c3-1; FINRA membership
CFTC DCM/SEFCFTCRequired for DeFi derivatives platforms (perpetuals, futures, options)Significant capital (millions); ongoing compliance
NY BitLicenseNYDFSRequired for any virtual currency business activity involving NY residents$150K-$500K setup; up to $500K collateral
Innovation exemptionSEC Crypto Task ForceUnder development (2026); would provide conditional relief for DeFi protocols meeting decentralization criteriaTBD

DeFi-Specific Requirements

  • Smart contract audits: Not federally mandated but effectively required for institutional participation and expected by regulators in enforcement contexts. SEC has cited lack of audits as evidence of inadequate controls.
  • Governance framework: DAO governance tokens may be classified as securities if they confer profit expectations. The Ooki DAO enforcement action (CFTC, 2023) established that DAO token holders who vote on protocol operations can be held jointly and severally liable as an "unincorporated association."
  • Decentralization threshold: The SEC/CFTC March 2026 taxonomy establishes that "sufficiently decentralized" protocols may fall outside securities regulation, but no bright-line test exists. The taxonomy allows non-security tokens initially sold as investment contracts to "graduate" as networks mature.
  • OFAC compliance: Smart contracts interacting with sanctioned addresses risk enforcement. The Fifth Circuit ruled in Van Loon v. Treasury (November 2024) that OFAC exceeded its authority in sanctioning immutable Tornado Cash smart contracts, but mutable contracts remain sanctionable.

Key Enforcement Actions

CaseYearAgencyOutcome
Ooki DAO2023CFTC$643K penalty; DAO members held liable as unincorporated association
Tornado Cash2022-2024OFAC/DOJOFAC sanctions partially struck down (Fifth Circuit); developer Alexey Pertsev convicted in Netherlands
Uniswap2024-2025SECWells notice issued April 2024; investigation closed February 2025 under new administration
Mango Markets (Eisenberg)2023-2024DOJ/CFTCAvraham Eisenberg convicted of fraud and market manipulation for $110M DeFi exploit

Application Timeline

  • FinCEN MSB: Immediate (online filing)
  • State MTLs: 2-18 months per state; 18-24 months for full 49-state coverage
  • SEC BD/ATS: 6-18 months
  • CFTC DCM/SEF: 6-12+ months
  • Innovation exemption: Not yet available; SEC Crypto Task Force developing framework

Cross-Reference

See

United States DeFi Regulation for full details on SEC/CFTC jurisdiction, the five-category token taxonomy, Howey test application to DeFi, enforcement actions, DAO liability frameworks, and the innovation exemption under development.

Sources: SEC/CFTC Joint Interpretive Release, Token Taxonomy (March 17, 2026); CFTC v. Ooki DAO, No. 3:22-cv-05416 (N.D. Cal. 2023); Van Loon v. Dept. of Treasury, No. 23-50669 (5th Cir. 2024)

Insurance / Risk Transfer Licensing

Overview

The United States has no federal mandate requiring crypto businesses to carry insurance against loss of customer digital assets. Insurance regulation is state-based, with each of the 50 states maintaining its own Department of Insurance. The absence of a federal framework means that digital asset insurance is governed by the same patchwork of state insurance laws that apply to all commercial insurance. The NAIC (National Association of Insurance Commissioners) has provided guidance through INT 21-01 (2021), which addresses the accounting treatment of crypto-asset holdings by insurers but does not create insurance requirements for crypto businesses themselves.

Regulatory Authority

BodyRole
State Departments of Insurance (50 states)Primary regulation of insurance companies and intermediaries; licensing, solvency, market conduct
NAICModel law development, coordination among state regulators; INT 21-01 guidance on insurer crypto-asset holdings
Federal Insurance Office (FIO)Monitoring, not regulation; no licensing authority; systemic risk analysis
OCC / State banking regulatorsIndirectly relevant: OCC trust bank charters and state trust charters set operational standards that drive insurance procurement decisions

Insurance Provider Licensing

Entities seeking to underwrite digital asset insurance in the US require:

