Licensing for Crypto-Native Startups

The crypto industry presents a unique licensing challenge. Crypto startups are building on a technology stack that predates and exists partially outside the regulated financial system. Many founders come from engineering backgrounds, not finance. They often have sophisticated product vision but minimal regulatory experience. The licensing requirements they face are not obviously connected to their product, and they find the regulatory process frustrating. I've worked with dozens of crypto startups navigating licensing, and I want to be direct: licensing is harder for crypto companies than for traditional remittance startups because your business model sits at the intersection of multiple regulatory regimes, your banking is difficult, and regulators are still figuring out how they feel about your industry.

The unique challenges crypto startups face are worth enumerating:

The technology predates regulation. Bitcoin launched in 2009. The first substantive US regulatory guidance on digital assets came in 2013 (FinCEN guidance on virtual currency). By that time, thousands of people were building crypto infrastructure without regulatory consideration. The regulatory framework was created to fit existing activity rather than guiding future development. This creates ambiguity in how new activities should be classified.

Multiple regulatory agencies have overlapping jurisdiction. If you're a crypto startup facilitating any form of value transfer, you might be subject to regulation by: FinCEN (MSB registration), the OCC or state banking regulators (if you're holding customer funds), the SEC (if your token or service involves securities), the CFTC (if your service involves derivatives or commodities), state money transmitter regulators (if you're sending money), and state securities regulators (if you're offering investments). No single agency tells you you're licensed and you're done. Each agency might have different requirements and different timelines.

Regulatory uncertainty about core business activities. Is a stablecoin a money transmitter? Is a crypto exchange a money transmitter? Is a custodial wallet provider a money transmitter? Is a non-custodial wallet a money transmitter? Regulators give different answers in different contexts. FinCEN has said that stablecoin issuers might be MSBs. The OCC has said that stablecoin issuers might be banks. State regulators have said stablecoin issuers might need money transmitter licenses. The result is massive uncertainty.

Banking is nearly impossible. This is the hardest problem. Traditional banks have largely exited crypto banking due to AML compliance risk, reputational risk, and regulatory scrutiny. A crypto startup that needs a bank account for business operations might have no options. I worked with a crypto staking platform that was fully licensed as an MSB in New York, had a comprehensive AML program, and still couldn't get a business bank account. Banks were willing to discuss it, but when they learned the customer base was 80% crypto traders, they declined.

Customer base is highly technical but AML-averse. Your customers are people who chose crypto partially because they want financial privacy. They don't want to provide KYC information. They want to use non-custodial wallets. They see government regulations as the enemy. When you, as a licensed operator, require them to provide identity information and accept transaction monitoring, some portion of your customer base migrates to unlicensed alternatives. This creates a licensing penalty: the licensed operator has reduced customer value because compliant customers are more constrained than non-compliant alternatives.

The regulatory slope is slippery. Stablecoins are under intense regulatory scrutiny. The SEC has been aggressive about classifying crypto products as securities. The Treasury has issued proposed rules that would require reporting of peer-to-peer crypto transactions. Regulation could change dramatically in ways that affect your business model. A business that's compliant today might be illegal tomorrow.

Choosing a licensing strategy as a crypto company requires understanding your core business activity and mapping it to regulatory regime.

If you're a crypto-to-fiat on-ramp (customers buy crypto with dollars through you): You're likely a money transmitter under FinCEN's guidance. You should register with FinCEN as an MSB and obtain licenses in states where you have customers. You also might need to register with FinCEN as an administrator/exchanger of virtual currency, depending on the exact activity. The licensing strategy is similar to a traditional money transmitter: federal registration plus state licensing.

If you're a stablecoin issuer (you issue a token that maintains a stable value relative to the US dollar): This is genuinely unclear. FinCEN has indicated stablecoin issuers might need MSB registration. The OCC has indicated they might need banking charters. State regulators have been developing their own guidance. The Congressional proposal (the Stable Act) would require stablecoin issuers to be banks or to be insured by the FDIC. The safest strategy today is to obtain MSB registration, state money transmitter licenses, and potentially FDIC insurance if possible. But this is a moving target.

If you're a crypto exchange (you facilitate trading between fiat and crypto): You're definitely a money transmitter under FinCEN's guidance for the fiat side of your business. You need MSB registration and state licenses. You might also need to register with FinCEN as an administrator of virtual currency if you're issuing tokens or managing the blockchain side. Some exchanges treat the fiat on-ramp/off-ramp as a separate licensed entity from the exchange engine itself.

