Regulatory Trends in Crypto: What Investors Need to Know

As of October 17, 2026, crypto regulation is a mix of enacted law, final interpretations and proposals that are still open for comment. In the United States, the GENIUS Act on payment stablecoins is law but its implementing rules are still proposals, and the CLARITY Act market-structure bill passed the House but has not become law. In the European Union, MiCA licensing has applied since 2024, and the UK regime is built but not yet live.

Key takeaways

The GENIUS Act takes effect on the earlier of January 18, 2027 or 120 days after the primary regulators issue final rules; their rules in the Federal Register were still proposals on October 17, 2026.
The CLARITY Act passed the House in July 2025, but a 49-50 Senate cloture vote failed in September 2026; a motion to reconsider was entered, and the bill is not law.
The SEC's March 2026 interpretation sorts crypto assets into five categories but is not a statute, and the Howey test still applies; a separate SEC proposal with offering exemptions and a safe harbor is open for comment until October 20, 2026.
US brokers report gross proceeds on Form 1099-DA for 2025 sales and basis for certain assets acquired from 2026; Congress voided the separate rule for decentralized brokers in 2025.
Outside the US, MiCA's transition ended on July 1, 2026, EU exchange reporting (DAC8) began on January 1, 2026, and the UK's full regime starts October 25, 2027.

Where each rule stands

Crypto rules arrive in different legal forms, and the form decides how durable they are. A statute can only be changed by Congress, an agency can revise its own interpretation, and a proposal has no legal force until it is finalized.

Area	Status on October 17, 2026	What it changes for a holder
US stablecoin law (GENIUS Act)	Enacted July 18, 2025; effective by January 18, 2027; agency rules proposed	Licensed issuers, reserve disclosures, no issuer-paid yield
US market structure (CLARITY Act)	Passed House; Senate cloture failed 49-50; motion to reconsider pending; not law	Security-versus-commodity lines rest on agency interpretation and case law for now
SEC token interpretation	Final interpretation, effective March 23, 2026	Five asset categories; investment-contract analysis still applies
SEC Regulation Crypto Assets	Proposed; comments due October 20, 2026	Possible offering exemptions and a conditional safe harbor, not yet in force
US tax reporting (Form 1099-DA)	In force; gross proceeds for 2025, basis for certain 2026 acquisitions	Custodial platforms report your sales to you and the IRS
EU licensing (MiCA)	Applicable since December 30, 2024; transition ended July 1, 2026	Platforms serving EU clients need authorization
EU and global tax reporting (DAC8, CARF)	DAC8 applies from January 1, 2026, first exchanges by September 30, 2027; US CARF exchanges listed for 2029	Account data shared between tax authorities
UK regime	Final FCA policy statements published June 30, 2026; full scope from October 25, 2027	Authorized firms, FCA conduct and disclosure rules

Stablecoin law, rules still pending

The GENIUS Act (Public Law 119-27) requires permitted payment stablecoin issuers to hold identifiable reserves of at least one-to-one, and publish the monthly composition of those reserves. It also bars issuers from paying holders interest or yield solely for holding, using or retaining the coin.

How the effective-date clock works

Section 20 of the Act sets the effective date as the earlier of two dates: 18 months after enactment, or 120 days after the primary federal payment stablecoin regulators issue any final regulations implementing the Act. Under Section 2, those regulators are the OCC, FDIC, Federal Reserve and NCUA, not Treasury. A Treasury interim final rule published on September 30, 2026 describes the effective date as expected to be January 18, 2027. The arithmetic shows why the calendar date now governs.

Date 1 = July 18, 2025 + 18 months          = January 18, 2027
Date 2 = date of final rules + 120 days
Effective date = the earlier of Date 1 and Date 2

Illustrative example: final rules published October 17, 2026
Date 2 = October 17, 2026 + 120 days        = February 14, 2027
February 14, 2027 is after January 18, 2027, so Date 1 applies.

For Date 2 to win, final rules had to appear by September 20, 2026
(January 18, 2027 minus 120 days).

The Federal Register showed proposals rather than final rules from each of these agencies as of October 17, 2026: the OCC (March 2026), the FDIC (April 2026), the NCUA (February 2026, with a supplemental proposal in May 2026) and the Federal Reserve (September 2026). Treasury has its own proposal (August 2026), and its September 30 rule is final but narrow: it sets procedures for reviewing state certifications and, coming from Treasury, does not start the 120-day clock. Final rules could still change operating details such as reserve custody and licensing, so the statute's headline protections are firmer than the rules beneath them.

Token rules at the SEC and CFTC

The SEC's five categories

On March 23, 2026, the SEC published, with CFTC guidance, a final interpretation of how securities laws apply to crypto assets. It classifies assets as digital commodities, digital collectibles, digital tools, stablecoins and digital securities. The first three are not themselves securities, though an asset can still be sold under an investment contract, which is a security. Stablecoins may or may not be securities depending on their features. The release names Bitcoin, Ether, Solana, Cardano, XRP and others as examples of digital commodities, and it states that it does not replace the Howey test, which remains binding legal precedent. Classification is clearer than before, but it rests on an agency's reading rather than a statute, and a later commission could revise it.

Proposals still open

The SEC's Regulation Crypto Assets proposal, published August 21, 2026, would create two registration exemptions (up to $5 million over four years, and up to $75 million per 12 months) and a conditional safe harbor under which a qualifying crypto asset would be deemed not subject to an investment contract. Comments are due October 20, 2026. Until the SEC adopts final rules, none of it is in force.

