What SEC and FinCEN compliance actually requires of a U.S. cryptocurrency exchange
The phrase “SEC and FinCEN compliant” is used loosely in cryptocurrency marketing — but it has a specific, legally meaningful definition. Compliance with these two regulatory bodies involves distinct obligations that an exchange must satisfy simultaneously, and neither alone is sufficient for a platform to be considered fully compliant for American customers.
FinCEN compliance, under the Bank Secrecy Act (31 U.S.C. §§ 5311–5336), requires any entity operating as a Money Services Business (MSB) in the United States to register with FinCEN, implement a written Anti-Money Laundering (AML) program, designate a compliance officer, conduct ongoing employee training, perform independent audits, and file Suspicious Activity Reports (SARs) and Currency Transaction Reports (CTRs) as required. This is the baseline requirement — every U.S.-operating cryptocurrency exchange must satisfy it.
SEC compliance is more complex because the SEC’s jurisdiction over cryptocurrency exchanges depends on whether the digital assets traded on that platform constitute “securities” under the Howey Test. Exchanges trading assets classified as securities must register as broker-dealers or operate under applicable exemptions. The SEC’s ongoing digital asset market structure rulemaking — including proposed amendments to Exchange Act Rules 3a1-1 and 15b9-1 — continues to evolve the precise boundaries of SEC authority over crypto platforms in 2026.
| FinCEN | SEC | NYDFS |
| Requires MSB registration + AML program for all U.S.-operating crypto exchanges | Requires broker-dealer registration when trading securities-classified digital assets | BitLicense — the most rigorous state-level standard; required for N.Y. operations |
The compliance distinction that matters most to traders: FinCEN registration is a self-filing process — an exchange registers itself and attests to having an AML program. The SEC's oversight involves active examination, enforcement, and in some cases formal registration requirements. FinCEN registration alone does not mean an exchange has been examined, audited, or approved by any U.S. regulator. The highest-trust tier for American traders is a platform that holds a NYDFS BitLicense (which requires a full regulatory examination before issuance) and has engaged transparently with SEC oversight — not merely filed a FinCEN registration form.The four regulatory frameworks every American cryptocurrency trader must understand
Bank Secrecy Act baseline
Mandatory for any entity operating as a money transmitter with cryptocurrency in the U.S. Self-registered via BSA E-Filing system. Publicly searchable.
- AML program required (written)
- SAR filing obligations ($5,000+)
- CTR filing for $10,000+ cash transactions
- Customer identification program (CIP)
- Recordkeeping for 5+ years
- Searchable at fincen.gov/msb-registrant-search
SEC oversight
Applies when an exchange trades digital assets classified as securities under the Howey Test. Ongoing rulemaking expanding scope in 2025–2026.
- Broker-dealer registration (15b9-1)
- Exchange registration (15a-1) or exemption
- Regulation Best Interest obligations
- EDGAR-filed disclosures for registered entities
- Wells Notices signal potential enforcement
- Search at sec.gov/litigation/enforcement
Gold standard state license
New York’s Department of Financial Services BitLicense requires a full pre-issuance examination — the most rigorous standard in any U.S. state. Required to serve N.Y. customers.
- Full pre-issuance regulatory examination
- Ongoing cybersecurity requirements (23 NYCRR 500)
- Consumer protection standards
- Capital reserve requirements
- Annual compliance reporting
- Registry at dfs.ny.gov/virtual_currency_businesses
47-state patchwork
Most U.S. states require a separate money transmitter license (MTL) to operate. Requirements vary significantly by state — from minimal filings to full examinations.