  • State insurance license in each state where policies are issued or risks are located -- there is no federal insurance license
  • Surplus lines licensing for non-admitted carriers writing specialty digital asset policies (most crypto insurance is placed on a surplus lines basis because admitted market capacity is limited)
  • Captive insurance options available in domiciles such as Vermont, Utah, and Hawaii for crypto firms seeking to self-insure portions of their risk
RequirementDetail
Admitted insurer capitalVaries by state; typically USD 2M-10M minimum surplus for property/casualty lines
Surplus linesLicensed surplus lines brokers place coverage with non-admitted carriers (e.g., Lloyd's syndicates operating via US surplus lines); 15-day filing requirements in most states
Captive domicilesVermont (leading US captive domicile), Utah, Hawaii; minimum capital typically USD 250K-500K for pure captives
Application timelineAdmitted insurer: 6-18 months per state; surplus lines broker: 30-90 days; captive formation: 3-6 months
PassportingNo federal passport; each state requires separate licensing; NAIC accreditation provides some reciprocity for solvency standards

Insurance Requirements for Crypto Businesses

DimensionDetail
Federal insurance mandateNo -- there is no federal requirement for crypto custodians, exchanges, or stablecoin issuers to carry insurance
FDIC coverageDoes not extend to crypto assets; FDIC insures deposits at member banks, not digital asset holdings; the GENIUS Act explicitly excludes stablecoins from FDIC coverage
SIPC coverageDoes not extend to crypto assets held by broker-dealers, unless they qualify as securities (in which case standard SIPC protection applies to the securities component)
OCC trust bank expectationsOCC-chartered trust banks (Paxos, Circle, BitGo, Fidelity) are expected to maintain appropriate insurance as part of safety and soundness requirements, though no specific coverage levels are prescribed
NY BitLicenseNYDFS does not mandate specific insurance coverage levels but assesses risk management practices including insurance as part of the licensing examination
State MTL bondsSurety bonds (USD 10K-500K+ per state) are required for money transmitter licenses but these are not insurance against customer loss -- they protect the state, not customers
NAIC INT 21-01Provides accounting guidance for insurers holding crypto assets on their own balance sheets; restricts insurer crypto holdings to admitted assets only if certain conditions are met; does not address insurance requirements for crypto businesses

Captive Insurance Options

US crypto firms increasingly use captive insurance structures to address coverage gaps:

  • Pure captives owned by a single crypto firm to insure its own risks (custody loss, crime, errors & omissions)
  • Cell captives (protected cell companies) available in Vermont, Utah, and other domiciles for smaller firms sharing captive infrastructure
  • Advantages: customised coverage terms, potential cost savings, retained underwriting profit, coverage for risks that commercial markets decline
  • Limitations: capital must be committed; regulatory approval required; not a substitute for third-party insurance in the eyes of institutional counterparties

Named Insurance Providers Active in the US

ProviderTypeDigital Asset Activity
Lloyd's syndicates (via surplus lines)Non-admittedPrimary source of crime/specie/custody coverage for US crypto firms; placed through licensed surplus lines brokers
EvertasLloyd's coverholderSpecialist digital asset insurance; crime, custody, and staking coverage
Aon, Marsh, WTWLicensed brokersMajor intermediaries placing digital asset insurance; Aon and Marsh have dedicated digital asset practices
Arch InsuranceAdmitted/surplus linesCrime/specie policies for institutional crypto custodians
CanopiusLloyd's syndicate (surplus lines)Digital asset crime and custody coverage
Relm InsuranceBermuda-domiciled, surplus linesCrypto-native policies; D&O, professional liability, crime/theft
Kinsale CapitalSurplus linesEmerging carrier for digital asset E&O and cyber
BitGo (self-insured + commercial)Captive + Lloyd'sMaintains USD 250M custody insurance programme combining captive and commercial placements

Estimated Insurance Costs for Crypto Businesses

Coverage TypeEstimated Annual PremiumNotes
Crime / specie (custody)0.5%-3.0% of insured assetsHigher rates than UK due to fragmented regulatory landscape and surplus lines taxes
Directors & officersUSD 20,000-250,000+Driven by SEC/CFTC enforcement risk and personal liability exposure
Cyber / technology E&OUSD 10,000-100,000+Standard for technology firms; crypto-specific endorsements available
Surety bonds (state MTLs)USD 5,000-50,000/year (all states)Required for money transmitter licenses; not customer protection insurance
Captive formationUSD 100,000-250,000 setup; USD 50,000-100,000/year ongoingFor firms self-insuring portions of risk

