BitLicense New York: Complete Application Guide

A BitLicense is the license issued by the New York State Department of Financial Services (NYDFS) under 23 NYCRR Part 200 to any business conducting virtual currency business activity involving New York or a New York resident. The regime took effect in 2015. This guide explains who needs one, how to file through NMLS, the $5,000 fee, and the capital, surety bond, AML and cybersecurity rules.

New York remains one of the most demanding crypto jurisdictions in the world, and the BitLicense is the gatekeeper. For founders weighing a US market entry, understanding the exact requirements of 23 NYCRR Part 200 before you file saves months of avoidable delay. This guide reflects the same primary-source discipline we apply when we help clients plan a route into New York, and it sits alongside our wider playbook on how to start a licensed crypto exchange.

What is a BitLicense?

A BitLicense is a state license granted by NYDFS under 23 NYCRR Part 200 ("Virtual Currencies") that authorizes a company to carry on virtual currency business activity involving New York or a New York resident. The rule has been in force since 2015 and is administered entirely by NYDFS, which both issues the license and supervises licensees on an ongoing basis. [S1][S2]

The license is unusual in scope. Unlike a generic money-transmitter license, the BitLicense was written specifically for virtual currency and pulls together capital, custody, anti-money-laundering and cybersecurity obligations into one regime. If your activity touches New York, the BitLicense (or the trust-charter alternative covered later) is normally the route you must take.

Who issues the BitLicense (NYDFS)

The BitLicense is issued by the New York State Department of Financial Services, the state's financial regulator, accessible at dfs.ny.gov. NYDFS reviews every application, sets case-by-case capital, supervises licensees after approval, and also charters limited purpose trust companies under New York Banking Law as the alternative route into the state. NYDFS is the single point of contact for the licensing process from start to finish. [S1]

The legal basis (23 NYCRR Part 200)

The governing regulation is 23 NYCRR Part 200. The sections that matter most to applicants are: 200.2(q) (the definition of Virtual Currency Business Activity); 200.4 (application contents); 200.5 (the application fee); 200.7 (standards for approval); 200.8 (capital); 200.9 (surety bond or account); 200.15 (AML); and 200.16 (cybersecurity). Part 200 is cross-referenced to 23 NYCRR Part 500 (cybersecurity) and Part 504 (transaction monitoring and filtering). Citing these section numbers precisely is what separates a credible application plan from guesswork. [S1][S2][S3]

Who needs a BitLicense (and who is exempt)?

You need a BitLicense if you conduct any of the five virtual currency business activities defined in 23 NYCRR 200.2(q) involving New York or a New York resident. Five categories of activity are covered, and five categories of person are exempt. The territorial trigger, the phrase "involving New York or a New York Resident," is what decides whether the regime reaches your business at all. [S1]

This is the first question every founder should resolve, because the answer changes the entire US strategy. If your activity is federal-only or out of state, your obligations look different. For a wider view of the federal and multi-state picture, see our guide to US federal and state crypto requirements and our overview of US crypto exchange licensing (BitLicense and MSB).

The five virtual currency business activities (200.2(q))

Under 23 NYCRR 200.2(q), virtual currency business activity means conducting any one of the following involving New York or a New York resident: [S1]

1. Receiving or transmitting virtual currency (other than nominal, non-financial transactions).
2. Storing, holding, or maintaining custody or control of virtual currency on behalf of others.
3. Buying and selling virtual currency as a customer business.
4. Performing exchange services as a customer business.
5. Controlling, administering, or issuing a virtual currency.

If your business model performs even one of these activities in connection with New York, you fall inside the regime.

Activities exempt from a BitLicense

NYDFS exempts several categories from the BitLicense requirement: [S1]

• Individual investors using virtual currency solely for their own investment.
• Merchants accepting virtual currency as payment for goods or services.
• Organizations that merely accept donations in virtual currency.
• Miners engaged only in mining, without other licensable activity.
• Software developers providing only purely technical services.

These exemptions are narrow. Accepting customer funds, providing custody, or running an exchange takes you outside the exemptions and into the licensing requirement.

