1. What Does California Crypto Law Require in 2026?
California's Digital Financial Assets Law creates a state licensing and supervisory framework for specified digital financial asset activity conducted with or on behalf of California residents.
The current framework reflects AB 39, SB 401, AB 1934, and the significant June 2026 amendments enacted through SB 97.
California'S Digital Financial Assets Law after SB 97
DFAL's principal licensing requirement became operative on July 1, 2026.
Under the current statute, digital financial asset business activity generally includes:
Exchanging digital financial assets;
Transferring digital financial assets;
Storing digital financial assets;
Specified activities involving electronic precious metals or certificates representing interests in precious metals.
SB 97 removed digital financial asset administration as a standalone covered activity.
It also repealed DFAL's former standalone stablecoin chapter and expanded exclusions from the definition of digital financial asset for qualifying rewards, gaming, digital ownership records, tickets, and related products.
Those changes make current product classification especially important because pre-SB 97 descriptions of DFAL can overstate the law's present scope.
Businesses That May Need a DFAL License
Businesses that may perform covered activity include:
Crypto exchanges;
Custodians;
Hosted wallet providers that store customer assets;
Digital-asset transfer services;
Crypto ATM and kiosk operators;
Businesses engaged in covered electronic precious-metals activity.
A company does not need a DFAL license merely because it uses blockchain technology or accepts cryptocurrency.
The inquiry is whether the company performs a covered activity with or on behalf of a California resident and whether the asset, person, or activity falls within a statutory exclusion or exemption.
2. Does DFAL Apply to Your Crypto Business?
DFAL can apply even when the company is incorporated or operated outside California.
The relevant nexus is covered activity with or on behalf of a California resident, not simply the location of the company's headquarters.
California Residents and Out-of-State Companies
Financial Code §3103 reaches covered activity by persons doing business in California and by persons located elsewhere that conduct covered activity with or on behalf of a resident.
For DFAL purposes, resident can include:
A person domiciled in California;
A person physically present in California for more than 183 days during the preceding 365 days;
A person with a place of business in California;
Specified legal representatives of California domiciliaries.
A Delaware corporation, offshore company, or business without a California office therefore should not assume that it is outside DFAL.
Customer geography, onboarding, custody relationships, transaction flows, and the services actually provided can affect the licensing analysis.
Excluded Assets and Statutory Exemptions
A product should first be tested against DFAL's definition of a digital financial asset.
After SB 97, qualifying exclusions can include:
Value used in certain affinity or rewards programs;
Value used primarily within qualifying games or game platforms;
Certain digital records representing ownership of art, music, literary works, or similar intellectual property;
Specified collectibles, merchandise, virtual land, and game-related assets;
Qualifying loyalty points;
Certain tickets, licenses, and similar participation rights.
If the asset remains within DFAL, Financial Code §3103 contains separate exemptions for specified persons and activities.
Those exemptions can include certain:
Banks and other regulated entities;
Government activity;
Connectivity, computing, storage, and security providers;
Personal, family, household, or academic activity;
Merchants accepting digital assets for non-digital goods or services;
Qualifying uncompensated activity;
Businesses reasonably expected to conduct no more than $50,000 in annual covered activity with California residents.
A business relying on §3103 should identify the specific exempt person or activity and confirm that other products do not independently create covered activity.
DFPI's 2026 regulations also provide Money Transmission Act relief for certain DFAL persons engaging in legal-tender transmission associated with qualifying digital financial asset activity. That relief is conditional and should not be treated as a universal MTA exemption for every crypto business.
Broader business models may require separate digital asset compliance analysis.
3. What Does DFAL Licensing Require?
DFPI evaluates ownership and control, financial condition, management, proposed activities, and the applicant's operational compliance framework.
A DFAL application therefore requires more than basic corporate registration.
Application, Ownership, and Compliance Documentation
DFPI's final licensing regulations became effective June 29, 2026 and use NMLS for the application process.
Application materials can include information concerning:
Legal entity structure;
Owners and control persons;
Executive officers and responsible individuals;
Fingerprints and background information;
Financial condition;
Covered business activities;
Customer agreements;
Compliance policies;
Operational and cybersecurity controls.
The transition rule requires more than having started an application.
A business relying on the pending-application pathway must have submitted a completed application on or before July 1, 2026 and remain awaiting approval or denial.
DFPI currently expects an initial tangible net worth amount of $100,000 during the application process. The final required amount is determined under Financial Code §3207 based on the applicant's risk profile.
Conditional Licensing for Certain New York License Holders
DFAL also creates a conditional-license pathway for certain applicants with qualifying New York virtual-currency authority.
The Commissioner may issue a conditional California license to an applicant holding a New York BitLicense or qualifying New York limited-purpose trust company approval issued no later than January 1, 2025.
This is not automatic reciprocity.
The applicant still must apply in California, pay applicable fees, and comply with DFAL requirements and any conditions imposed on the license.
A New York authorization therefore can create a licensing pathway without itself authorizing California activity.
Customer Assets and Continuing Compliance
A DFPI license carries continuing operational and customer-protection obligations.