If you're a custodial service (you hold crypto on behalf of customers): This is less clear. If customers can withdraw their crypto at any time, you're probably not a money transmitter because you're not transmitting value on their behalf—they're controlling their own assets. But if you're holding cash as well, or if you're facilitating trades, those activities might make you a money transmitter. The safest assumption is that if you're touching fiat, you need money transmitter licensing. If you're crypto-only, you might not. But regulatory guidance is evolving.

If you're a non-custodial service (users control their own private keys, you don't hold their assets): You might not be a money transmitter at all, depending on your service. If you're just providing infrastructure, you're probably not regulated. But if you're facilitating transactions, you might be. And if you're holding any customer funds—even momentarily in escrow—you're likely a money transmitter.

The minimum viable compliance stack for crypto depends on your business model, but generally includes:

1. FinCEN MSB registration. If you're touching fiat in any way, register.

2. State money transmitter licenses. Determine which states you have customers in and need licenses. Start with the highest-customer states and largest-population states. Getting all 50 states is expensive and time-consuming; starting with 10-15 is reasonable.

3. AML program. Implement customer identification, customer screening, transaction monitoring, SAR filing, and training. Your AML program should be robust enough to survive bank scrutiny and regulator examination.

4. Compliance personnel. Hire a Chief Compliance Officer or at minimum a qualified compliance consultant. This person should understand both crypto and traditional finance regulation.

5. Legal review. Have counsel review your specific business model and any new products before launch. Securities law, AML law, and banking law all apply.

6. Custody and banking structure. Determine how you'll hold customer funds. Many crypto startups use specialized custodians (Fidelity, Kraken Custody, Copper, etc.) that are already set up for crypto and have banking relationships. This outsources the most difficult part of the licensing problem.

7. Documentation. Document your policies, procedures, and risk framework in detail. If you're audited, documentation is your defense.

Banking is the critical bottleneck. I cannot overstate this. A crypto startup can be fully licensed, fully compliant, and still fail because it can't access banking. This happens because:

1. Banks are risk-averse, especially about crypto.
2. Banks view crypto customer bases as higher-risk than traditional customers.
3. Banks have experienced crypto-related fraud and regulatory scrutiny.
4. Some banks have been fined for inadequate crypto AML programs.
5. Regulatory guidance about banks serving crypto businesses is evolving and unclear.

The solution many crypto startups use is to work with a specialized fintech bank that focuses on crypto or has crypto-friendly policies. These include: Silvergate (though it closed in 2023 due to regulatory pressure), Signature Bank, Metropolitan Commercial Bank, and a few others. These banks understand crypto and are willing to manage the compliance burden if you have a robust AML program and are licensed.

Another solution is to use a payment processor that already has banking relationships and can facilitate fiat transactions on your behalf. This outsources the banking relationship to someone who specializes in it.

Another solution is to not touch fiat. A crypto-only platform that handles only crypto-to-crypto transactions might not require money transmitter licensing and might not need a traditional bank account if you're using crypto wallets for settlement. This reduces complexity but limits your market—most mainstream users want fiat on-ramps.

Building credibility with regulators as a crypto company requires understanding that regulators are skeptical of crypto. They've seen innovation used to evade compliance, they've seen wash trading and market manipulation, and they've seen crypto platforms collapse and take customer funds with them. Building credibility means:

1. Being proactive. Don't wait for a regulator to contact you. Register when required. License when required. Implement AML when required. When there's ambiguity, error on the side of compliance.

2. Being transparent. When you communicate with regulators or banks, explain your business model in clear terms. Explain your compliance program. Provide documentation. Respond to inquiries promptly.

3. Having strong governance. A board of directors (or board of advisors) that includes people with traditional finance experience helps. If your board is all crypto engineers and you're seeking a banking relationship, that's a red flag to a bank. If your board includes someone who's worked in compliance at JPMorgan, that's credible.

4. Having experienced compliance personnel. Hire a Chief Compliance Officer who has experience in both crypto and traditional finance. This person is your face to regulators and banks.

5. Documenting meticulously. Every policy, every procedure, every decision should be documented. This demonstrates that you're taking compliance seriously.

6. Engaging with regulators proactively. Some regulators offer virtual or in-person meetings with companies trying to understand regulatory requirements. Use these opportunities. Ask questions. Explain your business model.

Common mistakes crypto founders make in licensing:

1. Assuming non-custodial = non-regulated. Some founders believe that if users control their own private keys, they're not regulated. This is often wrong. Facilitating transactions, holding any customer funds, or providing services that enable fund transfers might make you a money transmitter regardless of custody model.

