PART TWO: STATE-BY-STATE LICENSING Chapter 5

Tier 1 States: High Volume, High Complexity


When you walk into a money transmission business, you quickly learn that all states are not equal. There are states where regulations exist more or less on paper, and there are states where regulators take their job seriously, scrutinize applications intensively, impose rigorous requirements, and actively supervise licensees after the license is issued. The Tier 1 states are the latter category. These are the states with the largest financial markets, the most sophisticated regulatory oversight, the most complex licensing requirements, and the most demanding regulators.

Tier 1 states include California, New York, Texas, Florida, Illinois, and Washington. If you operate in any of these states, your licensing process will be more demanding and more expensive than in a typical state. Your ongoing compliance burden will be more substantial. Your licensing timeline will be longer. But these states also represent tremendous market opportunity, which is why virtually every money transmitter operator eventually applies for licensure in all of them.

5.1 California (DFPI): The Most Complex License in the US

California's money transmitter licensing regime, administered by the Department of Financial Protection and Innovation (DFPI), is widely considered the most demanding in the United States. California is the largest economy in the US, home to the world's most significant fintech cluster, and the state's regulators have the resources and the will to scrutinize applications thoroughly. If you can navigate California licensing, you can navigate anywhere.

The statutory framework is the California Money Transmitter Law, codified primarily in California Financial Code sections 21000 through 21225. The statute is detailed and prescriptive. Unlike many states, California doesn't leave much room for interpretation. The statute specifies exactly what constitutes the practice of money transmission, exactly what exemptions apply, and exactly what standards licensees must meet.

The definition of money transmission in California is functional and broad. California regulates anyone who receives money from one person and transmits it to another person or a place. This includes obvious cases like remittance operators and payment processors, but it also captures some surprising activities. If you're a company that accepts customer deposits and uses those deposits to buy cryptocurrency on behalf of customers (even if the customer owns the cryptocurrency), you're engaged in money transmission under California law. If you operate an escrow service where customers deposit funds that you hold and disburse, you're likely a money transmitter unless you qualify for an escrow exemption.

California's application requirements are more demanding than most states. You'll submit the standard NMLS MU forms, but you'll also submit supplemental California-specific forms. The DFPI requires detailed information about your technology infrastructure, your data security procedures, your business continuity and disaster recovery plans, your customer complaint procedures, and your relationship with any third-party service providers. The DFPI wants to understand not just what you'll do, but how you'll do it technically.

The financial statement requirement in California is a genuine audit, not a review. The audit must be prepared by a California-licensed CPA or by a firm with appropriate credentials. The audit must be unqualified (clean) or at minimum must have only immaterial exceptions. An audit opinion that identifies material weaknesses in internal controls or material going-concern issues can result in denial or requests for remediation.

California also requires an extensive business plan, often called a "detailed description of operations." This document should be comprehensive. The DFPI wants to know: your specific money transmission services and the customers you'll serve; your pricing and fee structure; how you'll acquire customers; how you'll move money (bank relationships, wire transfers, ACH, other methods); how you'll custody customer funds; your technology platform and infrastructure; your data security measures; your anti-money laundering and customer due diligence procedures; your compliance training procedures; your customer complaint procedures; your role in any transactions involving third-party processors or foreign exchange services; your financial projections; your background, experience, and competency of key personnel; your ownership structure; and your affiliations with other entities.

This operational description often runs thirty to forty pages and includes system diagrams, process flows, screenshots of your actual platform (or mock-ups if you're pre-launch), and detailed procedures. The DFPI wants enough information to actually understand how your business works, what risks it creates, and how you'll manage those risks. This is not a marketing document; it's a technical and operational specification.

California also requires that you demonstrate adequate net worth. The statutory minimum is fifty thousand dollars, but the DFPI often applies an implicit higher standard depending on your business model and transaction volume. If you're projecting a billion dollars in annual transactions and you have fifty thousand dollars in capital, the DFPI will question whether that capitalization is adequate.

Surety bonds in California must be issued by a surety company authorized to do business in California and must comply with specific California requirements. The minimum bond amount is generally fifty thousand dollars for smaller operators, but can extend to several hundred thousand dollars depending on your transaction volume and risk profile. The DFPI has significant discretion here.

The DFPI's examination of your application is thorough. Expect multiple rounds of requests for additional information or clarification. If the DFPI has questions about your technology, they might ask for a detailed technical security assessment from a third-party firm. If they have questions about your capitalization or your ability to protect customer funds, they might ask for additional financial documentation. If they have questions about your compliance procedures, they might ask for sample policies, evidence of training, or other documentation.

