U.S. Financial Licence Applications · SEC RIA · MSB · MTL · STO · Nationwide Corporate Services

Virtual Currency and Digital Asset Licensing

New York Virtual Currency License

New York BitLicense virtual currency business licence

From the boundaries of business with New York customers, application eligibility and capital arrangements to custody security, changes of control and ongoing maintenance | Prepared by Rengangyongsheng (Hong Kong) Limited; professionally explained by business manager 唐上永(唐生)

唐上永(唐生)

唐上永(唐生)

Rengangyongsheng (Hong Kong) Limited · Business Manager

Research current through:2026-11-04

REGULATORY OVERVIEW

Overview and reading notes

A BitLicense is a state-level operating licence imposed by New York State for virtual currency business activities involving New York or New York residents. It is not company registration, FinCEN MSB registration or a licence valid throughout the United States. Applicants must demonstrate that, upon receiving the licence, they can implement governance, capital, anti-money laundering, cybersecurity and customer protection requirements. Capital is determined case by case. NYDFS's official FAQ states that the customer protection surety bond or USD deposit account is generally subject to a minimum of $500,000, which may be increased depending on the business. The initial application fee is $5,000 and is non-refundable if the application is denied or withdrawn. There is no uniform commitment for the overall process; the statute provides for a 90-day decision period after the regulator deems the application complete and permits reasonable extensions. [1] [2] [17] [25]

Regulatory authority
New York State Department of Financial Services (NYDFS)
Scope of business
Five categories of statutory activity involving New York or New York residents: receiving virtual currency for transmission or transmitting virtual currency; storing, holding or controlling it on behalf of customers; buying and selling it as a customer business; providing exchange services as a customer business; and controlling, administering or issuing virtual currency. Having an office or place of formation abroad does not automatically exclude applicability. A chartered bank or limited-purpose trust company approved by NYDFS may use a different authorisation pathway; whether an MTL, federal registration or securities and derivatives qualifications are also required must be assessed separately. [1]
Capital and finance
There is no uniform minimum capital amount applicable to all BitLicense applicants. NYDFS determines the amount and form case by case based on asset quality, liabilities, transaction volume, leverage, liquidity, and customer and product risks. A customer-protection bond or dedicated US dollar account is generally at least US$500,000; this is a separate requirement and must not be treated as minimum capital, an application fee or customer funds available for operations. [1] [19] [26]
Processing time information
There is no uniform commitment on the total timeline from preparation and initial filing through final authorisation. 23 NYCRR § 200.6 provides for approval or denial within 90 days after the regulator determines that an application is complete, and the regulator may reasonably extend the period; the decision period for a complete application involving a change of control or a merger or material asset acquisition specified by statute is 120 days and may also be extended. A filing receipt does not mean the application has been determined complete or that business operations are authorised.[3] [17] [20]

01 | Licence status and New York business boundaries

BitLicense 的法律基础是 23 NYCRR Part 200。它授权特定主体在获批准的范围内开展虚拟货币业务活动,不是成立公司的证明,也不是某个代币的投资价值认证。企业必须把申请主体、网站运营主体、客户协议主体和实际控制资产的主体对应起来,不能让一家公司持牌、另一家未获授权的关联公司实际承接纽约客户。[1] [3]

判断连接点不只看纽约办公室。NYDFS 官方 FAQ 将居住、位于、拥有营业地点或在纽约开展业务的人纳入相关判断;境外平台服务纽约客户仍可能需要许可。若决定暂不服务纽约市场,应以客户筛查、地域限制、营销控制及持续监测落实排除,而不是只在条款中写一句禁止纽约居民使用。[1]

监管关注实际资金流和控制权。托管私钥、控制转账权限、代表客户进行兑换或为客户传输价值,都应纳入评估。非金融用途且只转移名义小额虚拟货币的法条例外不能扩张为一般支付业务豁免;去中心化、软件平台或技术供应商等名称也不能替代事实分析。[1] [10]

02 | Five covered activities and common business models

第一类是接收虚拟货币用于传输或传输虚拟货币,常见于加密支付、汇款及商户结算。第二类是代他人存储、持有或维持托管或控制,常见于托管钱包、交易平台资产保管和第三方数字资产托管。第二类并不以客户有无交易、是否支付保管费作为唯一判断条件。[1]

第三类是作为客户业务买卖虚拟货币,第四类是作为客户业务提供兑换服务,可能涵盖零售交易平台、机构 OTC 和法币与虚拟货币出入金。交易、钱包和资金通道往往同时涉及多个类别,应把每个交易节点、代理关系和资产归属写入业务流程,而不能仅用交易所三个字描述全部业务。[1]

第五类是控制、管理或发行虚拟货币。美元支持稳定币发行可能同时需要发行方案、储备和赎回安排的具体批准。NYDFS 官网还列举质押服务、商户及薪酬整合等已获批准业务模式,但这些示例不是新增三类法定牌照,也不代表每一持牌人可以不经审查直接开展相同服务。[1] [7] [27]

03 | Limited exemptions, pure technology services and trust route

仅将虚拟货币用于自身投资的消费者,以及仅为买卖商品或服务而使用虚拟货币的商户和消费者,可落入官方说明的豁免。纯软件开发及发布本身通常不需要 BitLicense,开发自托管钱包与经营代客托管钱包不能混为一谈。挖矿本身、单纯接受捐赠或单纯提供买卖建议,也不当然构成须许可的活动,但附带兑换、托管或传输须重新判断。[1]

豁免是具体活动与事实条件下的结果,不是商业模式的永久标签。商户若另为第三方提供支付清算,软件商若增加代客资金控制,原先判断可能改变。慈善组织并没有仅因其组织性质而获得一般 BitLicense 豁免;单纯接收捐赠与为他人经营虚拟货币服务仍须区分。[1]

