# Digital asset regulation and tokenization in the United States

> **Is crypto legal in the United States?** Yes. Businesses have regulated routes to operate with crypto-assets, under predictable rules. Federal and state framework with access evidenced by public registers. In the Metlabs Regulatory Index it scores 76/100 and ranks 48 of 76 countries assessed (assessed October 4, 2026).

- **Author:** Javier Yáñez López, Legal & Regulatory at Metlabs
- **Last reviewed:** 2026-10-18
- **Latest regulatory change:** 2026-09-30
- **Scope:** Federal and state
- **Authorities:** SEC, CFTC, FinCEN
- **Metlabs Regulatory Index:** 76/100, rank 48 of 76 countries assessed
- **Web version:** https://metlabs.io/en/blockchain-regulation/united-states/

The United States combines federal securities, derivatives and anti-money laundering legislation with state permissions. Classification depends on the asset, contract, service and customers served. The SEC has established temporary relief for trading certain tokenized stocks, subject to specific conditions. GENIUS provides a stablecoin framework with its own implementation timetable. FinCEN registration, a state license and a securities exemption are not interchangeable permissions.

In the United States, a digital asset project may be subject to federal and state rules simultaneously. Assessment starts with what the token represents and what the business does: issuing a security, transmitting funds, holding assets and facilitating trading are different functions. Registration for one activity or in one state does not necessarily resolve every requirement for entering the US market.

This structure matters both to domestic businesses and to overseas platforms serving US clients. Project preparation should separate asset classification, each intermediary’s obligations and distribution restrictions. This guide connects those questions with the responsibilities of the SEC, CFTC and FinCEN, distinguishing available routes from proposals and regimes whose application is deferred.

## How the asset and transaction are classified

US regulation requires classifying both the asset and transaction before selecting an access route. The [SEC's March 2026 interpretation](https://www.sec.gov/files/rules/interp/2026/33-11412.pdf), accompanied by CFTC guidance, distinguishes digital securities from other assets and examines when the latter are offered through an investment contract. The [interpretive release](https://www.sec.gov/rules-regulations/2026/03/s7-2026-09) was published and became effective on March 23; it is not a new Act of Congress.

A share or debt instrument represented digitally retains its securities character. An asset that is not itself a security may nonetheless form part of an investment contract through representations and managerial efforts associated with its offering. Technical utility, an NFT label or use of a smart contract does not itself resolve that analysis or confer an operational exemption.

## Which responsibilities belong to federal and state authorities

The Securities and Exchange Commission, SEC, applies federal securities legislation. The [Commodity Futures Trading Commission, CFTC](https://www.cftc.gov/LearnAndProtect/AdvisoriesAndArticles/understand_risks_of_virtual_currency.html), supervises commodity derivatives and has anti-fraud and anti-manipulation powers in covered spot markets. These functions should not be reduced to a mandatory CFTC license for every digital asset purchase or sale. Derivatives or financed products require their own assessment. On October 13, 2026, the CFTC published in the Federal Register an [advance notice of proposed rulemaking](https://www.federalregister.gov/documents/2026/10/13/2026-20888/regulation-crypto-asset-transactions-and-regulation-crypto-asset-markets), without rule text, on retail crypto asset transactions offered on a leveraged, margined or financed basis: relying on the existing Commodity Exchange Act, it previews a purpose-built registered market and its preliminary view on actual delivery to the customer. Comments are due by December 14, 2026, and the applicable regime has not yet changed.

The [Financial Crimes Enforcement Network, FinCEN](https://www.fincen.gov/system/files/2019-05/FinCEN%20Guidance%20CVC%20FINAL%20508.pdf), administers Bank Secrecy Act obligations for covered persons. State supervisors regulate transmission and, in certain states, virtual currency services. Banking powers depend on the type of institution. Each Federal Reserve Bank decides on access to its accounts among legally eligible institutions. The Kansas City Fed [granted on March 4, 2026,](https://www.kansascityfed.org/newsroom/2026-news-releases/federal-reserve-bank-of-kansas-city-approves-limited-account/) Kraken Financial, a Wyoming special purpose depository institution, a limited account for an initial one-year term, with restrictions. The Board [proposed in May 2026](https://www.federalregister.gov/documents/2026/05/26/2026-10375/proposed-revisions-to-the-federal-reserve-policy-on-payment-system-risk-and-the-guidelines-for) a “payment account” without interest or credit, without expanding eligibility, and asked Reserve Banks to pause decisions on institutions that are neither federally insured nor federally supervised. This federal and state allocation requires identifying who provides each service, where and to which customers, including where providers operate from abroad.

For a business combining several functions, that allocation should become a map of required permissions. Accepting and transmitting client funds, for example, needs a different assessment from developing software without control over those funds. Offering securities or derivatives additionally requires examination of their own regimes and intended distribution. No registration should be described as general approval of the project.

