Verified Platforms
Quick Links
Where to Stay Secure
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
A law took effect in California on July 1 that can fine a crypto platform one hundred thousand dollars a day. It asks nothing of you, the person placing the trade. Both are true at once.
That gap is where the confusion lives. The number sounds like a threat aimed at anyone who touches crypto in the state, and read that way it points you at the wrong conclusion. A licensing regime lands on the business, not on the trade. So the honest answer to whether you need a license to trade crypto in California is almost certainly no, and the more useful question is the one the law quietly forces: after July 1, who now stands behind the exchange you use, and behind the dollar sitting in your account?
This is a Kodex walkthrough with Eunha, who reads a rulebook the way she reads a chart, for who owes what to whom. A statute is not a wall of text to her. It is plumbing, and she wants to know where each pipe connects before she trusts what runs through it.
Eunha starts with the sentence that is easy to skip: the one naming who the law is actually talking to.
The Digital Financial Assets Law is two bills, AB 39 and SB 401, signed by Governor Newsom in October 2023 and switched on July 1, 2026. It localizes to California how a crypto product gets regulated under existing law, and it sits in the state Financial Code as a license for digital financial asset business activity: exchanging, transferring, storing, administering, or issuing crypto with or for a California resident.
Read that list again for what it targets. Every verb is a business function. Running an exchange. Custodying someone else's coins. Moving them between accounts. Issuing a token. None of it describes a person buying Bitcoin on a Tuesday afternoon.
The dividing line is custody and control.
An exchange holds other people's assets and stands between them and the market. You, trading your own account, hold only your own risk. The law follows the party holding someone else's money, because that is where a single failure spreads to thousands of people at once.
The reach is wide. A platform does not have to sit in California to fall under the law. Serving a California resident from anywhere is enough, and residency itself is drawn three ways: domicile in the state, 183 days of physical presence, or a business located there. Operate without the license once it applies, and the penalty runs up to one hundred thousand dollars per day, a figure the state's own Digital Financial Assets Law FAQ spells out alongside the scope and the exemptions.
The number is real. The target is not you.
Here is the line you actually need: activity limited to trading digital financial assets solely for your own account sits outside the license requirement. If you buy, hold, and sell crypto for yourself, you are not running a digital financial asset business, and you need no DFAL license.
So the hundred-thousand-dollar figure is a fact about your venue, not about you.
The law regulates the counter, not the customer.
That is worth sitting with, because it inverts the reflex. A new crypto law arrives and the instinct is to ask what you now have to do. Here you have nothing procedural to do. What changes is not your obligation. It is the set of businesses allowed to serve you, and the identity of whoever now has to answer for them.
The one place you might feel it is access. A platform that neither holds the license nor filed in time cannot legally serve California residents once the law applies. If a venue you use goes quiet in the state, that is the mechanism, not a ban on crypto and not a fine landing on you. Your coins do not become illegal. Your particular on-ramp might simply close until its paperwork clears.
Eunha's next question is the one that decides whether your exchange keeps its doors open: is it licensed, or is it only allowed to keep running while it waits?
Those are different states. By July 1, a business serving California residents had to be one of three things: licensed, exempt, or holding a complete application filed through the national licensing system and under regulatory review. That third status is a safe harbor. DFPI began accepting applications on March 9, 2026, and a venue with a complete filing can keep serving Californians while the state works through it, a mechanic the Womble Bond Dickinson alert lays out in detail.
You can check where a venue stands. The national system that receives these filings runs a public consumer lookup, and a platform serious about the California market will state plainly whether it is licensed or under review. Silence on that question is itself an answer.
So licensed and still operating legally are not the same badge. A platform you use may hold the license, or it may simply have filed in time. Europe drew that exact line under its own regime, where a filed application is not a license either.
There is a second seam here. The DFAL is not California's Money Transmission Act. A venue that moves both dollars and crypto generally needs both licenses, two regimes stacked on one business. When you read that a platform is licensed, it is worth knowing licensed under which law, and for which half of what it does.
DFAL is the state half of a two-layer system. The other half is where the stablecoin in your account gets interesting.
When you hold a dollar-pegged token, someone issues it and someone supervises that issuer. Since the GENIUS Act was signed in July 2025, which regulator that is depends less on the brand printed on the token than on the issuer's charter and its size. Paul Hastings maps the split cleanly, and Eunha lays the three issuer types side by side.