纽约银行法下的银行或有限目的信托公司经总监批准虚拟货币业务后,可不另领 BitLicense。有限目的信托可具有受托权限,并在纽约不另领 MTL 而开展获准货币传输;BitLicense 本身不授予这两项信托路径特征。信托是另一套特许、治理与审慎监管安排,不是 BitLicense 的加购选项,也不当然等于吸收公众存款的银行。[1]

04 | Market access and governance benefits; approval or account opening not guaranteed

取得适当授权的实际意义,是可以在批准范围内服务纽约客户,并建立可接受监管检查的业务制度。申请过程中梳理资产隔离、权限控制、客户披露和治理责任,亦有助于减少经营模式与合规流程脱节。上述是许可和制度建设的作用,不应改写为政府推荐企业或认证投资产品无风险。[1]

许可不能保证银行开户、美元清算、融资、客户增长或盈利。银行与商业合作方仍会独立评估实益拥有人、资金来源、制裁风险和业务可接受性。合规预算应根据真实收入与资金消耗测算,不应建立在获牌后一定获得融资或银行支持的假设上。[1] [16]

本专题不承诺申请必批、最低价获牌或指定月数完成。宣传许可状态时应写明具体法人、授权种类和业务范围,避免把集团另一实体的信托特许、MSB 注册或某个币种获准发行,宣传成申请公司持有相同资质。[1] [5]

05 | Eligibility and arrangements involving foreign shareholders

Part 200 的申请条文要求披露组织形式、成立日期与法域,并对个人申请人及适用的董事、主要高管、主要股东和主要受益人分别提出信息要求。因此不能把仅美国法人可以申请、所有股东必须美国公民或必须在纽约成立公司写成统一法定门槛。实际申请应确认所选主体能否完成 NMLS 申报、合法开展拟议业务和接受监管。[1] [16]

NYDFS 会调查申请人的财务责任、金融和商业经验以及品格和整体适任性。公司成立或取得 EIN,并不证明这些条件已经满足。申请人须证明在获许可时能够执行全部适用要求,实际负责人的能力、技术控制及预算应与承诺的业务相匹配。[16] [17]

境外股东和集团架构须完整穿透披露,并说明境外管理、跨境资料访问、关联交易和资金支持安排。是否设美国子公司、取得纽约州外实体经营资格及提交法律意见,应按实体法和项目事实确认。不得把次级托管机构需具备实质相似监管环境的 2025 指引,误用为所有境外 BitLicense 申请人一律适用的母国等同监管资格。[5] [16]

06 | Shareholders, directors, beneficial owners and background checks

申请应提供集团及管理组织图,列明关联方、直接和间接所有权、表决权、董事提名权及其他影响政策的安排。Part 200 要求适用主要人员的履历、地址、历史、资格和财务信息,并要求独立调查机构出具特定人员的背景报告。提交流程与人员范围还须按届时有效的 NMLS 纽约清单落实。[16]

10% 或以上直接或间接表决权在控制权规则中是控制的推定,不是只有超过 10% 才会被审查。持股不足该比例但实际能够决定管理和政策的人,也可能构成控制人。客户尽职调查所用的实益拥有人标准,与牌照控制权和主要股东披露不是同一个测试,不能用一个比例代替全部判断。[20]

指纹要求不应仅写成董事高管名单。§ 200.4 还覆盖拟聘用、能够接触客户法币或虚拟货币资金的人。应据职责和权限列出人员矩阵,核实指纹及证明提交方式。诉讼、监管处分、刑事事项和破产风险须按表格要求如实披露,不应隐瞒,也不能把所有历史事项笼统描述为必然一票否决。[16] [17]

07 | Compliance personnel, training and examination boundaries

§ 200.7 要求指定合资格个人或多名个人协调、监察适用法律合规,并由董事会或同等治理机构审阅批准书面政策;§ 200.15 要求合资格反洗钱负责人管理日常反洗钱工作。人员必须有足够时间、权限、信息访问和升级渠道,不能只有一个挂名职称或由业务部门随意否决其合规决定。[18] [22]

已核实的 Part 200 条文没有规定申请人必须通过统一 BitLicense 人员考试,也没有将 CAMS、CISSP、CISM 或 FINRA Series 考试列为每位合规官的法定必备证书。专业认证可作为能力证明的一部分,但不能代替经验、实际履职和持续培训;亦不能据此推出固定五年经验或固定三至五名董事的通用硬性要求。[16] [18] [22] [23]

CISO 人员安排尤其需要分别核对两套法规。§ 200.16(c) 写明指定合资格员工担任 CISO;Part 500 的官方 FAQ 则允许合资格关联方或第三方 CISO,并保留企业责任。因此不能仅凭 Part 500 的外包允许,就承诺只购买外部 CISO 服务已经满足 BitLicense 全部要求。拟采用兼任、集团支持或外包时,应向 NYDFS 确认安排并保留书面依据。[13] [23]

08 | Capital, customer-protection surety bond and source of funds

§ 200.8 要求持续维持监管认定充足的资本。NYDFS 可考虑资产的流动性和波动、负债到期、业务量、杠杆、客户保护安排及产品风险。资本形式可包括现金、虚拟货币或高质量高流动性投资级资产,但各类占比须获监管接受;不能宣称所有代币注资、借款或关联方应收款均可全额计作资本。[1] [19]

客户保护担保或美元信托专户属于 § 200.9 的另一要求。NYDFS 官网 FAQ 表述为一般最低 500,000 美元,具体业务可要求更高。担保票面金额不等于每年保费;采用专户时需实际安排合资格托管人和资金。最低资本、担保、客户资产及运营流动性应分开列账,避免重复计算。[1] [26]

资金来源应从投资人或融资人解释到实际入账,提供出资决议、协议、汇款凭证和账务记录,并说明是否存在偿还义务、抵押、限制或第三方权益。这是落实财务责任与审查透明度的实务准备,不是另一个统一法定金额。预算宜覆盖人员、系统、审计、监管费用和客户有序退出,不得把客户托管币用于填补公司资本或营运缺口。[16] [19] [26]

