Starting a crypto business in the United States is exciting.
Founders often focus on product development, users, liquidity, partnerships, marketing, fundraising, and launch timelines. These are all important parts of building a strong crypto startup. But before a crypto startup begins offering services to customers, there is one important compliance question to answer:
Do you need MSB registration with FinCEN?
MSB stands for Money Services Business. For many crypto startups, registering as an MSB is one of the first steps in the US compliance journey. It is not just a simple formality. It places your business within the anti-money laundering framework and helps show that your company understands its responsibilities as a financial services provider.
For a new crypto business, this can feel confusing at first. Terms such as FinCEN, BSA, AML, SARs, CTRs, money transmission, registration, and recordkeeping may sound complex. However, the process becomes easier when it is broken down into clear steps.
This guide explains what MSB registration means, why FinCEN matters, how crypto startups can understand whether they may qualify as an MSB, and what practical steps they should take before launching.
What is an MSB?
A Money Services Business is a type of financial institution that provides certain money movement or financial services.
In the United States, MSBs are regulated under the Bank Secrecy Act framework. FinCEN, the Financial Crimes Enforcement Network, is the bureau of the US Department of the Treasury that handles many anti-money laundering rules.
FinCEN defines an MSB as a business that offers one or more covered services, such as:
● Money transmission
● Currency exchange
● Check cashing
● Issuing or selling traveler’s checks or money orders
● Prepaid access
For crypto startups, the most important category is usually money transmission.
If a business accepts value from one person and transmits it to another person or location, it may fall under money transmission rules. In crypto, this may involve fiat currency, digital assets, or convertible virtual currency.
Related reading: For a quick screening checklist, read Do I Need MSB Registration for My Crypto Business? A Simple Test.
For crypto startups
A crypto startup may need to consider MSB registration if it operates as:
● A crypto exchange
● A custodial wallet provider
● An OTC trading desk
● A crypto payment processor
● A platform that receives and transmits crypto or fiat value on behalf of customers
● A business that exchanges fiat for crypto, crypto for fiat, or one crypto asset for another
However, not every crypto project is automatically an MSB.
A non-custodial software provider may be treated differently from a platform that holds customer funds. A miner may be treated differently from an exchange. A peer-to-peer tool may be treated differently from a company that controls funds or processes transactions.
The key question is not only:
“Are we a crypto company?”
The better question is:
“Do we accept, hold, exchange, transfer, or transmit value for customers?”
That question should be answered carefully before launch.
Why do crypto startups need to register with FinCEN?
You need to register with FinCEN because qualifying MSBs are required to do so under US law.
For many crypto businesses, MSB registration is the baseline requirement before operating as a regulated financial services business. It helps create visibility, accountability, and a clear compliance starting point.
Registering with FinCEN does three important things.
1. It makes your business legally visible
Registration helps identify your company as a Money Services Business. It shows that your startup understands that it may be operating in a regulated financial services environment.
2. It puts your business on the compliance map
FinCEN can identify your business as a registered MSB. This is important because crypto businesses are often expected to show banks, payment partners, investors, auditors, and service providers that they have taken basic compliance steps.
3. It makes your business accountable
Registration creates responsibility. A registered MSB is expected to follow applicable AML, reporting, and recordkeeping obligations.
MSB registration can also support business credibility. Banks, payment partners, investors, and vendors may ask whether your business is properly registered and whether you have a compliance program in place.
However, registration alone is not enough.
A company can register with FinCEN and still fail compliance if it does not build an AML program, train staff, monitor transactions, file reports, and keep proper records. MSB registration is the foundation, but the full compliance program must be built on top of it.
Step-by-step guide to MSB registration
Crypto startups should treat MSB registration as part of a wider compliance readiness process. It should not be handled as a last-minute form submission.
Below is a practical step-by-step structure.
Step 1: Determine if you are an MSB
Before you register, you must determine whether your business activities fall within the MSB definition.
This is one of the most important steps because crypto business models vary widely. Two startups may both describe themselves as “crypto platforms,” but their compliance obligations may be very different depending on custody, control, transaction flow, customer activity, and value transfer.
