How Crypto Is Regulated in the US: SEC, CFTC, Treasury, States

United States cryptocurrency regulation relies on a fragmented framework where multiple federal and state agencies assert jurisdiction based on an asset's economic reality. The Securities and Exchange Commission oversees assets deemed securities, the Commodity Futures Trading Commission regulates commodity derivatives, the Treasury Department monitors illicit finance, and individual states govern money transmission. The result is a regulatory system that resembles a patchwork quilt, assuming the quilt was stitched together by several different agencies who refuse to share their patterns.

The Securities and Exchange Commission (SEC)

The SEC is the primary regulator for US securities markets, operating under the Securities Act of 1933 and the Securities Exchange Act of 1934. Its mandate is to protect investors, maintain fair and efficient markets, and facilitate capital formation. In the digital asset space, the SEC asserts jurisdiction over any token or transaction that qualifies as an investment contract.

To determine what constitutes an investment contract, the agency relies on the Howey Test, derived from a 1946 Supreme Court case. The test has four prongs: an investment of money, in a common enterprise, with the expectation of profit, derived from the efforts of others. If a crypto asset transaction meets these criteria, the SEC classifies it as a security.

The SEC maintains that the vast majority of digital assets, excluding $BTC, are securities. When a token is classified as a security, the entity issuing it must register the offering with the SEC or qualify for an exemption. Furthermore, platforms that facilitate the trading of these assets must register as national securities exchanges, broker-dealers, and clearing agencies.

The agency enforces its jurisdiction primarily through litigation, bringing enforcement actions against token issuers and trading platforms for failing to register. The SEC argues that the underlying technology of a digital asset does not exempt it from decades-old securities laws. However, the classification of an asset can theoretically evolve. For further context on how the agency views the lifecycle of a token, see SEC Clarifies When Crypto Assets Exit Investment Contracts.

The Commodity Futures Trading Commission (CFTC)

The CFTC regulates the US derivatives markets, including futures, options, and swaps, under the Commodity Exchange Act. The agency's primary goal is to foster open, transparent, and financially sound markets while protecting market participants from fraud and manipulation.

The CFTC classifies Bitcoin and several other digital assets as a Commodity. This classification gives the CFTC exclusive jurisdiction over crypto derivatives markets. Any exchange offering crypto futures or swaps to US persons must register with the CFTC as a Designated Contract Market or a Swap Execution Facility.

However, the CFTC's authority over spot markets—where actual tokens are bought and sold for immediate delivery—is limited. In spot markets, the CFTC does not have comprehensive regulatory authority to mandate registration or set market structure rules. Instead, it only possesses anti-fraud and anti-manipulation enforcement authority. This means the CFTC can sue bad actors for manipulating spot commodity prices after the fact, but it cannot proactively regulate the spot exchanges themselves.

This jurisdictional divide creates a regulatory gap. While the derivatives market is heavily regulated by the CFTC, the spot market for crypto commodities lacks a primary federal market regulator. For a deeper dive into how these different market segments operate, see Crypto Market Structure: Spot, Perps, Options and Who Trades Them.

The Treasury Department: FinCEN, OFAC, and the IRS

The US Department of the Treasury oversees the financial system's integrity, focusing on anti-money laundering (AML), combating the financing of terrorism (CFT), sanctions enforcement, and tax collection. Three distinct bureaus within the Treasury handle different aspects of crypto regulation.

The Financial Crimes Enforcement Network (FinCEN) administers the Bank Secrecy Act. FinCEN classifies most cryptocurrency exchanges and custodial wallet providers as a Money Services Business (MSB). An MSB must register with FinCEN, implement a comprehensive AML program, verify customer identities (KYC), and report suspicious activities. FinCEN also enforces the "Travel Rule," which requires financial institutions to pass on certain customer information to the next financial institution when transferring funds above a specific threshold.

The Office of Foreign Assets Control (OFAC) administers and enforces economic and trade sanctions. OFAC applies strict liability to sanctions violations, meaning intent is not required to be found guilty. The agency frequently adds cryptocurrency addresses associated with sanctioned individuals, state-sponsored hacking groups, or non-compliant mixing services to its Specially Designated Nationals (SDN) list. US persons and businesses are prohibited from transacting with these addresses.

