Crypto Exchange License USA: MSB, State MTLs and BitLicense

Table of Contents

• Why There Is No Single US Crypto Exchange License
• The Federal Layer: FinCEN MSB and the Bank Secrecy Act
• The Securities and Commodities Overlay
• The State Layer: Money Transmitter Licenses
• State-Specific Crypto Regimes: BitLicense and Beyond
• Costs and Timelines You Should Plan For
• Alternative Routes to the US Market
• Banking for a US Crypto Exchange
• What the License Forces Into Your Software
• US Licensing Checklist
• Frequently Asked Questions
• Bottom Line and Next Steps

Why There Is No Single US Crypto Exchange License

Founders searching for a crypto exchange license USA usually expect one application, one regulator, and one approval. The United States does not work that way. A custodial exchange serving American customers sits under three overlapping layers: a federal anti-money-laundering registration, a securities and commodities overlay that depends on what you list, and a state-by-state money transmission regime that decides where you may actually onboard customers.

That structure is why the US is both the largest crypto market and the hardest one to enter legally. The federal step takes weeks. The state step takes years. Most founders who fail here did not underestimate the rules; they underestimated the sequencing and the capital the state layer demands.

This guide is orientation, not legal advice. Licensing rules change often, states interpret the same activity differently, and several federal bills were still in motion in 2025 and 2026. Use it to plan the conversation with qualified US counsel, not to replace it. For a global comparison of jurisdictions, see our broader licensing overview for exchange founders.

The Federal Layer: FinCEN MSB and the Bank Secrecy Act

Registering as a money services business

The Financial Crimes Enforcement Network (FinCEN) treats exchangers and administrators of convertible virtual currency as money transmitters, a category of money services business (MSB). If you accept and transmit value on behalf of customers, FinCEN expects you to register before you begin operating.

Founders complete FinCEN MSB registration for a crypto exchange online through the BSA E-Filing system. It is free, and the registration must be renewed every two years. Registration is the easy part. It creates obligations rather than granting permission, and it does not authorize you to operate in any state.

The BSA/AML program you must run

Registration binds you to the Bank Secrecy Act (BSA). In practice that means a written AML program approved by your board, a designated compliance officer, employee training, and independent testing. Operationally it means:

• Customer identification with risk-based tiers and ongoing due diligence
• Suspicious Activity Reports (SARs) filed within 30 days of detecting reportable activity
• Currency Transaction Reports (CTRs) for cash transactions above 10,000 USD
• Recordkeeping and the Travel Rule for transfers at or above 3,000 USD, which requires collecting and passing originator and beneficiary information
• OFAC sanctions screening on customers, counterparties, and wallet addresses

These are not paperwork exercises. FinCEN enforcement actions against exchanges have focused on missing SARs, weak transaction monitoring, and programs that existed on paper only. Our KYC and AML compliance guide covers how to build the program itself.

The Securities and Commodities Overlay

The federal AML layer applies to every exchange. A second federal question depends on what you list.

The Securities and Exchange Commission (SEC) has treated some tokens as securities, which would require an exchange to register as a broker-dealer or alternative trading system. The Commodity Futures Trading Commission (CFTC) treats bitcoin and ether as commodities and regulates derivatives on them. Spot commodity trading historically fell into a gap between the two agencies.

During 2025 and 2026, Congress worked on market-structure legislation, commonly referred to as the CLARITY Act, intended to draw the line between SEC and CFTC jurisdiction and to create a federal path for digital asset platforms. The bill’s final form, timing, and implementation rules were still evolving as this guide was written. Check the current status with counsel before building a plan around a federal registration route.

Stablecoins got their own framework earlier. The GENIUS Act, signed in July 2025, regulates payment stablecoin issuers at the federal level. It does not license exchanges, but it shapes which stablecoins you should list and how you describe them. Our guide to stablecoin exchange platforms covers what it means for operators that trade, rather than issue, stablecoins.

Practical takeaway: keep your listing policy conservative, document the legal analysis for every asset, and avoid offering leveraged or derivative products to US retail customers without a specific regulatory path.

The State Layer: Money Transmitter Licenses

Why states control market access

Every state except Montana regulates money transmission, and most treat custodial crypto exchange activity as transmission. A money transmitter license obtained in one state covers only that state. Serving customers nationwide means applying in roughly 49 states plus the District of Columbia and territories, each with its own regulator, fees, and examination cycle.

The Money Transmission Modernization Act (MTMA), a model law written by state regulators, has been adopted by a growing number of states since 2022. It harmonizes definitions, net-worth and bonding formulas, and examination standards. It makes the process more predictable, but it does not create a single national license. Expect to work through the NMLS platform state by state.