09 | Business address, operational substance and banking relationships

申请材料须说明主要营业地点、全部业务网站及纽约任何运营的实际地址,并披露银行安排。应把法定送达地址、邮件地址、管理办公地点和实际技术运营场所分清,提供真实可核验的信息。已读取的 Part 200 申请条文没有为所有项目列出统一纽约办公室面积或统一本地雇员人数,不能据此编造租赁或人头门槛。[16]

注册代理或收信地址只解决特定送达和通讯功能,不证明具有银行开户所需经营实质,也不证明合规人员就在该地址履职。远程办公、云服务或跨境团队须说明人员职责、数据访问、权限、备援及监管取得资料的能力;记录放在境外或供应商处,不免除提供监管访问的义务。[13] [16] [21]

美元经营账户、客户款项账户和客户保护专户应按其目的区分。银行合作范围和终止后备援应与资金流程一致,不可用董事个人账户代替公司与客户资金安排。Part 200 反洗钱条款还禁止与在任何国家均没有实体存在的外国空壳实体建立相关业务关系,应在企业客户准入中落实,而非只审查申请公司的收信地址。[16] [22]

10 | Application materials and supporting evidence

材料应以现行 NMLS 纽约虚拟货币许可清单及 § 200.4 为基础。核心包括主体成立与治理文件、关联方和所有权图、人员履历及背景调查、现有财务资料、预测、业务模式及网站、银行安排、政策程序、诉讼披露、纽约税务合规证明、适用保险及虚拟货币法币估值方法。NYDFS 可以要求清单以外的补充信息。[1] [16]

财务资料应反映申请人的真实成立历史和阶段。§ 200.4 明列现有财务报表和下一年预测,不宜写成所有初创公司均必须已经有三年审计历史;现行清单或个案仍可能要求更多历史审计、开办报表或预测。成立时间短不等于免提交财务责任、资本来源或可持续经营证据。[16]

商业计划应能与合同、系统和政策相互验证。例如声称客户完全自托管,就应证明公司不能擅自转走资产;声称只做币币兑换,就应解释手续费、流动性提供者和是否实际接触法币。政策须有责任人、操作流程、测试证据和异常升级机制,不能只提交通用模板。非英文证明的翻译认证和具体递交格式,应按当时清单及监管要求确认。[1] [3] [16]

  • 主体与治理:成立文件、治理协议、集团关联图及董事和管理职责应与实际经营主体一致。
  • 财务与资金:报表、合理预测、资本计划及银行安排应能够说明资金来源、可用性和风险缓冲。
  • 运营与资产:流程图、钱包与权限、客户协议、托管及供应商安排应清晰解释谁控制何种资产。
  • 合规证据:反洗钱、网络安全、消费者保护和连续性制度应附可实施的流程及适用测试资料。

11 | Complete application steps from preliminary assessment to licensing

先确定每个业务活动、纽约连接点和申请主体,再选择 BitLicense 或适当的银行法特许路径。必要时向 NYDFS 进行申请前沟通,提交有针对性的业务和资金流程问题。申请前会议可帮助澄清,但不是审批承诺,也不能代替完整材料或正式许可。[1]

BitLicense 新申请通过 NMLS,而不是将 DFS Portal 当作唯一新申请渠道。公司须设置账户管理员;已有 MU1、MU2 记录可按官方说明避免重复录入,但仍须补齐纽约特定资料。文件须依清单分别通过 NMLS 或指定直接递交方式提交,并保留 NMLS 编号、版本和回执。DFS Portal 另用于上币自认证、网络安全通知等指定事项。[1] [3] [14]

NYDFS 对材料完整性与表面组织、详尽程度进行判断后才进入实质审查。进入后仍可发现新缺口并暂停审查;申请人须按缺陷函期限完整答复。相同要求或要求组在第三次缺陷函期限届满后仍未被完整有效纠正,NYDFS 可能不再另行通知而拒绝申请,不应理解成整份申请总共只能收到三封信。[3]

批准后应核对牌照、监管协议、获准产品及限制,落实资本、担保、银行、人员与系统的生效条件后再开业。申请回执、FinCEN 注册、合作方持牌或服务合同,均不允许申请主体先对纽约客户开展需许可业务。被拒或撤回后,应纠正原因并评估重新申请,不应对外保留模糊的申请中宣传。[1] [8] [17]

  • 第一步:绘制客户、法币和虚拟货币流程,完成纽约业务连接点与许可组合评估。
  • 第二步:确定申请主体、所有权、治理和负责人员,并进行差距分析及预算安排。
  • 第三步:必要时联系 NYDFS 澄清业务模式、申请路径和特殊人员或托管安排。
  • 第四步:取得现行 NMLS 清单,建立或更新 MU1、MU2 和纽约专属申请资料。
  • 第五步:完成申请文件、系统和制度证据,依指引提交、缴费并保留编号及回执。
  • 第六步:配合完整性判断和实质审查,逐项答复缺陷函,同步更新变化的业务资料。
  • 第七步:取得书面决定,核对条件、资本、担保及获准业务,不把补正过程当成已授权。
  • 第八步:完成开业核验,启用持续报告、独立测试、客户资产对账及变更审批日历。

12 | Approval timing, application fees and total budget

§ 200.6 的 90 日决定期,从 NYDFS 认定申请完整后的申请起算,并允许为满足法规合理延期。它不是从预约咨询、缴费或首次上传资料起算的三个月必批承诺。官方 FAQ 明确完成时间因项目而异,缺项是常见延误原因,因此总项目时间应写无统一承诺,而不能把材料准备和完整认定之前的等待排除后宣传固定快速办理。[1] [3] [17]

首次申请费为 5,000 美元,用于材料处理、审查与调查;申请拒绝或撤回不退还,后续相关申请还可能收取费用。NMLS 系统、信用或指纹调查等适用收费应在实际提交时核实,不在本页猜测统一附加总额。该申请费不包含资本、客户保护担保、律师、审计、系统建设和持续人员开支。[2] [25]

