BitLicense (New York)

The BitLicense is the popular name for the virtual currency licence issued by the New York Department of Financial Services (NYDFS) under the New York Codes, Rules and Regulations Part 200. Finalized in June 2015 after a two-year regulatory development process, the BitLicense was the world’s first bespoke cryptocurrency exchange and business licence. It remains the most comprehensive state-level crypto licensing requirement in the United States and has exercised disproportionate global influence on how regulators think about exchange licensing requirements.

Origins and the Lawsky Era

The BitLicense was developed under Benjamin Lawsky, the first Superintendent of Financial Services at the NYDFS — the agency created by merging the New York Banking Department and the Insurance Department in 2011. Lawsky initiated proceedings on virtual currency regulation in 2013 with a series of public hearings and engagement with industry, academics, and consumer advocates.

The final Part 200 regulations reflected Lawsky’s view that virtual currencies were a serious financial innovation requiring serious regulatory oversight, but that overly prescriptive regulation would drive innovation offshore. The BitLicense imposed substantive requirements on capital, cybersecurity, AML/KYC compliance, consumer protection, and business continuity — requirements that many in industry considered excessive in 2015 but that in retrospect anticipated requirements that would be adopted globally.

Scope and Requirements

The BitLicense requirement applies to any person engaged in “virtual currency business activity” involving New York or New York persons. Virtual currency business activity is broadly defined and includes: receiving or transmitting virtual currency; storing or maintaining custody of virtual currency on behalf of others; buying and selling virtual currency as a customer business; performing exchange services; and controlling, administering, or issuing a virtual currency.

The breadth of this definition — particularly the nexus-based “involving New York or New York persons” — means that any significant exchange serving US customers is likely within scope.

Licensed businesses must maintain minimum capital (the amount determined by NYDFS based on the specific business); implement a written anti-money laundering program and know-your-customer procedures; maintain a comprehensive cybersecurity program; implement a written business continuity and disaster recovery plan; segregate customer funds; conduct annual audits; and file periodic reports with NYDFS.

The application process requires submission of detailed information about the business model, management team, shareholders, technology infrastructure, compliance program, and financial projections. The $5,000 application fee is non-refundable, and the review process has historically taken 12-18 months or more.

The 2015 Bitcoin Exodus

When the BitLicense’s final text was published, multiple prominent crypto businesses announced they would cease serving New York customers rather than apply for the licence. Kraken, ShapeShift, Poloniex, and several smaller exchanges publicly withdrew from New York. The industry collectively labeled this response the “Bitcoin Exodus.”

The criticism centered on the compliance burden and cost for smaller firms, the breadth of the scope provisions, and the application timeline. Critics argued that the BitLicense was designed for large, well-capitalized firms and would prevent the open experimentation that had characterized crypto’s early development. Supporters argued that operating in the world’s financial capital required meeting the standards expected of any financial institution.

The exodus was consequential: it established the pattern of firms making deliberate geographic compliance choices — serving some markets, withdrawing from others — that would characterize the crypto industry’s approach to regulation globally.

The Conditional BitLicense

In June 2022, NYDFS introduced the Conditional BitLicense, a reform designed to address one of the original regime’s chief criticisms: that full BitLicense review was too slow and costly for early-stage businesses. The Conditional BitLicense allows firms to operate in New York while seeking full BitLicense approval, provided they are licensed in a qualifying jurisdiction and satisfy certain requirements.

The Conditional BitLicense has been used by several firms that are licensed by NYDFS-approved equivalent regulators, including those regulated by the CFTC, OCC, or certain other state regulators.

Global Influence

Despite — or perhaps because of — the controversy it generated, the BitLicense became a global reference point for exchange licensing design. Regulators developing exchange licensing requirements in Singapore (MAS Payment Services Act), the UK (FCA registration), the EU (MiCA CASP authorization), and elsewhere have reviewed the BitLicense’s requirements when designing their own frameworks.

Key elements that recur in subsequent exchange licensing regimes include: capital requirements calibrated to business type; mandatory AML/KYC programs; cybersecurity requirements; business continuity planning; customer asset segregation; and regular reporting to the regulator. The BitLicense established the basic template.

NYDFS has continued to develop its virtual currency oversight beyond the BitLicense itself, issuing guidance on dollar-backed stablecoins, greenlist currencies for custody, and cybersecurity requirements that have been cited internationally as best practice standards.