Key Takeaways
- The U.S. Securities and Exchange Commission (SEC) is the primary US regulator determining whether a crypto asset is a security, governing exchange registration, enforcement, and disclosure. Its March 2026 interpretive release, issued jointly with the CFTC, introduced a five-part token taxonomy that most exchanges now default to.
- What you list determines how you register. Securities-listed exchanges must register with the SEC as a national securities exchange or ATS, while platforms trading digital commodities fall under CFTC oversight.
- The regulatory climate has shifted since Chairman Paul Atkins took over in April 2025, but exchange owners shouldn’t mistake a friendlier tone for a changed legal standard; much of today’s framework is still built on non-binding staff guidance.
- If you operate across borders, a one-size-fits-all approach won’t cut it; the FCA, MiCA/ESMA, and MAS each define regulated instruments differently, and your obligations must be mapped country by country.
The U.S. Securities and Exchange Commission decides which crypto assets count as securities, which exchanges must register, and which enforcement risks a business actually carries. That determination now shapes exchange licensing, custody design, and disclosure obligations for any platform operating in the U.S. or serving U.S. users. For exchange owners and compliance officers, the SEC’s current posture is friendlier than it was two years ago, but the underlying legal test hasn’t changed, and several open questions still carry real exposure.
What the SEC Regulates in Crypto
Within crypto, the SEC’s authority centers on three things: deciding which tokens count as securities, requiring exchanges that list those tokens to register as national securities exchanges or ATSs, and enforcing disclosure and anti-fraud obligations on issuers and platforms. Everything else, from digital commodities to stablecoins, falls outside its direct reach unless a token’s structure crosses back into investment-contract territory.
The SEC’s core tool for crypto assets remains the Howey Test, the 1946 Supreme Court framework for identifying an investment contract. An asset qualifies as a security when it involves an investment of money in a common enterprise, with profits expected from the efforts of others.
How the SEC Views Crypto Assets
In March 2026, the SEC and the Commodity Futures Trading Commission jointly issued an interpretive release that replaced years of piecemeal staff guidance with a five-part token taxonomy. Each category carries a different default treatment:
| Category | Description | Typical Security Status |
| Digital commodities | Derive value from a functional crypto system and supply-demand dynamics | Not a security |
| Digital collectibles | Non-fungible items without profit-sharing rights | Not a security |
| Digital tools | Membership, ticket, or credential tokens tied to a practical function | Not a security |
| Stablecoins | Maintain a stable reference value and are redeemable at par | Not a security if it meets GENIUS Act requirements |
| Digital securities | Tokenized instruments that meet the existing definition of a security | Security |
A crypto asset that starts outside the securities laws can still become tied to an investment contract if an issuer makes managerial promises to purchasers, and that contract can later end. The SEC has been explicit that fraud liability for misstatements made during the life of an investment contract survives even after the token separates from it.
Why US Exchange Owners Need to Know the SEC
An exchange’s obligations depend entirely on how it registers with the SEC. Platforms that facilitate trading in assets classified as securities must register as national securities exchanges or as alternative trading systems, with the corresponding reporting, transparency, and investor-protection requirements that come with it. Platforms trading only digital commodities fall instead under CFTC oversight.
That split has been a recurring source of enforcement risk. Binance and Coinbase were both sued for allegedly operating as unregistered securities exchanges, and those cases shaped how the industry has approached listings ever since.
The SEC and CFTC signed a Memorandum of Understanding in March 2026 committing to harmonize jurisdiction and reduce duplicative oversight, which should narrow this gray area over time, but exchange owners still bear the burden of correctly classifying every asset they list.
| Regulator | Primary Jurisdiction | Registration Path for Exchanges |
| SEC | Crypto assets classified as securities | National securities exchange or ATS registration |
| CFTC | Digital commodities and derivatives | CFTC registration as a designated contract market or swap execution facility |
Why This Matters Outside the US
The SEC’s classification decisions influence how other regulators, including the FCA, MiCA/ESMA, and MAS, draw their own lines between securities and commodities. An exchange with no US users can still feel the effects through listing decisions, delisting risk, and how counterparties price US regulatory exposure.
What Exchange Owners Need to Know Right Now
The SEC’s posture shifted substantially after Paul Atkins was confirmed as Chairman in April 2025. His A-C-T agenda, Advance, Clarify, Transform, has produced several developments that exchange owners should track directly:
- The March 2026 interpretive release replaced the 2019 investment contract framework and gave exchanges a clearer basis for listing decisions.