商业预算应把政府费用、外部专业费用、公司自己的合规投入和受限资金分开。参考页或顾问所述月数、费用区间只是商业估计,不能当作 NYDFS 统计或报价。本专题不采用未经官源支持的统一 18 至 24 个月办理期或统一百万美元总成本;具体估计应注明假设、范围、估计日期及不保证结果。[1] [4]

13 | Anti-money laundering, sanctions and transaction reporting systems

§ 200.15 要求初始风险评估,并至少每年或风险变化时更频繁更新。反洗钱制度须包括内控、合资格负责人、持续培训及至少年度独立测试;测试人员不得负责被测制度的设计和运行,结果须形成书面报告提交 NYDFS。不能把取得某项反洗钱证书或购买区块链工具当作完成整个合规制度。[22]

客户准入应识别并合理核实身份,记录实益拥有人与授权人员,对高风险及境外客户实施适当强化审查。制裁筛查应覆盖客户与相关交易风险,配合区块链分析、警报调查、拒绝或阻断机制和升级路径。匿名或隐藏交易身份的安排须特别审查,不能借隐私技术规避法定身份与报告义务。[10] [22]

联邦现金 CTR 与纽约币币交易通知不是同一个报告。§ 200.15(e)(2) 对单人一日合计超过 10,000 美元、且不适用联邦 CTR 的币币交易规定 24 小时内通知 NYDFS。适用联邦 SAR 者按其实际机构类别法规申报;不适用联邦 SAR 者另有州级可疑交易报告规则。应分别配置触发条件,不能将任何等值虚拟货币交易都称为现金 CTR,也不能一概套用银行的 SAR 门槛。[10] [22]

14 | Cybersecurity, system controls and business continuity

网络安全不仅是网站加密。§ 200.16 要求识别、保护、检测、响应与恢复,并覆盖权限、隐私、开发、供应商和事件处置。条文规定至少年度渗透测试和至少季度漏洞评估,年度 CISO 报告应呈交董事会或同等治理机构并提交监管。公司应将客户钱包、热冷存储、管理员访问和交易签名纳入实际测试范围。[23]

Part 500 的适用要求须另行核定,并与 Part 200 配合。NYDFS 官网明确适用主体每年 4 月 15 日前提交上一年度实质合规证明或不合规确认,合定义网络事件自确定后最迟 72 小时通知;勒索付款须在 24 小时内通知,并在 30 日内说明原因和尽调。该时限不能被概括为所有事件都等到 72 小时再处理,因为其他条款还可能要求更及时报告。[14] [24]

业务连续性应考虑密钥遗失、云服务故障、银行通道中断、链停止运行和批量提现等情形,落实恢复职责、备份、演练与客户沟通。第三方服务商发生事件不会解除持牌人的报告责任;Part 500 有限豁免亦不意味着当然免除 BitLicense 的全部安全、CISO 和连续性要求。[13] [14] [15] [23]

15 | Segregation of customer assets, subcustody and consumer protection

§ 200.9 要求代客持有同种类、同数量虚拟货币,并限制公司擅自出售、出借、抵押或另行使用客户资产。2025 年 9 月 30 日更新托管指引已立即取代 2023 年版本,强调客户公平和实益权益始终保留、客户资产与企业及关联方财产在链上与内部账簿同时分离,而非只在会计备注中标记客户款。[5] [26]

集合钱包可以存在,但应专用于客户资产,并有可随时识别各客户权益的账簿、审计轨迹和链上对账。客户合同应清晰表达托管保管而非一般债权债务关系,并说明财产权益、用途限制和风险。资产隔离及担保不是对所有损失的保证,不能宣传客户虚拟货币因此自动享有银行存款保险。[5]

新次级托管或第三方托管安排被指引视为重大业务变化,实施前须批准,并提供风险评估、协议和更新制度。次级托管人须为 NYDFS 特许或许可主体,或属于经 NYDFS 判定实质相似的托管监管环境;协议须落实客户利益账户命名、隔离及不得为企业自有债务设定抵押或抵销等限制。即使服务商已持其他地区牌照,也不能自行认定安排已获纽约许可。[5]

消费者文件应明确费用、处理规则、资产和技术风险、错误交易及投诉渠道,并在首次交易前完成适当披露确认。投诉应可记录、调查、升级和分析,市场营销应与获准服务一致。客户同意某条款不等于可以放弃强制客户保护要求。[5] [15]

16 | Currency listings, delistings and material business changes

获得 BitLicense 不等于可自由经营任何币种。NYDFS 的路径包括对具体币种或重大业务变化给予批准、在监管批准的上币政策下完成符合条件币种的自认证,以及使用 Greenlist。当前官网明确 Greenlist 币种上架前须至少 10 日通知 DFS;不能把无需单独上币政策写成无需通知或永久保证。[1] [6]

2023 年 11 月 15 日正式上币指引要求治理、针对币种与用途的风险评估、持续监测和下币政策。自认证政策须先获批,部分稳定币、平台币、桥接币及其他具特征币种对零售业务不允许自认证,可能需个别书面批准。应区分政策获批、币种获准、业务活动获准三个层次,不能跨层次替代。[6]

增加质押、借贷、发行、交易功能或改变托管结构,可能触发 § 200.10 事先书面批准。对于重要性有疑问的计划,应在实施前向 NYDFS 澄清。下币应遵守获批政策及通知规则,安排客户提取和风险沟通;监管可限制币种、要求停止支持或调整 Greenlist,因此不能以名单在某天出现作为长期商业保证。[1] [6] [27]

