USA Crypto License: Federal and State Requirements Explained

There is no single "USA crypto license." In the United States, authorization to run a crypto business is a stack of federal registrations and state licenses, and which ones apply is determined by the activity you perform and the asset you handle. A crypto-fiat exchange, a custodial wallet, a stablecoin issuer and a derivatives venue each face a different combination of regulators. This guide maps the full federal and state regulatory landscape, shows which authorizations each activity triggers, and covers the 2025 to 2026 changes (the GENIUS Act, OCC Interpretive Letter 1183, the SEC Crypto Task Force and California's DFAL) that have reshaped the picture.

*By Magnus Müller · Reviewed by Magnus Müller · Last updated: 2026-06-14*

Is there a single crypto license in the USA?

No. There is no single federal "crypto license" in the United States. Authorization is a stack of overlapping federal registrations and state licenses, and which apply depends on the activity (exchange, custody, transmission, issuance, derivatives) and the asset. Most crypto businesses begin with a FinCEN money services business registration and add state licenses from there.

This disambiguation matters because the word "license" is used loosely. In practice a US crypto business does not obtain one license. It assembles a portfolio of three different instrument types: federal registrations (FinCEN), state licenses (Money Transmitter Licenses, the New York BitLicense, the California DFAL), and, for banks, a federal charter or interpretive permission (the Office of the Comptroller of the Currency). On top of these sit asset-classification rules from the SEC and the CFTC that decide whether a token is a security or a commodity.

Key takeaways: how US crypto authorization works

• Federal registrations. Almost every crypto business that moves value must register with FinCEN as a money services business under the Bank Secrecy Act (31 CFR 1010.100(ff)).
• State licenses. Serving residents of a state generally requires a Money Transmitter License there, plus special regimes in New York (BitLicense) and California (DFAL).
• Bank charters. National banks may custody crypto and conduct certain stablecoin and node-verification activities under OCC Interpretive Letter 1183.
• Asset classification. A token deemed a security is subject to the SEC; a commodity-based product is subject to the CFTC.
• Determined by activity and asset. No two business models face exactly the same authorization stack.

The US regulatory map: federal and state layers

The cleanest way to understand US crypto regulation is as two layers that operate in parallel. The federal layer covers anti-money-laundering, securities, commodities and banking. The state layer covers money transmission and a handful of bespoke digital-asset regimes. A single business commonly touches both layers at once, which is why a US market-entry plan starts with a map rather than a single application. If you are weighing the US against other markets, you can compare crypto-license jurisdictions and contrast the US dual-layer model with single-regulator systems such as the Switzerland licensing path.

The federal layer (FinCEN, SEC, CFTC, OCC)

Four federal regulators carry the weight, with two overlays. FinCEN, part of the Treasury, administers the Bank Secrecy Act and requires money transmitters, including convertible-virtual-currency exchangers and administrators, to register as money services businesses (FIN-2019-G001). The SEC has authority where a token is a security under the *Howey* test, which can pull a platform into national-securities-exchange, alternative-trading-system or broker-dealer registration (SEC investment-contract framework). The CFTC treats virtual currencies as commodities and regulates crypto derivatives plus anti-fraud and anti-manipulation on spot markets (CFTC Digital Assets). The OCC governs what national banks and federal savings associations may do with crypto (Interpretive Letter 1183). Two further bodies act as overlays rather than licensing layers: OFAC enforces sanctions screening, and the IRS taxes digital assets as property (FinCEN CVC guidance).

The state layer (money transmitter licenses, NY, California)

Beneath the federal layer, the United States licenses money transmission state by state. A crypto business that serves residents of a state generally needs a Money Transmitter License there, most often obtained through the Nationwide Multistate Licensing System (NMLS). Substantive requirements are increasingly standardized by the Conference of State Bank Supervisors' Money Transmission Modernization Act model law. Two states run special digital-asset regimes on top of money transmission. New York requires the BitLicense under 23 NYCRR Part 200 for virtual-currency business activity, and California's Digital Financial Assets Law requires a DFPI license for digital-financial-asset business activity from 1 July 2026.

Why one crypto business may need several authorizations at once

The defining feature of the US system is stacking. Consider an exchange that also custodies client assets and lists a token that turns out to be a security. That single business would need a FinCEN MSB registration, a Money Transmitter License in roughly every state where it serves residents (nearly all states plus the District of Columbia), a New York BitLicense if it touches New York residents, and SEC registration for the security-token activity. Adding stablecoin issuance or derivatives would bring the GENIUS Act or the CFTC into the stack as well. There is no shortcut around this. The right approach is to map your activities first and build the authorization portfolio that those activities trigger.

