Conference Presentation, Fireside Chat, Panel
a16z Podcast | The Regulatory Landscape for Crypto
- Core Regulatory Principle: The underlying decentralized technology itself is not regulated or illegal; however, specific applications (money transmission, custody, exchange operations) that intersect with existing laws are subject to regulation.
- Enforcement Distinction: Civil regulators, criminal enforcers, and prosecutors operate with distinct priorities; civil enforcement focuses on compliance and restitution, while criminal enforcement targets illicit activity and fraud.
- Legislative Intent: Existing statutes are broadly worded by design to grant regulators discretion to adapt to new technologies, rather than to create "trap" scenarios for legitimate crypto projects.
- Government Stance on Legality: Multiple government witnesses at the 2013 Senate hearings explicitly affirmed that Bitcoin and its underlying technology are not illegal, a sentiment echoed by current federal officials.
- Criminal Adoption Trends: Criminals frequently act as early adopters of new technologies (similar to cell phones and email), necessitating regulatory focus on illicit uses rather than the technology itself.
- SEC DLT Working Group: The Securities and Exchange Commission (SEC) has established a Distributed Ledger Technology (DLT) Working Group with members from across divisions to actively learn about and monitor the technology.
- CFTC Lab CFTC: The Commodity Futures Trading Commission (CFTC) operates "Lab CFTC," a group focused on broader fintech and financial services technology, including cryptocurrency.
- Regulatory Coordination: There is increasing coordination among agencies, evidenced by joint testimony preparation and a joint op-ed by the SEC and CFTC chairs regarding their collaborative regulatory approaches.
- Media vs. Reality: Policymakers are actively working to counter sensationalized media headlines (e.g., "blockchain hacked") which often conflate exchange hacks with blockchain protocol failures, as the blockchain itself has never been successfully hacked.
- Enforcement Scope: The proportion of crypto activity under active government investigation is small; enforcement actions typically target "the worst of the worst," such as fraud, money laundering, or corruption, rather than lawful innovation.
- Case Secrecy: Many enforcement actions and investigations remain under seal for extended periods (e.g., Theranos) pending extradition, settlement, or strategic timing, meaning public knowledge lags behind active legal proceedings.
- Agencies with Concurrent Jurisdiction:
- Department of Justice (DOJ): Leads criminal prosecutions (e.g., the BTC.e exchange case).
- FinCEN: A Treasury agency enforcing the Bank Secrecy Act and Money Services Business (MSB) laws; levied a $110 million penalty on BTC.e in conjunction with DOJ.
- SEC: Focuses on ICOs and securities fraud; levied a $32 million civil fraud penalty in the Carta ICO case while DOJ pursued criminal charges.
- IRS: Designated cryptocurrency as "property" rather than currency for tax purposes.
- OCC: Attempting to create a federal fintech charter to consolidate the current requirement of obtaining money transmission licenses in all 50 states.
- FTC: Investigates data breaches for consumer protection (e.g., exchange hacks involving PII) and enforces laws against unfair/deceptive practices.
- FINRA: A self-regulatory organization overseeing broker-dealer conduct and reporting violations to government agencies.
- State Regulators: Require money transmission licenses in every jurisdiction where services are offered.
- SEC Security Classification Evolution: The SEC has shifted from Chairman Jay Clayton's initial stance ("never seen a token that wasn't a security") to acknowledging utility tokens on fully decentralized networks with no central actors as potentially non-securities.
- Defining Non-Security Tokens: SEC Corporate Finance Director specified that a token is likely not a security if it is purchased for utility rather than investment, particularly within a decentralized network lacking a central promoter.
- Token Lifecycle Nuance: Regulatory classification depends on the specific stage of a token's lifecycle; a token may evolve from a security at issuance to a utility token once the network achieves full decentralization.
- Extraterritorial Jurisdiction: Relocating a company offshore does not exempt it from U.S. laws if it serves U.S. customers, due to the extraterritorial reach of U.S. financial regulations.
- Compliance Standard for Entrepreneurs: Companies should demonstrate "best efforts" to understand and comply with applicable laws (e.g., creating a compliance program even if imperfect) rather than ignoring regulations due to ambiguity; demonstrated good faith reduces enforcement risk.
- Employee Due Diligence: Job seekers should vet potential employers for their commitment to regulatory compliance and responsible conduct as a positive indicator of company stability.
- Expert Motivations: Robin Wiseman transitioned from prosecuting early crypto cases to advocating for the technology's potential to combat waste and fraud; Katie Hahn cites the "permissionless innovation" and early internet excitement as key drivers for her involvement.