Digital asset regulation and tokenization in New York

In New York, a business planning custody, exchange or digital asset transfers should start with its activities for state customers. BitLicense and a trust-company charter are different routes; neither follows from incorporation nor automatically extends to every product.

Entity permission is only part of the project. The business must also determine which assets it may offer, how customer rights are preserved and which changes need approval. This guide connects those decisions with securities and federal duties.

How entity permission differs from service approval

23 NYCRR Part 200, effective from 24 June 2015, regulates specified virtual currency business activities involving New York or its residents. NYDFS identifies transmission, third-party custody or control, buying and selling as a customer business, exchange, and control, administration or issuance. The territorial connection can reach a business established outside the state; incorporation elsewhere does not remove that assessment.

The framework includes exemptions. The supervisor's explanations state that consumers investing solely for themselves and merchants accepting virtual currency to purchase or sell goods or services do not need BitLicense. Merely developing and distributing software as a purely technical service also does not require it. Retaining keys or control over customer funds may bring the business within the licensing perimeter.

Which authority supervises each activity

The New York State Department of Financial Services, NYDFS, grants BitLicense, supervises entities under banking law and publishes its register of authorised entities. A limited purpose trust company holds a restricted banking charter and differs from a BitLicense holder. Virtual currency business through that route requires the Superintendent's approval; ordinary company incorporation does not achieve that result.

The Office of the Attorney General administers state requirements for securities issuers and intermediaries under General Business Law and implementing provisions. Federal securities, derivatives and anti-money laundering responsibilities remain relevant. Registration with the Financial Crimes Enforcement Network, FinCEN, neither determines nor replaces the requirement to obtain BitLicense.

Which permission the business model requires

A BitLicense application is submitted through the Nationwide Multistate Licensing System, NMLS. NYDFS begins substantive review once the application is complete and tailored to the business. Capital depends on the model and risk; this guide states neither a universal amount nor a guaranteed approval time. The register evidences authorised entities without making every product or service they offer an approved activity.

A BitLicense holder also transmitting fiat currency may need licensing under New York Banking Law Article 13-B. NYDFS distinguishes limited purpose trust companies, which can exercise fiduciary powers and transmit funds within New York without that additional licence. Both routes require assessing the activities actually permitted; neither gives automatic access to every US state.

The final November 2023 guidance distinguishes individual approval, self-certification under a previously approved policy and the Greenlist. Even for Greenlisted assets, NYDFS must be notified at least ten days before offering them in New York. A separate delisting policy must suit the business. The supervisor retains authority to limit an asset or require its delisting.

How holder rights are documented

BitLicense neither makes a token an approved security nor establishes ownership of its underlying asset. The January 2026 SEC staff statement, which has no independent legal force, distinguishes issuer-sponsored tokenization, intermediated entitlements and synthetic exposures. Structuring an issuance requires identifying the obligor, legally relevant register and conditions governing transfer or redemption.

At state level, the Attorney General distinguishes registration for certain issuers from notice filings for federally covered securities. Its guidance provides, for example, for Form D filings for Rule 506 offerings. Availability of a federal exemption does not establish that every state filing disappears. The United States guide develops the common federal framework; this guide addresses its coexistence with New York requirements.

For dollar-backed stablecoins issued under its supervision, NYDFS's 2022 guidance requires product approval, segregated reserves and sufficient backing at each business day's close. Redemption at par is subject to approved policies and legal onboarding conditions. Monthly reserve examinations by an independent accountant are not monthly audits of the issuer's entire financial statements.

Which obligations continue during operations

The 30 September 2025 custody guidance replaces the January 2023 version. NYDFS expects segregation from the custodian's and its affiliates' proprietary assets, both on-chain and within internal accounting. Omnibus accounts require individual customer interests to remain traceable and reconcilable. The relationship should preserve those interests through safekeeping rather than turning them into the custodian's own financing.

A new sub-custody arrangement is a material change requiring prior approval. The guidance requires consideration of agreements, risks and controls; accounts must be titled for customers' benefit. Sub-custodians should hold NYDFS authorisation or be subject to a regime that NYDFS determines is substantially equivalent. A foreign licence does not establish equivalence automatically. Customer disclosures should explain custody, third-party arrangements and relevant risks.

Part 200 provides for anti-money laundering controls, a compliance officer, records, financial reporting, cybersecurity and business continuity. These duties accompany the permission to operate; they are not separate licences. Material product and control changes require their own assessment and, where applicable, prior approval. Technical architecture must support the documented conditions applying to the particular activity.

What to prepare before launching the project

Prepare a map of services, assets and customers alongside each entity’s powers over keys. For custody, document segregation, reconciliation, customer instructions and sub-custody terms. If a third party safeguards assets, include its contracts, controls and supervisory basis.

Before launching an asset or changing the structure, check the entity’s permission, approved policies and relevant notifications or approvals. Registration of a group company does not establish the chosen contracting entity’s scope.

To understand how this framework applies to your project, discuss your case with our team.