Crypto License in the USA
The U.S. does not issue a single, unified federal crypto license. Instead, the regulatory requirements for a digital asset exchange are dictated by a complex triad of variables: your specific operational activities, the classification of the assets you handle, and the jurisdictions of your end-users.
At LegalBison, we transform this regulatory labyrinth into a clear, actionable roadmap. Rather than leaving you to decipher overlapping federal and state mandates, our bespoke compliance strategies map your exact licensing requirements based on your unique business model. From Money Transmitter Licenses (MTLs) at the state level to SEC and CFTC registrations at the federal level, LegalBison architecting your compliance framework to ensure secure, compliant, and scalable entry into the U.S. digital asset market.
Book a free consultation
Book a free call nowU.S. crypto license: A layered licensing system for cryptocurrency
The U.S. crypto regulatory system is a two-tier, multi-agency structure. At the federal level, FinCEN, the SEC, the CFTC, and the OCC each govern different types of crypto activity. At the state level, 49 states plus the District of Columbia maintain their own licensing regimes for money transmission. Your business needs a set of registrations and licenses that apply to your specific activities in those states where you serve customers.
The federal baseline for virtually all crypto business models is FinCEN registration as a Money Services Business. State Money Transmitter Licenses layer on top of that baseline. New York’s BitLicense and California’s Digital Financial Assets Law create additional state-specific obligations. For stablecoin issuers, the GENIUS Act (signed July 18, 2025) adds a mandatory federal or state licensing layer effective on the earlier of 18 months after enactment or 120 days after final regulations are issued.
Two major legislative developments are actively changing U.S. crypto regulation. The GENIUS Act establishes the first federal framework for payment stablecoin issuers. The Digital Asset Market Clarity Act, pending in Congress, would codify the distinction between securities and commodities for digital assets. Both carry direct implications for operators structuring a U.S. entry today.
Federal-level requirements
Three federal agencies govern most crypto businesses in the U.S. A fourth, the OCC, is relevant specifically for custodians and stablecoin infrastructure operators.
FinCEN MSB registration
Any business exchanging, transmitting, or holding digital assets on behalf of others must register as a Money Services Business with FinCEN, using such form as FinCEN may specify, within 180 days beginning on the day following the date the business is established. This is the minimum federal requirement for virtually every crypto business model operating in the U.S. market, and it is non-negotiable.
Registration triggers a set of ongoing obligations under 31 CFR 1022: a written AML program, a designated compliance officer, Customer Identification Program (CIP) procedures, Suspicious Activity Report (SAR) filing, and Currency Transaction Report (CTR) filing. Operating without registration is a federal criminal offense under 18 U.S.C. 1960. This is not a technicality that enforcement consistently overlooks.
SEC registration: when your token is a security
Tokens meeting the Howey Test criteria are securities. Platforms trading security tokens require broker-dealer registration and, where operating as an exchange, Alternative Trading System (ATS) registration with the SEC.
The SEC established its Crypto Task Force in January 2025. A joint SEC-CFTC token taxonomy interpretation issued in March 2026 is moving toward codified classification rules. Until those rules are enacted, the Howey Test governs classification. The Digital Asset Market Clarity Act, if passed, would statutorily classify network tokens (ancillary assets) as commodities and remove them from SEC jurisdiction. Operators in token issuance or secondary trading must monitor this legislative track actively.
CFTC registration: derivatives, futures, and commodity tokens
Platforms offering crypto derivatives and futures must register with the CFTC. Bitcoin and Ether have been treated as commodities in every major regulatory and court proceeding to date. Futures Commission Merchant (FCM) and Introducing Broker registrations apply to crypto derivatives operators. The CFTC’s Crypto Sprint, launched in August 2025, is advancing frameworks for spot market listing on regulated venues, with final rules expected to affect both centralized exchange and DeFi operators.
OCC National Trust Bank Charter: for custodians and stablecoin issuers
The OCC national trust bank charter is the federal banking route for crypto custodians and stablecoin infrastructure operators. The OCC issued conditional approvals for five national trust bank charter applications from crypto firms in December 2025, including applications from Ripple, BitGo, Paxos, Circle, and Fidelity Digital Assets. This pathway is not the default route for most operators. It is directly relevant for firms seeking federally chartered custodial infrastructure or planning to operate at scale as stablecoin issuers.
