Is crypto legal? There are five questions hiding inside that one

Every few weeks someone writes to the desk asking a version of the same thing: am I going to get in trouble for this? Sometimes it is a person whose brother-in-law told them crypto is banned. Sometimes it is a person whose news feed served them a headline about an exchange being sued and who reasonably assumed the customers were in trouble too.

The honest answer is that "is crypto legal" is not one question. It is at least five, they have different answers, and the answers are not the same in Ontario as in Ohio. Pull them apart and each one becomes answerable.

The word "legal" is carrying too much weight

When people say "is crypto legal", they almost never mean the same thing twice. Listen to what follows and you can usually sort it into one of these:

Five questions, five bodies of law, five different places to look. A page that squashes them into "yes, crypto is completely legal" is not being helpful — it is being lazy in a way that can cost the reader money.

Can you own it? Almost everywhere, yes

Private ownership of cryptocurrency is not a criminal offence in the large majority of countries, and that has been the direction of travel for years rather than a recent change. Most jurisdictions have moved from "we have no idea what this is" through "we are worried about it" to "here are the rules for the firms that handle it" — and that last step is about the firms, not about you holding a balance.

There are exceptions, and they cluster into two shapes worth telling apart:

• Outright prohibition. A handful of countries have banned holding or trading it. These are genuine criminal-law bans and they are rare.
• Banking prohibition. Considerably more common: owning it is not itself an offence, but banks and payment firms are forbidden from processing crypto transactions. The practical result feels like a ban — you cannot get money in or out through the normal system — while the legal position is different.

The second shape is the one that trips people up, because a country can appear on a "crypto is legal here" list and still be a place where you cannot move a single unit of local currency onto a platform. If you are in that situation, the answer to "is it legal" is nearly irrelevant next to "can I actually do it".

Can you trade it? Usually — but the platform is the regulated part

Here is the shift that catches people out. In most modern regulatory regimes, the thing being licensed is not the asset and not the customer. It is the business that holds customer money.

Think of it the way you already think about banks. You do not have a licence to have a bank account. The bank has the licence. If the bank is unlicensed, you have not committed an offence by depositing your salary there — but you have put your salary somewhere with none of the protections that come with a licensed institution, and if it fails you will discover that the difference is not theoretical.

Crypto has landed in the same place, under a variety of names:

• In the European Union, the Markets in Crypto-Assets regulation (MiCA) became fully applicable on 30 December 2024, and firms wanting to serve EU customers need authorisation as a crypto-asset service provider. Firms that already operated under national regimes got transitional time, with member-state deadlines running into 2026. The ESMA page on MiCA is the primary source, and there is a public register of authorised providers.
• In the United Kingdom, firms doing crypto business must be registered with the Financial Conduct Authority for anti-money-laundering purposes, and the FCA register is public and searchable by name.
• In the United States, there is no single federal crypto statute as of our check in August 2026. Firms typically hold state-by-state money transmitter licences, some hold a New York BitLicense, and market-structure legislation — the CLARITY Act — passed the House in July 2025 and was still moving through the Senate when we checked. That means the honest answer to "what is the US federal rule" is it is being written, and anyone telling you otherwise is either ahead of the news or selling something.

What this means for you in practice is narrow and useful: before you put money on a platform, check whether it appears on your own regulator's public register. That is a two-minute check and it is the single highest-value legal question you can answer about a platform. Our official source checklist walks through it, including the part where the register lookup is the only step that cannot be faked by a convincing website.

Can you run a platform? Only with permission, and that is not you

This is the shortest section, because for almost every reader it is not the relevant question — but it matters because it is where most of the alarming headlines come from.

Operating an exchange, custody service, or brokerage without the required authorisation is a regulatory offence in most developed jurisdictions, and enforcement in this area has been busy. When you read that a major platform has been fined, sued, or forced to leave a country, the underlying allegation is nearly always about the business: unlicensed operation, weak anti-money-laundering controls, misleading marketing, or mishandling customer assets.

Customers are usually not the target of those actions. They are, however, the people who feel the consequences — withdrawals pause, a service is withdrawn from their country, an account gets frozen mid-process. That is worth knowing before you assume regulatory news has nothing to do with you.

Can you promote it? This is where ordinary people actually get caught

If there is one under-discussed legal risk for a normal person, it is this one. Several countries now treat promoting crypto investments as a regulated financial promotion — the same category as promoting shares or funds — with rules about risk warnings, cooling-off periods, and who may issue the promotion at all.

The UK is the sharpest example: since October 2023 crypto promotions aimed at UK consumers must be issued or approved by an authorised firm and carry prescribed risk warnings. Rules of a similar spirit exist elsewhere, and advertising regulators in multiple countries have taken action over influencer posts that read as investment advice without disclosure.