The timeline for California licensing is typically four to eight months under normal circumstances, though I've seen applications take up to fourteen months when the regulator has substantial concerns about the applicant's business model or background. The DFPI maintains a relatively transparent application status portal, and you can see your application status in real-time.

California also requires that you designate a specific person as the California-based compliance officer or representative. This person must be located in California (or at minimum, available during California business hours). Some operators hire a California-based compliance consultant for this role; others assign an internal employee. The DFPI wants to be able to reach someone in California during business hours with authority to address compliance issues.

One of California's unique requirements is ongoing reporting. After you receive your license, you're required to submit quarterly reports to the DFPI detailing your transactions, your revenue, your customer complaints, and other operational metrics. You're required to notify the DFPI of any material changes to your business, any significant customer complaints or regulatory issues, and any changes to your key personnel. California regulators are not passive; they expect to hear from you regularly.

I worked with a fintech company that applied for a California money transmitter license. Their initial application was straightforward—they were a small payment processing company transitioning to operating their own money transmitter license. We submitted what we thought was a comprehensive application. The DFPI sent back a fifteen-page list of information requests. They wanted screenshots of their platform; they wanted detailed system architecture diagrams; they wanted the name and contact information for their third-party payment processor; they wanted evidence of their capitalization; they wanted copies of their company policies. We spent two months responding to these requests. Once we provided the additional information, the DFPI approved the license in another month. The entire process took five months.

The practical reality of California licensing is that it's worth the effort and the cost. California represents a significant market, and operating legally in California eliminates the risk of enforcement action, administrative penalties, and customer disputes regarding the legitimacy of your licensing. California regulators are serious about preventing fraud and protecting consumers, which ultimately benefits legitimate operators.

5.2 New York (DFS): The BitLicense and the MTL Together

New York's approach to money transmitter licensing is unique because New York requires two separate licenses: the traditional Money Transmitter License (MTL) and, for certain businesses, the BitLicense. Understanding how these two licenses interact is essential for anyone operating in New York.

The Money Transmitter License in New York is administered by the Department of Financial Services (DFS) and is governed by New York Banking Law Article 12-B. The MTL is the traditional license required for anyone engaging in money transmission as that term is defined in the statute. The statutory definition is functional and broad: any person who receives money or monetary value from one person and transmits it to another person (or place) at a different location.

New York's MTL requirements are substantial. The application is filed through NMLS, but New York adds significant supplemental requirements. You'll submit the standard MU forms, but you'll also submit New York-specific forms and documentation. New York requires audited financial statements, a detailed business plan, detailed information about your technology infrastructure and security procedures, details about your customer protection procedures, and detailed information about your ownership structure and key personnel background.

New York's minimum net worth requirement is one million dollars for money transmitters. This is significantly higher than most states. A company cannot apply for a New York money transmitter license unless it has at least one million dollars in net worth. For new companies or small operators, this is a substantial barrier to entry in New York.

The BitLicense is a separate license that applies specifically to virtual currency (cryptocurrency, stablecoins, and similar assets). If you're a money transmitter that also deals in virtual currency—for example, you offer an exchange service where customers can buy Bitcoin—you may need to apply for both the MTL and the BitLicense. The two licenses are distinct; they govern different aspects of the business.

The BitLicense, formally a "virtual currency business activity license," is governed by New York's Cybersecurity Requirements for Financial Services Companies (23 NYCRR 500) and specific provisions of the New York Banking Law. The BitLicense applies to anyone engaging in a virtual currency business activity, which includes receiving virtual currency from one person and transferring it to another, providing virtual currency exchange services, holding virtual currency on behalf of customers, or providing related financial services involving virtual currency.

The BitLicense application requires extensive information about your virtual currency business. You'll describe your services, your customers, your technology platform, your virtual currency storage and custody arrangements, your insurance coverage, your technology security measures, your business continuity plans, and your cybersecurity incident response procedures. New York requires that you implement specific cybersecurity standards, including multi-factor authentication for customer accounts, encryption of customer data, regular security testing, and documented incident response procedures.

New York also requires that BitLicense applicants maintain separate banking accounts for customer funds and provide periodic proof that customer funds are being properly segregated and protected. If you're holding cryptocurrency on behalf of customers, you'll need to describe your custody arrangement, typically through a qualified custodian.

The combination of the MTL and BitLicense creates a significant regulatory burden for virtual currency or cryptocurrency-related businesses. The application process is complex, the requirements are demanding, and the regulator is actively supervising licensees post-issuance. New York publishes enforcement actions regularly, and they pursue licensees for technical violations of the cybersecurity requirements, the surety bond requirements, and other detailed provisions.

