Introduction
"MSB license" is common shorthand, but it blurs two separate layers. The first is federal Money Services Business (MSB) registration with FinCEN. The second is state authorization for money transmission or virtual currency activity. Most US crypto businesses must deal with both.
Founders usually run into the same three problems:
- Launching before deciding whether their model is regulated at all
- Assuming FinCEN registration lets them serve customers nationwide
- Underestimating the AML, banking, and state licensing work
The stakes are real. FinCEN fined BitMEX $100 million in 2021 for Bank Secrecy Act violations.
This guide covers who qualifies as an MSB, how to file, when state licenses apply, what compliance controls to expect, and how to plan costs and timelines.
Key Takeaways
- An MSB is a federal classification; FinCEN registration is not a state money transmitter license.
- Exchanges, hosted wallets, OTC desks, and payment businesses may qualify based on what they do and control.
- FinCEN registration alone does not authorize nationwide service.
- Plan your AML program, compliance leadership, state analysis, and banking readiness before launch.
What Is an MSB in the USA, and When Does Crypto Activity Qualify?
Classification, registration, and license are different things
Under the Bank Secrecy Act, 31 CFR 1010.100(ff) defines an MSB by activity: money transmission, currency dealing or exchange, check cashing, certain monetary instruments, and prepaid access. FinCEN is the federal regulator.
Three terms get mixed up:
- Classification: whether your activities fit the definition
- Registration: the FinCEN filing that follows
- Operating license: state-level permission, which FinCEN does not grant
How FinCEN treats crypto roles
FinCEN's 2013 guidance separates users, exchangers, and administrators. A user who spends convertible virtual currency (CVC) for their own purposes is not an MSB on that basis. Exchangers and administrators generally act as money transmitters unless an exception applies.
FinCEN's 2019 guidance applies a functional test built on control and transfer activity. A hosted-wallet provider that accepts and transmits CVC for customers can be a money transmitter. A person spending their own CVC from an unhosted wallet is not.
Common models
| Model | What drives the analysis |
|---|---|
| Custodial exchange | Holds customer value and exchanges it |
| Hosted wallet | Accepts and transmits CVC for others |
| Crypto kiosk/ATM | FinCEN's 2025 notice says operators commonly act as exchangers or transmitters |
| OTC desk or payment processor | Exchange or transmission between parties |
| Stablecoin or token issuer | Issuance and redemption authority; the label alone decides nothing |
Prepaid access providers and sellers are a separate MSB category with their own definitions and exceptions. Separately, FinCEN and OFAC issued a 2026 proposed rule on AML and sanctions programs for permitted payment stablecoin issuers under the GENIUS Act. It is a proposal, not a final rule.
Non-custodial and "decentralized" labels
Non-custodial wallets and trading interfaces may be treated differently, but the label doesn't settle anything. A dApp operator that accepts and transmits value can still be a money transmitter. A platform that only brings parties together, with settlement outside it, is distinguished from one that interposes its own exchange transactions.
Document your analysis
Write down the regulatory analysis before you file or launch. Include:
- Customer and transaction flows
- Who controls the wallets and keys
- Counterparties and supported assets
- Jurisdictions served
- Any exclusion or exemption you are relying on
Banks and regulators ask for this memo. Fraxtional evaluates business models before any filing for this reason: the analysis drives everything after it.
How to Register a Crypto Business as an MSB with FinCEN
Preparation
Before opening the filing, settle these items:
- Legal entity and ownership structure, including indirect owners
- EIN and other business identifiers
- Product and transaction-flow map
- Operating jurisdictions
- A named compliance contact
Foreign founders can apply for an EIN through the IRS international channels. An EIN is not an MSB license, though. A foreign-located MSB doing business wholly or substantially in the US must also designate a US agent for service of process.
Filing Form 107
MSBs register on FinCEN Form 107 through the BSA E-Filing System. The filing identifies the business, its MSB activities, ownership and control, and the compliance contact. Read the current form instructions before you start, because they take precedence over any third-party checklist.
