Yes, Coinbase is regulated. In the United States it answers to the Financial Crimes Enforcement Network as a registered Money Services Business, holds money transmitter licenses in more than 40 states, and files quarterly and annual reports with the Securities and Exchange Commission as a public company traded on the Nasdaq. Those layers shape how the exchange verifies your identity, reports your trades to the IRS, and discloses its own finances. What they do not do is guarantee that your crypto is safe from every kind of loss, and that gap is worth understanding before you assume “regulated” means “protected.”
Federal Anti-Money-Laundering Rules
Coinbase’s federal regulation begins with its registration as a Money Services Business through FinCEN. That registration pulls the exchange under the Bank Secrecy Act, which requires a formal compliance program, a dedicated compliance officer, and ongoing training for employees on spotting financial crime.1eCFR. 31 CFR Section 1022.380 – Registration of Money Services Businesses
In practice, that means the exchange files Suspicious Activity Reports on transactions of $2,000 or more that show red flags such as unusual patterns or possible ties to illicit activity.2Financial Crimes Enforcement Network. MSB Threshold – $2,000 or More It also watches for structuring, where someone breaks transactions into smaller pieces to stay under the $10,000 threshold that triggers a Currency Transaction Report.3Financial Crimes Enforcement Network. Notice to Customers: A CTR Reference Guide
When you open a Coinbase account, this is why you have to hand over a government-issued photo ID and a taxpayer identification number such as a Social Security number or ITIN. Section 326 of the USA PATRIOT Act requires financial institutions to verify the identity of anyone opening an account.4FFIEC BSA/AML. USA PATRIOT Act Section 326 – Customer Identification Program FAQs Coinbase then screens that information against sanctions lists kept by the Office of Foreign Assets Control. The Bank Secrecy Act’s travel rule also requires the exchange to collect and pass along sender and recipient information for transfers of $3,000 or more.
State Money Transmitter Licenses
Federal registration is only one layer. Coinbase must also hold a money transmitter license in nearly every state that requires one. Those licenses come from state banking or financial services departments and require the exchange to show adequate financial reserves, submit key personnel to background checks, and post a surety bond or equivalent security for customer funds. Coinbase holds these licenses in more than 40 states, with application fees ranging from about $1,000 to several thousand dollars depending on where you look.
New York applies some of the strictest rules through 23 NYCRR Part 200, better known as the BitLicense. Any company handling virtual currency business involving New York residents has to submit to regular examinations, keep detailed transaction records, and maintain cybersecurity protections that meet the state’s specifications. The application fee is $5,000, and approval turns on a deep review of the company’s operations, management, and compliance systems.5Cornell Law School. 23 NYCRR Part 200 – Virtual Currencies6New York Department of Financial Services. Application Fees
Tax Reporting to the IRS
Coinbase reports customer transactions to the IRS on Form 1099-DA, which covers proceeds from digital asset sales and dispositions. Brokers began reporting gross proceeds on that form for transactions occurring on or after January 1, 2025. Starting January 1, 2026, they must also report cost basis, meaning the original purchase price, on certain transactions.7Internal Revenue Service. Final Regulations and Related IRS Guidance for Reporting by Brokers on Sales and Exchanges of Digital Assets
You are required to report all income, gains, and losses from digital asset transactions on your federal return whether or not you receive a 1099-DA. Every federal return includes a yes-or-no question about digital asset activity that you have to answer.8Internal Revenue Service. Reminders for Taxpayers About Digital Assets Brokers must send you your copy of the 1099-DA by February 17 of the year after the transactions.9Internal Revenue Service. Digital Assets
SEC Oversight of the Company Itself
Coinbase Global, Inc. trades on the Nasdaq, so it files quarterly reports (Form 10-Q) and annual reports (Form 10-K) with the SEC under Generally Accepted Accounting Principles.10U.S. Securities and Exchange Commission. Public Companies Those filings disclose revenue, expenses, debts, and total assets. Independent auditors review the financial records each year, and the results are made public.
Under the Sarbanes-Oxley Act, the chief executive officer and chief financial officer must personally certify that each report contains no untrue statement of material fact and is not misleading.11U.S. Securities and Exchange Commission. Certification of Disclosure in Companies’ Quarterly and Annual Reports That oversight covers Coinbase as a public company. Whether the crypto assets it lists are themselves securities is a separate question, and the answer is currently unsettled.
The SEC Enforcement Case and Its 2025 Dismissal
In June 2023, the SEC sued Coinbase, alleging it had operated as an unregistered securities exchange, broker, and clearing agency since at least 2019, and that at least some of the crypto assets traded on the platform qualified as securities.12U.S. Securities and Exchange Commission. SEC Charges Coinbase for Operating as an Unregistered Securities Exchange, Broker, and Clearing Agency
On February 27, 2025, the SEC announced it was dismissing the case. The dismissal followed the January 2025 creation of the SEC’s Crypto Task Force, which was set up to develop a clearer regulatory framework for digital assets. The agency said the dismissal was intended to support that broader regulatory work and did not reflect a judgment on the merits of its original claims.13U.S. Securities and Exchange Commission. SEC Announces Dismissal of Civil Enforcement Action Against Coinbase Whether platforms like Coinbase need to register as securities exchanges remains open while the Task Force does its work.
What Protects Your Account
Coinbase has to keep customer assets separate from its own operating funds. Corporate money for payroll and rent sits in different accounts from the digital assets and cash belonging to users. Roughly 98 percent of customer crypto is held in offline cold storage on hardware that is not connected to the internet, which protects private keys from remote attacks.
The company also carries a commercial crime insurance policy with a $320 million limit, per incident and overall, that covers events like employee theft and certain security breaches. It does not cover market declines, and it does not cover individual account compromises such as phishing attacks on your own login.
FDIC Insurance on USD, Not Crypto
Any U.S. dollar cash balance you hold on Coinbase sits in FDIC-insured bank accounts and is protected up to $250,000 per depositor if the underlying bank fails. That protection covers only the USD cash portion of your account. It does not extend to any cryptocurrency you hold on the platform.
No SIPC Coverage for Crypto
The Securities Investor Protection Corporation, which protects customers when a brokerage firm fails, does not cover digital asset securities that are unregistered investment contracts, even if held by a SIPC-member firm.14SIPC. What SIPC Protects Because most cryptocurrencies traded on Coinbase are not registered securities, SIPC protection generally does not apply to the crypto in your account.
What Regulation Does Not Protect You From
Regulated does not mean risk-free. If Coinbase were to file for bankruptcy, customers holding crypto on the platform could be treated as general unsecured creditors, paid only after secured and priority creditors, and might recover only a fraction of their holdings. Coinbase has disclosed this risk in its SEC filings, noting that customer crypto held in custody could be subject to bankruptcy proceedings.
The user agreement requires most legal disputes to go through individual arbitration rather than court, and includes a class action waiver. If you have a complaint about lost funds or a locked account, you generally cannot join a class action and instead have to bring the dispute in private arbitration.
Consumer protection rules that apply to traditional bank accounts, such as Regulation E’s protections against unauthorized electronic transfers, have not been definitively extended to cryptocurrency exchange accounts. The Consumer Financial Protection Bureau proposed an interpretive rule in 2024 that would have addressed the gap, then withdrew the proposal in May 2025 without issuing a final determination.15Federal Register. Electronic Fund Transfers Through Accounts Established Primarily for Personal, Family, or Household Purposes Using Emerging Payment Mechanisms; Withdrawal If someone gains unauthorized access to your Coinbase account and moves out your crypto, the legal protections available to you are less clear than they would be for a traditional bank account.