BitLicense

What Is BitLicense?

BitLicense is a business license for virtual currency activities issued by the New York State Department of Financial Services (NYDFS). Codified as 23 NYCRR Part 200, it was proposed by then-Superintendent Benjamin Lawsky in July 2014 and took effect on June 24, 2015, making New York the first U.S. state to create a comprehensive regulatory framework specifically for cryptocurrency businesses.

Any company that stores, buys, sells, transmits, or issues virtual currency on behalf of New York residents must hold either a BitLicense or an equivalent charter. The regulation was designed to bring KYC/AML standards, consumer protections, and cybersecurity requirements to an industry that previously operated outside traditional financial regulation. While supporters view it as a necessary safeguard, critics argue it creates prohibitive barriers to entry that favor large incumbents over startups.

How It Works

Under Section 200.2(q), five categories of "Virtual Currency Business Activity" trigger the licensing requirement when they involve New York or its residents:

1. Receiving virtual currency for transmission or transmitting virtual currency
2. Storing, holding, or maintaining custody or control of virtual currency on behalf of others
3. Buying and selling virtual currency as a customer business
4. Performing exchange services as a customer business: converting between virtual currency and fiat, or between different virtual currencies
5. Controlling, administering, or issuing a virtual currency

These categories overlap significantly with money transmitter licensing at the federal level, but BitLicense is a separate, state-level requirement enforced by NYDFS rather than FinCEN.

Exemptions

Not every interaction with virtual currency requires a BitLicense. The regulation exempts several categories:

• Merchants and consumers using virtual currency solely for purchasing or selling goods and services
• Individuals holding virtual currency for personal investment purposes
• Software developers: building crypto software alone is not a covered activity
• Banks and trust companies already chartered under New York Banking Law
• Miners: the act of mining alone does not trigger the requirement

Application Process

Applying for a BitLicense involves a rigorous documentation and review process. The $5,000 filing fee is only a fraction of the total cost.

Applicants must submit a detailed business plan, organizational charts, audited financial statements from an independent CPA, and written policies covering AML compliance, cybersecurity, business continuity, and consumer protection. NYDFS reviews each application individually and may request additional documentation or impose specific conditions.

Ongoing Compliance

Holding a BitLicense is not a one-time obligation. Licensees must maintain continuous compliance across several domains:

• Full BSA/AML program with KYC procedures, OFAC screening, transaction monitoring, and suspicious activity reporting
• Cybersecurity compliance under NYDFS Part 500, including a designated CISO, written security policies, encryption standards, vulnerability assessments, and incident response procedures
• Record retention of all transaction data, customer identification documents, and governance minutes for at least seven years (Section 200.12)
• Annual independent audits and regular financial reporting to NYDFS
• Consumer protection disclosures and formalized customer service standards (updated guidance issued May 2024)

The Conditional BitLicense

In June 2020, NYDFS introduced a conditional BitLicense framework to lower the barrier for new entrants. Under this model, a company partners with an existing licensee and operates under that licensee's compliance infrastructure while building toward a full license. PayPal became the first conditional licensee in October 2020, partnering with Paxos, before converting to a full BitLicense in June 2022.

Limited-Purpose Trust Charter Alternative

Instead of a BitLicense, companies can apply for a limited-purpose trust company charter under New York Banking Law. This alternative path grants broader privileges but comes with bank-level regulatory expectations.

Notable trust charter holders include Gemini Trust Company (October 2015), Paxos Trust Company (May 2015, the first crypto trust charter), BitGo, Coinbase Custody, and Fireblocks. For companies focused on crypto custody or stablecoin issuance, the trust charter often provides a more appropriate regulatory framework than the BitLicense.

Notable Licensees

Since Circle received the first BitLicense in September 2015, NYDFS has approved approximately 33 to 40 entities across both BitLicenses and trust charters. Notable BitLicense holders include:

The list of licensees skews heavily toward well-capitalized firms, reinforcing criticism that the regulation favors incumbents. Bittrex notably had its application rejected in April 2019 due to deficiencies in its capital and AML programs.