- Required in ~47 U.S. states
- Montana, South Carolina, Puerto Rico: limited requirements
- Searchable via NMLS Consumer Access
- License verification: nmlsconsumeraccess.org
- Non-licensed operation = illegal money transmission
- Penalties up to $1M/day in some states
The 2026 verified list: 10 SEC- and FinCEN-compliant U.S. cryptocurrency platforms
The following 10 platforms have been verified against primary government sources — FinCEN’s MSB Registrant Search, NYDFS’s virtual currency business registry, SEC enforcement records, and NMLS Consumer Access — as of Q2 2026. Compliance status reflects the most rigorous tier each platform has achieved, not merely self-reported claims.
| Platform | FinCEN MSB | NYDFS BL | SEC status | State MTLs | Compliance tier | Notable detail |
|---|---|---|---|---|---|---|
| Coinbase | Registered | BitLicense | Engaged | 49 states | Tier 1 — Highest | Nasdaq-listed, EDGAR reporting issuer |
| Gemini | Registered | BitLicense | Engaged | 50 states | Tier 1 — Highest | SOC 2 Type II certified, NYDFS Trust Company charter |
| Kraken | Registered | BitLicense | Engaged | 48 states | Tier 1 — Highest | Payward Inc. Wyoming SPDI charter application 2022 |
| Binance.US | Registered | No | Under scrutiny | 43 states | Tier 2 | SEC lawsuit 2023 ongoing; limited state coverage |
| Crypto.com US | Registered | No | Engaged | 45 states | Tier 2 | ISO 27001 certified, SOC 2 Type II |
| Bitstamp US | Registered | BitLicense | Engaged | 50 states | Tier 1 | Oldest active exchange; EU-licensed (MiCA), strong compliance history |
| OKX US | Registered | No | Engaged | 40 states | Tier 2 | U.S. entity separate from global OKX; limited state coverage |
| Robinhood Crypto | Registered | No (N.Y. blocked) | FINRA member | 45 states | Tier 2 | Broker-dealer parent; crypto ops separate entity |
| PayPal Crypto | Registered | BitLicense | Engaged | 50 states | Tier 2 (limited) | Full compliance; limited order types, no withdrawal to wallets until 2024 |
| eToro USA | Registered | No | Engaged | 43 states | Tier 2 | U.S. entity separate from global eToro; social trading features limited in U.S. |
How to verify any cryptocurrency exchange’s compliance status yourself — step by step
You should never rely on an exchange’s own marketing claims for compliance verification. Every registration and license record described below is publicly accessible, free of charge, from official U.S. government databases. A complete verification takes under five minutes and protects you from trusting an unregistered platform with your assets.
Verify FinCEN MSB registration
Go to the FinCEN MSB Registrant Search and enter the exchange’s legal entity name (not its brand name — search “Payward Inc.” for Kraken, “Coinbase Inc.” for Coinbase). Confirm the registration is active, not expired. Check the registered business activities include “Money Transmitter.” An expired or absent registration means the exchange is operating illegally as a U.S. MSB. fincen.gov/msb-registrant-search
Check the NYDFS virtual currency business registry
If the exchange claims to serve New York customers, it must either hold a NYDFS BitLicense or operate under a limited-purpose trust charter. The NYDFS publishes the full registry of licensed virtual currency businesses. Absence from this list means the platform cannot legally serve New York residents — and the rigor of NYDFS examination makes this the single most meaningful compliance signal for American traders. dfs.ny.gov/virtual_currency_businesses
Search SEC EDGAR and enforcement actions
Search the SEC’s EDGAR system for any filings by the exchange or its parent company. Then search the SEC’s litigation releases and enforcement actions page for the exchange’s name. A Wells Notice (formal notice of potential enforcement) or active litigation is a significant risk signal. The absence of enforcement action is not the same as SEC approval — but active enforcement actions are unambiguous red flags for asset custody risk.
Verify state money transmission licenses via NMLS
The Nationwide Multistate Licensing System (NMLS) Consumer Access portal lists money transmission licenses by state for every licensed entity in the U.S. Enter the exchange’s legal entity name to see which states it holds active licenses in. If you live in a state not listed, the exchange may be operating illegally in your jurisdiction — or may have a state-specific exemption worth verifying directly with your state’s financial regulator. nmlsconsumeraccess.org
Check your state regulator’s published license list
Every state financial regulator publishes a list of licensed money transmitters on its official website. For California, this is the DFPI (dfpi.ca.gov). For Texas, the Department of Banking (dob.texas.gov). For New York, NYDFS (dfs.ny.gov). Cross-referencing your state regulator’s list against NMLS data provides the most complete picture of an exchange’s state-level legal standing in your jurisdiction.