## What authorization a project needs to operate

[FinCEN's 2019 guidance](https://www.fincen.gov/system/files/2019-05/FinCEN%20Guidance%20CVC%20FINAL%20508.pdf) links money transmitter status to the facts: accepting and transmitting value for others, subject to relevant exclusions. Merely developing or selling software does not automatically produce that classification; using it to transmit value may change the outcome. [Money Services Business, MSB, registration](https://www.fincen.gov/resources/money-services-business-msb-registration) addresses that scope and does not replace other permissions.

[New York's public register](https://www.dfs.ny.gov/apps_and_licensing/virtual_currency_businesses) evidences virtual currency licenses and limited purpose trust charters. Their existence demonstrates operational access, but coverage is state-specific and depends on authorized activities. Serving residents of other states requires checking their rules. BitLicense is not a federal license, and incorporation in one state does not automatically permit serving the entire country.

Securities trading requires assessing intermediary, exchange or alternative trading system registration and applicable exemptions. The [SEC order of September 17, 2026](https://www.sec.gov/files/rules/exorders/2026/34-106402.pdf), which the SEC calls the Innovation Exemption in its [fact sheet](https://www.sec.gov/files/34-106402-fact-sheet.pdf), does not grant an authorization; it grants two five-year exemptions: it exempts certain tokenized securities venues, TSVs, from the definition of exchange under the Exchange Act, and certain liquidity providers from the definition of dealer. Its coverage depends on compliance with conditions; notifying commencement does not mean the SEC has approved the business or investment.

## Which rights a tokenized security provides

The [January 2026 SEC staff statement](https://www.sec.gov/newsroom/speeches-statements/corp-fin-statement-tokenized-securities-012826-statement-tokenized-securities) distinguishes issuer-sponsored tokenization from third-party models, including custodial entitlements and synthetic exposures. It expresses staff views without independent legal force. It is essential to identify whether holders obtain rights against the original issuer, an intermediated interest or a separate third-party obligation, alongside the legally effective register and transfer mechanism.

The [September exemption](https://www.sec.gov/files/rules/exorders/2026/34-106402.pdf) covers certain National Market System, NMS, stocks traded through automated market makers and liquidity pools. It excludes primary issuance on the venue and synthetic exposures from its definition of covered stocks. A venue must verify that holders enjoy the same rights and privileges as the equivalent traditional class; merely tracking a share's price is insufficient.

The relief extends until September 17, 2031, subject to subsequent changes. It includes symbol and volume limits, advance disclosure and, for tokenization by unaffiliated third parties, issuer notice and an opportunity to object. The August 2026 [Regulation Crypto Assets proposal](https://www.sec.gov/rules-regulations/2026/08/s7-2026-27) is a separate proceeding: its new offering exemptions remain proposed and are not used here as effective permissions.

## Which operating and stablecoin obligations apply

Covered MSBs must maintain an anti-money laundering program, compliance officer, training, independent review and applicable records and reports under [FinCEN guidance](https://www.fincen.gov/system/files/2019-05/FinCEN%20Guidance%20CVC%20FINAL%20508.pdf). Obligations also extend to foreign providers conducting business wholly or substantially in the United States. Classification as a non-security asset does not itself remove these obligations or applicable economic sanctions.

For TSVs, the [SEC order](https://www.sec.gov/files/rules/exorders/2026/34-106402.pdf) requires, among other conditions, US person status, auditable smart contracts that are public and deployed on a public, permissionless distributed ledger, public notice at least thirty calendar days before operating and retention of information. That combination shapes the design: access to trading is restricted, but the ledger cannot be. Anti-fraud provisions and other applicable laws remain. Liquidity provider relief requires trading for its own account without holding or custodying customer assets, and limits its securities activities to trading tokenized stocks in a liquidity pool operating under the venue exemption, so it cannot be combined with other securities intermediation; the order does not limit its non-securities activities.

The [GENIUS Act, enacted on July 18, 2025](https://www.govinfo.gov/content/pkg/PLAW-119publ27/pdf/PLAW-119publ27.pdf), reserves the issuance of payment stablecoins in the United States to permitted issuers and provides for identifiable reserves of at least one-to-one, reserve disclosure, redemption rules and a prohibition on the issuer paying interest or yield solely for holding, using or retaining the token. Its definition of payment stablecoin excludes national currency, bank deposits, including those recorded using distributed ledger technology, and securities. The state route is available only to issuers whose total outstanding issuance does not exceed ten billion dollars; above that amount, the issuer must transition to the federal framework within 360 days or cease new issuance, unless a waiver is granted.

