SEC vs CFTC: Who Regulates What in Crypto? A 2026 Guide

Understanding the jurisdictional divide between America's two main financial regulators—and what it means for your compliance strategy.

If you've ever tried to figure out whether your token is a security or a commodity, you know the answer often depends on who you ask. The Securities and Exchange Commission (SEC) and the Commodity Futures Trading Commission (CFTC) have spent years claiming overlapping jurisdiction over digital assets, leaving compliance teams in a fog of regulatory uncertainty.

In 2025 and 2026, things finally started to shift. But "shifted" doesn't mean "clarified." The landscape is evolving rapidly, and the line between these two agencies remains blurry in many critical areas.

This guide breaks down exactly who regulates what, where the gray zones persist, and how compliance teams should navigate the ambiguity in 2026.

The Jurisdiction Problem: Two Agencies, One Market

The fundamental challenge in US crypto regulation stems from how the existing legal framework was designed—for financial markets in the 1930s, not for decentralized digital assets in the 2020s.

The SEC oversees securities markets under the Securities Act of 1933 and Securities Exchange Act of 1934. Its mandate: protect investors, maintain fair markets, and facilitate capital formation.

The CFTC regulates commodity futures and derivatives under the Commodity Exchange Act of 1936. Its mission: promote integrity, resilience, and vibrancy of the US derivatives markets.

When a token could simultaneously be an investment contract, a commodity, and a utility, both agencies have historically claimed a seat at the table. The result? Contradictory guidance, overlapping enforcement actions, and compliance teams caught in the middle.

SEC Jurisdiction: The Securities Framework

The Howey Test: The Foundation

The SEC's primary tool for determining whether something is a security is the Howey Test, derived from a 1946 Supreme Court case. Under Howey, an investment of money in a common enterprise with an expectation of profits derived from the efforts of others typically constitutes a security.

For crypto, this means tokens sold in ICOs, token generation events, or presales often trigger securities law requirements—including registration with the SEC or an exemption.

What Falls Under SEC Jurisdiction

The SEC has historically asserted authority over:

• Initial Coin Offerings (ICOs) and Token Sales: Any token sold with the expectation of profit, particularly those with intrinsic value tied to the project's success, typically triggers securities laws.

• Staking-as-a-Service: Platforms that pool user tokens for proof-of-stake rewards and share profits have faced SEC enforcement for offering unregistered securities.

• Lending Platforms: Protocols offering fixed or variable returns on deposited crypto assets have been targeted as securities offerings under the Howey framework.

• Security Tokens: Digital assets explicitly designed as securities—with profit-sharing mechanisms, dividends, or governance rights—unambiguously fall under SEC oversight.

• DeFi Protocols with Centralized Economies: Even decentralized protocols with native tokens may trigger securities concerns if the development team retains control and users invest expecting profit from their efforts.

Key SEC Enforcement Actions (2024-2025)

The SEC pursued aggressive enforcement against crypto firms through 2024. Notable actions included:

• SEC v. Coinbase (2023, ongoing): The SEC charged Coinbase with operating as an unregistered securities exchange. The case highlighted the debate over whether secondary market trading of tokens constitutes securities transactions.

• SEC v. Binance: The SEC alleged Binance operated unregistered exchanges and sold unregistered securities through its BNB token and BUSD stablecoin.

• Kraken Settlement (2024): Kraken agreed to pay $30 million and halt its staking services for US users to settle SEC allegations that its staking program constituted an unregistered securities offering.

However, a notable shift occurred in 2025. Under new leadership, the SEC dialed back on litigation-based enforcement, rescinded Staff Accounting Bulletin 121 (which had restricted banks' crypto custody), and announced Project Crypto—an initiative to overhaul securities laws and enable on-chain financial markets.

CFTC Jurisdiction: The Commodities Framework

Commodities, Derivatives, and Futures

The CFTC's authority extends to commodities—including digital commodities like Bitcoin and Ethereum—and derivatives products (futures, options, swaps) based on those commodities.