Under 31 CFR 1022.380:
- Initial registration is generally due within 180 days of establishing the business
- Renewal is due every two calendar years, by December 31 of the renewal year
- The obligation applies whether or not you hold a state license
- Certain changes require re-registration, including a 10% or greater change in ownership or control
Current Form 107 instructions do not state a filing charge. Confirm the fee status in the BSA E-Filing instructions rather than relying on a third-party "free" claim.
What to have ready alongside the filing
FinCEN does not review your AML program at filing, but you are expected to have one. Prepare:
- A written AML program and risk assessment
- Customer identification procedures
- A transaction monitoring approach
- Sanctions controls
- Recordkeeping and escalation procedures
After registration
Keep a copy of the registration and the agent list, which is maintained rather than filed. Registration records fall under a five-year retention rule. Update when required, renew on time, and keep reporting systems running.
Registration is one component of a compliance program. It is not permission to operate in every state.
State Licensing Requirements for Crypto Businesses in the USA
States decide on activity and customer location
State regulators decide whether you need a money transmitter license, a virtual currency license, or something else. They look at what you do and where your customers or counterparties are. Incorporation state matters little: a Delaware or Wyoming entity doesn't make licensing easier, because formation state differs from operating jurisdiction.
No single official count of states requiring licenses is published, so treat the common "49 states" claim with caution. The Conference of State Bank Supervisors reports that 31 states had enacted the Money Transmission Modernization Act (MTMA) in full or part as of September 2026. That is an adoption statistic, not a licensing count.
Build a state licensing matrix
For each state, track:
- Where customers are located and where you solicit them
- Whether you take custody, and the fiat and crypto flows
- Product functionality
- Exemptions you may claim
- Registered-agent requirements
- NMLS filing needs
- Crypto-specific regimes
NMLS offers a multistate filing channel, not a nationwide license. A common Phase 1 filing is followed by jurisdiction-specific Phase 2 requirements. Many states also require registration or exemption filings when you operate through a licensed banking partner.
Crypto-specific regimes
- New York: The BitLicense (23 NYCRR Part 200) requires NYDFS authorization for covered activity. The application fee is $5,000.
- California: The Digital Financial Assets Law's licensing date was July 1, 2026. Check DFPI's current records for your status.
- Louisiana: A Virtual Currency Business Activity regime applies, with a $100,000 initial surety bond in statute. That is the bond amount, not your premium.
Verify each regime on the regulator's site before relying on it, since these rules shift.
Typical application requirements
Expect most states to ask for:
- A business plan and financial statements
- Ownership and control-person disclosures with background checks
- AML policies and compliance officer details
- Surety bonds and net worth or capital evidence
- Permissible-investment documentation
- Ongoing reports
Phase your launch carefully
A phased strategy makes sense. Pick launch states by customer concentration, product scope, and regulator readiness, and go live in one or two while others are pending.
The risk is serving unlicensed states by accident. Use geofencing, onboarding checks, and written controls so customers in pending states cannot sign up. If you pivot your model midway, applications may need amending or refiling in some states.
Build the AML/BSA Program Regulators and Banking Partners Expect
Core program elements
Under 31 CFR 1022.210, an MSB's program must include written policies, procedures, and controls; a designated compliance officer; ongoing training; and independent review. It must be built around your actual risks. In practice that means:
- Enterprise and product risk assessments
- Customer identification and beneficial-ownership procedures
- Enhanced due diligence and customer risk ratings
- Transaction and wallet monitoring
- Sanctions screening, including OFAC guidance for the virtual currency industry
- Case management and escalation
Reporting and recordkeeping
Thresholds matter, and some are commonly misquoted:
| Obligation | Current rule |
|---|---|
| Suspicious activity report | Generally $2,000 or more; file within 30 calendar days of detection; keep records five years |
| Currency transaction report | Cash transactions over $10,000, subject to aggregation rules |
| Funds-transfer records and Travel Rule | $3,000 or more (31 CFR 1010.410) |
FinCEN withdrew a proposal to lower the threshold for certain international transfers to $250. The current figure remains $3,000. Always verify against the eCFR, since thresholds can change.