*Infographic 1 (Who regulates what) is placed in this section.*

FinCEN MSB registration: the federal AML baseline

For most crypto businesses, FinCEN MSB registration is the near-universal federal starting point. It is an anti-money-laundering registration under the Bank Secrecy Act, not a commercial "license," but it is the first box almost every operator that moves value must tick. FinCEN clarified how this applies to crypto in guidance FIN-2019-G001 (9 May 2019), which walks through convertible-virtual-currency business models including exchangers, wallet providers, kiosks and peer-to-peer arrangements. Registration is filed through the BSA E-Filing system and obliges the business to maintain a full AML program.

Who counts as a money services business / money transmitter

The defining provision is 31 CFR 1010.100(ff), which sets out the definitions of "money services business," "money transmitter" and "money transmission services," along with the exclusions. Under FinCEN's 2019 guidance, convertible-virtual-currency exchangers and administrators fall within the money-transmitter definition, as do many wallet providers and crypto kiosk operators. Whether a particular model is captured turns on the facts of how value moves, which is exactly why FinCEN published model-by-model guidance rather than a single rule.

Registration mechanics and renewal

MSB registration is governed by 31 CFR 1022.380. A money services business must register within 180 days of being established, and the registration must be renewed on a two-year (biennial) cycle, with re-registration triggered by certain changes in ownership or control. This biennial renewal cadence is the one firmly published US timeline fact for crypto authorization. Most other "how long does it take" numbers circulating online are estimates rather than statutory deadlines, a point we return to under cost and timeline below.

The four-pillar AML program

Registration is only the entry ticket. The substantive obligation is a written anti-money-laundering program meeting the four pillars set out in 31 CFR 1022.210: a designated compliance officer, internal policies and controls, ongoing training, and independent testing. On top of the program sit Suspicious Activity Reports, Currency Transaction Reports and Travel Rule obligations. We route the full operational detail of building this program to our AML and KYC requirements guide rather than duplicating it here.

SEC and CFTC: when crypto is a security or a commodity

The second federal question is asset classification. The same token can sit on either side of a line that determines whether the SEC or the CFTC has the lead. This fork is one of the most consequential and contested areas of US crypto law, and it directly shapes whether a trading venue needs securities registration or commodity-derivatives registration.

The Howey test: when a token is a security (SEC)

The SEC applies the *Howey* test, an investment-contract analysis, to decide whether a digital asset is a security (SEC framework for investment-contract analysis). Where a token is a security, securities law attaches and a platform that trades it may need to register as a national securities exchange, an alternative trading system or a broker-dealer, and state blue-sky rules may also apply. The classification is fact-specific and has historically been resolved case by case, which is part of what the 2025 SEC Crypto Task Force was created to address.

Crypto as a commodity: CFTC derivatives and spot oversight

The CFTC treats virtual currencies as commodities. It regulates crypto derivatives, including futures, swaps and options, through registration of designated contract markets, swap execution facilities and futures commission merchants under the Commodity Exchange Act (CFTC Digital Assets). On spot markets the CFTC does not license venues, but it retains anti-fraud and anti-manipulation authority. The practical effect is that a commodity-based derivatives product points you toward the CFTC, while a security token points you toward the SEC.

The OCC and national banks: crypto custody and stablecoin activities

A newer and often overlooked layer is the banking layer. National banks and federal savings associations are supervised by the OCC, which over 2025 substantially expanded what they may do with crypto. For founders evaluating a bank-charter route, or for incumbents adding digital-asset services, the OCC's position is now a central part of the map.

Interpretive Letter 1183: what national banks can now do

In Interpretive Letter 1183, dated 7 March 2025, the OCC confirmed that crypto-asset custody, certain stablecoin activities and participation in independent node-verification networks are permissible for national banks and federal savings associations. Crucially, the letter rescinded the prior requirement, introduced in Interpretive Letter 1179 (November 2021), to obtain supervisory non-objection before engaging in these activities. The OCC also withdrew from the 2023 interagency joint statements on crypto-asset and liquidity risks as applied to its institutions. The result is a markedly more permissive federal banking posture toward crypto than existed a year earlier.

State licensing: money transmitter licenses, NMLS and the MTMA

The state layer is where most of the application volume sits. A crypto business that moves value for residents of a state typically needs a Money Transmitter License in that state. Because the US has no single national money-transmission license, this can mean dozens of separate applications, which is why standardization through NMLS and the MTMA matters so much to operators.

Getting an MTL in each state you serve

The general rule is that you need a Money Transmitter License in each state where you serve residents. Most applications run through the Nationwide Multistate Licensing System (NMLS), which lets businesses file across multiple states from one platform. The exact number of states a given business needs depends on where its customers are, but for a nationwide consumer-facing crypto service the practical answer is nearly all states plus the District of Columbia. We route the step-by-step application mechanics, including per-license capital and surety-bond detail, to our US exchange licensing step by step guide.