You are likely an MSB if:
● You accept and transmit fiat currency or crypto on behalf of others.
● You exchange fiat for crypto or crypto for fiat.
● You exchange one crypto asset for another for customers.
● You hold custody of customer funds or digital assets.
● You process customer transactions as part of a financial service.
You are probably not an MSB if:
● You are a software developer who creates a non-custodial wallet app and does not hold funds.
● You are a miner.
● You only provide blockchain analytics, data, or educational content.
● You build open-source software but do not operate a financial service.
● You only support peer-to-peer trading without custody or transaction control.
These examples are general. The final answer depends on your exact business model, flow of funds, custody structure, customer relationship, and level of control over transactions.
A crypto startup should document its MSB assessment clearly. This documentation should explain what the business does, what services it provides, who controls customer assets, how funds move, and why the company believes registration is or is not required.
The business should also seek legal advice before making a final decision.
Step 2: Register with FinCEN
Once you determine that your business qualifies as an MSB, the next step is registration.
MSB registration is completed through FinCEN using Form 107, the Registration of Money Services Business.
This form collects key information about your company, its ownership or control structure, and the types of money services activities it conducts.
What you will need
Before completing registration, your startup should prepare basic business information, including:
● Legal business name
● Business structure, such as LLC or corporation
● Business address
● EIN or tax identification number
● Name of the owner or controlling person
● Information about your MSB activities
● States or territories where you operate
● Contact details for the responsible party
This step should be handled carefully. The information should match your legal entity documents and internal business records.
A common mistake is treating registration as an isolated admin task. In reality, registration should connect to your wider compliance file. Your business should also be preparing its AML program, compliance officer appointment, risk assessment, reporting procedures, and recordkeeping process.
Step 3: Develop an AML program
Registration is only the beginning.
A registered MSB must also have a written Anti-Money Laundering program. This program explains how the business will detect, prevent, and report suspicious activity.
An AML program should be specific to your business. A small custodial wallet startup, a crypto exchange, and an OTC trading desk may all need AML programs, but the details will be different.
What the AML program should include
A strong AML program should include the following core areas:
Policies and procedures: Written documents explaining how your business identifies customers, monitors transactions, handles alerts, escalates concerns, and keeps records.
A compliance officer: A designated person responsible for managing the AML program.
Training: Ongoing training for employees involved in onboarding, operations, customer support, payments, investigations, product, and risk management.
Independent testing: Periodic review of the AML program by an independent party.
Risk assessment: A clear analysis of customers, products, locations, transaction types, and exposure to financial crime risk.
For crypto startups, the AML program should also address:
● Wallet screening
● Transaction monitoring
● Sanctions exposure
● Darknet market links
● Fraud patterns
● Mixers and tumblers
● High-risk jurisdictions
● Suspicious movement of funds
● Customer behaviour that does not match the expected profile
The AML program should not be copied blindly from another company. A template can help you start, but it must be customized to your actual risks, products, customers, and controls.
Good compliance is not only about having a policy document. It is about making sure the policy works in real situations.
Related reading: For customer data and transfer information controls, see Travel Rule vs. KYC: What’s the Difference? and How to Prepare Your Crypto Business for FATF Travel Rule.
Step 4: Appoint a compliance officer
A compliance officer is a legal and practical requirement.
This person is responsible for overseeing the AML program and making sure the company meets its obligations.
Who should it be?
The compliance officer should be a senior or properly authorised member of your team. It can be an internal hire or an external consultant, depending on the size and stage of the business.
The person must have enough authority, resources, and access to do the job properly. They should understand AML, KYC, crypto risks, transaction monitoring, reporting obligations, sanctions exposure, recordkeeping, and internal controls.
For early-stage crypto startups, the compliance role is sometimes assigned to a founder, operations manager, or legal lead. This may work at the beginning, but as the business grows, the role may require more dedicated support.
A good compliance officer should be able to answer questions such as:
● What information do we collect during onboarding?
● Which customers require enhanced due diligence?
