BitLicense: New York Crypto Regulation

Part 200 is organized around “virtual currency business activity” involving New York or a New York resident. The covered categories include receiving or transmitting virtual currency, holding custody or control for others, buying and selling virtual currency as a customer business, performing exchange services as a customer business, and controlling, administering, or issuing a virtual currency.

• Businesses may be covered even when they are not physically based in New York, if the covered activity involves New York or a New York resident.
• The rule includes exemptions for merchants and consumers using virtual currency solely for purchasing or selling goods or services or for investment purposes.
• DFS guidance also states that software development or dissemination by itself is not virtual currency business activity, and that mining alone does not necessarily require a BitLicense.

Section 200.3 provides that no person may engage in covered virtual currency business activity without a license unless an exemption or approved charter pathway applies. The regulation also gives DFS application, examination, suspension, revocation, and supervisory powers over licensees.

Part 200 requires licensees to maintain capital in a form and amount determined by DFS, maintain customer-protection arrangements such as a bond or trust account, and hold the same type and amount of virtual currency owed to customers when acting as custodian. It also requires written compliance policies, a designated compliance officer, anti-money-laundering controls, customer identification, suspicious-activity monitoring, cybersecurity policies, a chief information security officer, testing, and recordkeeping.

The rule requires business and transaction records, quarterly financial statements, audited annual financial statements, and DFS access for examinations. It also contains consumer-protection provisions, including risk disclosures addressing matters such as legal tender status, government backing, FDIC or SIPC coverage, transaction irreversibility, price volatility, fraud risk, cyber risk, fees, receipts, complaint handling, and anti-fraud policies.

The BitLicense is most relevant to exchanges, custodians, hosted-wallet businesses, payment or transmission intermediaries, and issuers or administrators that fall within the rule’s definition of virtual currency business activity. It is not framed as a general license for consumers, miners, or software developers. Its practical reach comes from the rule’s connection to New York or New York residents, making it a state-level regime with implications for national and international crypto firms serving New York users.

The State Register notice described a transitional period requiring persons already engaged in covered virtual currency business activity to apply within 45 days after the rule’s effective date. Since adoption, DFS has supplemented Part 200 with supervisory guidance. For example, DFS issued updated coin-listing guidance on November 15, 2023 for virtual currency business entities licensed under Part 200 or chartered as limited purpose trust companies, with the guidance taking effect immediately and superseding prior guidance.

This profile is for legal-reference and editorial research purposes only. It does not provide legal, tax, investment, trading, or compliance advice.