To research cryptocurrency laws by state, begin with the specific activity and the people, entities, and locations connected to it. Then check the relevant state regulator’s current materials and official law. The available evidence does not establish state-by-state licensing rules, so this is a research framework—not a 50-state survey or a determination that a rule applies.

Why state cryptocurrency rules depend on the activity

“Cryptocurrency activity” can describe arrangements that raise different questions. An individual transferring a digital asset, a business holding keys for customers, and an organization providing exchange-related services should not assume that one legal answer covers all three. The activity and the arrangement matter to the research question; a broad label such as “crypto business” does not supply the answer.

A cryptocurrency transfer has a technical dimension: digital signatures based on asymmetric-key pairs can authorize transfers between users. A valid signature establishes control of the signing key under the protocol, not the signer’s legal identity or the wisdom of the transaction. This technical description can help explain what happened, but it does not decide how a state law applies.

A wallet is another term that needs context. Wallet implementations can generate, manage, store, or use asymmetric keys and blockchain addresses. The word “wallet” alone does not identify whether the user controls the keys or a third party manages access. That distinction is useful when describing an arrangement, but the available evidence does not say how any particular state treats a wallet service.

The functions of an organization may also overlap. A centralized crypto exchange operator may combine trading, proprietary activity, lending, token issuance, and custody, but not every exchange performs every function. A research question should therefore identify which services the organization itself provides and which are handled by another party. Do not infer legal treatment from the word “exchange,” or assume that a service label captures the whole business model.

Location is a separate part of the fact pattern. Record where the entity operates, where its customers are located, and where the activity takes place. These details identify possible states to research; the available evidence does not establish which location controls in a particular case. Treat location as an issue to verify against the relevant official law, not as a shortcut to a legal conclusion.

Cryptocurrency laws by state: define the facts to check

Before searching, write a plain-language description of what is being done and who is involved. Keep it specific enough to distinguish the organization’s activity from the services of a separate provider. Then record the following:

  • Activity: Describe the conduct or service involving digital assets. Avoid relying on a product name alone.
  • Business functions: Identify which services the entity provides, including any exchange-related, custody, or other functions, and which are performed by outside providers.
  • Customer relationship: Note who uses the service and where those customers are located.
  • Key and custody arrangements: Describe who controls the keys or recovery material and whether a third party manages access for customers. This is a factual description, not a conclusion about legal status.
  • Entity and operating locations: Record where the entity is established, where it operates, and where the relevant activity occurs.
  • Question being researched: Specify whether the question concerns licensing, money transmission, consumer protection, or another state-law area.

Use this list for issue spotting, not as a legal test. It helps make the research question clear and gives a regulator or qualified attorney a more precise description. It does not establish that a license, registration, exemption, or other requirement applies.

Keep protocol design distinct from services built around it. Cryptocurrency can support digital peer-to-peer exchange using distributed record-keeping rather than a conventional central transaction processor, while users may still rely on centralized wallets, exchanges, gateways, and other intermediaries. The existence of a peer-to-peer protocol therefore does not settle whether a particular business or service has state-level obligations. Research the actual activity and arrangement rather than drawing a conclusion from the underlying technology alone.

How to verify current state requirements

For each state identified through the fact-finding process, begin with the relevant state regulator and official materials. Locate the statutes, regulations, and regulator guidance that address the topic under review. Check that the material concerns the activity, entity, service, and customer relationship you described; a source covering a different arrangement may not answer the question.

Track dates as part of the verification. Record the publication or effective date shown in the source and the date you reviewed it. Look for later amendments, regulator notices, or updated guidance before treating a source as current. An official page can still be outdated, and a current page can still be irrelevant to the particular activity. If the source does not clearly resolve the question, mark it as unresolved rather than filling the gap with an assumption.

For consequential operational decisions, seek advice from qualified counsel familiar with the relevant states. Provide counsel with the activity description, the locations and customer relationships identified, official source links, dates checked, and open questions. This framework does not determine whether a state requirement applies, and the evidence available here does not support state-specific conclusions about licensing, exemptions, fees, or approval timelines.

Keep state rules separate from federal and tax questions

A state-law review is not a complete compliance review. Federal requirements may apply independently of state rules, and this article does not provide a federal-law guide. As one narrow example, U.S. persons and virtual-currency businesses subject to U.S. jurisdiction are responsible for avoiding prohibited sanctions transactions and applying a tailored, risk-based compliance program appropriate to their activities. This is a federal sanctions point only; it does not establish a state licensing requirement or summarize all federal obligations.

Tax treatment and reporting are separate research questions. Do not infer a tax result, reporting duty, or federal obligation from a state-law summary. Those questions require current, jurisdiction-specific sources and, where needed, qualified professional advice. Keeping the questions separate prevents a state research note from being mistaken for a complete account of legal or tax responsibilities.

Use a state-by-state checklist without assuming uniformity

A simple record can make the research easier to review and update. For each state you are considering, record:

ItemWhat to note
State connectionWhy the state is being researched, such as an entity, operating, customer, or activity connection
ActivityThe specific conduct or service under review
ArrangementBusiness functions, customer relationships, and key or custody facts
TopicThe state-law question to investigate, such as licensing or consumer protection
Official materialsThe regulator page and relevant statute, regulation, or guidance
DatesSource publication or effective date and the date checked
Unresolved issuesQuestions requiring confirmation from an official source or qualified counsel

Do not assume that states use the same definitions, cover the same services, or reach the same result. Confirm that each source applies to the particular entity, service, and customer relationship, and limit any research note to what the source actually says. Recheck official materials before launch or after a material change to the activity, operating model, or customer relationships. The checklist organizes verification; it does not replace a state-specific legal analysis.

Sources and references