Cryptocurrency Regulation in the U.S.: Who Regulates What?
One of the strangest things about cryptocurrency regulation in the United States is that there is no single “crypto regulator,” even though people often talk about regulation as though Washington has one office somewhere deciding what Bitcoin, stablecoins, exchanges and tokens are allowed to do.
Instead, crypto sits at the intersection of several legal systems that were created long before Bitcoin existed, which means the same asset or company can encounter different regulators depending on whether it is being sold as an investment, traded through a derivatives contract, transferred as money, held by a financial institution or reported on a tax return.
That is why seemingly simple questions such as “Is crypto regulated in the U.S.?” tend to produce frustrating answers.
The short answer is yes.
The more useful answer is that what regulation applies depends on what the crypto asset is, what someone is doing with it, and sometimes which state they are doing it in.
Understanding that distinction is more useful than memorizing the alphabet soup of agencies.
Why crypto regulation became so complicated
Bitcoin did not arrive with a new body of law attached to it. It arrived in a country that already had securities laws, commodities laws, banking laws, money-transmission rules, tax laws and state licensing systems, and regulators initially had to determine where this new type of asset fitted inside frameworks designed for very different technologies.
The result was predictable: different parts of the government approached crypto from different directions.
An investment regulator asks whether people are putting money into something while expecting profits from the work of others. A commodities regulator thinks about trading markets and derivatives. An anti-money-laundering regulator cares about how value moves between people. The tax authority wants to know whether someone made a taxable gain.
The technology may be the same, but the legal question is different.
Even the word cryptocurrency covers an unusually wide range of assets, from Bitcoin to stablecoins, governance tokens and digital assets tied to particular applications, so treating every token as though it were legally identical has always been difficult.
That distinction became more explicit in 2026, when the Securities and Exchange Commission and Commodity Futures Trading Commission issued joint federal guidance distinguishing categories including digital commodities, digital collectibles, digital tools, stablecoins and digital securities, rather than treating “crypto” as one undifferentiated asset class.
That does not make every regulatory question disappear, but it does reveal something important about where American crypto regulation is heading: increasingly, regulators are asking what an asset actually does, rather than simply asking whether it happens to exist on a blockchain.
What does the SEC regulate?
The Securities and Exchange Commission becomes important when a crypto asset or transaction falls under federal securities law.
This matters because securities regulation is not really about whether something is digital, physical or recorded on a blockchain; it is concerned with the economic relationship between the people raising money and the people providing it.
A company cannot escape securities law simply by replacing a paper certificate with a token.
The SEC’s Crypto Task Force says part of its work is to distinguish securities from non-securities, develop appropriate disclosure frameworks, create realistic paths to registration and determine how existing federal securities laws should apply to crypto assets and intermediaries.
This distinction matters most when tokens are issued or marketed in ways that resemble investments in a business or project.
Imagine that a startup creates a token, sells it to the public to finance development, promises that its team will build a network and strongly suggests that the value of the token will rise as the company succeeds.
The legal question is not simply, “Is this a cryptocurrency?”
The more important question is whether the transaction has characteristics that cause federal securities laws to apply.
That means two assets that look similar on a crypto exchange can have very different regulatory treatment because the technology alone does not determine their legal status.
The SEC also regulates traditional securities that have been placed on blockchains. A tokenized share of a company does not stop being a security merely because ownership is represented digitally.
This is likely to become increasingly important as traditional financial assets move onto blockchain infrastructure.
What does the CFTC regulate?
The Commodity Futures Trading Commission approaches crypto from another direction, particularly commodities and derivatives markets.
Bitcoin futures provide an obvious example.
Someone can buy Bitcoin itself, but someone else can trade a futures contract whose value is based on Bitcoin. Those are related economic activities, but they are not the same financial instrument, and derivatives markets have long fallen within the CFTC’s regulatory framework.
In 2026 the CFTC continued expanding regulated digital-asset derivatives activity, including guidance around perpetual-style crypto futures and the treatment of digital assets used within derivatives markets.
