Is crypto legal in the US? Yes, and here is the structure

Whether crypto is legal in America stopped being a real question years ago; what remains real is the structure underneath the yes. The United States never banned digital assets, never restricted ownership, and has spent the last three years building the opposite of prohibition: licensed access channels at every layer of the financial system. What the law regulates is activity, moving other people’s money, operating markets, issuing dollar-pegged tokens, and the practical legal map is a map of those licenses, the states that add their own, and the specific conduct that remains genuinely illegal for anyone.

What is legal without question

Individual ownership and use sit outside any licensing regime: buying, holding, selling, gifting, and spending digital assets is lawful in all fifty states, and self-custody, holding your own keys in your own wallet, requires no permission anywhere. Every disposal is a taxable event, our IRS guide covers the mechanics, but taxation is the opposite of prohibition; it is the state treating the asset as ordinary property. Mainstream regulated access has expanded around ownership: spot Bitcoin and Ethereum ETFs, and the newer single-asset products covering XRP, Solana, and others, trade on national securities exchanges inside ordinary brokerage accounts; CME lists regulated futures; chartered banks custody digital assets and stablecoin reserves; and payment stablecoins now operate under the federal GENIUS Act’s issuer framework, the first comprehensive crypto statute, covered on our main regulation page.

What requires a license

The regulated perimeter wraps around anyone handling other people’s assets. Federally, exchanges, custodial wallets, and payment processors are money services businesses under the Bank Secrecy Act: FinCEN registration, anti-money-laundering programs, suspicious-activity reporting, and sanctions screening. On top of that sits state money-transmitter licensing in most jurisdictions, and in New York, the BitLicense, the strictest single regime in the country, which shapes which platforms serve New Yorkers at all. Securities and commodities activity adds the market regulators: platforms listing assets that are securities answer to the SEC, derivatives venues to the CFTC, with the current classification of 16 major assets as digital commodities, and the pending CLARITY Act’s potential codification of it, detailed on our main page and SEC page. Stablecoin issuance now requires qualification under GENIUS. The practical consequence for users: the legality question about any platform is really a licensing question, and licensed status is checkable, FinCEN registration is public, state licenses are published, and the absence of both is the reddest flag in the industry.

The state map, honestly summarized

Federal law sets the floor; states decide the texture, and the spread matters. New York requires the BitLicense for virtually all crypto business activity touching its residents, a bar high enough that some major platforms simply exclude the state. California, Illinois, and a cohort of large states run substantial money-transmitter regimes with crypto-specific provisions arriving. The friendly cohort competes in the other direction: Wyoming built special-purpose depository institutions and the country’s most crypto-native legal framework; Texas pairs permissive mining policy with an active grid-integration story; Florida, Colorado, and Ohio court the industry through tax and procurement gestures. Two live dynamics are reshaping the map: the pending CLARITY Act would federally preempt conflicting state regimes for covered assets and intermediaries, narrowing the patchwork’s reach, and the prediction-market fight, a dozen-plus state gaming regulators contesting CFTC-licensed event contracts, is stress-testing the federal-state boundary in real time, our coverage of that war and its stakes is the deepest on the subject. Both dynamics will be updated here as they resolve.

What is actually illegal

The genuine prohibitions are conduct-based and worth stating plainly, because they are where real people acquire real liability. Operating an unlicensed money transmission business is a federal crime regardless of the asset moved. Fraud is fraud in every costume: rug pulls, fake tokens, market manipulation, and Ponzi structures are prosecuted under the same statutes as their fiat ancestors, and our crime coverage documents the enforcement steadily. Sanctions violations, transacting with OFAC-designated addresses or jurisdictions, carry strict liability that reaches individuals. Tax evasion, as distinct from taxation, is criminal, and the new broker-reporting regime makes it mechanically harder. And the contested categories deserve honest labels rather than false certainty: sports event contracts sit in live federal-state litigation, privacy tools’ legal status has shifted with recent developer-shield debates, and anyone operating near those edges is operating in moving law.

The two-layer structure

Almost every confusion about American crypto legality resolves once the two-layer structure is clear, because the same activity can be lawful federally and unlawful in a particular state, or licensed in forty states and prohibited in one.

The federal layer sets baseline requirements applying nationwide. Anti-money-laundering obligations under the Bank Secrecy Act, administered by FinCEN and covered on our FinCEN page, attach to any business accepting and transmitting value for others. Securities law reaches offerings and platforms handling assets that are securities, and commodities law reaches derivatives and the venues trading them, allocated between the two market regulators as our SEC and CFTC pages describe. Banking law governs institutions holding assets, with the chartering route covered on our OCC page. Tax law applies to everyone.

