

Virtual Currency Businesses Guidance
Introduction
In June 2015, DFS issued its virtual currency regulation, 23 NYCRR Part 200, under the New York Financial Services Law. Since 2015, under that “BitLicense” regulation or the limited purpose trust company provisions of the New York Banking Law, DFS has granted 25 virtual currency licenses and charters to ensure that New Yorkers have a well-regulated way to access the virtual currency marketplace and that New York remains at the center of technological innovation and forward-looking regulation.
To provide regulatory clarity and efficiency, and to ensure that our approach to regulating virtual currency businesses reflects the realities of an evolving market, we continue to review our regulations and their implementation. In the five years since DFS began authorizing BitLicensees and virtual currency trust companies (collectively, “VC Entities”), some of these businesses have asked to list new virtual currencies (“coins”) in addition to those included in their initial DFS applications. Over that time, there has been exponential growth in the number of coins.
Proposed Guidance of December 11, 2019
To enhance efficiency and enable VC Entities to offer and use new coins in a timely and prudent manner, on December 11, 2019, DFS issued proposed guidance on this subject seeking comments from all interested parties and the general public regarding the following two proposed coin adoption or listing options that DFS wished to make available to the VC Entities:
Under the Proposed Guidance, once DFS approved a VC Entity’s coin-listing policy, the VC Entity would be able to self-certify to DFS that its proposed adoption or listing of new coins complied with its DFS-approved coin-listing policy’s requirements. The VC Entity would then provide written notice to DFS of its intent to offer and use any such new coins, including details of the usage and offering of such coins, prior to using or offering the coins. To be clear, in such cases, only prior notice to DFS with respect to the particular coin would be required, and not a prior DFS approval of the particular coin.
VC Entities without DFS-approved coin-listing policies would be required to seek DFS’s prior approval to list or adopt any coins for which they had not previously received DFS approval, other than Greenlisted coins.
All VC Entities would be required to keep DFS informed, no later than at the time of their next quarterly filing, of all coins used or offered in connection with their Virtual Currency Business Activity.
Public Comments
Both in specific response to the above-noted request for comments and otherwise, DFS has received feedback from various stakeholders, including the regulatory community, VC Entities and other virtual currency firms, attorneys, and foundations. That feedback was mostly positive and reflected support for the use both of coin-listing policies and Greenlisting. (Read the feedback at Coin-Listing Guidance Comments.)
As to coin-listing policies, comments were broadly in favor of the overall approach, and some changes were suggested with respect to the specific wording or implementation. As to the Greenlist process, feedback was offered regarding, for example, the specific manner or manners in which coins might be chosen and the amount of time that might be needed to evaluate and Greenlist coins.
Having reviewed and considered all such comments from stakeholders, DFS has revised the Proposed Guidance, as below, to: (A) provide a general framework for a VC Entity’s creation of a firm-specific policy for the adoption or listing of a new coin, without DFS’s prior approval, through the process of self-certification; and (B) a general framework for the process of Greenlisting coins for wider usage.
This guidance, which contains these revisions, is intended to outline two separate frameworks designed to enhance speed and efficiency in a VC Entity’s adoption or listing of coins, with the goal of fostering innovation in a manner that is consistent with the safety and soundness of the VC Entities and with the protection of consumers.
DFS will continue to engage with stakeholders and to evaluate this guidance in the context of the evolving virtual currency marketplace.
(A) General Framework for the Creation of a VC Entity’s Coin-Listing Policy
A VC Entity that wishes to self-certify the use of new coins, in addition to those on the Greenlist referenced below, without the prior approval of DFS, must create a coin-listing policy in accordance with the following general framework.
A VC Entity’s coin-listing policy must include robust procedures that comprehensively address all steps involved in the review and approval of coins. The policy must be tailored to the VC Entity’s specific business model, operations, customers and counterparties, geographies of operations, and service providers; and to the use, purpose, and specific features of coins being considered.
The policy should result in approval of a coin only if the VC Entity concludes that the coin’s intended use or adoption is consistent with the consumer protection and other standards embodied in 23 NYCRR Part 200 and with the safety and soundness of the VC Entity.
Consistent with the intent and purpose of 23 NYCRR 200.15(g), a VC Entity cannot self-certify any coin that may facilitate the obfuscation or concealment of the identity of a customer or counterparty. Thus, for example, no privacy coin can be self-certified. A VC Entity also cannot self-certify any coin that is designed or substantially used to circumvent laws and regulations (for example, gambling coins).
A coin-listing policy should, at a minimum, contain and be based on the following attributes:
I. Governance
The VC Entity must ensure that:
II. Risk Assessment
The VC Entity must perform a comprehensive risk assessment designed to ensure that the coin and the uses for which it is being considered are consistent with the consumer protection and other standards embodied in 23 NYCRR Part 200 and with the safety and soundness of the VC Entity. The risks to be assessed include, but are not limited to, the following:
III. Monitoring
Once a VC Entity begins using a new coin, the VC Entity should have policies and procedures in place to monitor the coin to ensure the VC Entity’s continued use of the coin remains prudent. This includes:
Once a VC Entity’s coin-listing policy is approved by DFS, the VC Entity will be able to self-certify to DFS that its proposed use of a new coin complies with the requirements of its DFS-approved coin-listing policy. Prior to using the coin, the VC Entity will provide written notice to DFS of its intent to use the coin, including details of its specific use and purpose.[i] In such case, no prior approval from DFS will be required, only prior notice to DFS. VC Entities are also required to keep DFS informed, no later than at the time of their next quarterly filing, of all coins used or offered in connection with their Virtual Currency Business Activity.
A VC Entity that does not have a DFS-approved coin-listing policy is required to seek DFS’s prior approval with respect to any coin it wishes to use, unless the coin is on the Greenlist referenced below, or the VC Entity has already received DFS’s prior approval.
(B) General Framework for Greenlisting Coins
I. Process
Below is the general framework and process for Greenlisting coins for wider use.
II. Monitoring
A VC Entity should have policies and procedures in place to monitor its adoption and use of any coin on the Greenlist to ensure the VC Entity’s continued use of the coin remains prudent. This includes:
VC Entities must provide their customers appropriate written disclosures regarding the coins they offer for use and must indicate to their customers whether a coin is drawn from the Greenlist, added through self-certification, or added through specific DFS approval.
The information contained in this Guidance is not intended to be exhaustive, and DFS may update it from time to time for any reason, including, for example, in response to new information, evolving markets, or additional experience. This Guidance is not intended to limit the scope or applicability of any law or regulation. DFS may, at any time and in its sole discretion, prohibit or otherwise limit a coin’s use before or after a VC Entity begins using a coin; require that any VC Entity delist, halt, or otherwise limit or curtail activity with respect to any coin; remove any coin from the Greenlist; refrain from placing any coin on the Greenlist; or discontinue the Greenlist process entirely.
Please note that each VC Entity is responsible for understanding and complying with all applicable laws and regulations, including any applicable legal and regulatory requirements imposed by other state or federal regulatory agencies. This Guidance is not intended to address and does not address any such other state or federal legal or regulatory requirements.
[i] This written notice shall be in the form posted on the DFS website.