California’s Digital Financial Assets Law

The July 1, 2026 cutoff under the Digital Financial Assets Law is no longer a distant date on a compliance calendar. Companies that exchange, transfer, store, or issue redeemable digital financial assets for California residents must hold a DFPI license or have submitted a complete application, or they risk having to stop serving those customers. This is a necessary step that strengthens basic consumer protections in a market long marked by volatility and fraud, even if it brings real costs and friction. It is a positive development overall, but one that works best as a bridge toward clearer national rules rather than a permanent patchwork.

The law comes from Assembly Bill 39 and Senate Bill 401, signed by Governor Newsom in October 2023 and later adjusted by AB 1934, which pushed the licensing start from 2025 to 2026. The California Department of Financial Protection and Innovation administers it. Covered activity includes exchanging, transferring, or storing digital financial assets with or on behalf of residents, plus certain issuance of redeemable assets. Exemptions exist for banks, limited de minimis activity under $50,000 in annual revenue, and some software or computing-power providers, but most non-bank crypto businesses that touch California customers fall inside the net.

Application processing opened through the Nationwide Multistate Licensing System in March 2026. Firms that filed complete applications by the deadline may keep operating while the DFPI reviews them. The department has published FAQs, preparation guidance, and final regulations that took effect in late June 2026. Requirements include written policies on information security, business continuity, anti-fraud, and AML; capital and liquidity standards; a surety bond or trust account; disclosures on fees, risks, and outages; and, for stablecoins, reserve and redeemability rules. Kiosk operators face earlier limits on fees and daily transaction amounts that have been in force since 2024 and 2025.

These rules address real problems: Crypto has delivered innovation and access, but it has also produced repeated failures, scams, and losses for ordinary users. Requiring firms to hold customer assets properly, investigate listings, maintain customer support, and meet basic financial soundness standards is ordinary prudential supervision applied to a new asset class. California’s approach tracks the logic of New York’s BitLicense while adding stablecoin and kiosk-specific safeguards. Primary sources on the DFPI site and the statute text make the consumer-protection goals explicit.

Compliance is not free, as the smaller platforms and startups face application costs, policy documentation, fingerprinting of control persons, ongoing assessments, and the risk of delayed approvals. Multi-state operators must navigate yet another licensing regime alongside New York and other states. Decentralized interfaces and pure software providers still face interpretive questions. Critics reasonably note that state-by-state licensing can slow product launches and raise barriers that favor larger, better-capitalized firms. Those concerns are valid. The extended timeline and the ability to operate while an application is pending soften the edge, but they do not eliminate the burden.

Still, the alternative of continued light-touch treatment has already shown its limits. The law’s design includes conditional licenses for certain existing New York licensees and informal guidance pathways, which reduce pure duplication. California’s market size means firms that want to serve a large customer base will adapt rather than exit. The bigger limitation is structural: a purely state-driven system cannot fully solve interstate and international activity. That is why the right next step is federal market-structure legislation that sets national standards while preserving strong state consumer tools where they add value.

Firms that have not yet assessed their status should do so immediately against the DFPI’s published criteria and NMLS checklist. Those already in the queue should treat the pending period as a compliance sprint on capital, custody, and disclosures.

Regulators should process applications with speed and predictability so that legitimate operators are not left in limbo. Lawmakers at the federal level should treat California’s framework as useful evidence of what practical licensing looks like, then build a coherent national regime that protects users without forcing every company to run a multi-state licensing maze. The deadline has arrived. Clear rules that actually get enforced are better than the previous uncertainty, provided the system stays workable for the innovators it aims to supervise.

Sources:

1. California Department of Financial Protection and Innovation. “Digital Financial Assets.” https://dfpi.ca.gov/regulated-industries/digital-financial-assets/.

2. Goodwin. “The California DFAL License Application Is Open: Assess Your Business Model Now for the July 1 Deadline.” April 3, 2026. https://www.goodwinlaw.com/en/insights/publications/2026/04/alerts-finance-dcb-california-dfal-license-application-open.

3. Jones Day. “Registration Under California Digital Financial Assets Law Begins March 9, Law Takes Effect July 1.” February 2026. https://www.jonesday.com/en/insights/2026/02/registration-under-california-digital-financial-assets-law-begins-march-9-law-takes-effect-july-1.

4. Greenberg Traurig. “California DFAL Is Now Operative: Stablecoins, Enforcement, Custody, and What’s Next.” July 17, 2026. https://www.gtlaw.com/en/insights/2026/7/california-dfal-is-now-operative-stablecoins-enforcement-custody-and-whats-next.

5. Charltons Quantum. “California’s Digital Financial Assets Law Takes Effect as Crypto Licensing Deadline Passes.” July 1, 2026. https://charltonsquantum.com/californias-digital-financial-assets-law-takes-effect-as-crypto-licensing-deadline-passes/.