The Money Transmission Modernization Act (MTMA)

To reduce the friction of a 50-state patchwork, the Conference of State Bank Supervisors published the Money Transmission Modernization Act (MTMA), a model state law that standardizes core requirements such as net worth, surety bond and permissible investments across adopting states. As states adopt the model, the substantive bar for a license converges, even though each state still issues its own authorization. We keep the granular capital and bond figures in the exchange sibling guide rather than restating them here.

New York BitLicense and the limited-purpose trust charter

New York runs the best-known special regime. The BitLicense, under 23 NYCRR Part 200, is a NY DFS license required for virtual-currency business activity involving New York residents. New York also offers a limited-purpose trust charter, which allows a firm to provide fiduciary custody of digital assets without a separate Money Transmitter License. The trust-charter route is a common structure for custodians serving institutional clients. For application depth, see our New York BitLicense guide.

California DFAL: license required from July 1, 2026

California's Digital Financial Assets Law (DFAL) requires a DFPI license for digital-financial-asset business activity with or for a California resident from 1 July 2026. The original effective date of 1 July 2025 was pushed back to 1 July 2026 by AB 1934, signed on 29 September 2024, and DFPI rulemaking is ongoing. Given California's market size, the DFAL is one of the most significant near-term state changes for any crypto business serving US consumers.

Which US crypto license do you need? Authorizations by activity

The most useful way to turn the regulatory map into a plan is to read it by activity. The matrix below shows which federal and state authorizations each common crypto activity triggers. Because a business often performs several activities, the authorizations stack: a firm that does two of these rows needs the combined set.

*Infographic 2 (Crypto licenses by activity) is placed in this section, directly above the CTA.*

Exchanges, custody and money transmission

The most common cluster of activities, exchange, custody and money transmission, runs through the money-transmitter path. The federal baseline is FinCEN MSB registration, and the state baseline is a Money Transmitter License in each served state, with the New York BitLicense and the California DFAL layered on for those states. Pure custody can take the bank-charter route via the OCC or the New York trust-charter route, both of which can support fiduciary custody without a standalone MTL.

Security tokens and crypto derivatives

If the asset is a security under the *Howey* test, the platform moves into SEC territory and may need exchange, ATS or broker-dealer registration. If the product is a commodity derivative, the CFTC governs through DCM, SEF or FCM registration under the Commodity Exchange Act. These two regimes are distinct from the money-transmitter path and can apply on top of it.

Stablecoin issuance and crypto ATMs

Payment-stablecoin issuance is now governed by the GENIUS Act, with three permitted issuer types covered in the next section. Crypto ATMs and kiosks generally fall under the money-transmitter path, requiring FinCEN MSB registration plus Money Transmitter Licenses in the states where they operate, as set out in FinCEN's 2019 CVC guidance.

The GENIUS Act: the first federal stablecoin framework

The single biggest federal development of 2025 for crypto is the GENIUS Act, Public Law 119-27, signed into law on 18 July 2025. It is the first federal regulatory regime for payment stablecoins, and any current US overview has to account for it. Because the mechanics are detailed, we keep this page to the framework and route the full breakdown to our GENIUS Act stablecoin rules explainer.

Who can issue a payment stablecoin

Under the GENIUS Act, permitted payment-stablecoin issuers fall into three buckets: a subsidiary of an insured depository institution, a federal qualified payment-stablecoin issuer regulated by the OCC, or a state-qualified payment-stablecoin issuer. The three tracks give both bank-affiliated and standalone issuers a path, while keeping every issuer inside a defined supervisory perimeter. The precise statutory mechanics of qualification should be read against the public law itself before relying on exact wording.

Reserves, disclosure and the $10B federal/state split

The GENIUS Act sets strict reserve and transparency rules. Issuers must hold 100% reserves in liquid assets and make monthly public disclosure of reserve composition, and they are brought within the Bank Secrecy Act for AML and sanctions purposes (GENIUS Act, PL 119-27). The Act bans misleading claims that a stablecoin is US-government-backed, federally insured or legal tender, and it requires issuers to be able to seize, freeze or burn tokens on a lawful order. Oversight is split at $10 billion outstanding: a state-qualified issuer below the threshold can be regulated at state level where the state regime is judged substantially similar to the federal one, while issuers above it move to federal oversight.

2025-26 developments reshaping US crypto regulation

Beyond the GENIUS Act, several 2025 to 2026 developments have changed the US regulatory map, and they are the clearest reason an older overview can no longer be trusted. Reading them together shows a shift from regulation-by-enforcement toward rulemaking, alongside an expanding banking and state-level framework. We track the running picture in our crypto regulation news and analysis hub.

