MSB registration vs. money transmitter licensing

Nearly every early-stage digital asset or payments company we work with arrives with some version of the same question: we registered with FinCEN, so we're licensed, right?

No. And the gap between those two things has ended companies.

Federal registration and state licensing are separate obligations, imposed by different authorities, that address different concerns. You will almost certainly need both. Understanding why makes the sequencing of the work much clearer.

The federal piece: FinCEN registration

A "money services business" is a federal regulatory category defined at 31 CFR 1010.100(ff). It captures non-bank businesses that move or exchange value — money transmitters, currency dealers and exchangers, check cashers, issuers and sellers of money orders or traveler's checks, and prepaid access providers and sellers.

If you fall into one of those categories, you must register with FinCEN by filing Form 107 through the BSA E-Filing system. A handful of mechanics matter:

• The 180-day clock. Registration is due within 180 days of the date the MSB is established. This runs from establishment, not from your first customer or your first dollar of revenue.
• Biennial renewal. Registration is renewed every two calendar years by filing another Form 107. This is a genuinely common lapse — the obligation is easy to forget because nothing prompts you.
• Agent lists. If you operate through agents, you maintain a list of them and keep it current.
• Five-year retention. A copy of the filed registration and supporting documentation is retained in the United States for five years.
• Agent-only exception. A business that is an MSB solely because it acts as the agent of another MSB does not register separately. If you act both on your own behalf and as an agent, you do register.

The registration itself carries no filing fee. That leads people to treat it as an administrative formality, which is precisely the misread.

What registration actually obligates you to do

Filing Form 107 is the paperwork. The substance is the Bank Secrecy Act program that has to sit behind it — and that obligation attaches whether or not you ever file. Every MSB must develop and implement a written AML compliance program reasonably designed to prevent the business from being used to launder money or finance terrorism. In practice that means:

• Written policies, procedures, and internal controls calibrated to your actual risk
• A designated compliance officer with genuine authority and access to leadership
• Ongoing training for relevant personnel
• Independent testing of the program — by someone who did not build it
• Customer identification and risk-based due diligence
• Transaction monitoring, with SAR and CTR filing where thresholds are met
• OFAC sanctions screening

The state piece: money transmitter licensing

Federal registration tells the Treasury you exist and subjects you to BSA obligations. It grants you no authority to do business anywhere.

That authority comes from the states, and it comes one state at a time. Nearly every US jurisdiction requires a money transmitter license to engage in money transmission with its residents. Each sets its own requirements, and the variation is substantial:

Most states process applications through NMLS, the Nationwide Multistate Licensing System, which creates the impression of a single front door. It isn't one. NMLS is a filing channel; each regulator still reviews independently, issues its own deficiency letters, and approves on its own schedule.

The MTMA and partial harmonization

The Conference of State Bank Supervisors developed the Money Transmission Modernization Act as model legislation to reduce this fragmentation, and a substantial number of states have adopted all or part of it. That has genuinely helped on definitions and some prudential standards.

CSBS reports that thirty-one states have enacted the MTMA in full or in part. That has genuinely helped on definitions, net worth, surety bond, and permissible investment standards.

It has not created uniformity, and there is a specific trap for digital asset firms. The MTMA's virtual currency provisions are optional, and several adopting states have deliberately excluded them. A state can therefore be MTMA-aligned on capital and bonding while treating virtual currency activity under an entirely separate analysis — or leaving it unaddressed. Adoption of the model act tells you very little about how that state treats crypto.

New York has not adopted the MTMA at all and maintains its own framework, with capital and liquidity standards that diverge from MTMA states. Treat MTMA adoption as one input, never as a shortcut around state-by-state review.

Why nearly everyone needs both

The relationship is straightforward once you see it:

Every money transmitter is an MSB. Not every MSB is a money transmitter — a pure currency dealer or check casher may have federal obligations without triggering transmission licensing. But if you stand in the flow of customer funds, assume both apply until analysis says otherwise.

How this applies to digital assets

FinCEN guidance issued in 2013 established that administrators and exchangers of convertible virtual currency are money transmitters for federal purposes. That position has been reinforced repeatedly since, and it means most exchanges, custodial wallet providers, and on-and-off ramps carry MSB obligations.

State treatment is messier. States differ on whether virtual currency is "money" for purposes of their transmission statutes, and some have built entirely separate regimes for digital assets. A model that requires no license in one state may require one next door — or may require a different license entirely.