This is one reason the phrase “Does the SEC or CFTC regulate crypto?” is slightly misleading.
It suggests that one agency must defeat the other and take the entire market.
In reality, the dividing line often depends on the asset and transaction involved.
A digital security may fall within securities regulation, while a derivatives contract based on a digital commodity can fall squarely within the CFTC’s territory.
The SEC and CFTC’s March 2026 joint interpretation is therefore significant because the agencies attempted to clarify how their respective frameworks fit together rather than treating crypto regulation as a permanent jurisdictional fight.
There will still be difficult cases, but the important principle for an ordinary investor is simpler: the regulator may change depending on what you are trading, not merely which cryptocurrency name appears on the screen.
Where does FinCEN fit in?
FinCEN, the Financial Crimes Enforcement Network, is less concerned with whether a token is a promising investment and more concerned with the movement of money and the financial system’s exposure to illicit activity.
Its role helps explain why cryptocurrency exchanges ask users for identification.
Under longstanding FinCEN guidance, certain businesses that accept and transmit convertible virtual currency can be treated as money transmitters, bringing them within requirements associated with money-services businesses and the Bank Secrecy Act.
That can involve customer identification, recordkeeping, reporting and anti-money-laundering obligations.
An individual merely buying Bitcoin for personal investment is therefore in a very different position from a company operating a service that receives digital assets from one customer and transfers value to another.
This distinction is easy to miss because both activities may occur using exactly the same blockchain.
Regulation often follows the activity rather than the technology.
That is also why decentralized finance creates difficult regulatory questions. A traditional exchange has a company, executives, employees and accounts that regulators can identify fairly easily, whereas a decentralized protocol can divide functions among developers, smart contracts, governance participants and users.
The underlying regulatory objectives have not disappeared, but determining who is responsible for satisfying them can become much harder.
The IRS does not care whether your coin is a security or commodity before taxing you
Tax regulation introduces yet another layer.
For federal tax purposes, the IRS generally treats digital assets as property, rather than ordinary currency.
That means selling crypto for dollars can generate a capital gain or loss, but so can exchanging one digital asset for another, depending on the circumstances.
This catches beginners surprisingly often.
Someone may think:
“I never withdrew any money to my bank account, so I didn’t make a taxable transaction.”
But taxation does not necessarily wait for dollars to arrive in a checking account.
If an investor bought one asset for $1,000, its value rose to $2,000 and the investor exchanged it for another cryptocurrency, the disposal of the first asset can have tax consequences even though no cash was withdrawn.
The reporting system has also become more formal.
Brokers began reporting certain digital-asset transactions on Form 1099-DA, with gross-proceeds reporting applying to covered transactions beginning in 2025 and basis reporting for certain covered assets beginning with 2026 transactions.
Receiving a form from an exchange does not create the underlying tax obligation, however, and failing to receive one does not automatically eliminate it; the IRS states that taxpayers remain responsible for reporting applicable digital-asset income, gains and losses.
This is another reason crypto regulation cannot sensibly be summarized as “the SEC regulates it.”
The IRS can matter to an ordinary holder even when securities law never enters the picture.
States still matter
Federal regulation gets most of the attention because agencies such as the SEC and CFTC dominate national headlines, but crypto businesses can also face state licensing and regulatory requirements.
New York provides perhaps the best-known example through its virtual-currency licensing regime.
The New York Department of Financial Services says businesses conducting certain virtual-currency activities involving New York or New York residents may require a BitLicense or another appropriate charter, depending on what they do.
This produces an unusual feature of the American system: a service can operate nationally yet still have to think carefully about requirements imposed by individual states.
For consumers, that can explain why a crypto product is available in most of the country but unavailable in one particular state, or why an exchange asks where a user lives before showing which services are available.
Regulation is therefore not only divided horizontally among federal agencies; some of it is divided vertically between Washington and state governments.
What happened to the CLARITY Act?
Congress has spent years considering whether the United States needs a more comprehensive statutory framework for digital assets rather than relying so heavily on regulators interpreting laws written for older markets.
