AI trading bots are legal in the United States. There is no federal law that prohibits automating your own trades, and no license is required to run a bot on your own account. What the law does is hold the operator responsible for whatever the bot does. Every anti-fraud, anti-manipulation, registration, and tax rule that applies to a human trader applies to the person who built, deployed, or controls the algorithm. The useful question is not whether bots are allowed but whether yours stays inside the rules that govern all trading.
Who Enforces the Rules
Two federal agencies split oversight. The Securities and Exchange Commission (SEC) covers securities, including stocks, bonds, options, and exchange-traded funds. The Commodity Futures Trading Commission (CFTC) covers commodity futures, options on futures, and swaps. Both have said automated trading systems fall within their jurisdiction, and both coordinate on digital assets.1Commodity Futures Trading Commission. CFTC and SEC Staff Issue Joint Statement on Trading of Certain Spot Crypto Asset Products
Neither agency has enacted rules aimed specifically at AI-powered trading. That means bots are governed by the same general statutes that cover every market participant. “AI” is not a legal category, and labeling a product that way changes nothing about the rules that reach it.
Conduct That Turns a Legal Bot Into an Illegal One
Automated execution does not create new crimes, but it makes certain old ones easier to commit at scale. Three categories are where bot operators most often cross the line.
Spoofing
Spoofing means placing bids or offers you intend to cancel before they execute, to trick other traders about supply or demand. The Commodity Exchange Act makes it unlawful to engage in “bidding or offering with the intent to cancel the bid or offer before execution.”2Office of the Law Revision Counsel. 7 USC 6c – Prohibited Transactions It is a federal felony carrying up to $1 million in fines and 10 years in prison per violation.3Office of the Law Revision Counsel. 7 USC 13 – Violations Generally, Punishment, Costs of Prosecution Bots are effective spoofing tools because they can place and cancel thousands of orders per second, which is precisely why regulators watch automated activity closely. The CFTC runs a whistleblower program dedicated to spoofing reports.4Commodity Futures Trading Commission. CFTC Whistleblower Alert – Spoofing in Commodities and Derivatives Markets
Wash Trading
Wash trading is buying and selling the same instrument to create the appearance of activity without any real change in ownership. The Commodity Exchange Act prohibits transactions “of the character of, or commonly known to the trade as, a ‘wash sale.'”2Office of the Law Revision Counsel. 7 USC 6c – Prohibited Transactions In securities markets, executing trades with no change in beneficial ownership to create a false appearance of active trading is also unlawful.5Office of the Law Revision Counsel. 15 USC 78i – Manipulation of Security Prices A bot operating across multiple accounts or venues can create wash trades by accident if it buys on one venue and sells the same asset on another inside a tight window. Regulators look at the pattern first.
Front-Running
Front-running is trading ahead of a known pending order to profit from the price move that order will cause. It typically involves a broker or adviser exploiting non-public information about a client’s upcoming trade, and it falls under the Securities Exchange Act’s broad ban on any “manipulative or deceptive device” in connection with buying or selling securities.6Office of the Law Revision Counsel. 15 USC 78j – Manipulative and Deceptive Devices A bot that processes order flow data and trades ahead of customer orders creates exactly the kind of exposure that draws SEC enforcement.
Penalties
Beyond the CEA’s spoofing penalties, federal securities and commodities fraud carries up to 25 years in prison under the general fraud statute.7Office of the Law Revision Counsel. 18 USC 1348 – Securities and Commodities Fraud Regulators can also force disgorgement of profits and impose civil monetary penalties. The fact that an algorithm executed the trades does not shift liability away from the person who built, deployed, or controlled it.
When Charging Others for a Bot Triggers Registration
Running a bot on your own account requires no special registration. That changes the moment you offer the bot to others for a fee. Under the Investment Advisers Act of 1940, anyone who, for compensation, engages in the business of advising others about securities is an “investment adviser.”8Office of the Law Revision Counsel. 15 USC 80b-2 – Definitions A bot that selects securities, times entries and exits, or allocates across a portfolio is doing exactly that.
All three elements have to be present: compensation (a subscription fee, performance fee, or any form of payment), regular business activity, and advice about securities. A bot that only trades commodity futures may not fall under the Advisers Act, though CFTC registration requirements can still apply.
Where you register depends on how much client money you manage. Advisers with assets under management between $25 million and $100 million generally register with their home state’s securities regulator. Those managing $100 million or more register with the SEC.9Office of the Law Revision Counsel. 15 USC 80b-3a – State and Federal Responsibilities Below $25 million, SEC registration is prohibited and state registration applies unless an exemption fits.10eCFR. 17 CFR 275.203A-1 – Eligibility for SEC Registration
Registration brings real obligations. You file Form ADV disclosing your business, fees, disciplinary history, and conflicts. You owe a fiduciary duty to clients. You keep books and records, and you should expect to disclose that investment decisions are made by an algorithm rather than a human. The SEC has been clear that the nature of the advice, not the delivery method, determines whether you are an adviser. Calling your service a “software product” does not exempt it.