● What transactions should trigger review?
● Who approves high-risk customers?
● When should we file a SAR?
● How do we document compliance decisions?
● How often do we review our AML program?
● How do we train staff on financial crime risks?
● How do we monitor crypto wallet exposure?
The compliance officer should not be treated as a name on a document. They need real responsibility and support from leadership.
Step 5: File required reports
Once registered, your business may have reporting obligations.
Two important reports for MSBs are Suspicious Activity Reports and Currency Transaction Reports.
Suspicious Activity Reports
SARs are filed when the business detects suspicious activity that may involve money laundering, fraud, terrorist financing, sanctions evasion, structuring, or other illegal conduct.
For crypto businesses, SAR obligations are especially important.
Suspicious activity may include:
● Unusual wallet behaviour
● Rapid movement of funds
● Links to high-risk addresses
● Attempts to avoid KYC
● Inconsistent customer information
● Exposure to darknet markets
● Fraud complaints
● Suspicious use of privacy-enhancing tools
● Transactions that do not match the customer profile
● Possible sanctions evasion
Not every unusual transaction is suspicious. But every alert should be reviewed properly, and the decision should be documented.
Currency Transaction Reports
CTRs are filed for certain cash transactions over 10,000 USD.
For many crypto startups, cash activity may not be central to the business model. However, teams should still understand CTR requirements and know whether they apply to the company’s operations.
The key point is simple: registration creates ongoing responsibilities. A crypto startup must be prepared to identify reportable activity, escalate it internally, file reports where required, and keep supporting documentation.
Step 6: Keep proper records
Recordkeeping is a core part of MSB compliance.
If your business is examined, audited, or investigated, records will help show that you followed your compliance process.
What to keep
Useful records may include:
● MSB registration records
● AML policies and procedures
● Customer identification information
● KYC and KYB data
● Transaction records
● Wallet screening results
● Alert review notes
● Copies of SARs and CTRs
● Training records
● Independent testing reports
● Compliance decisions and approvals
● Risk assessment documents
● Customer communication related to compliance reviews
How long to keep records
Many key compliance records must be kept for at least five years.
Startups should build this requirement into their systems from the beginning. Records should be organised, searchable, secure, and easy to retrieve if needed.
Good recordkeeping also helps internal teams. It makes reviews easier. It supports quality control. It helps new analysts understand previous decisions. It also gives leadership a clearer view of compliance performance.
Common MSB registration mistakes crypto startups should avoid
Crypto startups should avoid treating MSB registration as a box-ticking exercise.
Here are common mistakes to avoid.
Mistake 1: Thinking you do not need to register
Some crypto founders assume they are only a technology company and are outside financial services regulation.
This can be a serious mistake. If your business accepts and transmits value, operates an exchange, or provides custodial services, MSB registration may be required.
The business model matters more than the label.
Mistake 2: Registering late
MSBs generally have 180 days to register after starting covered activities.
Do not wait until the last minute. Compliance planning should happen before launch, especially if you need banking, payment partners, or investor approval.
A better approach is to assess MSB status early, prepare your registration file, build the AML program, and make sure your operations are ready before customers begin using the platform.
Mistake 3: Not having a written AML program
Registration without an AML program is not enough.
Your AML program explains how your business manages financial crime risk in practice. Without a clear program, your team may not know how to onboard customers, monitor activity, handle alerts, escalate suspicious behaviour, or keep records.
Mistake 4: Not appointing a compliance officer
A compliance officer is not just a name in a policy document.
The person must have authority, resources, and responsibility for the AML program. They should be able to influence operational decisions and escalate serious issues to leadership.
Mistake 5: Using a generic AML template
A generic template may not reflect your actual crypto risks.
Your AML program should cover your products, customers, transaction flows, wallet risks, monitoring controls, reporting obligations, and recordkeeping process.
A copied policy can create a false sense of security. Regulators, partners, and auditors may expect to see controls that match your real business model.
Mistake 6: Ignoring state-level requirements
FinCEN registration is federal.