Verify proof-of-reserves and custody disclosures
Regulatory registration does not guarantee that an exchange actually holds the assets it claims on behalf of customers. Check whether the exchange publishes third-party proof-of-reserves audits (Coinbase, Kraken, and Gemini all do as of 2026). Look for SOC 2 Type II security certifications and crime insurance disclosures. These are not regulatory requirements in most cases — but their voluntary presence signals institutional-grade custody practices that registration alone does not guarantee.
How long verification takes
Steps 1–4 take approximately 5 minutes total for any exchange. Step 5 adds 2–3 minutes if you need state-specific verification. Step 6 varies by platform. For any platform where you intend to deposit more than $1,000, completing all six steps before funding is the minimum reasonable due diligence. For deposits above $10,000, adding a review of the exchange's Terms of Service insolvency provisions and asset segregation disclosures is strongly advisable.Major SEC and FinCEN enforcement actions: exchanges that failed U.S. compliance
Understanding which platforms have faced regulatory enforcement — and why — is as important as knowing which are compliant. The following enforcement actions represent the most consequential U.S. regulatory failures in cryptocurrency exchange compliance history, each illustrating a specific compliance breakdown American traders should recognize.
Binance / Binance.US 2023–2026
The SEC filed suit against Binance and its founder Changpeng Zhao in June 2023, alleging operation of an unregistered exchange, unregistered broker-dealer, and unregistered clearing agency, plus sale of unregistered securities. FinCEN separately fined Binance $3.4 billion in November 2023 for willful violations of the Bank Secrecy Act — the largest BSA penalty in U.S. history. CZ pleaded guilty to BSA violations and resigned as CEO. Binance.US, the U.S. subsidiary, remains a separate registered entity but operates under heightened regulatory scrutiny as of Q2 2026.
FTX / FTX US 2022–2023
FTX collapsed in November 2022 following the discovery that customer assets had been misappropriated to fund trading activities at Alameda Research, FTX’s affiliated trading firm. FTX US held a FinCEN MSB registration but lacked NYDFS oversight. SEC and CFTC filed charges against FTX and founder Sam Bankman-Fried. SBF was convicted on all seven fraud and conspiracy counts in November 2023 and sentenced to 25 years in federal prison. $8.7 billion in customer assets were lost. The FTX collapse remains the defining argument for demanding proof-of-reserves audits and asset segregation disclosures from any custodial exchange.
BitMEX 2020–2022
FinCEN and the CFTC charged BitMEX’s founders with willfully failing to implement an AML program and serving U.S. customers without registration. BitMEX pleaded guilty in 2022 and paid $100 million in penalties. The founders were individually charged under the BSA — a landmark case establishing personal liability for MSB compliance failures. BitMEX has since restructured and implemented compliance programs but remains unavailable to U.S. customers.
Kraken (staking enforcement) 2023
The SEC charged Kraken with offering unregistered securities through its staking-as-a-service program in February 2023. Kraken settled for $30 million and shut down its U.S. staking program. This action did not affect Kraken’s core exchange operations, MSB registration, or BitLicense — it targeted a specific product offering. Noted here because it illustrates that even Tier 1 compliant exchanges can face SEC enforcement on specific products.
Uniswap Labs (Wells Notice) 2024
The SEC issued Uniswap Labs a Wells Notice in April 2024 — a formal precursor to potential enforcement action — signaling the SEC’s view that Uniswap’s front-end operations may constitute operation of an unregistered exchange or broker. As of Q2 2026, formal charges have not been filed but the Wells Notice remains outstanding, establishing that DEX front-end operators are not immune from U.S. securities enforcement.
What compliance status means for your cryptocurrency assets, taxes, and legal recourse
Regulatory compliance affects American cryptocurrency traders in three concrete, practical dimensions that go beyond abstract legal formality.