The SEC Crypto Task Force (January 2025)

The SEC launched its Crypto Task Force on 21 January 2025, led by Commissioner Hester Peirce (SEC press release 2025-30). Its mandate is to draw clear regulatory lines, distinguish securities from non-securities, craft tailored disclosure frameworks and provide realistic paths to registration for both crypto assets and market intermediaries. The Task Force signals a deliberate shift away from case-by-case enforcement and toward a rulemaking framework, which is one of the most important context changes for anyone planning US registration.

The CLARITY Act: pending market-structure legislation

The CLARITY Act, H.R. 3633, is a market-structure bill that passed the House Financial Services and Agriculture Committees on 10 June 2025 (Congress.gov H.R. 3633). If enacted, it would give the CFTC central jurisdiction over "digital commodities" and their intermediaries, while preserving certain SEC authority over primary-market transactions. As of this update it is not yet law, so it should be treated as pending legislation rather than a current requirement. Confirm its status before relying on it (see Open questions).

Compliance obligations for US crypto businesses

Whatever authorizations a business holds, ongoing compliance is where most regulatory risk lives. US crypto businesses operate under the Bank Secrecy Act AML framework plus sanctions and tax overlays, and stablecoin issuers face the additional reserve and disclosure duties described above. We route the full operational playbook to our AML and KYC requirements guide.

AML, SARs, CTRs and the Travel Rule

Money services businesses must run the four-pillar AML program under 31 CFR 1022.210: a compliance officer, internal controls, training and independent testing. They must also file Suspicious Activity Reports and Currency Transaction Reports and comply with the Travel Rule for qualifying transfers. State MTLs add net-worth, surety-bond and permissible-investment requirements standardized through the CSBS MTMA, and GENIUS Act stablecoin issuers are also subject to the Bank Secrecy Act.

OFAC sanctions and IRS tax overlays

Two overlays apply regardless of which licenses you hold. OFAC sanctions screening must be built into every customer-facing process, since handling a sanctioned counterparty is a strict-liability risk (FinCEN CVC guidance). The IRS treats digital assets as property, so disposals can be taxable events for the business and its users. Tax treatment, including current Form 1099-DA reporting, evolves quickly, so we route tax depth to our crypto-tax coverage and flag current IRS rules for verification before relying on specifics.

How much does US crypto licensing cost and how long does it take?

Why there is no flat US licensing fee

Cost and time scale with the stack. A business that needs only a FinCEN MSB registration faces a very different burden from one assembling Money Transmitter Licenses across nearly all states plus a New York BitLicense and SEC registration. The one firmly published timeline fact is the MSB biennial renewal cadence under 31 CFR 1022.380; per-state application fees, capital and surety-bond amounts vary by state and by the MTMA-standardized requirements each state has adopted. Because those figures change and depend on facts, we confirm them per matter rather than asserting a single national number. To benchmark the US against alternatives, compare crypto-license jurisdictions on our pillar.

How to get licensed for crypto in the USA

Mapping the US system to your business follows a simple three-step logic, even though the execution is detailed. We work through it with founders and operators as part of a structured market-entry plan, drawing on the same primary sources cited throughout this guide.

From our practice. In our advisory work, the most common and most expensive early mistake is treating the US as a single-license market and discovering the multi-state and special-regime obligations only after launch. We start every US engagement with an activity-by-activity map so that the federal registrations, the state licenses and any special regimes are identified before a single application is filed. That sequencing avoids re-work and keeps the AML program aligned with the authorizations the business will actually hold.

Step 1 - Map your activity to the right authorizations

Use the activity matrix above to identify the federal and state authorizations your specific business triggers. Most operators discover they need more than one: an exchange that custodies and lists tokens can face a FinCEN registration, dozens of state licenses, a New York BitLicense and potentially SEC registration all at once. Getting the map right first is what prevents costly re-filing later. Contrast this with single-regulator systems such as the UK FCA registration or Singapore MAS DPT licensing to see how much the US dual-layer model adds.

Step 2 - File federal registrations and state licenses

Begin with the FinCEN MSB registration baseline, then file Money Transmitter License applications through NMLS for each served state, and add the special regimes (New York, California) where they apply. The detailed application mechanics for an exchange, including capital and bond detail, are in our US exchange licensing step by step guide so this page can stay the broad map.

Step 3 - Build your AML and ongoing-compliance program

Authorization is the start, not the finish. Stand up the four-pillar AML program, implement SAR, CTR and Travel Rule processes, build OFAC sanctions screening, and put renewal calendars in place (including the MSB biennial renewal). Ongoing compliance is what keeps the authorizations valid, and it is the area most likely to attract regulatory attention. Our AML and KYC requirements guide covers the operational detail.