Does the activity involve New York?

The regime applies only where the activity involves New York or a New York resident. That territorial trigger is decisive: a platform with no New York nexus is not pulled in by Part 200, while a global exchange that onboards New York customers is. Because the trigger turns on residents as well as the state itself, careful jurisdictional analysis at the design stage is essential before you commit to a US launch. [S1]

How to apply for a BitLicense through NMLS

You apply for a BitLicense through the Nationwide Multistate Licensing System (NMLS) in four broad stages: open an NMLS company account, build the company record and complete forms MU1 and MU2, assemble the Application Checklist with the $5,000 fee, then enter substantive NYDFS review. The most common cause of delay is an incomplete filing, so preparation matters more than speed. [S1][S3]

The application overlaps heavily with the operational build of an exchange, so it is worth reading this section alongside the technical and legal requirements to launch an exchange.

Step 1 - Open an NMLS company account

Submit a Company Account Request Form to NMLS, naming a primary and a secondary account administrator. NMLS issues login credentials within roughly three days. This account is the channel through which the entire application is filed and later maintained, so the administrators you name should be people who will stay close to the process. [S1]

Step 2 - Build the company record and complete MU1/MU2

Once you have NMLS access, build out the company record and complete the required NMLS forms: Form MU1 for the company and Form MU2 for the officers, directors, and principals. MU2 filings feed directly into the character-and-fitness assessment NYDFS conducts at approval, so the individuals behind the company must be ready to disclose their backgrounds fully. [S1][S3]

Step 3 - Assemble the Application Checklist and pay the $5,000 fee

Compile every item on the NY Virtual Currency Business Activity License New Application Checklist. Documented items referenced by NYDFS include a Financial Statement, an Authority to Release Information form, a Licensee Contact Update form, the MU1 and MU2 forms, and New York jurisdiction-specific information. The application carries a $5,000 fee under 23 NYCRR 200.5, which is not refunded if the application is denied or withdrawn. NYDFS warns that failure to submit all items is the single most common cause of delay. [S1][S3][S4]

Step 4 - Substantive review and decision (200.7)

Your application is not deemed ready for substantive review until NYDFS has received all required information, documents and fees. Once complete, NYDFS reviews your financial condition, business experience, AML and cybersecurity programs, capital adequacy, and the character and general fitness of your principals under 200.7. The outcome is an approval, a conditional license, or a denial. Incomplete applications may be delayed indefinitely and ultimately denied for insufficiency, which is why front-loading a complete file is the single highest-value thing you can do. [S1][S3]

Infographic 1 (process) appears here: BitLicense application flow.

How much does a BitLicense cost?

The BitLicense carries a $5,000 application fee under 23 NYCRR 200.5, a surety bond or funded account that is generally a $500,000 minimum under 200.9, and an ongoing annual assessment that NYDFS calculates by formula rather than charging as a flat fee. There is no fixed published total, because capital and the surety figure are set by business model and risk. For a fuller financial picture across jurisdictions, see our budget for a crypto exchange license. [S3][S4][S1][S9]

The $5,000 application fee (200.5)

Under 23 NYCRR 200.5, each applicant submits an initial application fee of five thousand dollars. The fee covers the cost of processing the application, reviewing materials, and investigating the applicant's financial condition, business experience, and character and general fitness. If the application is denied or withdrawn, the fee is not refunded. [S3][S4]

Surety bond or funded account (200.9)

Under 23 NYCRR 200.9, a licensee must either obtain a surety bond or fund a U.S. dollar account for the benefit of its customers. NYDFS states that, generally, the minimum amount of this bond or account is $500,000, although that figure can increase based on the specifics of the licensee's business model. Licensees holding virtual currency for others must also hold like-kind virtual currency of the same amount and type owed to customers. Treat the $500,000 as general guidance, not a hard statutory cap. [S1]

Ongoing annual assessment (200 + S9)