The state layer adds licensing, consumer protection, and in some cases activity restrictions. Most states require money transmitter licensing for businesses moving customer value, with their own applications, surety bonds, net worth minimums, examinations, and reporting. Some states add crypto-specific regimes. Some prohibit particular activities outright.

The layers are cumulative, not alternative. A platform holding federal registration and lacking a required state license is not partly compliant; it is unlicensed in that state, and unlicensed money transmission is a crime in most of them as well as federally. This is why platform availability differs state by state in ways that look arbitrary from the outside and are entirely explicable from the inside.

Preemption, the doctrine under which federal law displaces state law, is the mechanism that could simplify this, and it is the live question in several current disputes. Federal registration does not automatically preempt state licensing; Congress must have intended to occupy the field or the two must genuinely conflict. That question is being litigated right now over event contracts, where a federally licensed exchange argues its registration displaces state gaming law, and it is the subject of pending legislation that would preempt conflicting state regimes for covered assets and intermediaries.

The licensing map

For a business, the practical question is not whether crypto is legal but which licenses the specific activity requires. The map below covers the main categories.

Money services business registration. Required federally of any business accepting and transmitting value for others, including custodial exchanges, hosted wallet providers, payment processors, and crypto kiosk operators. It is a filing and not an approval, renewed biennially, and it carries the anti-money-laundering program, travel rule, reporting, and sanctions obligations detailed on our FinCEN page.

State money transmitter licensing. Required in most states for the same activities, and this is an approval process measured in months per state. New York’s regime, requiring its own dedicated license for virtually any crypto business activity touching state residents, is the strictest, and several major platforms have historically excluded New York instead of obtaining it.

Trust charters. State trust company charters and, since December 2025, federal national trust bank charters permit custody and fiduciary activity, with the federal route replacing state-by-state licensing for qualifying institutions. Our OCC page covers the wave of crypto firms taking that route.

Market registrations. Platforms listing assets that are securities require securities registrations; derivatives venues require designation as contract markets with associated clearing and intermediary registrations, explained in our DCM guide. Firms handling both face both.

Stablecoin issuance. The federal stablecoin statute created an issuer framework with federal and qualifying state paths, meaning payment stablecoin issuance is now a licensed activity, no longer an unregulated one.

The user-facing consequence is simple and worth internalizing: the legality question about any platform is a licensing question, and licensing status is checkable. Federal registration is public, state licenses are published by state regulators, and a platform holding neither while serving American customers is operating outside the perimeter regardless of how its interface looks.

The state cohorts

The fifty-state picture organizes into three groups, and knowing which group a state belongs to predicts most of what matters.

The strict cohort. New York leads by a distance, requiring its dedicated license for crypto business activity, applying substantial capital and compliance requirements, and maintaining an approved-token list that determines what licensed platforms may offer state residents. California, Illinois, and several other large states operate substantial money transmitter regimes with crypto-specific provisions arriving through recent legislation. The practical effect is fewer available platforms and slower product launches for residents.

The mainstream majority. Most states apply their existing money transmitter framework to crypto businesses without a bespoke regime, producing workable if unexciting outcomes: national platforms hold the license, serve residents, and comply with ordinary examination cycles.

The friendly cohort. Wyoming built the country’s most crypto-native legal framework, including special purpose depository institutions designed specifically for digital asset businesses and statutory provisions addressing digital asset property rights. Texas pairs permissive mining policy with genuine grid integration, and its regulators have generally treated mining as an industrial activity, not a suspect one. Florida, Colorado, Ohio, and others have courted the industry through tax treatment, state payment acceptance, and procurement gestures of varying substance.

Two dynamics are reshaping this map. Pending federal legislation would preempt conflicting state regimes for covered assets and intermediaries, narrowing the patchwork without eliminating it. And the prediction-market conflict, in which state gaming regulators across more than a dozen jurisdictions contest federally licensed event contracts, is testing the federal-state boundary directly, with parallel litigation brought under tribal gaming law adding a third sovereign to the dispute. Both dynamics will be updated here as they resolve.

The contested edges, honestly labeled

Four areas deserve honest labels instead of false certainty, because they are where the law is genuinely moving.

Sports event contracts. Federally licensed exchanges list them; more than a dozen state gaming regulators say they are wagers requiring state licensing; litigation is pending in multiple federal circuits; a bipartisan bill in Congress would ban them on regulated exchanges outright. Availability varies by state and changes month to month, and anyone participating should verify current status in their own jurisdiction.

