Washington crypto regulations, explained for people who are not lawyers

Three layers of rules, and why only one is visible to you

Crypto activity affecting a Seattle resident is governed at three levels simultaneously: federal anti-money-laundering law, Washington State money transmission law, and — for kiosks specifically — municipal ordinance. The layers do different jobs and are enforced by different people.

Federal rules decide whether a business must register with FinCEN and run an anti-money-laundering programme, which is why every legitimate platform asks for your ID. State rules decide whether a business may serve you at all, which is why some well-known platforms geo-block Washington. Municipal rules, so far, decide only whether a physical kiosk may sit in a particular city.

None of the three imposes obligations on you as an individual buyer. That is the single most important thing on this page, and it is worth saying clearly because a recurring fraud script claims otherwise — that you need to "register your wallet", pay a "compliance fee" or resolve a "DFI hold". No such requirements exist.

Washington DFI and the Uniform Money Services Act

The operative statute is RCW 19.230 , the Uniform Money Services Act. It requires a licence to engage in money transmission with Washington residents, and DFI has consistently treated virtual currency as monetary value for that purpose. Its virtual currency and digital assets primer is the clearest official statement of how the state thinks about this, and its fintech industry guidance is where novel business models get addressed.

What licensing involves, in outline: application through NMLS , a tangible net worth floor, a surety bond, background checks on control persons, an anti-money-laundering programme, and ongoing reporting. The general minimum tangible net worth is $10,000, but companies holding wallets on behalf of clients face a substantially higher floor — commonly cited at $100,000, scaling with volume — precisely because customer assets are at stake.

The activities that fall inside the perimeter include custodial wallets where the provider controls keys or can move user funds, crypto-to-fiat conversion, and kiosk operation. Non-custodial software that never controls user assets is generally treated differently. Because that line turns on specific facts about how a product is built, the sensible approach for a consumer is not to reason about it — it is to check the register.

A platform that publishes its numbers makes this trivial. CEX.IO lists Washington money transmitter licence 550-MT-117925 and NMLS ID 1804170 on a public state-by-state register . Whether or not you use that platform, treat published, verifiable licence numbers as the baseline you expect from anyone asking for your money.

FinCEN, the Bank Secrecy Act and why you get asked for ID

At federal level the framework is the Bank Secrecy Act and its implementing regulations. FinCEN's 2019 guidance on convertible virtual currencies established that exchangers and administrators of convertible virtual currency are money transmitters for BSA purposes. That single determination is the reason for essentially every identity check you encounter.

Concretely, a registered money services business must maintain a written AML programme, designate a compliance officer, train staff, verify customer identity, monitor for suspicious activity and file suspicious activity reports and currency transaction reports where thresholds are met. Currency transactions over $10,000 generate a CTR — routine paperwork filed by the institution, not an accusation about you.

The corollary matters for consumers. Any service offering a US customer meaningful crypto access with no identity verification whatsoever is telling you it is not complying with federal law. That is not a privacy feature; it means there is no supervised entity behind it if something goes wrong, and DFI asks Washington residents to report suspected unlicensed operators on 1-877-RING-DFI.

Two further federal bodies shape the landscape without being consumer-facing. The SEC addresses assets and products characterised as securities, and the CFTC addresses commodities and derivatives. For a straightforward spot purchase of bitcoin on a licensed exchange, neither is a practical consideration; for structured products, lending schemes and yield offers, they very much are. Investor.gov and FINRA's crypto alerts are the plain-language resources worth reading before you touch anything promising a return.

Kiosk legislation: what happened in 2026

This is the live front in Washington, and the position is genuinely unsettled.

Senate Bill 5280, requested by DFI and introduced by a bipartisan group of senators, would have imposed hard daily transaction ceilings on virtual currency kiosks and capped the fees operators may charge. Reported figures under discussion included a daily transaction limit in the low thousands and a fee ceiling in the mid-teens as a percentage. AARP Washington backed the effort, citing losses concentrated among older residents. The bill passed the Senate and then failed to advance out of House committee in late February 2026.

The practical consequence for a Seattle kiosk user is direct: there is no statewide cap on what a machine may charge you, and no statutory daily limit beyond what each operator sets for itself. Everything in our fees and limits guide follows from that absence.

What DFI did do administratively is issue a policy statement and consumer alert clarifying that kiosk operators must give customers a clear and conspicuous separate disclosure that once money or virtual currency has been sent to a scammer, it is gone. That is a disclosure requirement rather than a price control, and it became the basis for enforcement later in the year.

City-level bans across Washington

Where the legislature stalled, municipalities moved. Per MRSC's July 2026 summary , five Washington jurisdictions have banned crypto kiosks outright.

Seattle's absence from that list is the reason this site spends as much time on kiosks as it does. The machines are legal here, they are used, and nobody is capping what they charge. In that environment, consumer information is the only protection available.

What enforcement actually looks like

Washington's action against Bitcoin Depot is the most instructive recent example, because it shows what DFI examines and what it will pursue.

The company deactivated its entire fleet of more than 9,000 machines in May 18, 2026 as part of a Chapter 11 wind-down. On June 11, 2026, DFI filed a statement of charges alleging markups of up to 42% above market price, failures in AML and BSA monitoring, inadequate KYC implementation, no due diligence on cash transactions above $100,000, missing customer records, and absent fee disclosures on more than 30,000 Washington transactions. DFI sought licence revocation, an industry prohibition, and a $1.5M fine against the responsible individual. Its investigation found most defrauded Washington consumers were over sixty. Full notice .

Two lessons for a consumer. First, DFI reads transaction-level records, which means a complaint with documentation attached has real weight. Second, price and disclosure are both live enforcement theories in this state — so photograph the fee screen, because that photograph is exactly the kind of evidence these cases turn on.

If you are starting a crypto business in Washington

Not the main audience for this site, but the questions arrive often enough to answer in outline. This is a summary, not legal advice, and you should retain counsel licensed in Washington before acting.

1. Determine whether you are transmitting. Custody of customer assets, control of keys, or the ability to move user funds pulls you inside RCW 19.230 . Purely non-custodial software generally does not. Get a written analysis; do not assume.
2. Register with FinCEN first. Federal MSB registration, a written AML programme, a designated compliance officer, training and SAR/CTR procedures. Guidance is in FIN-2019-G001 .
3. Apply through NMLS for the Washington licence. Tangible net worth, surety bond, control-person background checks, policies and procedures. DFI's licensing pages set out the checklists.
4. Plan for the kiosk-specific overlay if that is your model. Fee disclosure obligations, DFI's policy statement, municipal bans in five jurisdictions, and legislative risk in future sessions.
5. Build tax and reporting in from day one. Washington's business and occupation tax applies to gross receipts, and customer reporting obligations are expanding federally.
6. Expect examination. DFI examines licensees and, as the 2026 enforcement action showed, will look at pricing and disclosure at transaction level.

What all of this means for you as a buyer

Compressed to the practical core: you have no registration obligations, no licence to obtain and no filings to make simply because you own crypto. Your entire regulatory interaction is choosing counterparties who are themselves supervised.

That reduces to three habits. Check the licence before you deposit — NMLS and the FinCEN registrant list, one minute. Keep records of every transaction, because federal disposal reporting and possibly Washington's capital gains excise tax will need them; our tax guide covers that. And know the reporting channels before you need them: DFI for licensed-entity problems, IC3 for fraud, the Attorney General and CFPB for consumer complaints.