After licensing, NYDFS bills an annual assessment with a supervisory component and a regulatory component. It is billed quarterly with a year-end true-up and is calculated on the basis of transaction volume and USD custody value. NYDFS publishes a formula and quarterly charts rather than a single flat figure, so there is no fixed annual fee to quote. Budget for a recurring, volume-driven cost rather than a fixed line item. [S1][S9]

BitLicense requirements (capital, AML, cybersecurity)

Beyond the fee and the bond, a BitLicensee must meet substantive requirements: case-by-case capital under 200.8, a full AML program under 200.15, a cybersecurity program with a designated CISO under 200.16, and a qualified compliance officer whose principals pass character and fitness under 200.7. These are the obligations that make the BitLicense a serious commitment rather than a registration formality, and they map onto the same disciplines covered in our AML and KYC compliance guide.

Infographic 2 (comparison) appears in the trust-charter section below; image inline-2 (compliance motif) appears here.

Capital requirements (200.8)

Under 23 NYCRR 200.8, a licensee must maintain capital in an amount and form that NYDFS determines is sufficient to ensure financial integrity and ongoing operations. The capitalization determination may vary depending on business model and risk, and the rule sets no fixed dollar minimum. Do not assume a headline number: NYDFS sets the figure case by case, weighing the activity, custody exposure, and risk profile of each applicant. [S1][S5]

AML program and KYC (200.15)

Under 23 NYCRR 200.15, each licensee must conduct an initial risk assessment covering legal, compliance, financial and reputational risk across its activities, services, customers, counterparties and geography, then establish, maintain and enforce a written AML program based on it. The program includes KYC and customer identification, recordkeeping, and suspicious activity reporting, and BSA/AML obligations apply. NYDFS also references Part 504 transaction monitoring and filtering requirements as applicable. [S1][S6]

Cybersecurity and the CISO (200.16, Part 500)

Under 23 NYCRR 200.16, aligned with 23 NYCRR Part 500, each licensee must maintain a written cybersecurity program and policy, designate a Chief Information Security Officer (CISO), and conduct audits and penetration testing. The CISO must submit annual certifications to NYDFS. Cybersecurity is treated as a board-level obligation, not an IT afterthought, and the CISO role must be staffed by someone genuinely qualified to own it. [S1][S6]

Compliance officer and character-and-fitness (200.7)

A qualified compliance or AML officer is required to run the AML program under 200.15. Separately, NYDFS evaluates the character and general fitness of the company's principals as part of the approval standards in 200.7. Both the institution and the individuals behind it are scrutinized, so founders should expect the people running the business to be assessed as closely as the business model itself. [S1][S3]

The NYDFS Greenlist (pre-approved coins)

The Greenlist is a list of pre-approved coins that any entity licensed or chartered by NYDFS may list without a separate DFS-approved coin-listing policy. As of 2026-06-13 it contains eight coins. A coin generally reaches the Greenlist after approval for a specific use by three unrelated virtual currency businesses, the "Greenlist Threshold," and after roughly six months may be adopted by others for that use. This list changes, so always check the current version before relying on it. [S1][S7]

Coins currently on the Greenlist

As of 2026-06-13, the NYDFS Greenlist includes eight coins: [S1]

• Bitcoin (BTC)
• Ethereum (ETH)
• Gemini Dollar (GUSD)
• GMO JPY (GYEN)
• GMO USD (ZUSD)
• Ripple USD (RLUSD)
• WisdomTree Dollar (USDW)
• WisdomTree Gold (GOLD)

Because the Greenlist is updated over time, this snapshot is dated and should be re-checked against the live NYDFS list before you rely on it for a listing decision.

How a coin reaches the Greenlist (Greenlist Threshold)

A coin generally reaches the Greenlist once it has been approved for a specific use by three unrelated virtual currency businesses, a benchmark NYDFS calls the Greenlist Threshold. After approximately six months, other entities may adopt the coin for that same use. Licensees that do not rely on the Greenlist must instead adopt DFS-approved coin-listing and coin-delisting policies to govern which assets they support. [S1][S7]

Conditional BitLicense and the trust-charter alternative

There are two important alternatives to a standalone full BitLicense: the conditional BitLicense, introduced in 2020, which lets a new entity operate under the sponsorship of an existing licensee while it qualifies on its own, and the New York limited purpose trust company charter, which adds fiduciary powers and allows money transmission in New York without a separate money transmitter license. Choosing the right route is often as important as the application itself. [S1][S8]

What is a conditional BitLicense?