What each application demands

Requirements differ, but a typical state MTL application includes:

Requirement	Typical range or form	Why it matters
Surety bond	10,000 to 2,000,000 USD per state, scaled to volume	Protects consumers if you fail
Minimum net worth	100,000 to several million USD, often volume-based	Proves you can absorb losses
Permissible investments	Hold customer funds in approved asset classes	Keeps customer money safe and liquid
Background checks	Fingerprints and financial history for control persons	Fitness of owners and executives
Audited financials	Two to three years, or a startup pro forma	Financial stability
AML program and policies	Full written program plus independent review	Mirrors the federal BSA duties
Business plan and flow of funds	Diagrams showing how customer value moves	Lets the regulator classify the activity

Once licensed, you file quarterly and annual reports, maintain the bond, submit to periodic examinations, and update the regulator about ownership changes, new products, and material incidents.

Where crypto fits by state

Some states have issued guidance or no-action positions explaining when crypto activity is or is not transmission. Non-custodial models, pure software providers, and certain P2P structures may fall outside the definition in some states while being squarely inside it in others. The pattern is inconsistent enough that a written analysis per state is standard practice before launch.

State-Specific Crypto Regimes: BitLicense and Beyond

New York runs the best-known crypto-specific regime. The New York Department of Financial Services (NYDFS) requires a BitLicense for virtual currency business activity involving New York residents, or alternatively a Limited Purpose Trust Charter, which also allows fiduciary custody. New York BitLicense requirements include detailed capital, custody, cybersecurity, consumer protection, and coin-listing policies, plus a separate money transmitter license if you move fiat.

Other states have added their own layers. Louisiana adopted a virtual currency business license. California’s Digital Financial Assets Law (DFAL) created a licensing regime administered by the Department of Financial Protection and Innovation, with licensing obligations phased in around mid-2026; confirm the current effective dates and transition rules before relying on them. Several states also require specific crypto disclosures or custody standards layered on top of their MTL.

The practical effect is that New York and California, the two most valuable state markets, are usually the last two a founder adds, not the first.

Costs and Timelines You Should Plan For

The numbers below are illustrative ranges drawn from public filings and operator experience. Your actual figures depend on volume projections, product scope, and counsel.

Path	Typical timeline	Typical cost (USD)	Notes
FinCEN MSB registration	Days to a few weeks	Free to file; program build 25,000 to 150,000	Policies, training, and a compliance officer are the real cost
First one to five state MTLs	6 to 12 months	150,000 to 500,000	Legal, bonds, net worth, application fees
Nationwide MTL program	12 to 24 months	1,000,000 to 3,000,000 plus ongoing	Scales with bonds, staff, and exams
New York BitLicense	12 to 24 months or longer	250,000 to 1,000,000 plus	Capital and cybersecurity obligations continue after approval
Ongoing compliance	Annual	300,000 to 1,500,000 plus	Staff, audits, reporting, exam remediation

Two planning rules follow. First, budget for the compliance team and audits as permanent operating costs, not launch costs. Second, sequence states by revenue potential and regulator friendliness so that early licenses fund later ones. Our regulatory audit guide explains what examiners look for once you are licensed.

Alternative Routes to the US Market

Most founders do not start with a 50-state program. They pick one of four routes and expand from there.

Partner with a licensed entity

Some licensed money transmitters and trust companies offer sponsorship or agent arrangements. You run the product and the brand; they hold the licenses and the customer funds. This is fast and capital-light, but you inherit the partner’s risk appetite, pricing, and compliance review of every feature. The agent-of-the-payee exemption used in payments is narrow and rarely covers a full exchange, so treat sponsorship as a contractual relationship, not an exemption.

Launch with a model that may fall outside transmission

A non-custodial P2P marketplace, where users trade directly with escrow logic and the platform never takes control of fiat, can sit outside money transmission in some states. The analysis is fact-specific and state-specific. If you take this route, build on a P2P marketplace platform designed for non-custodial flows, and get a written opinion before onboarding a single US customer.

Phased state rollout

Many operators license five to ten high-value, predictable states first, geo-block the rest, and add states quarterly. This converts a single enormous project into a series of smaller ones and lets compliance headcount grow with revenue.

Launch offshore first, geo-block the US

The most common route for international founders is to launch under a lighter regime elsewhere, exclude US persons with geofencing and KYC checks, and return to the US once revenue justifies the licensing program. The geofence has to be real: IP blocking, identity-document country checks, and address verification, with logs you can show a regulator.

Banking for a US Crypto Exchange

A license without a bank account is a license you cannot use. US banks that serve crypto businesses expect you to pass their own BSA review, which looks a lot like a regulator’s. Prepare the same package you built for licensing: ownership chart, AML program, transaction monitoring design, and flow-of-funds diagrams.