The general effective date follows section 20: eighteen months after enactment or one hundred and twenty days after relevant final federal regulations, if earlier. [Treasury's September 30, 2026, rule](https://www.govinfo.gov/content/pkg/FR-2026-09-30/html/2026-19966.htm) identifies January 18, 2027, as the expected date; its state framework certification procedure does not mean that issuance under GENIUS is already authorized across the board. A second date should not be confused with the first: from July 18, 2028, subject to the exceptions in the Act, it will be unlawful for a digital asset service provider to offer or sell to persons in the United States payment stablecoins from issuers that are not permitted. The first date affects issuers; the second, those who offer or sell.

## What to define before entering the market

Preparation starts by describing the product, legal rights and asset flows. The business should identify the issuer, entities receiving instructions or controlling keys, client types and states served. That description helps determine which registrations, licenses or exemptions require verification and which restrictions should be incorporated into the platform and its contracts.

[Skadden’s analysis of the September 2026 exemption](https://www.skadden.com/insights/publications/2026/09/sec-innovation-exemption-establishes) provides professional context on the covered platforms and liquidity providers. It should be read alongside the SEC order’s conditions and other applicable rules. A temporary route for one specific function does not resolve primary issuance, distribution or every form of custody. On that point, on October 6, 2026, the SEC published in the Federal Register a [proposal](https://www.federalregister.gov/documents/2026/10/06/2026-20466/adviser-and-regulated-fund-custody-rules-crypto-custody-rules), separate from Regulation Crypto Assets, under which registered investment advisers and regulated funds could hold crypto assets that are client funds or securities with state trust companies or, where no permitted custodian is available, through adviser self-custody, subject to conditions. It is a proposal and is not in force; comments are due by December 7, 2026.

Planning also needs a regulatory calendar. CLARITY remains a pending bill: on September 15, 2026, the [Senate rejected cloture on the motion to proceed](https://www.senate.gov/legislative/LIS/roll_call_votes/vote1192/vote_119_2_00234.htm) to H.R. 3633, by 49 votes to 50, when three-fifths was required. It is not the same initiative as FIT21 of 2024. GENIUS implementing rules remain proposals, such as Treasury's on [state regimes](https://www.federalregister.gov/documents/2026/04/03/2026-06489/genius-act-broad-based-principles-for-determining-whether-a-state-level-regulatory-regime-is) and on [issuance, offer and sale](https://www.federalregister.gov/documents/2026/08/18/2026-16796/genius-act-regulations-on-payment-stablecoin-issuance-offer-and-sale) or the [OCC's](https://www.federalregister.gov/documents/2026/03/02/2026-04089/implementing-the-guiding-and-establishing-national-innovation-for-us-stablecoins-act-for-the); as of October 18, 2026, only Treasury's interim procedural rule is in force. With no final rules, the one-hundred-and-twenty-day alternative no longer allows general commencement before January 18, 2027. The state guides complement this federal overview by examining local access and intended services.

## Key takeaways

- The asset, offering and service require separate analysis; there is no single national license for every model.
- FinCEN registration replaces neither state permissions nor securities requirements.
- The September 2026 SEC exemption covers defined trading in tokenized stocks, not general initial offerings.
- Token rights may differ from those of the underlying security, particularly where a third party is involved.
- GENIUS, CLARITY and SEC proposals have distinct status and timetables; they are not presented as one effective regime.