17 | Stablecoin issuance and GENIUS implementation status

NYDFS 2022 年美元支持稳定币指引,仅针对其监管虚拟货币主体发行的美元支持稳定币,不是对世界上所有稳定币的统一规则。发行须经具体批准;一般要求每营业日结束储备市场价值至少等于流通面值,储备与发行人自有财产分离,并使用符合条件的托管机构与储备资产。完全支持的储备是代币负债支持安排,不等于发行人的自有资本。[7]

该指引默认及时赎回为收到合规赎回请求后的 T+2,包含客户完成准入、其他法律条件及特殊情形安排,不能宣传任何匿名持有人随时无条件即时美元到账。储备需至少每月由获接受的独立美国 CPA 审验,报告期后 30 日内公开并送 DFS;另有内部控制年度审验,报告期后 120 日内提交 DFS。这些审验不能简单称为只有一次年度审计。[7]

截至 2026 年 11 月 4 日,OCC 已于 2026 年 10 月 21 日发布 GENIUS 实施最终规则,并明确其于 2027 年 1 月 18 日生效;该规则不包括需与财政部另行协调的 BSA、反洗钱及制裁部分。因此应写已发布、尚未生效,不能写成仍无最终规则,也不能宣称该未来制度现已全面取代 BitLicense。[11]

财政部 2026 年 8 月 17 日关于发行、提供和销售支付稳定币的 Section 3 文件为拟议规则。该来源本身不能证明所有财政部实施细则已完成定案;本专题未核实其后存在替代该提案的最终文件。发行人应在实际推进时逐项复核联邦与州批准路径、实施日期和过渡安排,不把既有 BitLicense 自动视为未来制度下任何发行人的充分授权。[12]

18 | Acquisitions, financing and change of control

BitLicense 不是可脱离持牌主体单独出售的资产。§ 200.11 要求可能导致控制权变化的行为事先取得书面批准,直接或间接表决权达到 10% 有控制推定,实际政策控制亦可能触发。融资条款、董事提名、代理投票及上层控股公司交易应一并评估,不能只看持牌公司名义股份是否过户。[20]

合并,以及收购持牌人全部或重大部分资产,也须依条文提交计划并事先获批。完整认定后的控制权、合并或相应资产收购决定期为 120 日,监管可因正当理由合理延期。买卖双方不宜承诺从签约或付定金日起固定四个月可以交割,更不能先实际移交业务控制、之后才补报。[20]

收购尽调应检查许可状态、监管协议、未解决检查事项、资本与担保、客户资产对账、供应商、申报欠项和历史违规。交易协议宜把所需批准、银行或托管同意、客户数据和资产迁移条件列为适当交割条件。收购已有持牌主体不保证新业务或新管理安排被接受,亦不能借空壳交易跳过适任性和业务审查。[3] [5] [20]

19 | Ongoing reports, examinations and annual maintenance

一般 BitLicense 并非每年自动到期、缴固定年费即延续的许可。§ 200.6 说明其保持效力直到交回、撤销、暂停或法规所列失效;条件许可则另有两年期限。NMLS 更新、财务报告、监管费用和政策测试属于持续义务,不能用年度续费一词将其全部替代。[17] [16]

§ 200.14(a) 要求财政季度结束后 45 日内提交规定财务报表;年度须提交经审计财务报表及独立 CPA 关于内部控制的意见与鉴证。已读取的 § 200.14(b) 未列所有 BitLicense 通用的年度 120 日期限,实际提交日期须依最新监管指引、协议或通知确认,不能把稳定币内部控制审验的 120 日误套到所有年度报表。[7] [24]

年度维护还包括至少年度反洗钱独立测试并提交结果、风险评估、年度 CISO 报告、安全测试、上币下币政策复核,以及适用 Part 500 的 4 月 15 日通知。§ 200.12 规定相关原始或原生格式业务记录自创建起至少七年,并在监管要求时提供即时访问;联邦部分五年保存规则不缩短此州级要求。[6] [14] [21] [22] [23]

Part 102 监管费用评估按托管、交易规模与监管成本计算,通常每财政年度四次预计季度账单加一次最终结算。官方说明付款期限为账单日期后 30 日,迟付可能有利息、罚款及监管措施。应安排预算、核对最新计算表及账单,而非在网站承诺所有持牌人统一固定年费。[4]

20 | Conditional licences are not an automatic fast track

§ 200.4(c) 赋予 NYDFS 酌情发出条件许可的权力,可附合理条件并提高检查强度。条件许可默认自发行两年后到期,除非解除条件状态或监管续期;后续完整许可并非自动转换。企业应先了解拟议条件、可开展活动、责任和后续补强成本,再判断是否适合该路径。[16]

2020 年 6 月公布的合作型条件许可文件,其页面标题及正文仍以 Proposed Framework 和征求意见描述。该提案建议新进入者与 BitLicense 或有限目的信托主体合作,但服务协议本身并不足以获得许可。法条的条件许可授权与该具体提案的状态必须区分,本专题不将未经进一步核实的合作框架当作对所有申请人已生效的标准快速办理程序。[8]

合作方已有资质,不允许申请人直接借用其牌照收取纽约客户资金。拟安排的技术、人员、资本或合规支持应明确服务水平、责任、监管可访问性与终止处理,并取得适当书面许可;即使是条件许可,也只可开展 NYDFS 批准的业务。[8] [16]

21 | Combined boundaries with MSB, MTL and securities activities

FinCEN MSB 是银行保密法下的注册及合规分类,不是美国全国金融经营牌照。FinCEN 明确注册名录反映注册人自行提供、未经验证的信息,入列不构成政府推荐、合法性认证或背书。已有 MSB 注册不影响是否需要纽约 BitLicense,也不代替法币传输所需州 MTL。[1] [9]

联邦 BSA 应按实际机构类型判断。FinCEN 2019 指引说明银行及自身受 SEC 或 CFTC 功能监管的特定主体可属于其他金融机构类别,而不是 MSB;不能因此主张免除所有反洗钱义务,也不能宣称每个 BitLicense 或信托主体一概须以同一 MSB 身份登记。多州经营还需逐州检查适用法律,纽约授权不当然覆盖其他州。[1] [10]

