US Crypto Licensing: State MTLs, FinCEN MSB, BitLicense

A stack, not a licence

The single most useful thing to understand about US crypto licensing is that the question “where do I get a US crypto licence?” has no answer in the singular. The US does not run a federal crypto licence. It runs a stack — federal AML registration, state-by-state money-transmitter licensing, and a separate New York regime on top — and a firm serving the whole country holds many licences in parallel.

This is the comparison founders actually need before they pick.

Federal layer — FinCEN MSB registration

At the federal level, a US crypto business is treated as a Money Services Business (MSB) under the Bank Secrecy Act, and must register with the Financial Crimes Enforcement Network (FinCEN). Registration is the AML layer: identification of the business, key personnel, AML programme requirements, suspicious-activity reporting, and biennial renewal.

FinCEN registration is mandatory, but it is not a licence. It does not authorise the firm to operate in any state. It is a federal AML obligation that runs in parallel with the state licences below. A firm that registers with FinCEN and stops there has cleared one box and missed the rest of the stack.

State layer — state Money Transmitter Licences

Most US states regulate money transmission under state law, and most apply that perimeter to crypto exchange and custody activity. The result: a firm operating across multiple states needs a Money Transmitter Licence (MTL) in each one — applied for, most commonly, through the NMLS (Nationwide Multistate Licensing System) operated by the Conference of State Bank Supervisors (CSBS).

The NMLS platform standardises the paperwork. It does not standardise the decisions. Each state issues its own MTL, conducts its own examination, sets its own capital and surety-bond requirements, and runs its own renewals. A national operating footprint is a 40+-licence project, not a single application.

A small number of states operate alternative charters — Wyoming’s Special Purpose Depository Institution (SPDI) charter is the best-known, designed for crypto custody banks. The SPDI is a state-bank charter, not an MTL, and applies to a specific operating model.

New York layer — the BitLicense

New York is the layer most firms negotiate separately, and it is the layer most often underestimated. Under 23 NYCRR Part 200, the New York Department of Financial Services (NYDFS) licenses virtual-currency business activity through what the market calls the BitLicense. Any firm conducting that activity with New York residents — including custody, exchange, transmission, and issuance — needs the BitLicense.

The BitLicense is layered on top of FinCEN MSB and any other state licences. It is not a substitute. And it carries some of the most demanding crypto-regulatory requirements in the United States: capital, cybersecurity standards under Part 500, AML programme depth, change-of-control approval, and a long, deliberate examination cycle.

Some firms accept the cost and complete it. Others geo-block New York residents rather than take it on. Both are recognised choices in the market; neither is light.

The comparison, side by side

Layer	Issuer / supervisor	Scope	Notes
FinCEN MSB registration	FinCEN (federal)	AML/CFT for money-services businesses, biennial renewal	Mandatory floor; not a licence by itself
State MTLs	Each state’s banking / financial regulator	Money transmission within that state	Applied for via NMLS; ~40+ licences for national coverage
Wyoming SPDI charter	Wyoming Division of Banking	State bank charter for custody-focused crypto models	Alternative to MTL for specific models
New York BitLicense	NYDFS	Virtual-currency business activity with NY residents	Demanding, separate from state MTL
MiCA CASP (EU)	National competent authority in an EU member state	Crypto-asset service provision across the EU	Outside US licensing — for EU customers

Why the US is harder to scope than it looks

The mistake founders make is reading “US” as one jurisdiction. For licensing it is 52: 50 states + DC + Puerto Rico, layered on a federal AML floor and one state’s bespoke regime. Each licence has its own application, its own examiners, its own renewals, and its own capital math.

That structural multiplicity is why the US is the most administratively heavy of the major markets a crypto firm encounters. There is no shortcut: the licences are issued by separate regulators with separate mandates, and the NMLS only unifies the application form, not the decision.

For how the US stack compares to other major regimes side by side, see our crypto exchange licence — jurisdictions compared piece.

The EU caveat

A US licence stack does not reach the EU. The US is not an EU member state, and none of the US licences — federal or state — passport into MiCA-regulated markets. A firm with EU customers needs a MiCA CASP authorisation in an EU member state on top of, or instead of, the US stack — see the crypto licensing pillar guide and the Crypto Jurisdiction Index.

Working with counsel on the US stack

The diagnostic for counsel: ask them to scope the licence stack honestly — federal MSB plus specific target states plus New York if NY residents are in scope — and to size the timeline and capital across the stack, not against a single licence. Counsel that talks about “the US licence” in the singular has not yet engaged with how US crypto regulation actually works. The firms in our index with US licensing experience are listed below.