Privacy tools. The status of mixing services and privacy-preserving software has shifted through sanctions designations, litigation, and prosecutions of developers, with the direction of federal policy currently favoring the position that non-custodial software is not itself a financial intermediary. That position rests on guidance and policy, not settled statute, and pending legislation would codify a version of it.

Staking and lending services. Offering staking or yield products to retail customers has moved from an active enforcement target to a substantially settled area following the classification of staking outside securities treatment, but the treatment of custodial yield products offering fixed returns remains fact-specific, and the 2022-era lending collapses produced litigation that is still working through courts.

Non-US platforms. Using an offshore exchange is not illegal for an individual, but sanctions exposure is strict-liability and platform failure provides no US regulatory recourse. Tax obligations apply regardless of where the platform operates, and the on-ramp and off-ramp reporting now reaching the IRS frequently documents the on and off without any knowledge of what happened in between.

What users should actually check

Five practical checks, in the order they prevent problems.

Platform licensing. Confirm federal registration and any required state license before depositing. Both are publicly verifiable, and a platform serving Americans without them is offering you no recourse.

State availability. Product availability differs by state for reasons that are legal and not commercial. If a feature is unavailable to you, the reason is usually a licensing or litigation status, and using a workaround forfeits protections and may create exposure.

Custody arrangement. Whether you hold your own keys or the platform holds them determines what happens in a failure, and the legal protections differ completely between the two.

Tax posture. Every disposal is a taxable event and broker reporting is now live, as our tax page covers in detail. Records captured at transaction time are cheap; reconstructions years later are not.

Sanctions hygiene. Sanctions liability is strict, meaning intent is not a defense, and it reaches individuals. Transacting with designated addresses is the one category of ordinary user activity carrying that exposure.

What changes if the pending bill passes

The market-structure legislation before the Senate would alter this page’s answers in specific, identifiable ways, and separating what changes immediately from what waits on rulemaking is the difference between a useful expectation and a disappointed one.

Immediate on enactment. Tokens that anchored exchange-traded products at the start of 2026 become non-securities by statute, ending classification ambiguity for that class without any agency action. Non-custodial software developers exit money transmitter treatment under federal anti-money-laundering law by definitional exclusion. And federal jurisdiction preempts conflicting state regimes for covered assets and intermediaries, which narrows the licensing patchwork described above for activity inside the framework.

Waiting on rules. Registration regimes for digital commodity exchanges, brokers, dealers, and custodians exist as statutory categories until agencies write forms, capital requirements, custody standards, and examination programs. The certification process by which a network claims maturity, and therefore the path by which newer assets reach settled status, likewise waits. Our implementation guide maps that split in full, and the base rate is discouraging: the stablecoin statute’s agencies missed the law’s own one-year rulemaking deadline.

Unchanged either way. Tax treatment, which is separate statute and IRS administration. Sanctions obligations. Fraud liability. State consumer protection law outside the preempted scope. And the contested edges above, which the bill largely does not address, most notably the sports event contract fight running on entirely separate statutes.

This section will be updated when the Senate acts.

How the perimeter got here

A short history clarifies why the structure looks the way it does, because none of it was designed as a coherent system.

There was never a decision to regulate crypto. There was a sequence of decisions to apply existing frameworks to it, each made by a different agency at a different time for a different reason. Anti-money-laundering coverage came first, with guidance in 2013 applying money transmitter rules to virtual currency businesses, which is why that layer is the oldest and least contested. Commodities jurisdiction followed from a determination that Bitcoin is a commodity, which pulled derivatives under the CFTC. Securities enforcement built through the initial coin offering era, when the investment contract test was applied to token sales at scale, and then extended to trading platforms in the early 2020s. State licensing developed in parallel and independently, with New York’s regime arriving in 2015 and most states simply applying existing money transmitter statutes.

The result is a perimeter assembled from parts designed for other purposes: a money transmission framework built for remittances, a commodities framework built for agricultural futures, a securities framework built for corporate stock, and fifty state regimes built for check cashers and wire services. Every awkwardness in current American crypto law traces to that inheritance, including the questions this page labels contested, which are almost all cases where an activity fits two frameworks or none.

The past three years have been an attempt to replace inheritance with design. A stablecoin statute created a purpose-built issuer framework. A joint agency interpretation allocated major assets between the market regulators. A chartering route opened into federal banking. And pending market-structure legislation would supply the missing piece, a statutory definition of what these assets are and who governs them. Whether that project completes is the question hanging over every other page in this hub, and the honest answer today is that the perimeter is more coherent than it was in 2022 and still assembled rather than designed.