The first is a federally qualified payment stablecoin issuer: an OCC-approved nonbank, an uninsured national bank, or a federal branch, along with subsidiaries of insured depository institutions. For these, federal law preempts state licensing. The desk that answers for the dollar is in Washington, at the OCC.
The second is a state-qualified issuer holding ten billion dollars or less in outstanding stablecoins. It can stay under a state regime, but only if that regime is certified "substantially similar" to the federal standard by a new body, the Stablecoin Certification Review Committee, made up of the Treasury, the Federal Reserve, and the FDIC, and only by their unanimous vote. Until California's regime clears that bar, a state-qualified badge is a promise resting on a certification that has not yet been granted.
The third is a state-qualified issuer that grows past ten billion dollars. At that size the state track closes. The issuer must transition to the federal framework within 360 days of crossing the line, or win a waiver to stay under state supervision. The cap exists because scale turns a payment token into something the system treats as too large to supervise locally. Size alone moves the desk from Sacramento to Washington.
For you, the holder, the desk is not trivia. It sets which reserve rules, disclosures, and redemption protections the issuer has to follow, and who you would be waiting on if the peg ever came under stress. A dollar supervised in Washington and a dollar supervised in a state capital can carry different guarantees behind the same one-dollar promise.
| Issuer type | Who charters or licenses it | Who supervises it | State licensing preempted? | Which desk answers for your dollar |
|---|---|---|---|---|
| Federally qualified | OCC nonbank, national bank, or federal branch | Federal (OCC) | Yes | Washington |
| State-qualified, $10B or under | A state regulator such as California's DFPI, if certified | The state, once its regime is certified substantially similar | No, while the state regime stays certified | Sacramento, if certified |
| State-qualified, over $10B | Transitions to the federal framework within 360 days | Federal (OCC), after transition | Transition to federal required | Washington |
The logo on the token tells you almost nothing about who is good for it.
Read the charter and the size, and you know which government stands behind the dollar, which is a large part of what you are actually trusting when you hold a stablecoin. Read the brand, and you know the marketing.
This is the habit worth building, and it is the core of the Survival Framework: map the regulator who actually governs the venue and the issuer you use, not the one the marketing implies. Eunha turns it into four questions you can answer in a few minutes.
Is your venue licensed under the DFAL, or has it only filed an application? One is approval. The other is a place in line.
Does it operate under the DFAL, the Money Transmission Act, or both? A dollars-and-crypto platform usually needs the pair.
Is the issuer of your stablecoin federally qualified or state-qualified? That decides whether Washington or a state capital supervises it.
And if it is state-qualified, is it above or below ten billion dollars, and is its state regime actually certified? Below the line and certified, the state holds the pen. Above it, the answer moves to the federal desk.
None of these questions asks whether crypto is legal in California. It is. They ask something more durable: when the venue fails or the issuer wobbles, whose phone rings.
Almost certainly not. Trading digital financial assets solely for your own account is exempt from the DFAL. The license requirement falls on businesses that exchange, transfer, store, administer, or issue crypto for California residents, not on an individual buying and selling for themselves.
California's Digital Financial Assets Law, built from AB 39 and SB 401 and effective July 1, 2026. It requires a state license to conduct digital financial asset business activity with or for a California resident, and it carries penalties of up to one hundred thousand dollars a day for operating without one.
For some issuers, yes. Federally qualified payment stablecoin issuers are preempted from state licensing and answer to federal regulators. State-qualified issuers at or under ten billion dollars can remain under a state regime if that regime is federally certified as substantially similar. Past ten billion, they must move to the federal framework within 360 days or obtain a waiver.
Then it can keep serving California residents while its application is reviewed. A complete filing through the national licensing system is a recognized safe harbor, which is why licensed and still allowed to operate are not identical statuses. It is worth checking which one your venue holds.
It depends on the issuer's charter and size, not its brand. A federally qualified issuer answers to the OCC in Washington. A certified state-qualified issuer at or under ten billion dollars answers to its state regulator. An issuer over the cap transitions to federal oversight. The token's name does not tell you which.
The California law did not make crypto safer. It moved a question that was always there into the open: who is accountable for the venue you trust and the dollar you hold. That question outlives this statute, and the one after it. Read the regulator behind the logo before you trust it with your money. That discipline is older than the DFAL, and it will outlast it.