Regulatory Direction

  • No federal insurance mandate for crypto businesses is expected in the near term; the GENIUS Act and CLARITY Act do not address insurance requirements
  • The NAIC continues to monitor crypto-asset insurance through its Innovation, Cybersecurity, and Technology Committee but has not proposed model insurance requirements for crypto businesses
  • State insurance regulators are increasingly scrutinising surplus lines placements for digital asset risks
  • Captive insurance adoption by crypto firms is accelerating as commercial market capacity remains constrained relative to industry asset growth
  • The SEC Custody Rule Modernization NPRM (expected April 2026) may address insurance expectations for qualified custodians of digital assets

Cross-Reference

See

US Digital Asset Insurance for full details on state-based insurance regulation, surplus lines market structure, NAIC INT 21-01, captive insurance options, and institutional custody insurance programmes.

Payment / Transfer Service License

Overview

The United States has no single federal payment license for crypto. Instead, crypto payment providers must navigate a three-layer licensing structure: (1) federal FinCEN MSB registration for AML/BSA compliance, (2) individual state money transmitter licenses (MTLs) in 49 states plus DC, and (3) optional federal charters (OCC national trust bank or GENIUS Act PPSI) that provide a higher-cost but more unified path. New York's BitLicense adds a fourth, crypto-specific layer. The GENIUS Act (signed July 18, 2025) creates a dedicated federal framework for payment stablecoin issuers but does not eliminate state MTL requirements.

License Details

AttributeDetail
License name(s)FinCEN MSB registration (federal); state money transmitter licenses (49 states + DC); New York BitLicense (23 NYCRR Part 200); OCC national trust bank charter / GENIUS Act PPSI (federal); California DFAL license (effective July 2026)
Enabling statutesBank Secrecy Act (31 U.S.C. 5311 et seq.); state money transmission statutes (varies by state); 23 NYCRR Part 200 (NY BitLicense); National Bank Act (12 U.S.C. 1 et seq.); GENIUS Act (S.1582, signed July 18, 2025); California DFAL (effective July 1, 2026)
Regulatory authorityFinCEN (federal AML); 49 state banking departments + DC; NYDFS (New York); OCC (national charter/PPSI); Federal Reserve (master account access); FDIC (state nonmember bank subsidiaries)
License scopeFinCEN MSB: AML/BSA compliance for money transmission. State MTLs: acceptance and transmission of currency, funds, or value (including crypto). BitLicense: all virtual currency business activity in NY. OCC PPSI: payment stablecoin issuance. DFAL: digital financial asset business activity in CA

Requirements

RequirementDetail
Who can applyFinCEN MSB: any person doing business as money transmitter. State MTLs: entities incorporated or registered in each state. BitLicense: any entity conducting virtual currency business involving NY. OCC PPSI: nonbank entities or uninsured national banks
Capital — FinCEN MSBNone imposed by FinCEN
Capital — state MTLsSurety bonds: $10,000--$1,000,000+ per state (varies by state and business volume); net worth: $100,000--$1,000,000+ aggregate
Capital — NY BitLicense$500,000 net capital minimum; $500,000+ surety bond
Capital — OCC PPSI$5 million minimum (de novo); 12 months operating expenses as backstop; Tier 1 capital only
Staffing requirementsFinCEN MSB: BSA/AML compliance officer. State MTLs: compliance officer, qualified officers. BitLicense: CCO, BSA officer, CISO (NYDFS Part 500). OCC PPSI: BSA/AML officer, compliance team, internal audit, risk management, treasury; 9--18 FTEs minimum
Physical presenceFinCEN: no federal requirement beyond US nexus. States: registered agent in each state required. NY: office presence expected. OCC: physical headquarters
Technology requirementsNYDFS Part 500 cybersecurity requirements (BitLicense); OCC IT safety-and-soundness standards; FinCEN AML monitoring systems
Insurance requirementsNo federal insurance mandate. State MTL surety bonds required (protect the state, not customers). FDIC/SIPC coverage does not extend to crypto assets. OCC expects appropriate insurance as safety-and-soundness matter

