Centralized exchange in United States
Order-book exchange that takes custody of user assets and matches trades between users.
CEX is conditionally permitted in United States with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- MSB registration with FinCEN (Form 107) under the Bank Secrecy Act — immediate requirement
- State Money Transmitter Licenses in 49 states + DC (Montana exempt) — 18–36 months for full coverage, $2M–$10M+ in bonds/fees
- NY BitLicense required for New York customers — 12–24+ months, $2M+ capital minimum
- California DFAL license (effective July 1, 2026) with penalties up to $100k/day for non-compliance
- Travel Rule compliance — collect and share originator/beneficiary information on CVC transfers ≥ $3,000 (domestic); CTR filing at $10,000
- SAR filing for suspicious transactions
- OFAC sanctions screening on all transactions and counterparties
- IRS reporting — taxation of virtual currency as property
- If trading securities (token classification under Howey Test): SEC broker-dealer and/or ATS registration required
- If offering derivatives: CFTC registration as FCM or SD required
Key Restrictions
- Must determine per-token securities/commodities classification under SEC (Howey Test) vs CFTC — mixed status creates legal risk for multi-token exchange
- Custody of securities-classified assets requires compliance with SEC custody rules and either a trust charter or OCC national bank charter
- State-by-state licensing patchwork — cannot operate in a state without that state's MTL or equivalent license
- No single federal license covers all activities; exchange must hold multiple layered licenses (FinCEN MSB + state MTLs + potentially SEC and/or CFTC registration)
- NY BitLicense creates a separate, heavy application process for New York customers
- California DFAL imposes additional state-level licensing with stringent penalties from July 2026
Key Risks
- Token classification ambiguity — SEC and CFTC have overlapping jurisdiction; assets may be reclassified, triggering retroactive registration requirements
- High enforcement volume — U.S. is the most active jurisdiction for both criminal and civil crypto enforcement (SEC, CFTC, DOJ, FinCEN)
- State-level enforcement risk — e.g., New Jersey uses automated tools to identify crypto income mismatches and lost $435M to crypto scams in 2024
- DOJ criminal enforcement exposure for money laundering, fraud, and sanctions evasion
- Pending legislation (FIT21) could restructure jurisdictional lines between SEC and CFTC, creating regulatory uncertainty
- Customer asset segregation rules are complex and depend on whether assets are classified as securities or commodities — no uniform federal standard
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
SEC — Securities, token classification (Howey Test), broker-dealer/ATS registration
CFTC — Commodities (BTC/ETH classified as commodities), derivatives, anti-fraud in spot markets
FinCEN — AML/BSA, MSB registration, Travel Rule enforcement
OFAC — Sanctions compliance for virtual currency transactions
DOJ — Criminal enforcement — money laundering, fraud, sanctions evasion
Bank Secrecy Act (1970) — AML/CFT, MSB registration and reporting obligations
Securities Act of 1933 / Securities Exchange Act of 1934 (1933) — Securities registration, broker-dealer/exchange/ATS requirements
New York BitLicense (23 NYCRR Part 200) (2015) — NY-specific virtual currency business licensing
California DFAL (2025) — Digital Financial Assets Law — state crypto licensing
VASP: FinCEN MSB registration (immediate, Form 107) + state Money Transmitter Licenses in 49 states + DC (18-36 months for full coverage, $2M-$10M+ in bonds/fees). Montana is sole exemption.
CUSTODY: Trust charter (state-level) or OCC national bank charter; SEC custody rules apply if holding securities. OCC interpretive letters permit national banks to provide crypto custody.
EXCHANGE: MSB (FinCEN) + state MTLs + SEC broker-dealer/ATS registration if trading securities + CFTC registration (FCM/SD) if offering derivatives. NY BitLicense required for NY customers (12-24+ months, $2M+ capital).
Financial Crimes Enforcement Network (FinCEN): Enforces AML/CFT under the Bank Secrecy Act (BSA), treating crypto firms as money services businesses since 2013 guidance.