BitLicense 不提供证券经纪、投资顾问、证券交易场所或期货衍生品业务的授权。STO 是证券化代币发行及相关活动的业务描述,并不是一张 STO 牌照;发行注册或有效发行豁免、销售中介及后续交易场所的要求应分别分析。发行豁免亦不是一般平台经营豁免,任何跨到证券或衍生品服务的计划,应单独核定联邦和州监管后再实施。[10] [18] [27]

22 | Practical considerations and professional explanation

申请中最应避免的是主体不一致、未披露控制权、业务变化后仍使用旧文件、把客户资产当公司资金以及政策无法实施。NYDFS 可要求清单之外资料,也可因相关关联方所需许可未申请而暂停实质审查。应建立文件版本、董事审批、缺陷函回复和整改记录,让业务、财务和技术陈述相互一致。[3] [16]

获得许可后发现与持牌活动相关违法或违规,应依 § 200.14 立即报告;刑事和破产程序亦有即时书面通知要求。普通人员变化应按 NMLS、监管协议及适用通知要求判断是否需提前批准或更新,不能把控制权条文扩大为所有员工每次离职均须事先批准,也不能自行认为任何董事或关键人员变化无需申报。[20] [24]

仁港永胜(香港)有限公司拟定,唐上永(唐生)业务经理专业讲解。本专题以所列监管及法规资料说明许可边界和实务准备,可用于申请资格初评、资料组织、业务流程梳理及持续维护沟通;是否受理、批准或附加条件由监管决定,不保证结果。具体事实、合同、税务和法律问题应由具备相关资格的专业人员出具项目意见。

内容核查基准日为 2026 年 11 月 4 日。引用中的 NYDFS 行业指引、官网 FAQ、已发布但尚未生效的规则与拟议文件,均按各自状态说明。申请前仍应取得当时有效清单并核实个案要求;本页不声称穷尽美国各州全部数字资产及其他金融许可。

Business classification and entry requirements by category

Virtual currency receipt and transmission

One of the five statutory activities under § 200.2(q), rather than a separate additional licence; it covers receiving and transmitting virtual currency on behalf of customers, crypto remittances or related payment settlement. MTL requirements for fiat currency transmission must be assessed separately; MSB registration cannot replace state licensing.[1]

Capital requirements
Capital is determined case by case based on transaction volume, liquidity and business risk; client-protection surety or a dedicated dollar account is generally subject to a minimum of 500,000 dollars and may be set higher, and is not the same as minimum capital.[1] [19]
Personnel and qualifications
Qualified compliance and anti-money laundering officers, security personnel and controls over fund-operation permissions that comply with both sets of applicable regulations are required; the scope of fingerprinting requirements for personnel with access to customer funds must be assessed.[16] [18] [22] [23]
Ongoing maintenance
Maintain transaction monitoring, applicable federal and state reporting, quarterly financials and annual testing; approve new channels and material service changes in advance, and retain relevant records for at least seven years.[21] [22] [24] [27]

Virtual currency custody and control

Storing, holding or controlling virtual currency for others, including custodial wallets and custody of platform assets. A BitLicense does not itself grant fiduciary authority; an institution needing that authority should assess an appropriate trust charter route.[1]

Capital requirements
Capital is determined case by case based on client asset size, control and liquidity risk; client assets of the same type and amount, client-protection surety and corporate capital are distinct obligations.[19] [26]
Personnel and qualifications
Governance, compliance and an appropriate CISO arrangement must align with the key and signing systems; custody, reconciliation and funds-operation permissions should be segregated, and background-check requirements verified. [16] [23]
Ongoing maintenance
Implement the 2025 updated custody guidance on on-chain and ledger segregation, identification of entitlements, and reconciliation; new sub-custody arrangements require prior approval, and customer contracts and vendor oversight must be maintained continuously. [5]

Buying and selling virtual currency as a customer business

Buying and selling activities for retail or institutional customers may involve a trading platform, OTC or cryptocurrency automated devices. B2B services are not generally exempt, and the nature of the assets and related securities or derivatives activities require separate assessment. [1] [10]

Capital requirements
Capital is determined case by case based on inventory, market and transaction risk; there is no uniform exchange minimum-capital table for this category. Surety and client assets cannot be counted again as available working capital.[19] [26]
Personnel and qualifications
Management must be able to explain the arrangements for trading, liquidity and conflicts of interest, and provide compliance, AML and systems security personnel in proportion to the actual scale of trading. [16] [18] [22] [23]
Ongoing maintenance
Currencies require specific approval, self-certification or a Greenlist pathway. Maintain governance for listings and delistings, transaction monitoring, financial and customer disclosures, and confirm whether product changes require prior approval. [1] [6] [27]

Virtual currency exchange services

Providing customer-facing exchanges between fiat currency and virtual currency, or between virtual currencies. Whether US dollars are received and transmitted must be separately assessed under New York MTL requirements based on the flow of funds; a crypto-to-crypto business label must not obscure fiat settlement. [1]

Capital requirements
Determine capital and its form based on currency, exchange volume, liabilities, and liquidity; the regulator separately determines customer protection surety or segregated account amounts. [1] [19] [26]
Personnel and qualifications
Transaction compliance, identity verification, valuation and reconciliation capabilities are required. Access to funds and CISO arrangements should align with the actual responsibilities of the exchange system. [16] [22] [23]
Ongoing maintenance
Separately carry out applicable federal SAR and cash CTR filings, as well as New York-required notices of virtual currency-to-virtual currency transactions; update information on valuation methods, listing policies, and changes to funding channels. [6] [22] [24] [27]

Virtual currency control, administration, and issuance

Includes the issuance and management of tokens or stablecoins that meet the definition. Issuance requires approval for the specific product; securities offering registration or an exemption must be assessed separately. An STO is not a single licence. Any future GENIUS pathway must be assessed separately based on its implementation status. [1] [7] [11] [12]

Capital requirements
Business capital is determined case by case based on risk; full reserve backing for dollar stablecoins, customer-protection guarantees and proprietary capital must not be conflated.[7] [19] [26]
Personnel and qualifications
Governance and professional personnel capable of implementing reserve, redemption, AML and security controls are required. Applicable attestations for US dollar stablecoins must be completed by an accepted independent US CPA. [7] [22] [23]
Ongoing maintenance
Dollar-backed stablecoins: implement applicable reserve, redemption, monthly and annual examination requirements; new issuance or material structural changes require approval. Also review published federal rules that have not yet taken effect and proposals whose final status has not been verified.[7] [11] [12] [27]

Frequently asked questions

If our headquarters and servers are all overseas and we serve only a small number of New York customers, do we still need a BitLicense?