New York's surety bond requirement is the highest in the country, at least in some contexts. The statutory minimum is five hundred thousand dollars for money transmitters, though the DFS can require higher amounts depending on your transaction volume. For BitLicense holders, the surety bond requirement can extend to one to two million dollars for larger operators, though many smaller BitLicense applicants get approved with lower bonds.

One significant complexity is that New York does not use the NMLS portal exclusively. While you submit your initial application through NMLS, New York has its own supplemental application forms and processes. You'll need to submit New York-specific supplements through the NMLS portal, and you'll need to track New York's own communication and requirements separately.

The timeline for New York licensing is typically six to twelve months, and sometimes longer if the regulator has concerns about your business model, your capitalization, or your security infrastructure. New York's DFS is not the fastest regulator in the country. They take their time, they ask detailed questions, and they don't rubber-stamp applications. The payoff is that once you receive a New York license (MTL and/or BitLicense), you can operate with confidence that you've met the most demanding standards in the industry.

I worked with a cryptocurrency exchange that applied for both MTL and BitLicense in New York. Their initial application was met with extensive requests for additional information about their virtual currency custody arrangements, their insurance coverage, and their cybersecurity procedures. The DFS wanted to understand not just what they claimed they would do, but how they would actually implement the security measures they described. We provided detailed system architecture diagrams, copies of their security audit reports, documentation of their insurance coverage, and samples of their customer authentication procedures. The entire process took nine months from initial submission to license issuance. The cost was substantial, but operating legally in New York—the largest financial market in the US—justified the investment.

5.3 Texas (DoB): Agent of a Payee Exemption and Its Limits

Texas regulates money transmitters through its Department of Banking, and Texas law is found in the Texas Finance Code, Chapter 59. Texas takes an interesting approach to money transmission: they focus heavily on a specific exemption known as the "Agent of a Payee" exemption, and they use that exemption to reduce the scope of activities that require a full money transmitter license.

Texas's definition of money transmission is functional: anyone who receives money or monetary value from one person and transmits it to another person (or to a place) as a result of the receipt of money from the first person. This is consistent with most states. However, Texas provides an exemption that is quite broad: a person is not a money transmitter if they are acting as an agent of a payee (the recipient of money).

What does "agent of a payee" mean in practical terms? It means that if you're acting on behalf of the person who is receiving the money, rather than acting as an intermediary facilitating the transfer, you're exempt from the money transmitter license requirement. The canonical example is a bill collection agency: a customer gives you money to pay their electricity bill, you collect that money on behalf of the utility company (the payee), and you transmit the money to the utility. You're an agent of the payee (the utility), so you're not a money transmitter.

This exemption is powerful for certain business models and is significantly narrower for others. The critical question is: whose agent are you? If you're genuinely acting as an agent of the payee—you're authorized by the payee to collect and transmit money on their behalf—the exemption applies. If you're acting as an intermediary between a customer and a payee, or if you're acting as an agent of the customer, the exemption does not apply.

I worked with a payment processing company that was offering bill payment services to consumers. Their business model was that consumers would log into an online platform, select bills to pay, and the company would transmit the payments to utilities, insurance companies, and other service providers. The company wanted to rely on the Agent of a Payee exemption to avoid needing a money transmitter license in Texas. However, the company was not authorized by each individual payee to collect payments. Rather, the company had a general agreement with a few large processors that allowed them to facilitate payments to a broader range of payees. This was insufficient to qualify for the exemption. The company was acting as an intermediary, not as an agent of the specific payees. They needed a money transmitter license in Texas.

Texas regulators have become more restrictive in applying the Agent of a Payee exemption over the years. The original intent of the exemption was to address specific business models like bill collection agencies. It was not intended to be a broad exemption for any company involved in money movement. Modern Texas Department of Banking guidance makes clear that you cannot rely on the exemption unless you have actual authorization from the payee to act as their agent, and you're collecting money specifically authorized by the payee for the payee's benefit.

For companies that do not qualify for the exemption, Texas requires a full money transmitter license. The license application is filed through NMLS. Texas requires the standard MU forms, audited or reviewed financial statements, a business plan, and detailed information about your business model and operations. Texas has a minimum net worth requirement of fifty thousand dollars, which is modest compared to other large states.

Texas's surety bond requirement ranges from twenty-five thousand dollars to three hundred thousand dollars depending on your business model and transaction volume. The bond must be issued by a surety authorized to do business in Texas.