Governance regulators look for
Policies on paper do not satisfy examiners. They look for:
- A compliance officer with real authority and resources
- Senior-management oversight and staff training
- Independent testing and issue remediation
- Vendor oversight
- Evidence that controls operate in practice, such as alerts reviewed and cases closed
NYDFS's $30 million penalty against Robinhood Crypto in 2022 cited AML, cybersecurity, and consumer-protection findings. It shows how supervisors judge execution.
Banking readiness
FinCEN's 2005 and 2014 guidance supports risk-based banking of MSBs rather than treating them as categorically high-risk. Banks will still want proof. Have this ready:
- Regulatory analysis and FinCEN registration
- AML risk assessment
- Sample monitoring alerts
- Sanctions controls
- Compliance officer credentials
- Audit results
- State licensing roadmap
Fractional compliance leadership
Early-stage firms often can't justify a full-time executive. Fraxtional's director-led fractional model can supply:
- BSA Officer, CCO, CAMLO, or MLRO leadership on advisory, subscription, or fractional terms
- Directors who can be named in regulatory filings and audits
- Sponsor bank introductions and independent audits for third-party validation
None of this guarantees approval, licensing, or banking access. It gives you experienced ownership of the program while you build.
MSB Costs, Timelines, and a Practical Launch Roadmap
Cost categories
Budget these separately rather than hunting for one total:
- Federal filing (confirm current instructions)
- Entity formation and legal analysis
- AML policy development and compliance personnel
- KYC and monitoring technology
- Independent testing and insurance
- Registered agents
- State application fees and NMLS charges
- Surety bonds and capital requirements
- Renewals, examinations, and reporting
NMLS processing fees are $120 initial and $120 annual for a company filing, $25 per branch, and $35 per individual (effective March 2025). Those amounts exclude state agency fees.
New York's BitLicense application costs $5,000. No reliable national figure exists for bond premiums or net worth, so get state-specific quotes.
What drives timing
No universal processing timeline is published, so treat any "licensed in 90 days" claim with suspicion. Timing depends on:
- Business-model complexity
- Entity and tax setup, and foreign ownership
- AML program readiness
- Regulator questions and background checks
- Application completeness
- Phased versus broad launch
A practical sequence
- Scope the model. Map flows, custody, and customer locations, and write the analysis memo.
- Form the entity. Settle the ownership structure and obtain identifiers.
- Build and test the AML program. Include the risk assessment, monitoring, and sanctions controls.
- File with FinCEN. Complete Form 107 within the deadline.
- Prepare state applications. Sequence by demand and readiness.
- Secure banking and payment relationships. Bring your evidence package.
- Obtain authorizations and launch. Go live only in states where you're cleared.
- Maintain. Track renewals, reporting schedules, and audit readiness.
Fraxtional's licensing process follows the same arc: pre-filing strategy, filing preparation, and post-filing compliance.
Frequently Asked Questions
How much does it cost to obtain an MSB license in the US?
There is no single total. Federal FinCEN registration itself costs little, but entity setup, AML programs, state fees, bonds, capital, and legal support add up quickly. Check current official fee schedules.
What is MSB in the USA?
A Money Services Business is a category defined under the Bank Secrecy Act. Crypto exchangers, administrators, and money transmitters may qualify. MSB registration is not a nationwide operating license.
Can an Indian register a company in the USA?
Foreign nationals may be able to form or own a US entity. Entity formation, tax ID, FinCEN registration, state licensing, banking access, and immigration or tax issues are separate questions. Get current professional advice.
What is the $3,000 bank rule?
It usually refers to funds-transfer recordkeeping and Travel Rule requirements at $3,000 or more under 31 CFR 1010.410, not a general bank-account rule. Check the regulation for transaction type and aggregation.
Does FinCEN registration allow a crypto business to operate in every state?
No. It addresses federal MSB obligations and does not satisfy state money transmission or virtual currency licensing. Assess every state where you operate or serve customers.
Does a crypto business need both FinCEN registration and state money transmitter licenses?
Often, yes. If your activities amount to money transmission or regulated virtual currency activity, you may need federal registration plus state licenses. The answer depends on your model, custody, flows, exemptions, and state law.