Application Process

StepDetail
FinCEN MSBElectronic filing (Form 107); must register within 180 days of commencing operations; free; renewal every 2 years
State MTLsFile through NMLS (Nationwide Multistate Licensing System); each state reviews independently; 49 separate applications
NY BitLicenseApply to NYDFS; $5,000 application fee; statutory timeline not specified
OCC PPSIApply to OCC; conditional approval followed by pre-opening requirements
Timeline — FinCEN MSBImmediate (online filing)
Timeline — state MTLs3 months (smaller states) to 12--18 months (CA, NY, TX, IL, PA); 18--24 months for full nationwide coverage
Timeline — NY BitLicense12--24+ months actual
Timeline — OCC PPSI5--6 months to conditional approval (actual 2025 data); pre-opening phase additional
Total cost — nationwide MTL coverage$500,000--$3,000,000+ (including legal fees, bonds, application fees)
Annual ongoing compliance cost$200,000--$500,000+ (audit, reporting, compliance personnel, bond renewals) for state MTLs; $1.5M--$5M+ for OCC PPSI
Approval dataFinCEN MSB: 100% (registration, not approval). BitLicense: ~34 holders (~28 unique businesses); at least 1 documented denial (Bittrex); at least 15 companies left NY rather than apply. OCC PPSI: 8 conditional approvals Dec 2025--Feb 2026; 0 public denials

Ongoing Obligations

ObligationDetail
Annual feesState MTL renewals: $80,000--$120,000/year total (all states); bond premiums: $130,000+/year; NY BitLicense assessment: $1,000+/year
Audit requirementsState MTLs: annual financial audit and compliance reporting per state. BitLicense: bi-annual independent AML and cybersecurity audits. OCC: semiannual examinations; monthly reserve attestation by registered CPA; annual audited financials if >$50B outstanding
ReportingFinCEN: SAR/CTR filing, Travel Rule ($3,000+ transfers); IRS: Form 1099-DA (gross proceeds from 2025, cost basis from 2026); state-specific reporting varies
Compliance programWritten BSA/AML program (policies, procedures, internal controls); designated BSA compliance officer; ongoing employee training; independent audit/review; OFAC sanctions screening
Annual compliance cost estimateFinCEN MSB AML program: $50,000--$200,000/year. State MTLs all-state: $225,000--$500,000/year. NY BitLicense: $15,000--$80,000+/year. OCC PPSI: $1.5M--$5M+/year

Passporting & Cross-Border

DimensionDetail
Federal passportingNone -- FinCEN MSB registration is federal-wide for AML purposes but does not replace state MTLs
State passportingNone -- each state license is independent; no state-to-state recognition
GENIUS Act preemptionFederal PPSI charter preempts state chartering/licensure requirements (but not state consumer protection laws). State-qualified PPSIs capped at $10B outstanding; must transition to federal oversight within 360 days of exceeding cap
MTMA harmonization31 states have adopted the Model Money Transmission Modernization Act (CSBS) in full or part; provides model standards but does not eliminate per-state licensing
Reverse solicitationNo formal reverse solicitation framework; foreign firms must obtain US licenses to serve US customers

Banking Access

DimensionDetail
Difficulty levelModerate to high; significantly improved since 2025 policy reversals (OCC IL 1183, FDIC FIL-7-2025, Fed withdrawal of pre-approval requirements)
Known banking partnersCustomers Bancorp (leading crypto bank post-Silvergate; ~$2T digital asset volume); Cross River Bank (stablecoin infrastructure); BNY Mellon (digital asset custody); U.S. Bancorp; JPMorgan Chase (institutional, selective); Mercury (Web3 companies); Western Alliance Bank
Fed accessKraken Financial (Wyoming SPDI) received first crypto-native Fed master account (March 2026); Custodia Bank denied; "skinny master accounts" proposed for Q4 2026
Onboarding timeline44% of financial institutions report readiness to serve crypto businesses (Elliptic 2025); OCC-chartered entities face fewer banking access challenges