The "Great Bitcoin Exodus"

When BitLicense took effect in August 2015, at least ten cryptocurrency companies stopped serving New York residents rather than pursue a license. The New York Business Journal coined the term "Great Bitcoin Exodus" to describe this departure.

Companies that left the New York market included ShapeShift (the first to cut off service, just days after enforcement began), Kraken, Poloniex, Bitfinex, and LocalBitcoins. Their reasoning was consistent: the compliance costs were disproportionate to their New York revenue, and the lengthy approval process created uncertainty that small teams could not absorb.

The exodus highlighted a core tension in crypto regulation. New York's approach prioritized consumer protection and financial stability, but at the cost of reducing competition and pushing innovation to other jurisdictions. States like Wyoming later took the opposite approach, creating regulatory sandboxes and specialized crypto-friendly charters to attract the businesses New York had driven away.

Why It Matters

BitLicense is significant beyond New York because it set the template for how U.S. states approach cryptocurrency regulation. Several key dynamics make it relevant for any company building in the digital asset space:

• New York is the financial capital of the United States: being unable to serve New York residents means excluding a significant portion of the U.S. market
• The regulation influenced federal discussions around crypto compliance frameworks, including the ongoing debate around the GENIUS Act and other stablecoin legislation
• For stablecoin issuers in particular, a New York trust charter or BitLicense has become a de facto signal of regulatory credibility
• The compliance requirements (AML programs, cybersecurity, capital reserves) closely mirror what VASPs face under international frameworks like FATF guidance

For companies building payment infrastructure on Bitcoin or stablecoins, understanding the BitLicense framework is essential for evaluating which activities trigger licensing obligations and whether a trust charter, conditional license, or full BitLicense is the right path. Platforms like Spark that enable self-custodial virtual currency management illustrate how architectural choices around custody and transmission can affect regulatory classification.

Recent Developments

Rather than formally amending the BitLicense regulation, NYDFS has evolved the framework through supervisory guidance and new approval mechanisms:

• In November 2023, NYDFS revised its coin-listing policy, requiring licensees to maintain internally approved listing and delisting procedures with documented risk assessments for each asset
• In May 2024, NYDFS issued guidance formalizing customer service standards for licensees
• At the 2024 Digital Asset Compliance and Markets (DACOM) conference, Superintendent Adrienne Harris stated that NYDFS does not contemplate formal amendments to the BitLicense: the framework will continue evolving through guidance rather than rulemaking
• In June 2025, the New York State Senate passed UCC amendments covering digital assets, potentially reshaping how virtual currency is treated under commercial law
• Major 2026 approvals (Mastercard, Galaxy Digital, Strike) suggest NYDFS is processing applications more efficiently than in earlier years

Risks and Considerations

Barrier to Entry

The total cost of obtaining and maintaining a BitLicense effectively prices out startups. Ethereum co-founder Vitalik Buterin argued that compliance costs "increase barriers to entry and entrench existing large players as an oligopoly." A 2021 Nasdaq editorial titled "Kill the BitLicense" echoed this criticism, arguing the regulation stifles innovation without meaningfully improving consumer protection.

Jurisdictional Arbitrage

Companies that cannot afford a BitLicense simply geo-block New York residents and operate from more permissive jurisdictions. This reduces consumer choice in New York without preventing those consumers from accessing crypto services through VPNs or out-of-state accounts. The regulation may inadvertently push users toward less regulated platforms.

Compliance Burden

Seven-year record retention, annual audits, NYDFS Part 500 cybersecurity compliance, and continuous AML monitoring create significant ongoing costs. These requirements parallel what traditional financial institutions face, which supporters argue is appropriate for businesses handling customer funds but critics see as disproportionate for an industry still in its early stages.

Regulatory Uncertainty

Because NYDFS evolves the framework through guidance rather than formal rulemaking, licensees face uncertainty about future requirements. New coin-listing policies, customer service standards, or cybersecurity expectations can emerge with limited notice, requiring licensees to continuously adapt their compliance programs. For a broader view of global crypto licensing requirements, see the VASP licensing comparison.

This glossary entry is for informational purposes only and does not constitute financial or investment advice. Always do your own research before using any protocol or technology.