What Federal Laws Currently Govern Cryptocurrency Exchanges?
There’s no single federal law titled “cryptocurrency regulation” that a US exchange operates under. Instead, exchanges have to piece together compliance obligations from several older bodies of law, each originally written for a different purpose, applied to a newer kind of asset.
The short answer
Cryptocurrency exchanges operating in the United States are generally subject to a combination of securities law, commodities law, and anti-money-laundering and banking law, depending on what specific assets and services they offer. Which agency has primary oversight of a given token or activity often depends on how that token or activity is classified, and that classification isn’t always settled, which is itself an ongoing source of regulatory uncertainty in this space.
Securities law
If a token is determined to function as an investment contract, offerings and trading involving it can fall under federal securities law, which generally requires registration, disclosure, and other investor protections designed originally for stocks and bonds. Whether a specific token counts as a security is decided using tests developed long before cryptocurrency existed, applied case by case, which is part of why the question of whether certain digital assets are regulated as securities remains genuinely unsettled for many tokens.
Commodities law
Other tokens, including the two used to illustrate blockchain mechanics generally, Bitcoin and Ethereum, have historically been treated more like commodities, placing certain aspects of their trading under commodities law rather than securities law. Commodities regulation focuses more on preventing market manipulation and fraud in derivatives and certain spot markets than on the disclosure-heavy framework used for securities.
Anti-money-laundering and banking law
Separately from how a token is classified, exchanges that convert between cryptocurrency and traditional currency, or between different digital assets, generally have to comply with anti-money-laundering laws that predate cryptocurrency by decades. This typically requires identity verification for customers, transaction monitoring, and reporting of suspicious activity, similar in spirit to obligations traditional banks and money transmitters already follow. Related reporting rules, like the travel rule for crypto transfers, extend some of these same principles specifically to how information travels alongside a transaction between institutions.
Why the framework feels fragmented
- Multiple agencies, overlapping jurisdiction. Different federal regulators can have authority depending on how a specific token or activity is classified, and classifications aren’t always consistent across agencies.
- No purpose-built federal statute. Existing laws were adapted to cover crypto activity rather than written specifically for it, so gaps and ambiguities remain.
- State-level rules add another layer. On top of federal law, state money transmitter licensing requirements can also apply, meaning an exchange’s obligations can vary depending on where its customers are located.
How this differs for decentralized platforms
The regulatory picture gets more complicated for platforms that don’t have a clear central operator. Traditional securities and banking law was generally written with an identifiable company in mind, which raises open questions about whether and how the same regulations apply to decentralized exchanges compared to their centralized counterparts. This is an active area of legal and regulatory debate rather than a settled question.
What to weigh
The rules governing crypto exchanges are a patchwork built from securities law, commodities law, and financial crimes law, applied through classification decisions that continue to be tested, litigated, and revised. Because this landscape shifts as new guidance, enforcement actions, and legislation emerge, treat any specific regulatory claim as a snapshot in time rather than a permanent fact, and rely on current official guidance from the relevant agencies for anything time-sensitive or high-stakes.