Key License Holders

FirmLicense TypeApproval
CircleOCC conditional approval (First National Digital Currency Bank, N.A.); NYDFS trust charterDecember 2025 (OCC conditional)
PaxosOCC conditional approval (converting from NYDFS trust)December 2025 (OCC conditional)
CoinbaseNYDFS limited purpose trust company; OCC application pendingOctober 2018 (NYDFS trust)
KrakenWyoming SPDI; Fed master accountSeptember 2020 (SPDI); March 2026 (Fed)
BitGoOCC conditional approval (converting from SD trust + NY BitLicense)December 2025 (OCC conditional)
RippleOCC conditional approvalDecember 2025
GeminiNYDFS limited purpose trust company; BitLicense2015 (trust charter)

Transition / Grandfathering

DimensionDetail
Can you operate while applying?FinCEN MSB: yes (register within 180 days). State MTLs: generally no (license before commencing). BitLicense: no. OCC: no (conditional approval then pre-opening). GENIUS Act: 12-month waiver for applicants with substantially complete applications
GENIUS Act timelineSigned July 18, 2025; regulations due July 18, 2026; effective January 18, 2027 (or 120 days after final regulations); non-compliant stablecoin sunset July 2028

Cross-Reference

See

United States Crypto Payment Regulation for full details on FinCEN MSB registration, state MTL requirements, NY BitLicense, GENIUS Act PPSI framework, Operation Choke Point 2.0 reversal, and the federal/state licensing patchwork.

Sources: FinCEN MSB Registration Rule; CSBS NMLS; NYDFS BitLicense; GENIUS Act (S.1582, Public Law 119-27); OCC GENIUS Act NPRM; Federal Reserve 2026 press releases

NFT & Digital Collectibles

Activity type: NFT marketplace operation, NFT issuance, fractionalized NFT platforms

DimensionDetails
Applicable license(s)No federal NFT-specific license. FinCEN MSB registration (if platform holds/transmits funds); SEC broker-dealer/ATS registration (if NFTs are securities); state money transmitter licenses (49+ states); New York BitLicense (23 NYCRR Part 200); California DFAL license (effective July 2026)
Regulatory authoritySEC, CFTC, FinCEN (federal); NYDFS, DFPI, state banking departments (state)
Capital requirementsState MTLs: $10,000--$2,000,000+ surety bonds; net worth $100,000--$1,000,000+; NY BitLicense: case-by-case capital + surety bond; CA DFAL: $500,000 minimum surety bond
Timeline (actual)FinCEN MSB: 180 days from commencing business; NY BitLicense: 12--24 months; CA DFAL: TBD (opens Q1 2026); state MTLs: 3--18 months per state; nationwide licensing: $500,000--$2,000,000+ total
Key requirementsHowey test analysis for securities classification; AML/BSA compliance programme; state-by-state MTL compliance; customer fund segregation; cybersecurity programme
NFT-specific notesSEC/CFTC joint interpretation (March 2026) classifies "digital collectibles" as neither securities nor commodities if genuinely unique and not marketed as investments; fractionalized NFTs likely securities under Howey; SEC closed OpenSea investigation (Feb 2025) without action; collectible NFTs potentially subject to 28% capital gains rate per IRS Notice 2023-27
Cross-reference
Full NFT regulation details

For Full Details


<!-- related-coverage:BEGIN — auto-generated by related_coverage.py; edit via --apply re-run, not by hand -->

Verification Notes

This file was refreshed and reconciled on 2026-06-04 against the nine refreshed deep-research source-domain files for the United States (all dated modified: 2026-06-04). Licence types, regulators, fees, capital, bond, timeline, and effective-date facts were cross-checked against those sources; remaining facts were verified against primary regulator/legislative sources.

Corrections made this cycle (Correction Protocol)

  1. GENIUS Act source URL — fixed. The Payment / Transfer Service License section previously linked the GENIUS Act to congress.gov/bill/119th-congress/senate-bill/394/text (S.394, an earlier February 2025 version, not the enacted bill). Corrected to the enacted bill, S.1582 (Public Law 119-27), at congress.gov/bill/119th-congress/senate-bill/1582. Confirmed via the refreshed stablecoin-regulations source (lines 33, 50, 53) which records S.394 as the February 4, 2025 earlier version and S.1582 as the May 21, 2025 final version signed July 18, 2025.