## Regulatory milestones

- **2015-06-24** — New York virtual currency framework published. The state register publishes the addition of Part 200 to Title 23 NYCRR. This is the basis of BitLicense, with state-level scope and its own requirements. (source: [New York State Register · June 24, 2015](https://dos.ny.gov/system/files/documents/2019/11/062415.pdf))
- **2015-09-22** — First BitLicense granted to Circle. DFS identifies 22 September as the approval date of the first BitLicense application, submitted by Circle Internet Financial. This is a New York market-access milestone, separate from federal permission. (source: [DFS · Official 2023 testimony, footnote 5](https://www.dfs.ny.gov/system/files/documents/2023/05/st_supt_harris_testimony_nys_assembly_20230525.pdf))
- **2019-05-09** — FinCEN guidance on virtual currency business models. The guidance applies the money transmission framework to particular functions and facts. It distinguishes developing software from using it to accept and transmit value for others. (source: [FinCEN · Guidance FIN-2019-G001](https://www.fincen.gov/system/files/2019-05/FinCEN%20Guidance%20CVC%20FINAL%20508.pdf))
- **2025-07-18** — GENIUS Act enacted. The Act establishes a framework for payment stablecoin issuers, with requirements and deferred application. Enactment and general commencement are different dates. (source: [GovInfo · Public Law 119–27](https://www.govinfo.gov/content/pkg/PLAW-119publ27/pdf/PLAW-119publ27.pdf))
- **2026-01-28** — SEC staff statement on tokenized securities. Staff distinguishes issuer and third-party tokenization models, including intermediated rights and synthetic exposures. The statement has no independent legal force. (source: [SEC · Staff statement](https://www.sec.gov/newsroom/speeches-statements/corp-fin-statement-tokenized-securities-012826-statement-tokenized-securities))
- **2026-03-23** — SEC digital asset interpretation becomes effective. The release issued on March 17 is published and becomes effective on March 23. It distinguishes assets, digital securities and investment contracts. (source: [Official source · Text and date](https://www.sec.gov/rules-regulations/2026/03/s7-2026-09))
- **2026-05-26** — Federal Reserve payment account proposal. The Board proposes a limited account for clearing and settling payments, without interest or credit, that does not expand legal eligibility, and asks for decisions on Tier 3 institutions to be paused. (source: [Federal Reserve · payment account proposal](https://www.federalregister.gov/documents/2026/05/26/2026-10375/proposed-revisions-to-the-federal-reserve-policy-on-payment-system-risk-and-the-guidelines-for))
- **2026-08-18** — Treasury proposal on stablecoin issuance, offer and sale. Treasury proposes rules under section 3 of GENIUS, after proposing in April the principles on the similarity of state regimes. Both remain proposals. (source: [Treasury · proposed rule of August 18, 2026](https://www.federalregister.gov/documents/2026/08/18/2026-16796/genius-act-regulations-on-payment-stablecoin-issuance-offer-and-sale))
- **2026-09-17** — Temporary tokenized stock trading exemption. Order 34-106402 provides conditional TSV and specified liquidity-provider relief until September 2031, without a general primary issuance exemption. (source: [Official source · Text and date](https://www.sec.gov/files/rules/exorders/2026/34-106402.pdf))
- **2026-09-30** — Treasury procedure for state framework certification. Interim procedural rule under GENIUS. Acceptance of certifications depends on administrative approval; the text anticipates general application of the Act in January 2027. (source: [Official source · Text and date](https://www.govinfo.gov/content/pkg/FR-2026-09-30/html/2026-19966.htm))
- **2026-10-06** — SEC crypto custody proposal. The SEC proposes that registered investment advisers and regulated funds may hold crypto assets with state trust companies or through adviser self-custody, subject to conditions. Comments due by December 7, 2026. (source: [SEC · crypto custody proposal](https://www.federalregister.gov/documents/2026/10/06/2026-20466/adviser-and-regulated-fund-custody-rules-crypto-custody-rules))
- **2026-10-13** — CFTC advance notice on retail crypto asset transactions. The CFTC previews rules for leveraged, margined or financed retail crypto asset transactions and a purpose-built registered market. No rule text; comments due by December 14, 2026. (source: [CFTC · advance notice of proposed rulemaking](https://www.federalregister.gov/documents/2026/10/13/2026-20888/regulation-crypto-asset-transactions-and-regulation-crypto-asset-markets))

## Frequently asked questions

### Is there one crypto license valid throughout the United States?

There is no generic permission replacing assessment of every function and jurisdiction. Applicable federal securities, derivatives or money transmission rules must be considered alongside state requirements. A company’s state of incorporation does not by itself determine where it may provide services. Permissions should be mapped against the activity and intended clients.

### Is FinCEN MSB registration an investment services license?

No. Registration concerns the obligations of money services businesses within FinCEN’s framework. It does not establish securities or derivatives permission or replace applicable state licenses. Assessing a provider requires checking its activities and corresponding permissions, together with the exact identity of the registered entity.

### Does a token tracking a share price provide shareholder rights?

Not necessarily. The SEC staff statement distinguishes tokenization models and synthetic exposures. The holder should check whether there is a share carrying rights against the original issuer, an intermediated right or a third-party obligation. Tracking the same price does not establish voting, dividend or equivalent insolvency rights. Contracts and the recording mechanism matter.

### Does the GENIUS Act already permit any payment stablecoin issuance?

It should not be interpreted that way. Enacted in July 2025, the Act provides for deferred general application under section 20. Treasury identifies January 18, 2027, as the expected date; its state certification procedure does not itself authorize an issuer. Planning should verify the applicable date, regulator, permission and product conditions.

### Does operating outside the United States remove US obligations?

Not by itself. The assessment depends on activities, clients and the connection with the country. FinCEN guidance covers foreign providers conducting business wholly or substantially within the United States within its remit. Securities, derivatives and relevant state rules must also be assessed. A company’s address and server location do not settle territorial scope.

## How to cite this guide

Yáñez López, J. (2026, October 18). Digital asset regulation and tokenization in the United States. Metlabs. https://metlabs.io/en/blockchain-regulation/united-states/