The architecture question

The most valuable analysis usually happens before licensing, not during it. Whether you are a money transmitter is a function of how your product is built:

• Do you take control of customer funds or private keys? Custody is the single largest determinant.
• Non-custodial and self-custody models may fall outside transmission entirely — but "non-custodial" has to be true in the architecture, not just in the marketing.
• Pure order-matching without standing in the flow of funds sits differently than a platform holding balances.
• Agent and BaaS arrangements let you operate under a licensed partner's authority. Faster to market, but you inherit the partner's risk and still need a real compliance program.

Small architectural decisions made early determine whether you spend two years and significant capital on nationwide licensure or avoid the obligation lawfully. This analysis is dramatically cheaper before you write the code.

The GENIUS Act: signed, but not yet operative

The GENIUS Act, signed 18 July 2025, created the first federal framework for payment stablecoins and introduced genuine preemption of state licensing — the first real crack in the state-by-state model.

It has not taken effect. This is the single most common misreading we encounter, and it matters because firms are making licensing decisions on the assumption that preemption is available now.

The Act takes effect on the earlier of two triggers: 18 months after enactment, which is 18 January 2027, or 120 days after the primary federal payment stablecoin regulators issue final implementing regulations. Rulemaking was due around July 2026 and has run late. With final rules not yet in place, the January 2027 backstop is the prudent planning date.

Until that date arrives, the state-by-state licensing map governs in full — including for stablecoin issuers.

What it will change, when it does

• Scope is narrow. Preemption reaches permitted payment stablecoin issuers. It does not extend to exchanges, custodians, wallet providers, or any other digital asset activity. If you are not issuing payment stablecoins, this framework does not change your analysis at all.
• Two pathways. Federal qualified issuers, and state qualified issuers below a $10 billion outstanding threshold operating under a state regime certified as "substantially similar" to the federal standard. State regulators were required to submit initial certifications by 18 July 2026, with annual recertification thereafter.
• The preemption differs between the two. For federally qualified issuers, approval expressly supersedes state licensing requirements. For state qualified issuers the position is more nuanced — home state authorisation continues to apply, and commentators genuinely disagree on how far host-state preemption reaches.
• Consumer protection law is never preempted. Only chartering, licensing, and authorisation requirements.
• A separate 2028 date. From 18 July 2028, digital asset service providers may generally only offer or sell payment stablecoins issued by a permitted issuer. That obligation lands on exchanges and platforms, not just issuers.

Five mistakes that cost real money

1. Treating FinCEN registration as "being licensed"

The most common and most consequential. Registration creates obligations; it confers no operating authority. Firms have run for years believing they were covered.

2. Filing Form 107 with no program behind it

Registration puts you on the examination map. Arriving there without written policies, a designated officer, training records, and independent testing converts a routine exam into an enforcement posture.

3. Assuming crypto-only means one license

In several states, handling both fiat and virtual currency triggers two separate licensing regimes. New York is the clearest example. Founders discover this mid-application, after committing to a timeline.

4. Missing the biennial renewal

Nothing reminds you. Two years passes, the renewal lapses, and the firm is unregistered without knowing it.

5. Licensing before settling the architecture

Pursuing licensure for a product still being redesigned means amending applications mid-review, restarting deficiency cycles, and paying for authority you may not need.

Sequencing the work

A defensible order of operations:

1. Analyze the architecture first. Determine whether you are a money transmitter at all, and in which states, based on how the product actually handles funds.
2. Decide the structural path. Direct licensure, an agent or BaaS arrangement, or a redesign that avoids transmission. This decision drives cost and timeline more than anything downstream.
3. Register with FinCEN within the deadline if the MSB definition is met.
4. Build the BSA/AML program in parallel. Not after licensing — state applications ask to see it, and a real program takes months to stand up properly.
5. Prioritize states by where your customers actually are. Nationwide coverage is rarely the right first move.
6. Build the renewal calendar on day one, covering FinCEN biennial renewal, state annual renewals, bond renewals, and reporting deadlines.

This page is general information about regulatory frameworks, not legal advice, and does not create an attorney-client relationship. Licensing requirements, thresholds, and agency guidance change frequently and vary by state. Verify current requirements against the relevant regulator, NMLS, and qualified counsel before relying on anything here.