It may be required. NYDFS requirements are triggered by statutory virtual currency business activities involving New York or New York residents, not necessarily by registration or possession of servers in New York. Having few customers does not provide a general business exemption; applicability should be determined by the actual transmission, custody, buying and selling, exchange or issuance activities.[1]

Does holding a FinCEN MSB registration allow virtual currency business in New York?

This cannot be inferred. An MSB is a registration under the federal BSA. Listing does not mean that the government has verified or endorsed the business, nor does it replace a New York BitLicense or an MTL required for the business. Federal status, state virtual currency authorisation and fiat transmission qualifications should be verified separately. [1] [9] [10]

Is the minimum capital for a BitLicense US$50 × ten thousand?

No. Minimum capital is determined by NYDFS case by case according to business risk. The generally applicable minimum of $500,000 stated on the website is a customer-protection bond or USD deposit account requirement, which may be increased depending on the business. Capital, surety, customer assets and operating liquidity should be calculated separately. [1] [19] [26]

Does US$5,000 include all application and operating costs?

Not included. This is the initial application processing fee and is non-refundable if the application is denied or withdrawn. Capital, customer-protection surety, applicable systems and background-check fees, legal and audit costs, and compliance personnel must all be budgeted separately; subsequent related applications and regulatory fees should also be verified. [2] [4] [25]

The regulation specifies 90 days. Does that mean a licence is guaranteed within three months of submission?

No. 90 days is the period for approval or denial after the regulator determines that the application is complete, and it may reasonably be extended. Preparation of materials, omissions, completeness determinations and pauses do not constitute a uniform commitment to an overall timeframe; the official FAQ states that completion time varies by project. [1] [3] [17]

Can Chinese or other foreign nationals be shareholders?

Part 200 has been verified and does not impose a uniform US-citizen shareholder requirement, but foreign ownership, control, source of funds and affiliates must all be fully disclosed and are subject to a fitness review. Whether to establish a US subsidiary and obtain authorisation to operate should be determined in light of the entity's jurisdiction, business and regulatory requirements. Success in an application cannot be guaranteed solely on the basis of company formation. [16] [17] [20]

Does a compliance officer have to hold CAMS or pass a BitLicense examination?

Part 200, as reviewed, does not prescribe a uniform personnel examination or list CAMS as a statutory mandatory certification for every compliance officer. The key requirements are being qualified, able to perform the duties in practice, having sufficient authority and resources, and implementing ongoing training. Personnel examinations for other businesses cannot be transferred into a uniform BitLicense requirement. [18] [22] [23]

Can outsourcing CISO services to a third party alone meet all requirements?

This cannot be inferred automatically. The official Part 500 FAQ accepts a qualified third-party or affiliate CISO, but Part 200.16(c) uses qualified-employee wording for BitLicense. If outsourcing or concurrent roles are proposed, both sets of requirements should be assessed separately and confirmed with NYDFS; the company remains responsible for oversight and compliance.[13] [23]

Forming a US company, obtaining an EIN or appearing in a public database does not mean that one is qualified to conduct securities business.

Pure software development and publication generally do not themselves require a BitLicense. However, if the operator can custody, control or transmit assets on behalf of clients, or adds services such as exchanging assets for clients, a licence may be required. Check private-key and signing permissions, recovery mechanisms and actual fund flows, rather than relying only on the self-custody marketing label. [1] [10]

Do ordinary employees never have to submit fingerprints?

No. The fingerprinting requirement under § 200.4 also covers people who are to be employed and may have access to customers' fiat or virtual currency funds. Relevant personnel should be identified by duties and access authority, and the specific method should be verified against the list in effect at the time. Fingerprints for executives alone cannot be submitted while overlooking personnel who handle funds. [16]

Does obtaining a BitLicense allow all cryptocurrencies to be made available?

No. The currency must follow the applicable approval, approved-policy self-certification, or Greenlist route, and comply with the permitted activities. The current official website requires at least 10 days' notice before Greenlist listing; some currencies cannot be self-certified for retail business and require separate individual approval.[1] [6]

Can client-custodied coins be lent or pledged to provide the company with additional liquidity?

This must not be done unilaterally. § 200.9 and the updated custody guidance require customer assets to preserve customer entitlements, be backed one-for-one in the same currency and amount, and be segregated; they restrict using customer assets for the firm's own purposes or debts. Additional lending, pledging or customer financing services must also be assessed separately and appropriately approved. Customer terms cannot displace mandatory requirements.[5] [26] [27]

Can a licensed company be acquired and its owner changed directly, without approval?

No. A change of control requires prior written approval; 10% of voting power creates a presumption of control, and actual control may also trigger the requirement. Mergers and acquisitions of all or a substantial part of the assets have separate approval requirements. The 120-day decision period for a complete application may be extended; completion within a fixed four months from signing is not guaranteed.[20]

Is the annual review just a single fixed fee each year?

