Who Regulates Crypto in the US? The SEC, CFTC, Treasury and States
There is no single US crypto regulator. The SEC, the CFTC, the Treasury's FinCEN, banking agencies and state regulators each cover part of the market, and Congress has added a federal law for stablecoins. This guide maps who does what and what it means for someone buying crypto in the US.
The United States does not have one crypto regulator. Instead, several federal agencies and every state apply existing laws, written for securities, commodities, money transmission and banking, to digital assets, and Congress has begun adding crypto-specific legislation. The result is a patchwork. Knowing which agency covers which activity helps explain enforcement headlines and, more practically, what protections a buyer does and does not have.
The map at a glance
| Regulator | What it covers in crypto | What it means for a retail buyer |
|---|---|---|
| SEC | Tokens and products that are securities; crypto ETFs and other exchange-traded products; broker-dealers and advisers | Disclosure rules and anti-fraud protections where a token or product is a security |
| CFTC | Crypto futures, options and swaps; anti-fraud and anti-manipulation authority in commodity spot markets | Oversight of crypto derivatives exchanges and brokers; enforcement against fraud |
| FinCEN (Treasury) | Anti-money-laundering rules for exchanges and other money services businesses | Identity checks (KYC), transaction reporting |
| OFAC (Treasury) | Sanctions, including on specific wallet addresses | Platforms block sanctioned addresses and jurisdictions |
| IRS | Taxation of digital assets | Reporting gains, losses and income |
| Banking regulators (OCC, Fed, FDIC) | Banks' crypto custody and stablecoin activities | Whether and how your bank touches crypto |
| State regulators | Money transmitter licenses; state trust charters; New York's BitLicense | Which platforms may serve residents of your state |
The SEC and the securities question
The Securities and Exchange Commission's authority turns on whether something is a security. For crypto tokens, the key test comes from a 1946 Supreme Court case, SEC v. W.J. Howey Co. Under the Howey test, an arrangement is an "investment contract," and therefore a security, if it involves an investment of money in a common enterprise with a reasonable expectation of profits derived from the efforts of others.
Applied to crypto, the question is whether buyers of a token are relying on a development team or company to make it valuable. Courts have reached different conclusions on different tokens and even on different ways of selling the same token, such as sales to institutions versus anonymous sales on exchanges.
When a token is a security, its issuer must register the offering or qualify for an exemption, and platforms that trade it may need to register as exchanges or broker-dealers. The SEC's approach to crypto has shifted with its leadership. Earlier years brought many enforcement cases against token issuers and platforms; more recently the agency set up a Crypto Task Force to develop clearer rules and closed several earlier cases. Because policy has moved quickly, the SEC's own website is the place to check current statements and guidance.
The SEC also approves the listing of exchange-traded products that hold crypto, including the spot bitcoin and ether products that began trading in 2024.
The CFTC and crypto as a commodity
The Commodity Futures Trading Commission regulates futures, options and swaps on commodities, and it has treated bitcoin and ether as commodities. Regulated crypto futures trade on CFTC-registered exchanges, including CME Group, and brokers offering them must be registered.
In the spot market, buying and selling the coins themselves, the CFTC's power is narrower: it can pursue fraud and manipulation but does not license spot crypto exchanges in the way the SEC registers stock exchanges. That gap is a central reason Congress has debated market-structure legislation that would give the CFTC broader authority over spot markets in tokens that are not securities and define where the SEC's jurisdiction ends. The status of such bills is best checked on congress.gov.
Treasury: anti-money-laundering and sanctions
Under the Bank Secrecy Act, businesses that exchange or transmit convertible virtual currency are generally money services businesses and must register with the Financial Crimes Enforcement Network (FinCEN). That brings requirements to verify customer identities, monitor transactions and file suspicious activity reports. It is why US platforms ask for a Social Security number and photo ID.
The Office of Foreign Assets Control (OFAC) administers sanctions and has added specific crypto wallet addresses and services to its sanctions list. US persons are generally prohibited from transacting with them.
Stablecoins: a federal framework
Stablecoins are tokens designed to hold a steady value, usually one US dollar, backed by reserves such as cash and short-term Treasury bills. In July 2025 Congress passed, and the President signed, the GENIUS Act, the first federal statute specifically for payment stablecoins. In broad terms it sets requirements for who may issue them, how reserves must be held and disclosed, and how issuers are supervised at the federal or state level. Implementing rules are written by the regulators, so details continue to develop.
State regulation
States regulate money transmission, and most require crypto exchanges and payment firms serving their residents to hold a money transmitter license or an equivalent. That is why some platforms or features are unavailable in certain states.
New York is the best-known example. Its Department of Financial Services (NYDFS) created the BitLicense in 2015, and firms that conduct virtual currency business involving New York or New York residents must hold one or operate under a New York limited purpose trust charter. NYDFS also has to approve the coins those firms list for New Yorkers.
Some states have also chartered specialized institutions for digital asset custody, and state securities regulators and attorneys general pursue crypto fraud under state law.
What this means for buyers
The practical upshot of the patchwork:
- Check registrations. Before using a platform, search FinCEN's MSB registry, your state regulator's list of licensees or NMLS Consumer Access, and, in New York, the NYDFS list.
- Know what is not protected. Crypto on an exchange is not covered by FDIC insurance or, generally, by SIPC. If a platform collapses, customers may wait in bankruptcy court.
- Read the custody terms. Some platforms hold customer assets in segregated accounts, others commingle them, and the user agreement says which.
- Expect identity checks and tax reporting. These follow from federal rules and are a sign of a regulated platform, not an obstacle.
- Treat "guaranteed yield" offers with caution. Several lending and yield programs have drawn enforcement action or failed outright.
- Report fraud. The SEC, CFTC, FBI's Internet Crime Complaint Center (IC3) and state attorneys general all accept crypto fraud complaints.
Watching for change
US crypto policy is still being written, through legislation, agency rulemaking and court decisions. Rather than relying on headlines, the most reliable sources are the agencies themselves: SEC and CFTC press releases, Treasury and FinCEN guidance, your state regulator's website, and the text of enacted laws on congress.gov.
This article explains the US regulatory landscape for crypto in general terms and is not legal or investment advice. Rules are changing; confirm current requirements with the relevant regulator or a licensed professional.
Frequently asked questions
Is crypto a security or a commodity in the US?
It depends on the asset and how it is sold. The SEC applies the Howey test to decide whether a token offering is an investment contract, while the CFTC has treated bitcoin and ether as commodities for purposes of its futures and anti-fraud authority. Some tokens have been the subject of disputes, and Congress has debated legislation to draw the line more clearly.
How can I check whether a US crypto platform is licensed?
State regulators publish lists of licensed money transmitters, and the Nationwide Multistate Licensing System's NMLS Consumer Access site lets you search a company's state licenses. New York's Department of Financial Services lists firms holding a BitLicense or a limited purpose trust charter, and FinCEN offers a search of registered money services businesses.
Are crypto accounts protected like bank or brokerage accounts?
Generally not. Crypto held on a trading platform is not FDIC-insured, and SIPC protection covers securities and cash at member broker-dealers, not crypto assets that are not securities. If a platform fails, customers may become creditors in a bankruptcy, which is why custody arrangements matter.