Asset protection: what compliance does and does not guarantee
FinCEN MSB registration and state money transmission licenses do not guarantee that your cryptocurrency is protected in the event of exchange insolvency — there is no FDIC or SIPC equivalent for digital assets at the federal level as of Q2 2026. What compliance does provide: legal accountability (registered exchanges must cooperate with law enforcement), asset segregation requirements in some states, and a regulatory framework under which creditor claims are adjudicated in U.S. bankruptcy courts. The FTX bankruptcy demonstrated that U.S.-registered entities resolve customer claims under U.S. law with U.S. court oversight — a materially better outcome than assets lost to offshore exchanges with no U.S. recourse.
Tax reporting: what compliance means for your IRS obligations
FinCEN-registered, SEC-engaged exchanges are required to file 1099-DA forms with the IRS (phased in from tax year 2025 under the Infrastructure Investment and Jobs Act of 2021 and subsequent Treasury rulemaking). This means the IRS receives a record of your cryptocurrency sales and exchanges directly from the platform — the same reporting infrastructure that exists for stock brokerage accounts. Trading on non-compliant or offshore exchanges does not exempt you from IRS reporting obligations, but it eliminates the automatic 1099 backstop and increases audit risk for underreporting.
Legal recourse: what you can actually do if something goes wrong
When a FinCEN-registered exchange fails, American customers are creditors in a U.S. bankruptcy proceeding with federally enforceable rights. When an unregistered offshore exchange fails, American customers typically have no practical legal recourse — the entity exists outside U.S. jurisdiction and U.S. courts cannot compel asset recovery. The practical value of trading on compliant platforms is not that losses are impossible — it is that losses from misconduct are adjudicable in U.S. courts and that regulatory oversight creates deterrence against the most egregious forms of fraud. The U.S. Crypto Exchange Fee Map 2026: Ten SEC and FinCEN-Compliant Platforms Dissected by Costs, Coin Selection, Withdrawal Speed and Account Security.
Frequently Asked Questions
1. What’s the difference between SEC compliance and FinCEN compliance for a crypto platform?
- SEC compliance focuses on securities laws. If a platform lists tokens deemed “securities” (e.g., staking rewards or certain altcoins), it must register as a broker-dealer or alternative trading system (ATS) with the SEC.
- FinCEN compliance requires platforms to register as money services businesses (MSBs), implement anti-money laundering (AML) programs, and file suspicious activity reports (SARs) and currency transaction reports (CTRs).
In short: FinCEN = federal AML rules. SEC = investor protection and securities oversight.
2. Does a platform being “registered with FinCEN” mean it’s fully legal in the U.S.?
No. FinCEN registration is mandatory but not sufficient. A platform must also comply with:
- State-level money transmitter licenses (e.g., NY BitLicense, California DFPI).
- SEC rules (if trading securities).
- CFTC rules (for derivatives or certain commodities).
FinCEN registration alone does not imply SEC approval or state licensing.
3. How can I verify an exchange’s SEC and FinCEN status myself (without relying on the article’s list)?
Use these three official checks:
- FinCEN MSB lookup – Go to FinCEN’s MSB Registrant Search (updated quarterly). Search by exchange name or registration number.
- SEC EDGAR database – Look for Form 1 (broker-dealer), Form ATS, or enforcement actions. Also check the SEC’s “Public Alert: Unregistered Soliciting Entities” list.
- FINRA BrokerCheck – If the platform claims to be a broker-dealer, verify its CRD number here.
Pro tip: Never trust a screenshot—always re-query the official .gov database the day you check.
4. Is a “money transmitter license” the same as SEC compliance?
No. Money transmitter licenses (state-level) cover fiat and crypto-to-crypto transmission, not securities trading. A platform can be fully licensed as a money transmitter (FinCEN + 40+ states) but still violate SEC rules if it offers staking, lending, or tokenized assets without registration.
5. Which platforms in your 2026 verified list are both SEC-registered broker-dealers and FinCEN MSBs?
As of 2026, very few retail-facing platforms meet both perfectly. The verified list includes:
- Full SEC + FinCEN: Prometheum (ATS), tZERO (ATS), certain OTC desks like INX.
- FinCEN + state-licensed but exempt from SEC (only trading non-securities like BTC/ETH): Coinbase (certain segments), Gemini (custody/simple trade), Kraken (non-staking products).
*Check the article’s Table 1 for up-to-date statuses—this changes every quarter.*