No. An ordinary licence is not a fixed-fee product that automatically expires each year. Ongoing obligations include quarterly financial reports, annual audit and internal-control attestation, annual independent AML testing and submission of results, security testing, CISO reports, applicable cybersecurity notices, and invoices based on regulatory cost assessments. Assign an owner and an actual due date to each item. [4] [14] [17] [22] [23] [24]

Must annual financial statements always be submitted within 120 days after year-end?

No such general commitment can be made. The reviewed § 200.14(b) requires annual audited financial statements and an internal control opinion, but does not specify a uniform 120-day deadline; the actual date must be confirmed against the latest regulatory requirements. 120 days appears in annual stablecoin internal control examinations and decision periods for certain complete merger applications; these timelines cannot be applied interchangeably. Quarterly financial statements are expressly due 45 days after quarter-end.[7] [20] [24]

Does a conditional licence guarantee automatic conversion to a full licence after two years?

No guarantee. A conditional licence may carry requirements and heightened scrutiny, and by default expires after two years unless NYDFS renews it or removes the conditions. The 2020 collaborative framework document is still worded as a proposal; signing a service contract with a licensed institution cannot be treated as having obtained a conditional licence.[8] [16]

Will GENIUS have been fully implemented by 2026-11-04?

It cannot be stated in that way. The OCC published the final implementing rule on 2026-10-21, explicitly specifying that it takes effect on 2027-1-18; anti-money laundering and certain other aspects remain subject to separate coordination. The 2026-8 Section 3 document cited by the Treasury is a proposal; this feature has not verified any subsequent replacement final document. The specific federal and state pathways should be reviewed, without assuming that an existing BitLicense automatically satisfies all future requirements.[11] [12]

Can a BitLicense replace an STO offering exemption, securities broker registration or investment adviser registration?

No. State virtual currency business licences, federal or state entity registrations, securities offering registration or a valid exemption each address different matters. An STO is not a single licence; issuance, sales intermediation, asset management and subsequent trading venues must be assessed according to their respective activities. MSB registration also cannot replace these licences. [10] [18] [27]

Regulatory and official source citations

The following links are reference materials cited in this guide. Before proceeding, verify the relevant official website for specific statutory matters, current forms and applicable requirements.

Regulatory and official sources

The numbering corresponds to citations in the text. Please check current official forms and rules before proceeding.

  1. [1] [1] NYDFS | Virtual currency licensing, NMLS applications, FAQs and Greenlist
  2. [2] [2] NYDFS | Official application fee schedule
  3. [3] [3] NYDFS | BitLicense application procedures notice, 2020-06-24
  4. [4] [4] NYDFS | BitLicense regulatory assessment and billing
  5. [5] [5] NYDFS | Updated Custody and Insolvency Customer Protection Guidance, 2025-09-30
  6. [6] [6] NYDFS | Formal Guidance on Virtual Currency Listings and Delistings, 2023-11-15
  7. [7] [7] NYDFS | US dollar-backed stablecoin issuance guidance, 2022-06-08
  8. [8] [8] NYDFS | Proposed Request for Comments on a Conditional BitLicense Partnership Framework, 2020-06-24
  9. [9] [9] FinCEN | Explanation that the MSB registration directory does not constitute government endorsement
  10. [10] [10] FinCEN | Original guidance FIN-2019-G001 on convertible virtual currency business models
  11. [11] [11] OCC | 2026-50 GENIUS implementing final rule announcement, 2026-10-21; effective 2027-01-18
  12. [12] [12] US Treasury | GENIUS Section 3 proposed rule announcement, 2026-08-17
  13. [13] [13] NYDFS | Cybersecurity regulation FAQ and CISO arrangements
  14. [14] [14] NYDFS | Annual cybersecurity, incident and ransomware payment notices
  15. [15] [15] New York State regulations database cited by NYDFS | 23 NYCRR Part 200 contents
  16. [16] [16] Cornell LII regulatory reproduction | 23 NYCRR § 200.4 applications and conditional licences
  17. [17] [17] Cornell LII regulatory reproduction | 23 NYCRR § 200.6 application decisions and 90-day period
  18. [18] [18] Cornell LII regulatory reproduction | 23 NYCRR § 200.7 compliance officers and policies
  19. [19] [19] Cornell LII regulatory reproduction | 23 NYCRR § 200.8 capital requirements
  20. [20] [20] Cornell LII regulatory reproduction | 23 NYCRR § 200.11 control, mergers and acquisitions
  21. [21] [21] Cornell LII regulatory reproduction | 23 NYCRR § 200.12 recordkeeping
  22. [22] [22] Cornell LII regulatory reproduction | 23 NYCRR § 200.15 anti-money laundering and reporting
  23. [23] [23] Cornell LII regulatory reproduction | 23 NYCRR § 200.16 cybersecurity
  24. [24] [24] New York State regulations database cited by NYDFS | 23 NYCRR § 200.14 financial and event reporting
  25. [25] [25] Cornell LII regulatory reproduction | 23 NYCRR § 200.5 application fees and non-refundable rule
  26. [26] [26] Cornell LII regulatory reproduction | 23 NYCRR § 200.9 customer asset protection
  27. [27] [27] Cornell LII regulatory reproduction | 23 NYCRR § 200.10 material business changes

Read the service description

This page provides general information only and does not constitute legal, tax or investment advice, nor does it promise approval, processing times or bank account opening outcomes. Actual requirements and fees may change and should be verified with the competent authorities and relevant professionals before proceeding.

LET’S DISCUSS YOUR BUSINESS

First map out the business, then define a compliance pathway

Describe your business model, customer locations and project stage, and discuss application, acquisition or company-maintenance arrangements with 唐生.

Book a professional consultation
SERVICE COVERAGE · GLOBAL REGULATORY SERVICES

Rooted in US business, connecting global compliance services.

Global Services Overview

The above are topic and service navigation pages under the Rengangyongsheng brand. Financial qualifications in different jurisdictions are not interchangeable. The specific country, business and service scope must be assessed separately; this page does not indicate that the group itself holds all of the qualifications listed above.