Who Regulates Crypto in the US

    Reviewed and updated September 15, 2026 by the SmartCryptoEarnings editorial team · editorial policy

    People routinely ask which agency to contact about a crypto problem and get contradictory answers, because the honest answer is that several agencies have roles and their remits overlap.

    This page describes what each federal body does, in general terms, using each agency's own published material. It is not legal advice, it does not tell you how any specific asset or arrangement is classified, and agency positions, rules and litigation change over time.

    The short answer

    There is no single crypto regulator in the United States. Agencies act according to what an activity is — a tax matter, a securities offering, a derivatives market, money transmission, a consumer fraud, or a crime to investigate — rather than according to the technology involved. The same arrangement can therefore fall under more than one agency at once.

    Jurisdiction in this area is contested and evolving, including through litigation and legislation. Treat every description here as general orientation and check the agency's own current material before relying on it.

    The agencies, in general terms

    • IRS (Internal Revenue Service) — federal tax administration. Publishes guidance on digital assets, which it treats as property for federal tax purposes, and the forms and instructions used to report transactions.
    • SEC (Securities and Exchange Commission) — protects investors and oversees securities markets. Where a crypto asset or arrangement is offered as a security, registration, disclosure and anti-fraud provisions of the securities laws come into play. Investor.gov is its public education arm.
    • CFTC (Commodity Futures Trading Commission) — oversees derivatives markets, including futures and options, and has anti-fraud and anti-manipulation authority in related spot markets. Its customer advisories cover digital-asset frauds.
    • FinCEN (Financial Crimes Enforcement Network) — a Treasury bureau administering the Bank Secrecy Act. Its rules reach money services businesses, which is the framework behind anti-money-laundering and identity requirements you encounter at platforms.
    • FTC (Federal Trade Commission) — consumer protection against unfair and deceptive practices. It collects consumer fraud reports and publishes consumer alerts on crypto-related scams.
    • FBI IC3 (Internet Crime Complaint Center) — the FBI's intake point for internet crime complaints, including crypto theft and fraud. Filing creates a record used for investigation and referral.
    • Banking regulators and state authorities also have roles — including state money-transmitter licensing and state securities regulators — which is one more reason a single answer rarely exists.

    Where an issue usually belongs

    • Reporting obligations, basis and records — IRS material and a tax professional.
    • An investment offering, a token sale or a platform marketed as an investment — SEC investor material; Investor.gov for education and alerts.
    • Futures, options, leveraged products and related market manipulation — CFTC material and customer advisories.
    • Identity verification, transfer limits and record-keeping at a platform — the Bank Secrecy Act framework administered by FinCEN, as implemented by the platform.
    • A scam, a deceptive platform or a fraudulent advertisement — report to the FTC.
    • Theft, extortion, account takeover or fraud with a loss — report to the FBI's IC3, keeping transaction hashes and records.
    • Many incidents belong in more than one place. Reporting to several is normal and does not conflict.

    What none of these agencies can do for you

    • Reverse a confirmed blockchain transaction. No agency, exchange or service can.
    • Guarantee recovery of stolen funds, or provide a timeline for any investigation.
    • Tell you in advance how a particular asset will be classified, which is often determined through enforcement and the courts.
    • Act as your tax or legal adviser.
    • Anyone claiming an official connection and offering paid recovery is running a well-documented follow-up scam.

    Why the boundaries keep moving

    Digital-asset activity does not map neatly onto statutes written for earlier markets, so the allocation of authority has been worked out through rulemaking, enforcement actions, court decisions and proposed legislation — a process that is still under way. Statements made by any agency reflect its position at that time.

    For that reason we cite agencies' own current pages rather than summarising a settled rule that does not exist, and we do not characterise any specific asset's legal status.

    Frequently Asked Questions

    Which agency regulates cryptocurrency in the US?

    There is no single one. The IRS handles federal tax matters, the SEC addresses activity involving securities, the CFTC oversees derivatives and related fraud, FinCEN administers anti-money-laundering rules, the FTC handles consumer protection, and the FBI's IC3 takes internet crime complaints. State regulators also have roles.

    Where do I report a crypto scam?

    US consumers commonly report to the FBI's Internet Crime Complaint Center and to the FTC, and to the SEC or CFTC where an investment or derivatives product was involved. Reporting in more than one place is normal.

    Can a regulator get my money back?

    No agency can reverse a blockchain transaction, and no agency can promise recovery. Reports support investigations and enforcement; they are not a refund mechanism.

    Is a particular token a security?

    We do not make that determination for any asset, and neither should any website. Classification depends on specific facts and has been contested in litigation. That is a question for qualified legal counsel.

    Sources

    Spotted something out of date? See our corrections policy and fact-checking policy.

    Continue reading

    Educational information only. Nothing here is financial, legal or tax advice.