The GENIUS Act: what stablecoin issuers must know
Signed July 18, 2025, the GENIUS Act is the first major federal crypto legislation enacted in the U.S. It creates a mandatory licensing framework for payment stablecoin issuers.
The core mechanics: issuers must maintain 1:1 reserve backing in cash or short-term U.S. Treasuries, publish monthly reserve disclosures, and are prohibited from paying yield or interest on payment stablecoins. Stablecoin holders receive legal protections in insolvency proceedings. State-qualified payment stablecoin issuers that are nonbank entities with a payment stablecoin with a consolidated total outstanding issuance of more than USD 10 billion face mandatory federal supervision administered by the relevant State payment stablecoin regulator and the Comptroller, acting in coordination. Smaller issuers may qualify under certified state-level regimes, provided those regimes meet GENIUS Act standards.
Unlicensed issuance of payment stablecoins becomes unlawful once the Act takes effect. The effective date is January 18, 2027, or 120 days after implementing regulations are finalized, whichever comes first. Any business planning stablecoin issuance for the U.S. market must factor this timeline into its corporate and licensing structure today.
State-level licensing: the 49-state problem
FinCEN registration covers the federal baseline. State-level compliance is a separate and operationally more complex requirement.
Money Transmitter License (MTL): the standard state requirement
Most states require a Money Transmitter License for any business that holds or transmits customer funds in connection with crypto activity. Applications are filed through the Nationwide Multistate Licensing System (NMLS). Per-state application fees range from USD 500 to USD 5,000. Surety bond and minimum capital requirements range from USD 25,000 to more than USD 500,000 per state, and the review timeline per state runs from 3 to 12 months. Montana is the only state with no MTL requirement for crypto businesses.
New York BitLicense
Any crypto business serving New York residents must hold either a BitLicense under 23 NYCRR Part 200 or a limited-purpose trust charter, both issued by the New York Department of Financial Services (NYDFS). Requirements include minimum capitalization, a cybersecurity program, AML controls, and consumer protection policies. Circle received the first BitLicense in 2015.
Many operators make the deliberate business decision to exclude New York users rather than pursue the BitLicense. That decision removes access to one of the world’s most significant retail financial markets. The trade-off requires direct assessment against the operator’s specific growth model and target user base.
California DFAL
The licensing requirement under California’s Digital Financial Assets Law (DFAL) took effect July 1, 2026. Any company conducting digital financial asset business activity for California residents must either hold a DFAL license issued by the DFPI, have submitted a completed application to the DFPI (in the case of kiosk operators wishing to continue doing business), or qualify for a statutory exemption. Applications opened via NMLS on March 9, 2026. This is the most recent hard compliance deadline in U.S. crypto licensing and applies to an exceptionally large potential user base.
Crypto-friendly states
Wyoming has no MTL requirement for crypto businesses and has authorized special-purpose depository institutions (SPDIs) specifically for crypto firms, with no state income tax. Florida and Texas both maintain defined regulatory frameworks through their respective banking departments, with lower compliance overhead than New York or California. Montana requires only FinCEN registration at the state level, making it the minimal-compliance baseline. For operators managing licensing cost and complexity, state selection is a material structuring decision.
Aaron Glauberman specializes in crypto and FinTech licensing, MiCA and PSD2 frameworks, and cross-border corporate structuring.
Aaron Glauberman
Co-Founder and Managing Partner at LegalBison

Alternatives to a crypto license in the USA
Our team has curated the following jurisdictions as being worthy alternatives to a crypto licensed company in the USA:
No offers are listed for this selection.
What license does your business model actually need in the USA?