The key distinction: the CFTC regulates derivatives markets and has authority over spot (immediate delivery) markets for commodities, but its primary focus is derivatives rather than spot securities.

Bitcoin and Ethereum as Commodities

Both the SEC and CFTC have acknowledged Bitcoin as a commodity rather than a security. Ethereum's classification has been more contested, but the CFTC has consistently maintained it as a commodity.

This matters practically: Bitcoin and Ethereum spot markets can trade freely under CFTC oversight, while many altcoins remain in regulatory gray zones.

What Falls Under CFTC Jurisdiction

The CFTC asserts authority over:

• Crypto Derivatives: Futures, options, and swaps tied to crypto assets—these have always required CFTC oversight.

• Spot Crypto Commodities: Bitcoin, Ethereum, and potentially other digital commodities in spot markets. The CFTC has designated certain crypto trading platforms as designated contract markets (DCMs) or swap execution facilities (SEFs).

• Crypto Asset Managers: Registered Investment Advisers (RIAs) and commodity trading advisors managing crypto portfolios may fall under CFTC oversight.

• Money Services Businesses (MSBs): Crypto exchanges and custodians handling fiat may need CFTC-registered FCM (futures commission merchant) status.

Key CFTC Actions (2024-2025)

• BitMEX Settlement (2024): The CFTC continued enforcement against BitMEX for operating an unregistered platform, extracting $100 million in penalties.

• oToken Platform Actions (2024-2025): The CFTC targeted several platforms offering leveraged and margin trading without proper registration.

• CFTC Crypto Sprint (2025): Acting Chair Caroline Pham launched a "crypto sprint" to provide clearer guidance on digital assets, culminating in several no-action letters and guidance documents.

• December 2025 Joint Statement: The SEC and CFTC issued a joint statement clarifying that registered exchanges could facilitate certain spot crypto commodity products, easing previous jurisdictional tensions.

The Overlap Zone: Where It Gets Confusing

Here's where compliance officers lose sleep. Certain categories of crypto activity sit squarely in the jurisdiction gray zone—where both agencies have historically claimed authority or refused to provide clear guidance.

DeFi Protocols

Decentralized finance protocols present a fundamental challenge to both regulatory frameworks:

• The SEC may argue that governance tokens constitute securities if users invest expecting profits.
• The CFTC may claim authority over any token traded on a protocol that facilitates derivatives or margin trading.

Enforcement against truly decentralized, pseudonymous protocols remains challenging, but both agencies have signaled willingness to target the developers and operators behind DeFi platforms.

NFTs (Non-Fungible Tokens)

NFTs straddle the line between collectibles and securities:

• Art NFTs used purely for collection purposes typically fall outside securities regulation.
• Fractional NFTs or NFTs bundled with profit-sharing mechanisms may trigger Howey concerns.

The SEC has shown interest in NFT projects that function more like investment contracts than collectibles.

Stablecoins

Stablecoins have been the most contested category:

• The SEC has historically argued that stablecoins backed by interest-bearing reserves constitute securities.
• The CFTC has focused on whether stablecoin issuers are operating as money services businesses.

The GENIUS Act (2025) created a federal framework for stablecoin issuers, requiring reserve backing, audits, and financial integrity standards. This legislation provides the clearest path forward for stablecoin compliance, with final rules expected by July 2026 and enforcement beginning January 2027.

Recent Developments: 2025-2026 Update

The regulatory landscape shifted dramatically in 2025:

Legislative Progress

• GENIUS Act: Passed in 2025, creating the first comprehensive federal stablecoin framework.
• CLARITY Act: Passed the House in July 2025, proposing a market structure framework with SEC-CFTC coordination. Senate discussion has been punted to 2027.
• Market Structure Bills: Multiple proposals aim to clarify which digital assets are securities vs. commodities, but no comprehensive legislation has passed as of early 2026.

