[email protected]
WhatsApp +44 7563 115980
Telegram @buckinghamcapital
California's Digital Financial Assets Law (DFAL) is now in force for licensing. Since 1 July 2026, a firm doing digital financial asset business with California residents must hold a DFAL licence, have filed a complete application with the Department of Financial Protection and Innovation (DFPI) before that date, or fall within an exemption. A placeholder application completed after the deadline does not count.
For firms that missed the deadline, the route is the same as before, a full application through the Nationwide Multistate Licensing System (NMLS), but they cannot serve California residents until the licence is granted. For firms with applications pending, the priority is answering DFPI's questions quickly and meeting the conditions it sets.
DFAL covers digital financial asset business activity with or on behalf of California residents. In practice that includes:
Exemptions exist for banks and some other regulated entities, and for activity below set thresholds. Whether a firm is exempt depends on its structure and activity, so the analysis should be documented, because DFPI may ask for it. Firms that are also money transmitters should consider California's money transmission law alongside DFAL. Our US money transmitter licence guide covers the wider state picture.
Firms based outside California are not exempt simply because they have no office in the state. What matters is whether they do business with California residents. Geofencing, onboarding checks and terms of service should match the firm's licensing position, and the firm should be able to show how it prevents California residents from using services it is not licensed to provide.
| Element | Position |
|---|---|
| Where to apply | NMLS, to the DFPI |
| Applications opened | 9 March 2026 |
| Licensing deadline | 1 July 2026 for a licence or complete application |
| Application fee | $7,500 plus DFPI's reasonable review costs |
| Net worth | $100,000 tangible net worth as an initial expectation |
| Surety bond | $500,000 as an initial expectation |
| Final amounts | Set by DFPI during review, based on business model, volumes and risk |
A DFAL application follows the shape of a state money transmitter application, with crypto-specific additions. Expect DFPI to review:
Firms that already hold a New York BitLicense or several state money transmitter licences can reuse much of their existing material, but DFPI reviews each file on its own terms.
A firm that was not licensed and had no complete application on file by 1 July 2026 cannot lawfully do DFAL business with California residents. The practical steps are:
The application is the same as for on-time applicants, but the firm cannot rely on the transitional treatment that a complete application filed before the deadline provided.
A complete application filed before 1 July 2026 lets a firm continue while DFPI reviews it. Use the time to answer questions fully and quickly, keep the file up to date with any changes to ownership, products or key people, and prepare for conditions. DFPI sets the final net worth and bond during review, so have the funding ready. Keep California activity consistent with what the application describes, because regulators compare the two.
Firms with pending applications should also prepare for conditions on the licence. DFPI can grant a licence with conditions on activity, capital or reporting, and firms should have the resources ready to meet them on day one rather than negotiating afterwards.
DFAL places weight on how firms hold customers' digital assets. Expect DFPI to ask how assets are segregated from the firm's own, which wallets and custodians are used, how private keys are protected, how assets would be returned if the firm stopped trading, and how often reconciliations are done. Firms that use third-party custodians should have contracts that protect customers' assets in an insolvency and give the firm the information it needs to reconcile daily.
Disclosures matter too. Customers must be told clearly about fees, the risks of digital assets, how their assets are held and how to complain. DFPI reviews these documents as part of the application, so they should be in final form when the file is submitted, not drafted later.
Where the firm uses more than one custodian, the application should explain how assets are allocated between them and how the firm would move assets if a custodian stopped trading or ended the relationship.
A DFAL licence brings continuing duties. Licensees should plan for regular reporting to DFPI through NMLS, examinations, notice of changes in control or key people, maintenance of the net worth and bond set at licensing, and a compliance programme that keeps pace with new products. Listing a new digital asset or launching a new service may need prior analysis and, in some cases, notice to DFPI.
The examination cycle is where weak compliance programmes are found. Firms should run an internal review against their own policies before the first examination and keep evidence that controls operate as described, including AML monitoring, sanctions screening and complaint handling.
Firms that hold money transmitter licences or a New York BitLicense start with an advantage: their policies, financial statements and key individual information are already in NMLS, and they have been examined before. DFAL still requires its own application, and DFPI will look at California-specific points such as kiosk activity, disclosures and the assets offered to California residents. Reusing material saves time, but each section should be checked against DFAL rather than copied without review.
Kiosk operators face specific rules in addition to the licence. Operators may accept or dispense no more than $1,000 per customer per day, must give disclosures before each transaction, and since 1 January 2025 may not charge more than the greater of $5 or 15% of the transaction value. DFPI has taken enforcement action against kiosk operators for breaching these limits. The licensing requirement for kiosk operators took effect on 1 July 2026 with the rest of DFAL.
The federal GENIUS Act creates a framework for payment stablecoin issuers from 18 January 2027, but it does not replace state licensing for exchanges, custodians and wallets. A firm serving California residents may need a DFAL licence for its exchange and custody activity while its stablecoin arrangements are governed by the federal rules. Our guide to the GENIUS Act for foreign stablecoin issuers covers the issuer side.
DFAL applications tend to slow down for the same reasons state money transmitter applications do. Missing or incomplete information on control persons is the most frequent, followed by financial statements that do not match the business plan, AML programmes that are generic rather than tailored to the firm's products, and custody arrangements that are described in principle but not evidenced. Applications from firms whose ownership runs through several jurisdictions take longer, because DFPI needs to understand who ultimately controls the business.
Firms can avoid most delay by preparing the file as if the examiner were reading it: every claim in the business plan supported by a document, every policy reflecting how the firm actually operates, and a single person responsible for answering DFPI's questions quickly and consistently.
Stablecoin activity with California residents raises its own questions under DFAL, including which stablecoins a licensee may offer and how they are backed and redeemed. Firms offering stablecoins should confirm how DFPI treats each token they list, keep records of that analysis and watch for further DFPI rules, which were still being finalised during 2026. The federal GENIUS Act adds another layer from January 2027 for the issuers themselves.
| Stage | Work |
|---|---|
| Weeks 1 to 2 | Confirm DFAL scope and any exemption; decide the entity that will apply |
| Weeks 2 to 6 | Prepare policies, business plan, financials and key individual information |
| Weeks 4 to 8 | Arrange the surety bond and capital; complete the NMLS company record |
| Weeks 8 to 12 | File the application; prepare for DFPI questions |
Firms that also need money transmitter licences in other states should run DFAL alongside them, because much of the material is shared. Our NMLS renewal guide covers the year-end calendar for existing licensees.
We prepare DFAL applications through NMLS, including the business plan, custody and AML documentation, and support firms through DFPI's questions and conditions. For firms that missed the deadline, we plan the pause in California business and the route back to licensing.
1 July 2026. By then firms needed a licence, a complete application on file or an exemption.
Yes. Applications are made through NMLS. Firms that missed the deadline cannot serve California residents until they are licensed.
$7,500 plus DFPI's reasonable costs of reviewing the application. Capital and bond costs are separate.
Initial expectations are $100,000 of tangible net worth and a $500,000 surety bond. DFPI sets the final amounts during review.
Yes, from 1 July 2026, in addition to the daily transaction limit and fee cap already in force.
No. The GENIUS Act covers payment stablecoin issuers. State licensing such as DFAL still applies to exchanges, custodians and wallets.
Get in touch: WhatsApp +44 7563 115980, Telegram @buckinghamcapital or [email protected].
This article is general information, not legal advice. Requirements change, and the regulator’s own publications take precedence.
Tell us where you are and where you want to be.
[email protected]
WhatsApp +44 7563 115980
Telegram @buckinghamcapital