These can include:
Disclosures;
Cybersecurity and operational controls;
Antifraud procedures;
AML-related policies;
Customer complaint processes;
Recordkeeping;
Regulatory reporting;
Customer-asset protection.
Financial Code §3503 generally requires a covered person controlling customer digital assets to maintain sufficient assets of each type to satisfy aggregate customer entitlements.
The statute also separates qualifying customer assets from the covered person's own property for specified creditor and insolvency purposes.
Enforcement Exposure for Unlicensed Activity
Operating without required licensure can create substantial enforcement exposure.
Financial Code §3407 authorizes penalties of up to $100,000 for each day a person engages in unlicensed covered activity.
Material violations by a licensee or covered person can result in penalties of up to $20,000 for each day of violation or each violating act or omission.
For a business that missed the July 1, 2026 transition deadline, continuing California activity should therefore be evaluated together with licensing status and any available exclusion or exemption.
Special Requirements for Crypto Kiosks
California imposes additional requirements on digital financial asset transaction kiosks.
Current requirements include:
A $1,000 per-customer daily transaction limit;
Pre-transaction disclosures;
Detailed receipts;
Reporting of kiosk locations;
Transaction-charge limits;
DFAL licensing beginning July 1, 2026.
The transaction-charge cap generally limits direct and indirect charges to the greater of $5 or 15% of the U.S. .ollar equivalent of the digital financial assets involved in the transaction.
The 15% amount is not calculated simply from the cash tendered by the customer. It is based on the publicly quoted market value of the digital financial assets involved, using a licensed digital financial asset exchange at the time the customer initiates the transaction.
DFPI has already taken enforcement action against kiosk operators involving excessive charges, transaction-limit violations, deficient receipts, and missing disclosures.
4. How Does California Crypto Law Interact with Federal Law?
California licensing does not replace federal regulation.
The same business can face DFAL obligations and separate federal requirements based on money movement, sanctions exposure, asset classification, or the products offered.
Fincen, AML, Securities, and Commodity Rules
Depending on the business model, federal issues can include:
FinCEN registration;
Bank Secrecy Act and AML requirements;
Suspicious-activity and recordkeeping obligations;
OFAC sanctions compliance;
Federal securities law;
Commodities and derivatives regulation.
A DFAL license does not independently satisfy federal BSA/AML or OFAC obligations.
Token classification also remains separate. An asset excluded from DFAL because it is treated as a qualifying security may still be regulated under securities law.
Businesses with significant financial-crime exposure may also need separate AML compliance controls.
Stablecoins after SB 97 and the Federal GENIUS Act
SB 97 repealed DFAL's former standalone stablecoin chapter effective June 30, 2026.
The former California-specific Chapter 6 approval, issuer, and reserve regime therefore should not be treated as current DFAL law.
A stablecoin business can still fall within DFAL when it performs covered activity such as exchanging, transferring, or storing digital financial assets for California residents.
The federal GENIUS Act separately establishes a national framework for payment stablecoin issuers.
As of October 2026, its general effective date is expected to be January 18, 2027 unless the statute's earlier implementing-regulation trigger applies.
Related federal and state requirements may therefore need separate stablecoin regulation analysis.
Separately, SB 822 brought digital financial assets into California's unclaimed-property framework effective January 1, 2026. Those rules concern escheat and custody of abandoned digital assets rather than DFAL licensing.
5. Frequently Asked Questions
No, not automatically.
DFAL permits the Commissioner to issue a conditional license to certain applicants holding a New York BitLicense or qualifying New York limited-purpose trust company authority issued no later than January 1, 2025.
The applicant still must complete the California licensing process, pay required fees, and comply with DFAL and applicable license conditions.
Potentially.
A company outside California can be subject to DFAL when it performs covered digital financial asset business activity with or on behalf of a California resident and no exclusion or exemption applies.
The company's incorporation state or absence of a California office does not resolve the licensing question.
The transition pathway applies only to a company that submitted a completed application on or before July 1, 2026 and is still awaiting approval or denial.
A later application should not be assumed to authorize continued covered activity.
The company should evaluate its current California activity, product classification, available exclusions or exemptions, and licensing and enforcement exposure.
No.
DFPI regulations provide targeted MTA relief for certain qualifying activity, but DFAL does not universally replace California money-transmission or other regulatory requirements.
Securities, AML, sanctions, lending, consumer-finance, stablecoin, and other federal or state rules can independently apply.
6. When a California Crypto Lawyer Can Help with DFAL Compliance
A business serving California residents may need DFAL review before launching a product, changing custody arrangements, adding kiosk operations, expanding into California, or continuing activity after the July 1, 2026 licensing deadline.
A cryptocurrency lawyer in California can assess whether an asset remains within DFAL after SB 97, determine whether the business performs covered activity, and evaluate exclusions, §3103 exemptions, or the New York conditional-license pathway.
A crypto lawyer in California can also assist with NMLS licensing, ownership and control disclosures, customer agreements, custody structures, cybersecurity and AML policies, kiosk rules, MTA overlap, and DFPI examination or enforcement issues.
The timing is especially important when a company relied on pre-SB 97 guidance, submitted an incomplete application, assumed a New York license automatically authorized California operations, or continued serving California residents after the transition deadline.
07 Oct, 2026
