US Crypto 101

The US has no single crypto regulator

If you come from the EU and expect a 'US MiCA', stop looking — there isn't one. US crypto oversight is split across at least five federal bodies and 50+ state regulators. Each has a piece of the puzzle, and none has full authority. Understanding which agency cares about what is the first step to operating legally.

SEC vs CFTC — the security question

Federal crypto law starts with one question: is this token a security, a commodity, or something else? The Howey Test (1946 Supreme Court) answers the security question, and it's the most important four-prong test in crypto:

1. Investment of money — does the buyer give up cash or other value?
2. In a common enterprise — is the buyer joining a pool of investors?
3. With an expectation of profit — does the buyer reasonably expect returns?
4. Solely from the efforts of others — does someone else run the show and generate the value?

All four must be met. Fail any one and it is not a security. This is why SEC v. Ripple (July 2023) ruled that XRP secondary-market sales are not securities — the prong 'solely from the efforts of others' fails in secondary trading.

If SEC: it is a security

You must register the offering (public filing) or qualify for an exemption — Reg D (private placement), Reg S (offshore), Reg A+ (mini-IPO). Trading platforms that list securities need SEC broker-dealer + ATS (Alternative Trading System) licences. Penalties for unregistered issuance: disgorgement, fines, cease-and-desist.

If CFTC: it is a commodity

Bitcoin is a commodity under Commodity Exchange Act. Ether has been confirmed as a commodity for derivatives purposes. Commodities face lighter rules for spot trading — mostly anti-fraud and anti-manipulation. Derivatives (futures, swaps, options) need CFTC-registered exchanges.

The 2025 CLARITY Act

The Digital Asset Market Clarity Act of 2025 is the closest thing the US has to a comprehensive crypto law. It doesn't replace SEC/CFTC — it routes tokens to one or the other based on a new test: the 'mature blockchain' test.

Mature blockchain

A blockchain is 'mature' if the underlying network is sufficiently decentralized, no single person or controlled group can materially alter the operation, and all token holders have equal access. Mature-blockchain tokens are digital commodities under CFTC. Non-mature tokens remain securities under SEC.

Practical consequences:

• Bitcoin, Ether — mature → CFTC commodities
• XRP — courts already treated secondary-market sales as non-securities in 2023. CLARITY reinforces this by routing XRP to CFTC for spot.
• Newly launched tokens — typically not mature yet → SEC securities until the network decentralizes.
• Sunset clause — a token can transition from SEC to CFTC oversight as the network matures.

FinCEN and the BSA — the AML baseline

Under the Bank Secrecy Act (BSA), any Money Services Business (MSB) must register with FinCEN, implement an AML programme, screen against OFAC sanctions, and file Suspicious Activity Reports (SARs). For crypto, MSB status is triggered by:

• Accepting and transmitting currency, including crypto — most exchanges, custody providers, most payment apps
• Converting between crypto and fiat, or crypto to crypto, for customers
• Hosting wallet services where you hold the keys

Non-custodial wallet providers, miners, and most smart-contract-based DeFi protocols are not MSBs (FinCEN guidance 2013, 2019).

What MSB status requires

• FinCEN registration (free) within 180 days of starting business
• Written AML programme with designated compliance officer
• Customer Identification Programme (CIP) — KYC
• OFAC sanctions screening (SDN list, sectoral sanctions)
• Travel Rule — share sender + receiver info for transfers ≥ $3K
• SAR filing within 30 days of detecting suspicious activity

The state MTL patchwork

48 out of 50 states require a Money Transmitter Licence for anyone transmitting money (including crypto) on behalf of users. Each state has its own application, fees, surety bond, and compliance requirements. Getting MTLs in all 48 states typically costs $500K to $2M and takes 2 to 4 years.

The highest bar: New York BitLicense

NY DFS introduced the BitLicense in 2015. It is the strictest US state regime and — because NY is the largest financial market — sets the de facto standard. Getting a BitLicense costs $100K+ in application fees and 12+ months. Once granted, you're held to capital, cybersecurity, custody, and reporting standards stricter than most EU regimes. Alternatively, you can apply for a NYDFS Trust Charter (Anchorage model) — heavier upfront but gives you full bank-like powers.

Strategies for the MTL patchwork

• Hire a licensed partner — route transactions through a company that already holds MTLs. Gives up some margin but avoids the 2-year licensing grind.
• Phased rollout — launch in a few states with the biggest markets (CA, NY, TX, FL) first, roll out geographically.
• Skip the US initially — many serious crypto startups address the US market only after establishing EU/APAC presence. MTL burden is the reason.
• Federal charter (OCC Trust) — Anchorage's model. Replaces state MTLs with a single OCC national trust bank charter. Takes 18-24 months and $5M+ but is the cleanest path.

A practical 2026 playbook

For a crypto startup targeting US users in 2026:

1. Step 1 — Token classification. Run the Howey Test yourself + get a lawyer's opinion. Decide: security, commodity, or non-financial utility. This decision shapes everything downstream.
2. Step 2 — Map activities to agencies. For each activity (issuance, trading, custody, payment), identify which federal regulator cares + what state MTL requirements apply.
3. Step 3 — Pick federal charter OR state MTL. If you plan full US coverage and can afford 18-24 months: OCC Trust (clean). If you can phase: MTLs in top 10 states + FinCEN MSB first.
4. Step 4 — Handle NY separately. BitLicense or Trust charter — plan 12-18 months. Do this early; a late NY launch means rebuilding your compliance stack.
5. Step 5 — Build the compliance team. FinCEN requires a designated compliance officer; NYDFS requires a qualified Chief Compliance Officer. Expect $300K+/year for a senior hire with prior crypto MSB experience.