The Internal Revenue Service (IRS) handles the taxation of digital assets. The IRS treats cryptocurrency as property rather than currency for tax purposes. This means general tax principles applicable to property transactions apply to transactions using digital assets.

Assume a US taxpayer purchases 1 BTC for $40,000. Later, the taxpayer uses that specific asset to purchase a vehicle priced at $60,000. Under IRS rules treating digital assets as property, this transaction is not a simple currency exchange. The taxpayer must report a $20,000 capital gain, subject to applicable capital gains tax rates depending on the holding period. Specific tax obligations, reporting thresholds, and tax rates change over time based on legislative updates and individual circumstances.

State-Level Regulation and Licensing

In addition to federal oversight, cryptocurrency businesses operating in the US must navigate a complex web of state-level regulations. The US operates under a dual banking system, meaning financial institutions can be chartered at either the federal or state level.

For crypto businesses that do not have a federal bank charter, state money transmitter laws apply. A company facilitating the transfer of digital assets must typically obtain a money transmitter license (MTL) in every individual state where it has customers. Each state has its own application process, capital requirements, and compliance audits.

Some states have created specific regulatory frameworks for digital assets. The most prominent example is the New York Department of Financial Services (NYDFS), which created the BitLicense in 2015. Any entity engaging in virtual currency business activity involving New York residents must obtain a BitLicense, which imposes stringent requirements regarding capitalization, cybersecurity, and AML compliance. State licensing fees, capital requirements, and specific compliance mandates change over time as state legislatures update their financial codes.

Market Structure Legislation

The fragmented nature of US crypto regulation has led to calls for comprehensive federal market structure legislation. Lawmakers have introduced various bills aimed at clarifying the boundary between the SEC and the CFTC, and establishing a unified federal framework for digital asset spot markets.

These legislative efforts generally attempt to define exactly when a digital asset transitions from a security (often during its initial fundraising phase) to a commodity (once the network becomes sufficiently decentralized). They also aim to create registration pathways for crypto-native exchanges to operate legally under joint SEC and CFTC oversight.

Until such legislation passes both chambers of Congress and is signed into law, the US relies on regulation by enforcement, where agency boundaries are tested and defined through federal court rulings. The exact boundary between SEC and CFTC jurisdiction remains subject to these ongoing court rulings and potential congressional legislation, which change over time. This approach contrasts sharply with other jurisdictions that have passed bespoke frameworks. For a comparison of how other regions handle this, see MiCA, Explained: The EU's Crypto Rulebook.

Common Misconceptions

Crypto is unregulated in the US. Digital assets are heavily regulated in the United States. The challenge is not a lack of regulation, but rather overlapping and sometimes conflicting regulations enforced by multiple agencies. Exchanges must comply with FinCEN for AML, OFAC for sanctions, state regulators for licensing, and navigate the SEC and CFTC for asset listings.

An asset is permanently a security or a commodity. Under US law, the classification often applies to the circumstances of the transaction rather than the underlying code of the asset itself. An asset sold as an investment contract to early investors might later be traded as a commodity if the network becomes decentralized and the asset is sold on secondary markets without promises of future development by a centralized team.

Offshore exchanges are exempt from US laws. Federal agencies routinely assert jurisdiction over foreign entities if they serve US customers or utilize US financial infrastructure. The CFTC and SEC have brought numerous enforcement actions against offshore platforms for failing to block US persons from accessing unregistered derivatives or securities.

How This Connects to the Market

Regulatory clarity directly impacts market liquidity and institutional participation. When federal agencies bring enforcement actions against major exchanges or specific tokens, market makers often withdraw liquidity, and platforms delist assets to avoid compliance risks. This can lead to sudden price volatility and fragmented liquidity across different jurisdictions.

Conversely, clear regulatory pathways enable traditional financial institutions to enter the market. The approval of spot exchange-traded products, for example, required extensive regulatory engagement but ultimately allowed registered investment advisors and institutional funds to allocate capital to digital assets through traditional brokerage accounts. The ongoing development of US market structure legislation will dictate the long-term compliance costs for crypto businesses and determine whether trading volume remains onshore or migrates to regions with bespoke regulatory frameworks.