One unique aspect of Texas licensing is that Texas requires you to designate a person who will be in charge of your money transmission business and responsible for compliance. This is often your Chief Compliance Officer or your Chief Executive Officer. Texas wants to know who is responsible and wants to be able to contact that person.

The timeline for Texas money transmitter licensing is typically four to six months. Texas regulators are reasonably efficient, though they will issue detailed information requests if your application raises questions. The overall licensing experience in Texas is less demanding than in California or New York, but still substantial.

Texas also has specific requirements regarding the protection of customer funds. If you're holding customer funds (for example, a customer submits fifty dollars to transmit to a family member overseas, and you hold that fifty dollars briefly before transmitting it), you must maintain those funds in a segregated account. You cannot commingle customer funds with operating funds. You must be able to account for customer funds at any time.

5.4 Florida (OFR): High Volume State with Specific Surety Requirements

Florida's money transmitter licensing is administered by the Office of Financial Regulation (OFR), and it's governed by Florida Statutes Chapter 655. Florida is a high-volume state for money transmission, particularly for remittances to Latin America and the Caribbean, and the OFR takes licensing seriously.

Florida's definition of money transmission is functional and consistent with most states: anyone who receives money or monetary value from one person and transmits it to another person at a different location. The statute does provide some exemptions, including a narrow exemption for persons acting as agents of a payee (similar to Texas, but less detailed in the statute), an exemption for licensed financial institutions, and various other exemptions for specific services.

Florida's application requirements follow the standard NMLS process, but with specific Florida requirements. You'll submit MU forms, audited or reviewed financial statements, a business plan, and detailed information about your operations. Florida requires that your financial statements be prepared by a Certified Public Accountant and represent your actual financial condition. If you're a startup with no operating history, you'll submit financial projections.

Florida's minimum net worth requirement is typically fifty thousand dollars, though the OFR may impose higher requirements based on your specific business model and transaction volume. Florida also requires a detailed surety bond, and this is where Florida's regime becomes distinctive.

Florida requires a surety bond that covers all customer funds that you're holding at any given time. The bond amount is not a fixed statutory minimum; rather, it's tied to your actual or projected customer fund balances. If you're holding five hundred thousand dollars in customer funds on a typical day, your surety bond must cover that amount. The practical effect is that as your business grows, your surety bond requirement grows with it.

This creates a specific operational constraint that many operators don't anticipate. If you have fifty thousand dollars in customer funds but your surety bond is only fifty thousand dollars, and you suddenly have one hundred thousand dollars in customer funds due to a surge in transactions, you're in violation of Florida's requirements. You must maintain bond coverage that matches your actual customer fund balances.

The surety bonds themselves are expensive, typically costing one to three percent of the bond value annually. A company with five hundred thousand dollars in customer funds would pay five thousand to fifteen thousand dollars per year for surety bond coverage. This is a material ongoing cost of operating in Florida.

Florida regulators are also attentive to specific operational practices. Florida requires detailed written policies regarding customer fund protection, customer complaint procedures, and transaction procedures. If you're holding customer funds, you must maintain those funds in a segregated account at a Florida bank (or at least at a bank regulated by federal banking authorities). You must be able to reconcile customer fund balances daily.

Florida also requires that you maintain detailed transaction records and be able to produce them on demand to the regulator. If the OFR asks for records of all transactions over a certain amount, or all transactions involving a specific customer, you must be able to produce them quickly.

The timeline for Florida licensing is typically three to five months, assuming your application is complete and raises no significant issues. Florida regulators move at a reasonable pace. The licensing experience is straightforward, though the surety bond requirement and the customer fund management requirements create specific operational burdens.

I worked with a remittance company that was expanding into Florida to operate a network of physical money transfer locations. The company was already licensed in several other states, so the core application was relatively straightforward. However, Florida's surety bond requirement created a new constraint. The company was planning to hold customer funds at each location while customers waited to verify their identity and complete their transaction. With twenty locations across Florida, the company could have several hundred thousand dollars in customer funds in aggregate. We had to increase their surety bond from the initial fifty thousand dollars to five hundred thousand dollars to match their actual customer fund balances. The cost was significant, but it was a necessary part of operating the business model in Florida.

5.5 Illinois (IDFPR): The Transmitter of Money Act

Illinois regulates money transmitters through the Illinois Department of Financial and Professional Regulation (IDFPR) under the Transmitter of Money Act, found in the Illinois Currency Exchange Act and related provisions. Illinois is home to major financial institutions and a significant fintech ecosystem, and the state takes money transmitter licensing seriously.