Expect to need more than one relationship. An operating account, a segregated customer funds account that satisfies state permissible-investment rules, and a payment processor or correspondent arrangement for card and ACH rails are the usual minimum. Our guide to fiat deposit and withdrawal rails walks through the processor options and how to structure them.

Banks also ask about insurance and custody arrangements. Coverage for hot wallet theft and crime, discussed in our insurance and risk coverage guide, is increasingly part of the bank onboarding conversation rather than a later add-on.

What the License Forces Into Your Software

Licensing is not only a legal project. Every obligation above lands in your platform as a feature, and regulators examine the software, not just the policies. Before you file, your stack should already support:

• KYC tiers tied to limits, so that identity verification level, transaction caps, and permitted products are enforced in code
• Transaction monitoring with configurable rules, case management, and an audit trail for SAR decisions
• Travel Rule data exchange on withdrawals and deposits above the threshold
• Sanctions screening of customers and on-chain counterparties at onboarding and on every transfer
• State-level geofencing, allowing you to enable or disable onboarding, products, and assets per state as licenses arrive
• Regulatory reporting exports for quarterly and annual filings, customer fund reconciliations, and examiner requests
• Segregation of customer funds with ledger-level proof of what is held where

Our compliance overview lists how these obligations map to platform controls. The KYC and AML module handles tiered verification, screening, and monitoring, while the security architecture covers custody segregation and the logging examiners ask for. Codono’s exchange software ships with per-jurisdiction geofencing, configurable KYC tiers, and admin reporting, which shortens the gap between a signed legal plan and a platform that can prove it follows that plan.

If you are launching under a partner’s license or starting with a phased rollout, a white-label exchange deployment lets you change the licensed scope per state without re-engineering the product.

US Licensing Checklist

• Written legal analysis of your product under FinCEN guidance and each target state’s transmission law
• FinCEN MSB registration filed and calendared for biennial renewal
• Board-approved BSA/AML program, designated compliance officer, training plan, independent test scheduled
• Listing policy with a documented securities and commodities analysis per asset
• State sequencing plan with bond, net-worth, and fee budget per state
• NMLS company record, control-person background checks, audited or pro forma financials
• Flow-of-funds diagrams for fiat and crypto, including custody and permissible investments
• Bank, customer-fund, and processor relationships that pass BSA review
• Geofencing, KYC tiers, monitoring, Travel Rule, and sanctions screening live in the platform
• Cybersecurity program and incident response plan meeting NYDFS-style standards if New York is in scope
• Reporting calendar for quarterly and annual state filings and examinations

Frequently Asked Questions

Is there a single federal crypto exchange license in the USA?

No. At the federal level a crypto exchange registers with FinCEN as a money services business and runs a BSA/AML program. That registration is not a license to operate everywhere. Permission to serve customers in each state comes from state money transmitter licenses or state-specific crypto regimes such as the New York BitLicense.

How much does it cost to license a crypto exchange across the United States?

FinCEN MSB registration itself is free. A multi-state money transmitter licensing program is the expensive part: surety bonds, net-worth requirements, application fees, legal counsel, and compliance staff typically add up to seven figures over 12 to 24 months. A New York BitLicense alone is commonly a six-figure project that takes one to two years or more. Treat every figure as an estimate and confirm with counsel.

Can I start a crypto exchange in the United States without state licenses?

Some founders start with models that may fall outside money transmission, such as non-custodial P2P matching, or they operate under a licensed partner’s umbrella. Others launch offshore first and geo-block US users until licenses are in place. Whether a given model is exempt depends on state law and the facts, so get a written legal opinion before relying on an exemption.

Does the GENIUS Act or the CLARITY Act replace state money transmitter licenses?

The GENIUS Act, signed in July 2025, governs payment stablecoin issuers and does not license exchanges. Federal market-structure legislation such as the CLARITY Act was still moving through Congress during 2025 and 2026. Until a federal framework is fully in force, state money transmitter licensing remains the practical gate for custodial exchanges. Check the current status before planning around it.

Bottom Line and Next Steps

A crypto exchange license USA is really three projects: a federal registration you can finish in weeks, a securities and commodities analysis that shapes your listings, and a state licensing program that takes years and seven figures to complete nationwide. Founders who succeed treat the state layer as a phased revenue plan, pick an entry route that matches their capital, and build the compliance controls into the platform before the first application goes out.

Nothing here is legal advice. Engage US counsel early, confirm current federal and state status, and keep the written analysis that regulators and banks will ask to see.

Planning a US launch or a phased rollout? Request a demo to see how geofencing, KYC tiers, and reporting work in practice, or explore Codono crypto exchange software to start from a platform built for licensed operation.

---

The Codono Team has been building crypto exchange infrastructure since 2017. This guide reflects production experience across 250+ exchanges and the compliance requirements operators meet when entering regulated markets.