California Just Started Fining Unlicensed Crypto Platforms $100,000 a Day

The meter is running. As of July 1, 2026, unlicensed crypto platforms serving California residents can be fined $100,000 per day — every day — until they comply.

California’s Digital Financial Assets Law (DFAL) is now in full enforcement mode. It’s the most sweeping state-level crypto licensing regime in the United States, and it applies to a market home to roughly one quarter of all U.S. blockchain companies. If you run an exchange, a crypto custodian, a stablecoin operation, or a Bitcoin ATM and you don’t have a DFAL license on file — or at minimum a pending application — you are now in the crosshairs of the California Department of Financial Protection and Innovation (DFPI).

What DFAL Actually Requires

Every company conducting “digital financial asset business activity” with California residents must hold a valid DFAL license from the DFPI. That covers:

• Cryptocurrency exchanges (CEX and DEX-adjacent platforms)
• Custodians and wallet providers
• Stablecoin issuers
• Bitcoin ATM operators

The law was signed by Governor Newsom in October 2023 and gave businesses nearly three years to prepare. The NMLS — the licensing portal — started accepting applications on March 9, 2026. That left companies 16 weeks to get their paperwork in before the July 1 deadline.

Those who missed it face civil penalties up to $100,000 per day of non-compliance.

Your New York BitLicense Doesn’t Cut It

Here’s the one that’s catching companies off guard: holding a New York BitLicense, a California money transmitter license, or a license from any other state does not automatically satisfy DFAL requirements. This is a distinct license with distinct requirements.

That means firms that thought they were already covered — because they’d jumped through New York’s notoriously grueling licensing process — are starting from zero with the DFPI.

The Crackdown Already Started Before July 1

The DFPI didn’t wait. In June 2025, the regulator entered a consent order with Coinme Inc., a Seattle-based Bitcoin ATM operator, ordering it to pay a $300,000 penalty — including $51,700 in restitution to an elderly California resident — after finding Coinme had allowed customers to exceed the $1,000-per-day transaction limit and failed to include required disclosures.

Bitcoin ATM operators specifically face additional restrictions under DFAL: transactions are capped at $1,000 per customer per day, and fees are limited to the greater of $5 or 15% of the transaction amount. Consumer protections are baked directly into the license terms.

Why California Is the One That Matters

California accounts for about 25% of U.S. blockchain companies — the largest concentration in the country. The Bay Area, in particular, is still the center of gravity for crypto infrastructure, DeFi protocols, and institutional-grade custody operations. When California moves, it moves the industry.

Compare this to the federal picture: the SEC under Paul Atkins has shifted dramatically away from enforcement-by-ambush toward clear rulemaking. But that clarity is still being written. California isn’t waiting. It is now the most consequential crypto enforcement body in the country.

Why This Matters for Crypto Jobs

The DFAL is a compliance hiring surge in disguise.

Every exchange, custodian, and stablecoin issuer that wants to stay in the California market — a market worth billions in users and volume — now needs people who can navigate state-level regulatory frameworks. Specifically:

• Compliance officers with digital asset licensing experience (both DFAL and multi-state)
• BSA/AML analysts — DFAL has its own anti-money-laundering requirements
• Legal counsel specializing in state money transmission and digital asset law
• Policy and government relations roles as more states watch California’s lead
• Operations roles building the internal controls required by the license

For smaller protocols and exchanges, the calculus is brutal: pay to comply, or exit the California market. Many will choose compliance — and will need to hire to do it. Others will pull back, consolidating market share at licensed incumbents, who are also hiring to absorb the influx of users.

The firms that built their compliance infrastructure ahead of July 1 have a real competitive advantage. The ones that didn’t are in emergency mode — and emergency mode means emergency hiring.

The Bottom Line

California just became the strictest crypto regulator in the United States. $100,000 per day is not a speed bump — it’s a kill switch for any business that ignores it. The law doesn’t care where you’re incorporated, what other licenses you hold, or how decentralized your protocol is. If you serve Californians, you need a DFAL.

For job seekers, that’s actually good news: compliance talent in crypto just became significantly more valuable, and it’s going to stay that way as more states take their cues from California.

---

Looking for your next role in crypto compliance, legal, or regulatory affairs? Browse open roles at cryptogrind.com — the job board built for crypto and Web3 professionals.