California has officially begun enforcing one of the toughest state-level cryptocurrency licensing regimes in the United States, exposing unlicensed digital asset businesses to civil penalties of up to $100,000 per day since the law took effect on July 1.
The state’s Digital Financial Assets Law (DFAL) requires companies engaged in digital financial asset business activity with California residents to obtain a license from the California Department of Financial Protection and Innovation (DFPI) or have submitted a complete license application before the July 1 deadline. Businesses that fail to meet those requirements can face substantial daily penalties, cease-and-desist orders, injunctions and other enforcement actions.
The legislation significantly expands California’s oversight of the cryptocurrency industry and is widely viewed as the state’s equivalent of New York’s BitLicense. Given California’s status as the largest state economy in the US and one of the country’s biggest crypto markets, the new framework is expected to have nationwide implications for exchanges, custodians, stablecoin issuers and other digital asset service providers.
Importantly, the $100,000 figure represents the maximum civil penalty regulators may impose for each day an unlicensed firm remains in violation. Actual penalties will depend on the facts of each enforcement action and remain subject to regulatory discretion.
Broad Licensing Regime Covers Much of the Crypto Industry
The DFAL applies to businesses that exchange, transfer, store or administer digital financial assets on behalf of California residents. The rules cover many centralized crypto exchanges, custodians, payment providers, stablecoin issuers, crypto lending platforms and Bitcoin ATM operators, regardless of where the company is headquartered.
Companies licensed in other jurisdictions are not automatically exempt. Holding a New York BitLicense or a California money transmitter license does not satisfy the DFAL’s standalone licensing requirements.
Firms that submitted a complete application before the July 1 deadline are generally permitted to continue operating while their application is under review, provided they comply with applicable transitional requirements.
Beyond licensing, the law introduces ongoing compliance obligations relating to cybersecurity, anti-money-laundering programs, consumer disclosures, capital requirements, examinations and recordkeeping. Licensees can also face civil penalties of up to $20,000 per day for material violations of the statute.
California’s enforcement powers extend beyond financial penalties. The DFPI may suspend or revoke licenses, seek restitution for consumers and pursue court injunctions against firms operating unlawfully.
Another Major Step in US State-Level Crypto Regulation
The DFAL reflects a broader trend of states developing comprehensive regulatory frameworks while Congress continues debating nationwide crypto legislation such as the CLARITY Act.
Supporters argue that the licensing regime provides stronger consumer protections, improves oversight of custodians and creates clearer operating standards for legitimate businesses. Critics, however, warn that compliance costs could discourage smaller companies from serving California customers and potentially reduce competition, similar to concerns raised following New York’s BitLicense rollout.
For crypto firms operating across the United States, California’s rules are especially significant because of the size of its consumer market. Companies serving California residents without an approved license or qualifying application now face potentially severe financial consequences if regulators determine they are operating in violation of the law.
With enforcement officially underway, businesses that delayed licensing decisions now face increasing regulatory pressure. The DFPI’s ability to impose penalties of up to $100,000 per day makes California’s Digital Financial Assets Law one of the most consequential state crypto regulations currently in effect.