The Digital Asset Market CLARITY legislation became one of the most important efforts to create that framework, in part by trying to establish clearer regulatory treatment for digital assets and the roles of federal regulators.
As of September 2026, however, the legislation has not completed the path into law.
On September 15, the Senate failed to reach the 60 votes needed to advance the legislation procedurally, leaving the existing regulatory framework and agency rulemaking in place while supporters consider whether the measure can be revived or revised.
Supporters of the bill have argued that clearer statutory rules would reduce uncertainty for businesses and investors, while opponents and critics raised concerns that included consumer protections, ethics provisions, anti-money-laundering safeguards and the treatment of stablecoins and banking competition. Those disagreements are part of a broader policy debate over how much crypto-specific legislation is necessary and what protections should accompany it.
The practical lesson is that readers should be careful with articles claiming that Congress has “settled” U.S. crypto regulation.
It has not.
Some areas have become clearer, particularly through agency guidance and rulemaking, but legislation remains contested and the framework can still change.
So is crypto legal in the United States?
For most ordinary users, owning and trading cryptocurrency is legal in the United States, but saying “crypto is legal” is only the beginning of the answer because particular products, business activities, offerings and transactions can still fall under securities, commodities, banking, money-transmission, anti-money-laundering, tax or state laws.
Bitcoin being legal does not mean every token sale is legal.
A crypto exchange being allowed to operate does not mean it can offer every product in every state.
A token being described as “decentralized” does not automatically exempt everyone involved with it from existing law.
And the fact that an asset is not a security does not mean it exists outside regulation entirely.
This is perhaps the biggest misconception created by the argument over whether cryptocurrencies are securities or commodities.
People sometimes imagine only two possibilities: SEC regulation or no regulation.
The actual system contains many more layers.
What regulation means for ordinary crypto investors
Most people do not need to become experts in securities law simply to own Bitcoin, but they should understand enough of the structure to recognize when a regulatory development actually matters to them.
An SEC announcement about tokenized securities may be highly important to an issuer or trading platform while changing almost nothing for someone holding Bitcoin in cold storage.
A new IRS reporting requirement, by contrast, can matter directly to that same holder when tax season arrives.
A CFTC rule involving perpetual futures matters most to someone using derivatives.
A New York licensing decision may affect whether a resident can access a particular platform.
This is why the most useful question is rarely:
“What is the government doing about crypto?”
A better question is:
“Which part of the crypto market is being regulated, by whom, and what activity does the rule actually cover?”
Once you start asking that, American crypto regulation becomes considerably less mysterious.
The regulatory map is becoming clearer, but it is not finished
The United States spent much of crypto’s early history trying to fit a new financial technology into legal categories that were created for older markets, which inevitably produced disputes about definitions, agency authority and the boundaries between securities and commodities.
That process has changed noticeably.
The SEC and CFTC’s 2026 interpretation provides more explicit categories for different types of crypto assets, the SEC continues operating a dedicated Crypto Task Force, the CFTC is developing regulated digital-asset derivatives markets, the IRS has introduced more formal broker reporting through Form 1099-DA, and Congress continues debating broader market-structure legislation.
Yet the system still does not reduce neatly to one regulator or one law.
Perhaps that is not surprising.
“Crypto” itself is no longer one thing.
It includes decentralized commodities, investment products, stablecoins, tokenized securities, payment systems, collectibles, lending protocols and financial infrastructure, all of which can create different legal questions even when they use similar underlying technology.
So if you want a simple mental model for U.S. cryptocurrency regulation, use this one:
The law tends to follow what an asset or business is doing.
The SEC is primarily concerned where securities laws apply. The CFTC oversees derivatives markets and areas within its commodities jurisdiction. FinCEN addresses money transmission and anti-money-laundering obligations. The IRS handles federal taxation. State regulators impose additional rules and licensing requirements in certain areas.
Congress may eventually redraw some of those boundaries.
Until then, asking what activity is taking place remains one of the best ways to understand who regulates it.