It does not automatically solve every state licensing requirement. Depending on your business model and where you operate, state money transmitter licensing may also need to be reviewed.
This is especially important for crypto startups planning to serve customers across multiple US states.
Practical checklist for crypto startups
Use this checklist as a starting point before launch.
Your business should be able to answer these questions:
● Have we assessed whether we qualify as an MSB?
● Have we documented our business model and flow of funds?
● Do we accept, hold, exchange, transfer, or transmit value for customers?
● Have we reviewed whether FinCEN registration is required?
● Have we prepared the information needed for Form 107?
● Do we have a written AML program?
● Have we appointed a compliance officer?
● Do we have customer onboarding and KYC procedures?
● Do we have transaction monitoring and wallet screening controls?
● Do we know when to file SARs or CTRs?
● Do we keep records for at least five years where required?
● Have we trained relevant staff?
● Have we reviewed state money transmitter licensing risk?
● Have we planned independent testing of the AML program?
This checklist is not a full legal review. But it gives crypto startups a clear structure for early compliance planning.
Real-world scenario: A crypto startup preparing to launch
Imagine a startup is building a custodial crypto wallet and exchange platform for US customers.
Customers will create accounts, complete onboarding, deposit fiat, buy crypto, hold crypto in the platform wallet, and send assets to external addresses.
Before launch, the startup asks whether it is only a technology product or whether it is providing a regulated money service.
The team reviews the flow of funds. The platform will receive customer value, hold assets, exchange fiat for crypto, and transmit crypto to external wallets. Based on that activity, the business may need to consider MSB registration with FinCEN.
The startup then prepares registration information, appoints a compliance officer, writes an AML program, designs KYC procedures, sets up wallet screening, builds transaction monitoring workflows, and prepares a recordkeeping process.
This is the right approach.
Instead of waiting until problems appear, the company builds compliance into the launch plan. That makes the business more credible with customers, banks, payment partners, investors, and regulators.
Conclusion
MSB registration is one of the most important early compliance steps for many crypto startups in the United States.
If your business accepts and transmits value, operates as a crypto exchange, provides custodial wallet services, or processes transactions for customers, you may need to register with FinCEN as a Money Services Business.
But registration is only the beginning.
A crypto startup must also build a practical AML program, appoint a compliance officer, train staff, monitor transactions, file reports where required, and keep proper records.
The strongest startups treat compliance as part of the business foundation. They do not wait until launch problems, partner questions, or regulatory concerns appear. They assess their obligations early, document decisions clearly, and build controls that match their real risks.
Federal MSB registration is only one part of US crypto compliance. To understand how state-level licensing fits into launch planning, market entry and ongoing obligations, explore our State Money Transmitter Licensing (MTL) for Crypto Businesses course.
FAQs
What is an MSB?
An MSB is a Money Services Business. In crypto, this may include exchanges, custodial wallet providers, OTC desks, payment processors, or companies that accept and transmit value for customers.
Does my crypto startup need to register with FinCEN?
It depends on your business model. If your startup accepts and transmits fiat or crypto value, operates as an exchange, or provides custodial services, you may need to register as an MSB.
What is FinCEN Form 107?
FinCEN Form 107 is the official registration form used by Money Services Businesses to register with FinCEN.
How long do I have to register?
MSBs generally need to register within 180 days of starting covered MSB activities.
What happens if I do not register?
If your business is required to register and fails to do so, it may violate federal law and face penalties, enforcement action, business disruption, or loss of partner trust.
Is MSB registration the same as an AML program?
No. Registration is only one step. A registered MSB must also maintain an AML program, appoint a compliance officer, train staff, monitor activity, file reports, and keep records.
Do crypto startups also need state money transmitter licences?
Possibly. FinCEN registration is federal and does not automatically cover state-level requirements. Depending on your business model and where you operate, state money transmitter licensing may also need to be reviewed.
Who should take an MSB registration course?
Startup founders, compliance officers, operations managers, product leads, legal teams, advisors, and anyone involved in launching or managing a US crypto business should understand MSB registration and FinCEN basics.