Where that touches you:

• If you post a referral link and tell people they will make money, you may be issuing a financial promotion in your jurisdiction.
• If someone is doing that to you and there is no risk warning and no disclosure anywhere in sight, that tells you something about how carefully they are operating.
• Disclosure is the cheap fix. This site earns a fee if someone registers through our referral link, which is why that sentence appears on the disclosure page, in the footer of every page, and next to the link itself.

Do you owe tax on it? Almost certainly something

Tax is where "legal" and "trouble" overlap most often for ordinary people, and it is also where the intuitions are worst. Two mistakes recur:

"I did not cash out, so nothing happened." In many countries, the taxable event is disposal, and disposal includes swapping one crypto asset for another. Trade bitcoin for something else and, on paper, you may have sold bitcoin at market value that day — even though no money reached your bank. People discover this a year later with no record of the prices.

"It is too small to matter." Reporting thresholds and taxable thresholds are different things in many systems, and some countries require you to report holdings or transactions regardless of gain. Small can still be reportable.

What actually helps, and costs nothing:

• Export your transaction history from the platform periodically rather than at tax time. Access to old records is not guaranteed, particularly if the platform exits your market.
• Write down the date, the amount, what it cost and what it was worth in your own currency. Reconstructing this later from memory is miserable.
• Read your own tax authority's digital-asset page once. In the US that is the IRS digital assets page; most tax authorities now have an equivalent.

We are not tax advisers and this is not tax advice. If the numbers are large enough to worry you, that is the point at which a local professional is cheaper than the alternative.

Could you end up near a criminal problem without meaning to?

Rarely, but the ways it happens are worth naming because they are avoidable.

The realistic route is not "you bought bitcoin". It is accepting a transfer from a stranger. A recurring pattern: someone is offered a small payment to receive funds and pass them on, or to sell crypto to a buyer who pays by bank transfer from an account that is not theirs. When the money turns out to be stolen, the person in the middle is the one whose bank account gets frozen and who has to explain themselves. Being unaware helps, but it does not make the freeze go away quickly.

The defence is dull and effective: transact through the platform's own process rather than side deals, do not move money for people you met online, and be suspicious of any arrangement where you are the account in the middle.

Does any of this change if you never touch an exchange?

Some of it, and less than people hope. This question usually arrives from someone who has read that self-custody or decentralised platforms sit outside the rules, and concluded that the legal questions evaporate.

Take them one at a time.

Ownership is unchanged. Holding an asset in a wallet you control is the same legal act as holding it on a platform, in nearly every jurisdiction. Nothing about custody changes whether you are allowed to own the thing.

Tax is unchanged, and this is where the misconception costs money. Tax authorities generally tax disposals, not withdrawals. Swapping one asset for another in a wallet is a disposal in many systems even though no exchange was involved and no money reached a bank. People who trade actively on-chain and assume nothing is reportable because nothing was cashed out are building a problem quietly, and without a platform's transaction export they will have to reconstruct it themselves.

The platform question shifts rather than disappearing. Regulators have been extending the perimeter toward decentralised services, and the direction of travel is that services which look and behave like intermediaries get treated as intermediaries regardless of how they are structured internally. Whether a specific protocol falls inside is genuinely unsettled and is being litigated in more than one country.

The fiat edges are where you meet the rules anyway. Almost everyone converts local currency at some point, and that conversion runs through a regulated business — an exchange, a payment firm, a bank. Buying peer-to-peer moves the risk rather than removing it, and it introduces a specific problem worth naming: if the person paying you uses stolen funds, your bank account can be frozen while that is investigated, even though you did nothing wrong.

Sanctions and reporting obligations apply regardless of custody. Rules about transferring value on behalf of others, and about who you may transact with, do not have a self-custody exemption. For ordinary personal use this is not something you are likely to trip over. For anyone thinking about moving money for other people as a favour or for a fee, it very much is.

The short version: self-custody changes who holds your assets. It does not change what you owe, what you must report, or who you are permitted to deal with.

How to find the actual rule where you live, in about ten minutes

This is the part worth bookmarking. Three official sources answer most of what a private individual needs, and all three are free.

Two habits make those sources much more useful:

1. Search the legal entity, not the brand. Platforms operate through differently-named subsidiaries per region. The register knows the entity. If the site will not tell you which entity serves you, that itself is worth noticing — the answer is usually in the terms of service.
2. Check the date on whatever you read. Including this page. We verified the regulatory positions described here in August 2026, and some of them will move. A rule you read about in a 2023 article may have been replaced twice since.

If your next question is the one about platforms failing rather than platforms being licensed — whether an exchange can simply keep your money — that has its own answer, built from what has actually happened rather than what could theoretically happen. It is the next file over.