New York's BitLicense made custody a licensed activity

Inherited archive entry · retained from the earlier edition. Its factual, legal and policy claims have not all been reverified for 19 September 2026. Research scope.

The first state licence built for virtual currency

New York's virtual currency regulation, 23 NYCRR Part 200 and known as the BitLicense, was finalised and took effect on 24 June 2015, according to the Department of Financial Services' own account. It requires a licence for anyone conducting 'Virtual Currency Business Activity' with a New York resident, defined to include receiving virtual currency for transmission, buying and selling it as a customer business, performing exchange services, and — the category most relevant to custody — 'storing, holding, or maintaining custody or control of Virtual Currency on behalf of others.' Holding a customer's coins, not merely trading them, was written into the licence's scope from the start.

What an applicant actually has to demonstrate

DFS's own application guidance requires a 'substantially complete' filing through the Nationwide Multistate Licensing System covering financial statements, a business plan, compliance procedures, and officer and director information, with incomplete filings denied for insufficiency rather than reviewed on the merits. For custodians specifically, a later industry letter dated 23 January 2023 sets out what the regulation requires in practice: customer virtual currency 'separately account[ed] for and segregate[d]... from the corporate assets,' third-party sub-custodian arrangements requiring Department approval before use, and written disclosure of custody terms obtained before a customer transacts. That letter was itself superseded by updated guidance in 2025 — a boundary worth noting: the licence has not changed since 2015, but the department's interpretation of custody compliance has kept moving.

The boundary: a licence, not a guarantee

DFS's own licensing page lists several firms that have since surrendered a BitLicense rather than continue operating under it — Bakkt Crypto Solutions, Cboe Clear Digital, SoFi Digital Assets, Genesis and Coinsource among them — evidence that the licence has always been a compliance obligation some firms choose to exit rather than a status conferring lasting market presence. A licence records that a firm met the department's application and disclosure requirements at a point in time; it does not attest to solvency, does not prevent a later surrender, and does not by itself verify that segregation and disclosure duties are being met on any given day.

Questions to carry forward

• Is a custodian's segregation of customer assets described in a disclosure the licence requires, or only in marketing material?
• Has a firm's licence been surrendered or revoked since the date being cited for its BitLicense status?
• Does the custody guidance a firm claims to follow reflect the department's current interpretation, or an earlier one already superseded?

The BitLicense's lasting contribution was procedural: it made virtual-currency custody a licensed, disclosed activity in one state a decade before federal reserve and disclosure rules did the same nationally, and its list of surrendered licences is a reminder that the licence itself is a floor, not a guarantee.