  2. Tether compliance — corrected stale framing. The Key Risks and Activity Comparison sections previously stated that "whether Tether ($174B USDT) can comply" was "the largest open question," with no mention of Tether's response. Corrected to record that Tether launched a separate, GENIUS-Act-compliant US product — USAT, issued by Anchorage Digital Bank with Cantor Fitzgerald as reserve custodian — on January 27, 2026 (~$20M at launch vs. USDC ~$75B), rather than restructuring global USDT. Per refreshed stablecoin-regulations source (lines 400, 651, 880, 1001).

Developments added (2026-03-20 → 2026-06-04)

  • FDIC GENIUS Act prudential NPRM — April 7, 2026 and FDIC illicit-finance NPRM — May 22, 2026. Per refreshed stablecoin-regulations source (line 993).
  • Treasury (FinCEN + OFAC) joint AML/sanctions NPRM — issued April 8, 2026; Federal Register April 10, 2026; comments due June 9, 2026. Treats PPSIs as Bank Secrecy Act "financial institutions" and, for the first time in federal law, mandates that this category of US persons maintain an effective sanctions compliance program (five OFAC core elements). Verified via Treasury press release sb0435 (search-confirmed) and Federal Register 2026-06963.
  • Digital Asset PARITY Act (H.R. 8899) — formally introduced May 19, 2026. First dedicated digital-asset tax bill: would extend wash-sale rules to digital assets, add a stablecoin de minimis / deemed-basis safe harbor, a five-year staking/mining deferral election, and a dealer mark-to-market election. Proposed legislation, not enacted — newly introduced, not advanced out of committee. Per refreshed digital-asset-taxation source (lines 77, 446, 451).
  • OCC GENIUS Act NPRM dated to February 25, 2026 and NCUA NPRM to February 11, 2026 (previously stated only as "Jan–Mar 2026"). OCC date verified via OCC Bulletin 2026-3 (fetched 2026-06-04); NCUA per refreshed stablecoin-regulations source (line 993).

Unverified / flagged

  • All cost, fee, capital, bond, timeline, and premium figures are self-reported or estimated (industry estimates, regulator-published where available). OCC charter application fees are NOT publicly disclosed; the "$5M–$28M+" all-in setup and "$6M–$28M+ first-year" PPSI figures are industry estimates flagged as such in the refreshed crypto-custody and stablecoin-regulations sources. State MTL all-state cost ranges ($250K–$350K Year 1; $225K–$280K+ annual) are aggregated industry estimates.
  • BitLicense holder count. This file cites "~34 license holders (~28 unique businesses), as of March 2024"; the refreshed crypto-payment-regulation source cites "~25 entities holding BitLicenses or trust charters" as of 2025. The two figures count differently (license holders vs. BitLicense + trust charters) and use different vintages; both retained with their stated dates rather than silently merged.
  • Federal Reserve PPSI prudential NPRM had not been issued as of 2026-06-06 — confirmed this cycle against the Fed's 2026 press-release index (no stablecoin/PPSI rulemaking listed). The Fed remains the only primary federal payment-stablecoin regulator yet to issue its NPRM. (Negative status verified against a primary; see gap-closure entry below.)

Targeted gap-closure pass (2026-06-06)

Two carried-forward gaps were closed against fetched primary sources this cycle:

  1. Federal Reserve PPSI prudential NPRM status — confirmed outstanding (CLOSED). Previously flagged as outstanding but resting on cross-cutting facts rather than a live primary check. Re-confirmed this run by fetching the Federal Reserve Board's 2026 press-release index (fetched 2026-06-06), which lists no GENIUS Act / stablecoin / payment-stablecoin-issuer rulemaking among 2026 releases. Status carried forward unchanged (no Fed NPRM as of 2026-06-06); the difference is that the negative is now backed by a fetched primary rather than inference.
  2. GENIUS Act statutory identity (S.1582 / Public Law 119-27) — verified via govinfo, bypassing the congress.gov 403 (CLOSED). The prior cycle could not fetch congress.gov (HTTP 403). This run fetched the enacted slip-law HTML at govinfo.gov PLAW-119publ27, which confirms: Public Law 119-27, originating bill S. 1582, short title "Guiding and Establishing National Innovation for U.S. Stablecoins Act" (GENIUS Act), approved July 18, 2025. The file's existing identity claims were correct; the source citation in the consolidated Sources block was switched from the 403-blocked congress.gov page to the fetched govinfo slip law.
Graph view