The conditional BitLicense, introduced by NYDFS in 2020, lowers the barrier to entry. A new entity may operate under a conditional license while sponsored and supported by an existing full BitLicensee or a New York limited purpose trust company, which provides operational, staffing and other support until the conditional licensee qualifies for a full license or trust charter on its own. PayPal, Inc. received a conditional virtual currency license in October 2020. [S1][S8]

NY limited purpose trust company charter

Instead of a BitLicense, an entity may charter as a New York limited purpose trust company under New York Banking Law. The advantages over a BitLicense are meaningful: authority to exercise fiduciary powers, which BitLicensees cannot; the ability to conduct money transmission in New York without a separate money transmitter license; and authorization to conduct virtual currency business activity. Trust-chartered entities are also Greenlist-eligible. The charter suits businesses that need custody and fiduciary authority at the core of their model. [S1]

BitLicense vs trust charter - which route fits

The two routes diverge on a few decisive points, summarized below. The right choice depends on whether you need fiduciary powers, how you handle money transmission, and your tolerance for the chartering process. Our overview of crypto license types by activity places this New York choice in a wider licensing context.

Infographic 2 (comparison) appears here: BitLicense vs trust charter.

Ongoing obligations after you are licensed

A BitLicense is not a one-time approval. After licensing you face an annual assessment billed quarterly, annual AML and cybersecurity certifications, and a duty to obtain prior NYDFS approval for material business changes. These ongoing obligations are part of why New York is regarded as a high-commitment jurisdiction, and they should be factored into any operating plan from day one. [S1][S9]

Annual assessment and reporting

NYDFS bills an annual assessment with supervisory and regulatory components, calculated on transaction volume and USD custody value. It is billed quarterly with a year-end true-up. Alongside the assessment, licensees carry ongoing reporting duties to NYDFS. Because the assessment scales with activity, growth in volume and custody directly increases the cost of staying licensed. [S9]

Annual AML and cybersecurity certifications

The CISO must submit annual cybersecurity certifications under 200.16, aligned with Part 500. Where applicable, transaction monitoring certifications under Part 504 also apply. These certifications keep the institution accountable for maintaining its AML and cyber programs year after year, not just at the point of licensing. [S1][S6]

Prior approval for material changes

A licensee must obtain prior NYDFS approval for material changes to its business. That requirement constrains how quickly a licensee can pivot its model, add new activities, or restructure ownership, so material strategic moves need to be planned with the regulator in mind rather than executed first and explained later. [S1]

How Crypto Valley Partners helps with NY entry

Crypto Valley Partners AG, based in Zug, Switzerland, advises founders and operators on the route into New York: standalone BitLicense, conditional BitLicense, or limited purpose trust company charter. Our value is in mapping your business model to the right route and the exact 23 NYCRR Part 200 obligations before you file, so the application that reaches NYDFS is complete the first time. We do not publish a price list, because every New York entry is scoped to the activity, custody model and risk profile of the specific business.

From our practice: the pattern we see most often is not a weak business model but an incomplete first filing, exactly the failure NYDFS flags as the leading cause of delay. We focus our engagements on closing that gap before submission rather than chasing the regulator afterwards. We are deliberately conservative about figures NYDFS does not fix in the rule, such as capital and timeline, and we plan around the regime as it is actually written.

Choosing your route into New York

The decision between a standalone BitLicense, a conditional license under sponsorship, and a trust charter turns on fiduciary needs, money-transmission posture, custody scale, and how quickly you need to be operational. We help founders weigh those trade-offs against their broader US and global strategy, drawing on the same primary-source approach we apply across jurisdictions and within our pillar guide on how to start a licensed crypto exchange.