Brokerage Terms and Market Access Controls
Federal law is the floor. Your brokerage or exchange almost certainly imposes more through its terms of service and API agreement, and violating those can end your account even if you have not broken any law.
Common restrictions include bans on sharing API credentials, reverse-engineering platform software, using market data for unauthorized purposes, and exceeding order submission rate limits. Some platforms restrict certain order types or require pre-approval for algorithmic strategies. Consequences tend to be immediate: suspension, permanent bans, and forfeiture of open positions at the time of termination.
Behind the scenes, broker-dealers that provide market access are required by SEC Rule 15c3-5 to maintain risk management controls on all orders flowing through their systems, including pre-trade credit and capital thresholds, blocks on erroneous orders based on price and size, and restrictions to pre-approved persons and accounts.11eCFR. 17 CFR 240.15c3-5 – Risk Management Controls for Brokers or Dealers With Market Access Firms must review the controls at least annually and run post-trade surveillance for manipulation. That is why your bot sometimes hits hard blocks or rejections that seem overly cautious. The brokerage is protecting itself from the regulatory liability your orders can create.
Crypto Bots Sit in a Split Jurisdiction
Crypto bot operators face the same anti-fraud and anti-manipulation rules as everyone else, even though the broader digital asset framework is unsettled. The SEC treats cryptocurrencies that qualify as securities the same as any other security, and the CFTC has asserted authority over crypto derivatives, futures, and certain spot transactions.12Commodity Futures Trading Commission. CFTC Joins SEC to Clarify the Application of Federal Securities Laws to Crypto Assets
Congress is working toward a clearer split. The Digital Asset Market Clarity Act of 2025 passed the House in July 2025 and would give the CFTC exclusive jurisdiction over “digital commodities” traded on registered entities, while leaving digital assets that are securities with the SEC.13Congress.gov. H.R.3633 – 119th Congress (2025-2026) – Digital Asset Market Clarity Act of 2025 Until legislation is signed, crypto bot operators should assume either agency may claim jurisdiction depending on the asset.
Crypto also brings anti-money laundering exposure under the Bank Secrecy Act, which requires financial institutions to maintain programs against money laundering and terrorism financing.14Office of the Law Revision Counsel. 31 USC 5311 – Declaration of Purpose The identity verification you see on regulated platforms flows from those obligations.
The Tax Rules That Catch Bot Operators Off Guard
The most expensive risk from a legal bot is often tax, not enforcement. High-frequency automated strategies interact badly with rules written for slower trading.
The Wash Sale Rule
If you sell a stock or security at a loss and buy a substantially identical one within 30 days before or after the sale, the IRS disallows the loss deduction.15Office of the Law Revision Counsel. 26 USC 1091 – Loss From Wash Sales of Stock or Securities The disallowed loss is not gone. It gets added to the cost basis of the replacement, deferring the deduction. For a bot that trades the same handful of symbols hundreds of times a day, losses can roll forward through the entire year while gains remain fully taxable.
The math gets ugly quickly. If your bot nets $5,000 in profit for the year, but $40,000 of gains on winning symbols are taxable while $35,000 of losses on losing symbols are disallowed because the bot kept re-entering positions inside the 30-day window, you owe tax on $40,000, not $5,000. One workaround is stopping the bot from trading losing symbols for at least 31 days before year-end so the accumulated losses can be recognized, but that still carries risk if the bot resumes those symbols shortly after January 1.
The Mark-to-Market Election
Active traders who qualify as running a trading business can make a Section 475(f) election to use mark-to-market accounting. All positions are treated as sold at fair market value on the last business day of the year, and all gains and losses become ordinary income and loss. The wash sale rule no longer applies, and losses are fully deductible without the $3,000 annual capital loss limit.16Internal Revenue Service. Topic No. 429, Traders in Securities
Qualifying is not automatic. The IRS looks at trading frequency, holding periods, whether you seek daily price movements rather than long-term appreciation, and whether trading is substantial and continuous. The election must be made by the due date of the tax return for the year before it takes effect, so you cannot wait until April to retroactively fix a bad wash sale year.16Internal Revenue Service. Topic No. 429, Traders in Securities If your bot executes dozens of trades a day, look at this election before your first full tax year of bot trading.
Reporting Every Trade
Every trade the bot makes must be reported on Form 8949, categorized by holding period and matched with cost basis. A bot that runs thousands of trades a year creates a heavy recordkeeping burden. Starting with the 2025 tax year, the IRS added separate reporting boxes for digital asset transactions on Form 8949, distinguishing short-term and long-term crypto trades from traditional securities.17Internal Revenue Service. Instructions for Form 8949 Crypto bot operators need recordkeeping that captures those classifications from the start.