Agency Shift

• SEC's New Posture: Chairman Paul Atkins has emphasized innovation-friendly regulation. Project Crypto is underway to modernize securities laws for digital assets.
• CFTC's Pro-Innovation Stance: The "crypto sprint" has produced guidance on digital asset collateral, event contracts, and spot market participation.
• Joint Cooperation: The SEC and CFTC held a joint roundtable in September 2025 and issued coordinated guidance on spot crypto trading.

DOJ's Policy Shift

The Department of Justice's April 2025 memorandum ended "regulation by prosecution" in crypto, directing that enforcement actions should not "superimpose regulatory frameworks" on digital assets while regulators do their work through formal channels.

Practical Guidance: How to Navigate the Uncertainty

For compliance teams at crypto exchanges, DeFi protocols, and fintech companies, here's how to handle the ambiguity:

1. Conduct Token Classification Analysis

Every token in your ecosystem needs a formal legal classification:

• Security: Subject to SEC registration or exemption requirements (Regulation D, Regulation S, Regulation A+)
• Commodity: Subject to CFTC oversight, potentially trading on registered platforms
• Utility: May be exempt, but the line between utility and security is thin

2. Consider Dual Registration

If your platform offers both securities and commodities, consider registering with both agencies:

• SEC: Register as an alternative trading system (ATS) or national securities exchange
• CFTC: Register as a designated contract market (DCM), swap execution facility (SEF), or futures commission merchant (FCM)

The December 2025 joint statement provided clarity that dual-registered entities can operate without conflicting requirements.

3. Monitor Both Agencies Religiously

Regulatory positions shift quickly:

• Subscribe to SEC and CFTC press releases
• Track Staff No-Action Letters and guidance documents
• Monitor enforcement actions for precedent-setting cases

4. Implement Safe Harbor Approaches

For uncertain tokens:

• Limit functionality to utility-only features
• Avoid profit-sharing or staking incentives
• Consider geographic restrictions during periods of regulatory uncertainty

5. Engage Proactively

• Participate in public comment periods
• Work with industry associations (Chamber of Digital Commerce, Blockchain Association)
• Consider no-action letter requests if your use case is novel

SEC vs CFTC: Quick Reference Comparison Table

Aspect	SEC	CFTC
Primary Mandate	Protect securities investors	Ensure derivatives market integrity
Legal Framework	Securities Act of 1933, Exchange Act of 1934	Commodity Exchange Act of 1936
Asset Classification	Securities (via Howey Test)	Commodities
Key Digital Assets	ICO tokens, security tokens, many altcoins	Bitcoin, Ethereum (commodities), derivatives
Spot Market Authority	Over securities	Over commodities
2025-2026 Focus	Project Crypto, innovation-friendly enforcement	Crypto sprint, spot market guidance
Registration Options	ATS, Exchange, Broker-Dealer	DCM, SEF, FCM
Enforcement Shift (2025)	Dialed back litigation	Refocused on fraud, away from regulation-by-enforcement

Conclusion: The Path Forward

The US crypto regulatory landscape is evolving from enforcement-driven chaos toward structured, coordinated oversight—but the journey isn't complete.

The GENIUS Act provides clarity for stablecoins. The SEC-CFTC joint statements ease some friction. Project Crypto promises modernization of securities law. Yet critical questions remain: comprehensive market structure legislation awaits, and the security-versus-commodity boundary for many altcoins stays unclear.

For compliance teams, the imperative is clear: build flexible frameworks that can adapt as regulations crystallize. Monitor both agencies. Engage legal counsel early. And assume the regulatory weather will continue to shift.

Stay Ahead of Every Regulatory Shift

RegPulse monitors SEC, CFTC, and 40+ other regulatory sources—so you never miss a jurisdictional shift that could impact your business.

Founding members get 67% off with code: FOUNDING67

Start your free trial at www.regpulse.io →

Disclaimer: This article is for informational purposes only and does not constitute legal advice. Consult qualified legal counsel for specific regulatory guidance.