Regulatory Arbitrage

Regulatory arbitrage refers to the practice of structuring operations to exploit differences in regulatory requirements across jurisdictions. In crypto markets, it has historically meant incorporating or operating from jurisdictions with minimal licensing requirements, light-touch AML/KYC regimes, or no operative crypto regulation, while continuing to solicit and serve clients in jurisdictions with stricter standards. The result is that firms gain competitive advantages over domestically regulated competitors without bearing equivalent compliance costs, while clients in stricter jurisdictions receive less protection than their regulators intended.

Classic Crypto Arbitrage

The canonical example is Binance, which during its growth phase from 2017 to 2023 operated without a stable primary domicile, shifting registered entities across Malta, Seychelles, Cayman Islands, and other jurisdictions while serving customers in the US, UK, EU, and other major markets. This structure allowed Binance to avoid the capital requirements, custody standards, AML obligations, and consumer protection rules that would have applied had it been incorporated in a regulated jurisdiction. BitMEX, OKX, and numerous other exchanges pursued similar strategies. The pattern was not unique to exchanges: ICO issuers sold tokens globally while incorporating in Cayman Islands or British Virgin Islands entities, exploiting the then-absence of crypto securities regulation in those jurisdictions.

The Mechanisms

Regulatory arbitrage in crypto operates through several mechanisms. Jurisdiction shopping involves selecting a home jurisdiction based on regulatory permissiveness: minimal capital requirements, absence of crypto-specific licensing, or weak AML enforcement. Reverse solicitation exploitation involves the technical claim that clients initiated contact, even where exchanges actively market to restricted jurisdictions through social media, local-language websites, and influencer campaigns. Ownership structure arbitrage involves using offshore holding companies to maintain that no regulated entity operates in the target jurisdiction, even where employees are based there. The practical result in each case is access to global retail markets with the compliance costs of a small offshore regulator.

How Arbitrage Is Being Closed

Several converging regulatory developments are progressively eliminating the most egregious forms of crypto regulatory arbitrage. MiCA’s extraterritoriality provisions require that any CASP offering services to EU retail customers must be licensed in the EU, regardless of where the firm is domiciled. The firm does not need a physical presence — but it needs an EU-authorised entity. CARF — the OECD’s Crypto-Asset Reporting Framework, endorsed by 75+ countries — creates a cross-border tax reporting network that will expose offshore account holders to their home tax authorities starting with the June 2027 first exchange. FATF’s mutual evaluation programme creates reputational and market access pressure on jurisdictions that maintain weak AML regimes: correspondent banks restrict relationships with financial institutions from poorly evaluated jurisdictions, creating economic costs for offshore crypto hubs.

The FATF Travel Rule Gap

Despite FATF’s 2019 extension of the Travel Rule to crypto VASPs, compliance remains incomplete. As of 2025, approximately 27% of FATF member jurisdictions have not adequately implemented Recommendation 16 for crypto. This creates a “sunrise problem”: a compliant VASP sending to a counterparty VASP in a non-compliant jurisdiction cannot transmit Travel Rule data because no infrastructure exists on the other side. Arbitrageurs exploit this gap by routing transactions through non-compliant jurisdictions, breaking the data chain.

Persistent Gaps

Two structural gaps remain resistant to closure. DeFi’s fundamental architecture creates an arbitrage that no jurisdiction-based regulation can fully address: protocols without identifiable legal persons cannot be licensed, cannot be forced to comply, and cannot be effectively prosecuted. Regulatory pressure lands on front-end operators and fiat on-ramps, but the underlying protocols remain accessible. The US non-participation in CARF creates a significant gap in the global tax reporting network: US-based crypto service providers will not be reporting to the same automatic exchange mechanism, creating information asymmetries exploitable by taxpayers routing through US providers.

Domestic Regulatory Arbitrage

Within the US, a form of domestic regulatory arbitrage has emerged from the fragmented federal-state crypto regulatory landscape. Firms that cannot or will not meet SEC or CFTC requirements have operated under state money transmitter licences or sought crypto-friendly state charters (Wyoming SPDI, South Dakota trust company). The Fairshake PAC’s political spending can be understood in part as an effort to maintain this fragmentation by preventing a unified federal regulatory framework that would eliminate arbitrage opportunities between state and federal regimes.