- A proposed token safe harbor, floated by Atkins in March 2026, would let entrepreneurs raise limited capital under time-boxed exemptions without full registration.
- Staff statements on wallet interfaces, issued through April 2026, clarified that software enabling self-custodied wallet transactions doesn’t trigger broker-dealer registration. These statements carry no rule-level force and can be revised.
- The CLARITY Act passed the House in July 2025 and cleared the Senate Banking Committee in May 2026. A revised draft merging the Banking and Agriculture Committee versions was dropped in late July 2026, but the bill still hasn’t reached a Senate floor vote and is running out of runway before the chamber’s August 10 recess.
Until Congress acts, exchange owners are operating on staff guidance and interpretive releases rather than binding rules, which means positions can shift with the next rulemaking cycle.
What Compliance Officers Need to Watch For
Compliance teams carry the operational weight of every jurisdictional call an exchange makes, and several areas deserve particular attention:
- Custody standards. The SEC has continued pushing toward qualified-custodian requirements for firms managing crypto assets on behalf of clients, mirroring standards long applied in traditional finance.
- KYC/AML obligations. These sit outside the Howey analysis entirely and apply regardless of how an asset is classified. Registered exchanges and ATSs must maintain customer identification and anti-money-laundering programs.
- Fraud liability that outlives the token. Even after a crypto asset separates from its investment contract, an issuer that made material misstatements during that contract’s life can still face SEC enforcement.
- Political scrutiny of exemptive relief. Senators Warren and Van Hollen have publicly challenged the scope of the SEC’s exemptions, arguing they open compliance loopholes. Congressional pressure like this can influence how aggressively the SEC applies its own guidance.
- The gap between guidance and law. Staff statements and interpretive releases are not rules. A compliance program built entirely around them should be revisited as the CLARITY Act and related legislation move through Congress.
How Global Regulators Compare to the SEC
The SEC has an outsized influence on global crypto markets, but it is not the only regulator that matters. Businesses operating across borders need to map obligations jurisdiction by jurisdiction.
| Regulator | Jurisdiction | Core Focus |
| SEC | United States | Securities classification, exchange registration, investor protection |
| CFTC | United States | Digital commodity markets and derivatives |
| FCA | United Kingdom | Crypto asset promotions and registration |
| ESMA / MiCA | European Union | Licensing of crypto-asset service providers |
| MAS | Singapore | Digital payment token licensing under the Payment Services Act |
The first step in any jurisdiction is the same: determine whether the assets and activities in question meet that regulator’s own definition of a security or regulated financial instrument, since the tests and thresholds differ.
Proactive Strategies for Exchange Operators
SEC announcements move fast, and the gap between a headline and an enforcement action is where exchanges get caught unprepared. When news of a new rule, enforcement case, or classification shift surfaces, exchange owners should work through a few checks.
Reassess your asset listings. The most immediate risk sits in your listed tokens. If the SEC signals that a category of asset may qualify as a security, review whether anything on your platform fits that description and decide whether to delist, restrict US access, or seek legal review before regulators make the decision for you.
Check your user exposure. SEC jurisdiction follows US persons, not just US companies. Confirm whether your KYC data can accurately identify US users, because enforcement often hinges on whether a platform knowingly served the US market without registration.
Review your disclosures and marketing. Enforcement actions frequently cite promotional claims, not just trading activity. Audit how listed assets are described on your platform and in your marketing, since language implying profit expectations is a common trigger.
Document your response. Regulators weigh good-faith compliance efforts. A dated record showing your team assessed the development and acted on it is worth far more in an inquiry than a scramble after a subpoena arrives.
Confirm your infrastructure can execute the change. A decision to delist an asset or geo-restrict users is only as fast as the system carrying it out. If your exchange stack cannot apply new rules quickly, every SEC update becomes an engineering project instead of a policy update.
Building Compliance Into Exchange Operations
The SEC’s direction has become more predictable since 2025, but predictable is not the same as final. Exchange owners and compliance officers are working against a moving target: an interpretive release that can be refined, staff statements that carry no binding force, and a market structure bill still working through the Senate. Treating current guidance as a floor rather than a ceiling, and building compliance processes that can absorb the next rule change, is the more durable approach.
ChainUp’s white-label exchange infrastructure is compliant by design, with AML/CFT, KYC, travel rule support, audit trails, and proprietary KYT monitoring already built into the software.
Instead of figuring out every requirement from scratch, exchange operators start with compliance rules in place, and as obligations shift, from SEC classification changes to CFTC registration requirements, those rules adapt at the system level instead of forcing a rebuild. Talk to the ChainUp team today for a demo.
