A crypto business operating in the United States faces two layers of oversight at once. Federal agencies and individual states both assert authority, and neither displaces the other.
The federal layer is divided by function
Federal oversight is organized around what an activity is rather than what industry it belongs to, so a single company can face several agencies simultaneously.
Whether a token is treated as a security, a commodity, or neither determines which regulator has a claim, and that determination is contested rather than settled.
Separately, anti-money-laundering obligations attach to money transmission regardless of how the asset is characterized, which is why registration duties arrive early for exchanges.
States regulate the customer relationship
Money transmission has historically been licensed state by state, and holding customer funds while moving value generally triggers those requirements.
A national service therefore needs licenses across many jurisdictions, each with its own application, bonding requirement, capital standard and examination schedule.
New York's separate regime for virtual currency businesses is the best known example, and firms frequently launch nationally while excluding specific states.
Why offerings differ by address
The state-by-state pattern explains why a product available in most of the country is unavailable in a handful of states, sometimes for years.
Staking services, lending products and specific token listings are the usual casualties, since these attract the most divergent treatment across jurisdictions.
Firms disclose these limits in their terms, and the geographic restrictions are enforced through the identity information collected at account opening.
State enforcement operates independently
State securities regulators and attorneys general bring their own actions, and they are not required to wait for a federal position to develop first.
Coordinated multistate actions are common, with several states filing similar claims against the same firm, which multiplies the cost of defending a single business practice.
A firm can therefore face state proceedings over conduct that no federal agency has challenged, which is one source of the industry's regulatory uncertainty.
What this means for a user
Available services depend on residence, and moving between states can change what a person's existing account is permitted to do.
Requirements shift over time as legislatures act and agencies issue guidance, so any description of the current position dates quickly.
Anyone whose circumstances turn on these questions needs advice from a professional familiar with their specific state, because the details vary and change.