2. Waiting for regulatory clarity. Some founders believe they should wait until regulators clarify their position before licensing. The problem is that waiting creates liability if your unlicensed operations are later found to require licensing. It's better to err on the side of licensing too much than not enough.

3. Underestimating the time and cost. Money transmitter licensing takes 6-12 months per state and costs $10,000-$50,000 per state in application and compliance setup. Getting licensed nationally costs $200,000-$1,000,000 depending on the number of states and the complexity of your compliance program. Some founders are surprised by this.

4. Treating licensing as a one-time event. Licensing is not a checkpoint you pass. It's an ongoing obligation. You need to renew licenses, maintain compliance, file annual reports, and respond to regulatory inquiries.

5. Not distinguishing crypto-native tokens from fiat. Some platforms issue their own tokens and assume this is separate from money transmission. If your token can be exchanged for fiat, you might be a money transmitter even if most of the platform is crypto-only.

6. Pursuing only national strategies. Some founders think they can license federally and forget about state licensing. This is wrong. You need both federal registration (FinCEN MSB) and state licenses in states where you operate.

The agent/sponsor model is used by some crypto startups. Instead of getting licensed directly, you become an agent for an established licensed MSB. The licensed entity (the sponsor) maintains all regulatory responsibility, and you're an independent contractor. This reduces your licensing burden but increases your dependence on the sponsor. If the sponsor's license is revoked, your business stops. I've seen this work well for smaller platforms that don't want to manage their own licensing.

Timeline and budget expectations for a crypto startup seeking licenses:

First 2-3 months: Decide on your business model, determine which regulatory regimes apply, engage legal counsel, and plan your licensing strategy. Cost: $20,000-$50,000 in legal fees.

Months 3-6: Develop your AML program, hire compliance personnel, determine your banking strategy, and begin MSB registration process with FinCEN. Cost: $50,000-$100,000 (includes staff and consulting).

Months 6-12: Submit MSB registration. Work with banks to establish banking relationship (this is the unpredictable timeline—could be 3 months or 12 months). Begin filing state applications in priority states.

Months 12-18: Continue state licensing. First state licenses arrive (hopefully). Refine AML program based on feedback from first applicants.

Months 18-24: Most states licensed. Company can now operate fully in covered states.

Total timeline: 18-24 months, sometimes longer.

Total cost: $200,000-$1,000,000 depending on how many states you pursue initially. Start with 10-15, expand from there.

A real case study: I worked with a crypto company that was building a stablecoin and wanted to launch in the US. The founders were engineers who had built successful crypto projects. They were technically sophisticated but had no finance experience.

The company's plan initially: Launch the stablecoin immediately, build liquidity, establish exchanges, then figure out licensing.

What we did instead: We first mapped the regulatory landscape. The company realized: - As a stablecoin issuer, they might need banking (OCC guidance suggested possible prudential regulation). - They definitely needed MSB registration and state licenses for the on-ramp/off-ramp services they were planning. - They probably needed to register with FinCEN as an administrator of virtual currency. - They potentially needed SEC review if the stablecoin was a security (unlikely given the structure, but worth getting a legal opinion).

We built a phased plan:

Phase 1 (months 1-6): Get MSB registration, hire compliance staff, begin state license applications in CA, NY, TX. The company delayed token launch until this phase was complete.

Phase 2 (months 6-12): Complete state licensing in first five states, establish banking relationship, complete first audit by external auditor.

Phase 3 (months 12-18): Launch stablecoin in Phase 2 states, continue state license applications.

Phase 4 (months 18-24): Roll out to all major states.

This was slower than the founders wanted, but it was defensible. When they launched, they had: - FinCEN registration - Five state licenses - Audited AML program - Banking relationship - Compliance staff - Board oversight

Did this slow their market entry? Yes. Did it prevent massive regulatory exposure and potential shutdown? Also yes.

The budget for this project was approximately $600,000 over 24 months (legal, compliance staff, consultant time, application fees, banking due diligence costs).

Was it worth it? The company raised an $80 million Series A six months after launch, partially because investors could see they had taken licensing seriously. A year later, the company was generating $50 million in annual transaction volume.

Practitioner's Bottom Line: Crypto startups can be licensed and successful, but it requires treating regulation as a core business problem, not an afterthought. Banking is your biggest bottleneck, and it requires establishing credibility with financial institutions. Start licensing early, not after you've built a large customer base. Estimate 18-24 months and $200,000-$1,000,000 for initial licensing across a reasonable number of states. Do not assume you can operate without licenses and figure out licensing later—that approach creates catastrophic risk.