The CFTC's role is moving too. On October 13, 2026 it published an advance notice of proposed rulemaking on rules for transactions and markets in crypto assets under section 2(c)(2)(D) of the Commodity Exchange Act, with comments due December 14, 2026. An advance notice only asks questions; it does not set rules.

The CLARITY Act

The House passed the CLARITY Act (H.R. 3633) on July 17, 2025, by a 294-134 vote. On September 15, 2026, the Senate voted 49-50 on cloture on the motion to proceed to the bill (Record Vote 234), short of the 60 votes needed to end debate. Senator Tillis then entered a motion to reconsider, which, if agreed to, would let the Senate vote again; Congress.gov lists no further action as of October 17, 2026. The bill is not law, and what it would do is not a rule investors can rely on.

Custody and exchange-traded funds

Two SEC changes affect how institutions hold and package crypto. Staff Accounting Bulletin 122 (January 23, 2025) rescinded the earlier SAB 121 guidance, which had steered firms safeguarding crypto for others toward booking a liability for those assets; they now apply general loss-contingency accounting. And on September 17, 2025, the SEC approved generic listing standards that let Nasdaq, Cboe BZX and NYSE Arca list qualifying commodity-based trust shares without a separate rule filing for each product. Products that do not meet the standards still need a filing.

On October 6, 2026, the SEC also proposed crypto custody rules for investment advisers and regulated funds. They bear on funds and advisers, not on a wallet an investor holds directly.

EU and UK licensing

MiCA (Regulation (EU) 2023/1114) applies from December 30, 2024, with the stablecoin-related titles applying from June 30, 2024. Under Article 143(3), providers operating lawfully before December 30, 2024 could continue until July 1, 2026 or until their authorization was granted or refused, whichever came first, and member states could shorten or opt out of that period. That window has closed. ESMA's June 23, 2026 statement says providers without authorization must wind down in an orderly way.

The UK is on a later timetable. The FCA published its final cryptoasset policy statements on June 30, 2026. The full scope of regulated activities expands from October 25, 2027, and the FCA's page scheduled an authorization window from September 30, 2026 to February 28, 2027 for firms that want to rely on savings provisions. Firms that miss it may need to stop the relevant activities until they are authorized, so the UK platforms available can change before the regime starts.

Reporting and tax transparency

US brokers and Form 1099-DA

The IRS says brokers must report gross proceeds on Form 1099-DA for transactions on or after January 1, 2025 and basis for certain transactions on or after January 1, 2026. According to the form instructions, basis is reported for covered securities: assets acquired after 2025 and held in a custodial account at the reporting broker. For older or transferred-in assets the broker may leave basis blank, and under optional methods a broker need not report a customer's qualifying stablecoin sales up to $10,000 or specified NFT sales up to $600 a year, so the investor's own records still matter. The broker shows what it reports; the investor computes and reports gains and losses on a tax return. A separate rule for decentralized brokers was voided under the Congressional Review Act by Public Law 119-5 (April 10, 2025), and the IRS says the final regulations do not cover brokers commonly known as decentralized.

Travel Rule in the US and EU

US Bank Secrecy Act rules require certain financial institutions to pass identifying information with transmittals of funds of $3,000 or more, and FinCEN's 2019 guidance applies the Funds Travel Rule to convertible virtual currency. In the EU, the EBA's guidelines on information accompanying crypto transfers have applied since December 30, 2024.

DAC8 and CARF

Under the EU's DAC8, rules apply from January 1, 2026, and exchanges for the 2026 reporting year take place by September 30, 2027. The OECD's CARF commitment list shows 46 jurisdictions, including most EU member states and the UK, undertaking first exchanges by 2027, and lists the United States among jurisdictions undertaking first exchanges by 2029.

Frequently asked questions

Does the GENIUS Act insure stablecoin balances?

No. The Act states that payment stablecoins are not backed by the full faith and credit of the United States and are not subject to FDIC deposit insurance or NCUA share insurance. Its protections work differently: required reserves, monthly disclosure, and a bankruptcy provision giving holders first priority over other claims to the extent the Act would have required additional reserves.

Does Form 1099-DA capture DeFi activity?

No. The form comes from custodial brokers, such as trading platforms that hold customers' assets, so swaps made from a self-held wallet through a decentralized protocol generally produce no 1099-DA. Gains from that activity remain reportable by the taxpayer.

What happens to a balance on an EU platform that was not authorized by July 1, 2026?

ESMA expects such a provider to stop onboarding and marketing, limit services to selling, transferring or closing positions, and tell clients the timeline, including a deadline after which residual positions would be closed automatically. It is a wind-down instruction, not an extension.

Does the UK regime already apply to buying crypto?

Only partly. Until October 25, 2027, the FCA's role is defined mainly by anti-money-laundering and financial-promotion rules; the new regime brings a broad range of cryptoasset activities into its perimeter from that date.

Do individuals have to send Travel Rule information themselves?

The federal regulation places the obligation on the financial institution handling the transmittal, not on the customer. It requires the transmittor's financial institution, and any intermediary institution, to include the specified information in a transmittal order of $3,000 or more. Institutions may still ask customers for details they need to comply.

A dated checklist for holders

Check which legal entity holds your assets and whether it is authorized where you live: ESMA's register for EU platforms (clients of unauthorized providers lack MiCA safeguards) and the FCA register for UK firms.
After the GENIUS Act takes effect, check whether a stablecoin's issuer is a permitted issuer and publishes monthly reserve reports; the coin carries no FDIC insurance either way.
Keep your own acquisition dates and costs, especially for assets moved between platforms, because 1099-DA basis reporting covers only certain assets.
Treat any item in the table marked proposed or pending as unsettled, and re-check its status before relying on it.