Illinois's definition of money transmission is functional: any person who acts as an intermediary in the movement of money on behalf of others. This includes traditional money transmitters, payment processors, and various other money movement businesses. Illinois provides some exemptions, including exemptions for licensed banks, for persons acting solely as agents of customers (not agents of payees, which is different from the Texas approach), and for certain specific service providers.

Illinois's application process follows the standard NMLS pathway. You'll submit MU forms, financial statements, and a detailed business plan. Illinois requires audited or reviewed financial statements. The state has a minimum net worth requirement of one hundred thousand dollars, which is above the fifty thousand dollar baseline many states use.

One distinctive aspect of Illinois licensing is the specific focus on anti-money laundering (AML) procedures and customer due diligence (CDD). The state's regulations require detailed AML/CDD procedures, and the state's examiners review your compliance with these procedures intensively. You must be able to demonstrate that you're conducting customer verification, that you're identifying beneficial owners for business customers, that you're screening customers against sanctions lists, and that you're maintaining detailed transaction records.

Illinois also requires that you designate a compliance officer responsible for ensuring that your company complies with all applicable laws. This person must have meaningful authority within the company and must be accountable for compliance matters. The IDFPR wants to be able to contact your compliance officer with questions about your operations.

The surety bond requirement in Illinois typically ranges from fifty thousand dollars to two hundred fifty thousand dollars depending on your business model. Illinois does not tie the bond requirement directly to customer fund balances the way Florida does, but rather uses discretion based on risk assessment.

Illinois also requires that you maintain records of all transactions and be able to produce them to the regulator on demand. The state conducts examinations of money transmitter licensees, where regulators visit your offices, review your records, interview your staff, and assess your compliance with all applicable laws. These examinations can be intensive and time-consuming.

The timeline for Illinois licensing is typically three to four months, though it can extend if the regulator has questions about your business model or your compliance procedures. Illinois regulators are reasonably efficient, and the state issues status updates through the NMLS portal.

Illinois has also been attentive to emerging technologies and has issued guidance regarding cryptocurrency exchanges, stablecoin issuers, and other novel business models. If your business model involves virtual currency, you should review Illinois's guidance to determine whether you need a money transmitter license and what additional requirements might apply.

5.6 Washington State (DFI): The Digital Wallet Law and Money Transmitter Licensing

Washington State regulates money transmitters through the Department of Financial Institutions (DFI) under the Washington Money Transmitters Act, found in the Revised Code of Washington (RCW) Chapter 19.230. Washington is the home of Seattle, a major technology hub, and the state's regulations reflect a balance between facilitating innovation and protecting consumers.

Washington's definition of money transmission is functional: any person who receives money from one person and transmits it to another person or another location. Washington provides exemptions for licensed banks, for persons acting as agents of the specific payee, and for certain other specific situations.

One unique aspect of Washington's regime is the Digital Wallet Law. Washington distinguishes between money transmission (which requires a license) and the provision of digital wallets (which is regulated separately). If you're providing a wallet where customers store prepaid value and can transfer that value to other customers, you may be engaging in money transmission. However, if you're simply providing a custodial service where customers hold cryptocurrency or other assets, you may be regulated under different rules.

Washington's application process follows the standard NMLS pathway. You'll submit MU forms, financial statements, and a business plan. Washington requires audited or reviewed financial statements and has a minimum net worth requirement of fifty thousand dollars.

Washington also requires a detailed business plan that specifically addresses your compliance procedures, your customer fund protection measures, and your technology infrastructure. Washington regulators want to understand how you'll operate, what risks you'll manage, and what procedures you'll implement to protect customers.

The surety bond requirement in Washington typically ranges from fifty thousand dollars to two hundred fifty thousand dollars depending on your business model and transaction volume.

One distinctive aspect of Washington licensing is the state's relatively swift processing timeline. Washington typically approves applications within four to six months, assuming the application is complete and raises no significant issues. The DFI is reasonably efficient, and Washington is considered a relatively business-friendly state for money transmitter licensing.

Washington also allows for a streamlined license type called a "restricted money transmitter license" for businesses that transmit money in limited ways or with limited transaction volumes. The restricted license has lower financial requirements and simpler operating procedures. This can be helpful for startups or for small operators that are just getting started.


Need Help Navigating Money Transmitter Licensing?

Faisal Khan has spent 15+ years solving the exact problems covered in this book. If you are building a payment company, seeking licensing, or need a trusted advisor — reach out.

SPEAK WITH FAISAL KHAN