| Business Model | Federal Requirements | State Requirements | Notes |
|---|---|---|---|
| Centralized Exchange (CEX, spot) | FinCEN MSB | MTL (49 states + DC), BitLicense (NY), DFAL (CA) | Core exchange operations |
| Crypto Payment Processor / On/Off Ramp | FinCEN MSB | MTL in operating states | Payment institution rules may also apply |
| Stablecoin Issuer | FinCEN MSB + GENIUS Act PPSI | State regime (under USD 10B) or joint State and Federal supervision (over USD 10B) | GENIUS Act effective on the earlier of 18 months after enactment or 120 days after final regulations are issued |
| Crypto Custodian | FinCEN MSB | State trust license or OCC national trust charter | OCC charter pathway active since 2025 |
| Crypto Derivatives / Futures Platform | CFTC registration (FCM, IB, or SEF) | MTL where applicable | CFTC jurisdiction over commodity derivatives |
| Security Token Platform / ATS | SEC registration (Broker-Dealer / ATS) | MTL where applicable | Howey Test governs classification |
| Crypto-Backed Lending | FinCEN MSB | State lending licenses (per state) | Multi-state matrix required |
| DeFi Protocol | Case-by-case (CFTC or SEC) | Exemptions may apply | Digital Asset Market Clarity Act pending |
The licensing process: what to expect
The full U.S. licensing process for a multi-state deployment runs 6 to 18 months. The phases below are sequential at the federal level but can run concurrently at the state level once the federal baseline is established.
Estimated time1-2 weeks
Business Formation and Structure
Estimated time2-4 weeks
FinCEN MSB Registration
Estimated time2-6 months
State MTL Applications
Estimated time3-12 months
State Regulatory Review
Estimated timeon demand
License Issuance and Ongoing Compliance
Licenses are issued on a rolling basis per state. AML program maintenance, SAR and CTR filings, license renewals, and annual compliance reviews begin immediately upon licensure.
For operators pursuing a limited-state or Montana-only launch, the federal-only timeline can be compressed to 4 to 8 weeks.
And what will you say once we make your project work?
Is the U.S. the right jurisdiction for your model?
Right Fit
The U.S. offers the world’s largest retail financial market, institutional-grade credibility, and access to deep capital markets. The compliance cost is proportionate to that access.
For some business models, particularly those targeting institutional U.S. counterparties or requiring FinCEN registration for banking relationships, the U.S. is a necessary jurisdiction from the outset. For others, especially those building for global retail reach, the EU under a VASP license or CASP license may represent a faster and lower-cost first licensing step, with the U.S. added as a second jurisdiction once operations are established. Specific business models may also benefit from a DASP license in an offshore jurisdiction as part of a layered global structure.
LegalBison assesses this question without jurisdictional bias. The right answer depends on the client’s business model, target user base, growth stage, and banking requirements. Committing to U.S. licensing without that assessment produces compliance obligations that may outpace the commercial case for the market.
Ongoing Obligations
Post-licensing compliance obligations.
Ongoing obligations for U.S.-licensed crypto businesses include AML program maintenance and independent review with a scope and frequency commensurate with the risk of the financial services provided, SAR and CTR filing cadence, Form 1099-DA broker reporting (mandatory from January 2025 for gross proceeds, with cost basis reporting from January 2026), state license renewals on varying schedules, cybersecurity program requirements, and adaptation to implementing regulations as the GENIUS Act rules are finalized.
Operators who delay structuring until those rules are published will have materially less time to adjust than those who begin now.
The U.S. offers the world’s largest retail financial market, institutional-grade credibility, and access to deep capital markets. The compliance cost is proportionate to that access.
For some business models, particularly those targeting institutional U.S. counterparties or requiring FinCEN registration for banking relationships, the U.S. is a necessary jurisdiction from the outset. For others, especially those building for global retail reach, the EU under a VASP license or CASP license may represent a faster and lower-cost first licensing step, with the U.S. added as a second jurisdiction once operations are established. Specific business models may also benefit from a DASP license in an offshore jurisdiction as part of a layered global structure.
LegalBison assesses this question without jurisdictional bias. The right answer depends on the client’s business model, target user base, growth stage, and banking requirements. Committing to U.S. licensing without that assessment produces compliance obligations that may outpace the commercial case for the market.
Post-licensing compliance obligations.
Ongoing obligations for U.S.-licensed crypto businesses include AML program maintenance and independent review with a scope and frequency commensurate with the risk of the financial services provided, SAR and CTR filing cadence, Form 1099-DA broker reporting (mandatory from January 2025 for gross proceeds, with cost basis reporting from January 2026), state license renewals on varying schedules, cybersecurity program requirements, and adaptation to implementing regulations as the GENIUS Act rules are finalized.
Operators who delay structuring until those rules are published will have materially less time to adjust than those who begin now.
Frequently Asked Questions
Start your crypto company in USA today
Request more information about the crypto license in the USA now. The first free consultation with our legal team is within 24 business hours.