Does the SEC or the CFTC Have Jurisdiction Over Crypto Exchanges?
Ask which federal agency regulates a crypto exchange and you won’t get a simple one-word answer, because the honest response is: it depends on what’s being traded. That ambiguity isn’t a loophole so much as a genuine, unresolved feature of how US financial regulation was built long before crypto existed.
The short answer
Both the Securities and Exchange Commission and the Commodity Futures Trading Commission can have jurisdiction over crypto activity, but which one applies typically depends on whether a specific token is classified as a security or a commodity. Because that classification isn’t settled for every token, many exchanges end up navigating oversight from both agencies simultaneously, along with state-level regulators.
Why classification is the crux of the issue
US securities law generally covers investment contracts, arrangements where people put up money expecting profits from the efforts of others, while commodities law covers things treated more like raw goods or currencies. Some tokens clearly resemble one category or the other, but many fall into a gray area, and the two agencies have at times reached different conclusions about the same or similar assets. This is a foundational distinction to understand before looking at anything else about how a blockchain differs from a traditional database, since the technology itself doesn’t answer the legal question of what a given token represents.
What falls more clearly under CFTC oversight
- Commodity-like tokens. Assets treated more like a raw commodity than an investment contract tend to fall under CFTC-style oversight, particularly for derivatives trading on them.
- Futures and derivatives markets. The CFTC has a long-standing role overseeing derivatives products, including crypto futures and swaps, regardless of how the underlying spot token is classified.
- Fraud and manipulation in commodity markets. The CFTC has pursued enforcement actions tied to manipulation in crypto markets it views as falling under its commodity authority.
What falls more clearly under SEC oversight
- Tokens resembling investment contracts. If a token was sold in a way that implied investors were relying on the effort of a central team to generate returns, the SEC has argued that resembles a security offering.
- Exchanges listing security-like tokens. A platform that lists and facilitates trading of tokens the SEC views as securities can fall under securities-exchange registration requirements.
- Disclosure and registration enforcement. Much of the SEC’s crypto enforcement activity has centered on whether issuers and platforms met disclosure obligations that apply to securities offerings.
Why this overlap creates real uncertainty for exchanges
An exchange that lists a broad mix of tokens may be dealing with assets that different agencies would classify differently, and the exchange itself doesn’t get to make that determination unilaterally. This regulatory uncertainty is one of the genuine risks worth weighing when evaluating any platform, alongside more familiar risks like volatility and the absence of deposit insurance, and it can even factor into events like an exchange account freeze if a regulator takes action against a listed token. It also helps explain, at a structural level, why an exchange might suddenly change what it lists, restrict certain tokens in certain jurisdictions, or adjust its compliance posture: the legal ground it’s standing on can shift.
What this means for someone using an exchange
None of this jurisdictional debate changes the underlying risks of holding crypto: it remains volatile, transactions are irreversible, private keys can be lost permanently, and holdings aren’t covered by FDIC or SIPC protection regardless of which regulator, if any, has authority over a given token. Regulatory uncertainty is simply an additional layer of risk on top of those, and the rules in this area continue to evolve, sometimes significantly, as courts and legislators weigh in.
What to weigh
The SEC-versus-CFTC question doesn’t have a clean, universal answer because it depends on the specific token and the specific activity involved, and reasonable regulators have disagreed on where the lines fall. Anyone evaluating a platform or a token benefits from understanding that this classification uncertainty is real and ongoing, and treating any confident claim about a token’s legal status with appropriate skepticism until it’s been clearly settled.