A state-by-state guide to US crypto regulation in 2026: money transmitter licensing, New York's BitLicense, kiosk rules, and compliance essentials.
The United States does not have a single, unified federal crypto law. Instead, digital asset businesses operating in America must navigate a patchwork of state-level requirements layered on top of federal obligations from agencies like FinCEN, the SEC, and the CFTC. For founders, compliance officers, and everyday crypto users, understanding this landscape is not optional — it is the price of doing business legally in the world’s largest economy.
This evergreen tracker explains how state-by-state US crypto regulation works, which states have the strictest frameworks, where crypto kiosk operators face dramatic new restrictions, and what any crypto business must know before launching or scaling in 2026.
Unlike the European Union — which adopted a continent-wide framework through MiCA (see our MiCA Explained: The Complete Guide to EU Crypto Regulation for a full breakdown) — the United States leaves substantial financial regulation to individual states under its federalist system. This means a company offering crypto exchange or custody services may need to obtain separate licenses in every state where it operates.
Federal law still applies in parallel. FinCEN requires any business that qualifies as a Money Services Business (MSB) to register at the federal level and implement Anti-Money Laundering (AML) programs under the Bank Secrecy Act. The SEC and CFTC retain jurisdiction over assets classified as securities or commodities, respectively. But when it comes to day-to-day operating licenses and consumer protection rules, the states are in the driver’s seat.
The result: a company legally operating in Wyoming may be breaking the law in New York, and vice versa.
The most common state-level requirement for crypto businesses is the Money Transmitter License (MTL). Historically designed for wire transfer services and check cashers, most states have interpreted these existing laws to cover companies that exchange, transfer, or hold cryptocurrency on behalf of customers.
Obtaining an MTL is not trivial. Requirements typically include:
A startup wanting to serve customers across all 50 states must often obtain 40 or more separate licenses, since not every state has enacted its own law and a small number have exemptions or pending legislation. This multi-state licensing burden is frequently cited as one of the largest compliance costs for early-stage crypto companies.
The Nationwide Multistate Licensing System (NMLS) streamlines some paperwork, but each state still conducts its own review and sets its own standards.
No discussion of US crypto law is complete without New York’s BitLicense, administered by the New York Department of Financial Services (NYDFS). Introduced in 2015, the BitLicense was the first dedicated regulatory framework for virtual currency businesses in the United States and remains one of the most demanding anywhere in the world.
Any company conducting “virtual currency business activity” involving New York residents — including exchange, transfer, storage, issuance, or administration of cryptocurrency — must hold a BitLicense or a limited-purpose trust charter from the NYDFS, regardless of where the company is physically located.
The BitLicense imposes requirements that go well beyond standard MTL obligations:
Obtaining a BitLicense has historically been a lengthy and costly process, and several high-profile crypto companies initially blocked New York customers rather than pursue one.
The NYDFS has also begun issuing conditional BitLicenses to give newer companies a supervised path to full licensure, and has published guidance on stablecoin reserve management — making New York a consistent bellwether for how other states may eventually regulate digital asset issuance.
Wyoming has deliberately positioned itself as the most crypto-friendly state in the country. Its legislative package includes:
Wyoming’s approach has attracted numerous crypto custodians and infrastructure companies seeking a regulated but practical home base.
Texas has taken a business-friendly stance without Wyoming’s legislative innovation. The Texas Department of Banking confirms that most crypto businesses require an MTL, and the state has become a significant hub for Bitcoin mining operations in part because of its deregulated energy market. The state has been generally receptive to crypto industry engagement.
California, the largest US economy by GDP, enacted the Digital Financial Assets Law (DFAL) — signed by Governor Newsom in October 2023. The California Department of Financial Protection and Innovation (DFPI) began accepting DFAL license applications through NMLS on March 9, 2026, with a July 1, 2026 deadline for businesses already serving California residents. Capital, audit, and consumer protection requirements are comparable in scope to New York’s framework.
At California’s scale, compliance is effectively mandatory for any business seeking national reach.
Florida has been notable for high-profile enforcement actions related to unlicensed money transmission involving cryptocurrency. Florida’s Office of Financial Regulation requires MTLs for crypto businesses, and courts in the state have examined whether Bitcoin qualifies as “money” under state law — a question with significant implications for unlicensed operators.
Most other states fall into one of three categories: those that have explicitly extended existing MTL statutes to cover crypto (the majority), those with pending or recently enacted dedicated digital asset legislation, and a small number still operating from informal guidance. Businesses should treat every state as requiring legal review before launch.
Crypto kiosks — physical machines that allow consumers to buy and sell cryptocurrency with cash — present a unique regulatory challenge. They combine the compliance obligations of a money services business with the consumer-facing risks of a largely cash-based, often high-anonymity transaction channel.
Regulators have grown increasingly focused on crypto ATMs as vectors for fraud and scams, particularly those targeting elderly users. State responses have ranged from stricter disclosure requirements to outright prohibition.
Tennessee enacted the most dramatic response of any US state. Citing more than $34 million in fraud losses reported to the Tennessee Bureau of Investigation linked to cryptocurrency scams — many involving kiosks as the primary payout mechanism — the Tennessee General Assembly passed House Bill 2505 in early 2026, banning the ownership and operation of virtual currency kiosks statewide. The ban takes effect July 1, 2026. Violations are classified as a Class A misdemeanor, carrying penalties of up to 11 months and 29 days in jail and fines of up to $2,500 per violation.
Tennessee’s outright prohibition contrasts with the federal approach. The Crypto ATM Fraud Prevention Act (S.710, 119th Congress) would instead require kiosk operators to register each machine’s location and operating details rather than ban them — illustrating how wide the state-federal gap can be on the same policy question.
The Conference of State Bank Supervisors (CSBS) and individual state attorneys general have flagged crypto kiosks as a priority enforcement area. Kiosk operators must assume that state-specific requirements — including potential bans — will only intensify over time.
Whether you are launching an exchange, a custody platform, a kiosk network, or a DeFi product with fiat on-ramps, the practical compliance checklist for US operations is consistent:
For international operators, note that the US framework differs substantially from the EU’s unified MiCA regime. If you serve both markets, compliance programs must address both systems in parallel. The MiCA July 1 Deadline: What Crypto Firms Must Do guide covers those EU obligations in detail.
Last updated: June 2026