Securities and Exchange Commission (SEC): Oversees digital assets deemed securities, including issuance and resale; issued a March 17, 2026, interpretation clarifying federal securities laws' application to crypto assets and transactions, stating most crypto assets are not securities.
Commodity Futures Trading Commission (CFTC): Regulates commodities and derivatives; joined the SEC's 2026 interpretation and signed a March 11, 2026, Memorandum of Understanding (MOU) with SEC for coordinated oversight, including "innovation exemptions" for DeFi and spot trading.
State regulators: Examples include California's DFPI (Digital Financial Assets Law effective July 1, 2026, requiring licenses with $100k/day penalties); New Jersey Department of Banking and Insurance; New York's NYDFS (BitLicense regime); Connecticut (money transmitter laws).
Travel Rule adopted — threshold: $3,000 (domestic); $10,000 for CTR filing
Adopted and Effective Date: Adopted via FinCEN's 2019 clarification that BSA AML/CFT requirements, including the Travel Rule, extend to CVC transactions. The underlying Funds Travel Rule originated in 1996 (effective May 28, 1996) for fiat but was applied to virtual assets in 2019.
Threshold Amounts: $3,000 for CVC transfers; information on originator and beneficiary must be collected and shared above this amount.
Covered VASPs: All VASPs and MSBs acting on behalf of clients, including crypto exchanges, custodial wallets/wallet providers, crypto ATMs, trading platforms, and any U.S.-based money transmitters handling CVC under BSA.
Technical Implementation Requirements: VASPs/MSBs must collect and transmit details of the originator (sender) and beneficiary (recipient), such as names, addresses, and wallet addresses or transaction IDs. This mirrors wire transfer standards, with requirements to verify transactions do not involve sanctioned entities. Firms must update AML/CFT programs, enhance KYC/CDD, and integrate Travel Rule processes; FinCEN aligns with evolving FATF guidance (e.g., 2025 revisions on beneficiary info and payment chain responsibilities).
FinCEN 2019 Guidance on CVC: Clarifies Travel Rule application to VASPs/MSBs (no direct URL in results; see FinCEN site).
BSA Funds Travel Rule (31 CFR 1010.410(f)): Basis for requirements, effective for CVC since 2019.
Federal authorities filed a civil forfeiture complaint to reclaim $225.3 million in stolen digital funds in June 2025, according to the U.S. Department of Justice
The New Jersey Division of Taxation uses automated tools to identify mismatches between reported cryptocurrency income and federal 1099 forms
New Jersey residents lost $435 million to cryptocurrency scams in 2024, ranking the state sixth among all states for total crypto fraud losses
CFTC fined a New York-based crypto trading firm $250,000 for violating speculative position limits on Bitcoin futures contracts. The CFTC order, entered on May 29, 2024, alleged that BlockTrade Capital LLC failed to register as a commodity pool operator (CPO) and exceeded position limits on CME Bitcoin futures between January and March 2024. The firm agreed to pay the fine and cease violations. CFTC Press Release 8731-24
CFTC issued a cease and desist order against CryptoPulse Advisors, a decentralized finance (DeFi) platform, for offering leveraged retail commodity transactions in digital assets without registration. The order, published May 28, 2024, required immediate cessation of unregistered trading services and payment of a $75,000 civil monetary penalty. CFTC Press Release 8730-24
The international actions (FCA, ESMA) highlight that regulatory harmonization (e.g., MiCAR in the EU) is prompting parallel enforcement, but the U.S. remains the most active jurisdiction for both criminal and civil crypto enforcement actions by total volume. Reuters, May 29, 2024
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a centralized exchange may operate in the US only by obtaining FinCEN MSB registration, state Money Transmitter Licenses in 49+ states, a NY BitLicense (if serving NY customers), California DFAL license (from July 2026), and potentially SEC broker-dealer/ATS and/or CFTC registrations depending on token classification, with onerous AML/KYC/Travel Rule obligations and multi-year, multi-million-dollar licensing costs.
Questions this verdict aims to answer
- What exchange / VASP license applies?
- What custody segregation rules apply to user assets?
- What market-conduct and listing rules apply?
- What travel-rule obligations apply on withdrawals?