Cryptoassets Regulatory Intelligence · Cross-Jurisdiction Domain Hub
Financial promotions & retail conduct
Jurisdiction Readings (170 markets)
26 clear/open
115 conditional/active
29 restricted/elevated
| Jurisdiction | Region | Status | Regulatory Summary | Actions |
|---|---|---|---|---|
| African bloc (AFR) | Africa | Red | No AU-wide consumer-protection instrument addresses crypto-asset marketing restrictions, custody segregation, complaint handling, or suitability/appropriateness. ESAAMLG's regional survey reports… | Profile →Brief |
| Alabama, USA (US-AL) | Americas | Amber | Consumer protection for crypto in Alabama operates primarily through the Alabama Securities Act's anti-fraud and registration provisions as enforced by the ASC (covering marketing and suitability… | Profile →Brief |
| Alaska, USA (US-AK) | Americas | Amber | Alaska's Division of Banking and Securities has issued public investor-protection warnings specific to cryptocurrency risk, though no crypto-specific binding consumer-protection statute exists… | Profile →Brief |
| Alberta, Canada (CA-AB) | Americas | Amber | Consumer protection for crypto trading platforms serving Alberta residents is driven by the CSA's enhanced Pre-Registration Undertaking regime, which imposes custody segregation and… | Profile →Brief |
| Algeria (DZ) | Africa | Red | No crypto-specific consumer-protection regime (marketing restriction, risk disclosure, custody segregation, complaint handling, suitability) has been identified for Algeria; the sector's blanket… | Profile →Brief |
| Antigua and Barbuda (AG) | Caribbean | Red | Beyond the FSRC's general fit-and-proper licensing gatekeeping under DABA, no crypto-specific custody/segregation rules, marketing/promotion rules, market-abuse regime, order-handling/conflicts… | Profile →Brief |
| Argentina (AR) | Americas | Amber | PSAV registrants are expected to satisfy general client-protection conditions set by the CNV — including protection of users, operational security and efficiency, and safeguarding of public savings … | Profile →Brief |
| Arizona, USA (US-AZ) | Americas | Amber | Arizona lacks a bespoke crypto consumer-protection statute, but the Arizona Attorney General's office has taken direct action against crypto-ATM fraud, including posting on-site warning signage at… | Profile →Brief |
| Arkansas, USA (US-AR) | Americas | Amber | Arkansas has no crypto-specific consumer-protection statute (e.g., dedicated disclosure, custody-segregation, or marketing rules targeted at digital assets). General state money-transmitter licensing… | Profile →Brief |
| Asia-Pacific bloc (APAC) | Asia-Pacific | Amber | Consumer protection obligations diverge by jurisdiction. Singapore tightened supervision, including custody segregation and external audit requirements, following the FTX collapse; Japan's pending… | Profile →Brief |
| Australia (AU) | Asia-Pacific | Amber | Consumer protection for crypto in Australia currently rests on general Corporations Act / ASIC Act misleading-conduct prohibitions (RG 234, updated June 2026), influencer-specific guidance (INFO… | Profile →Brief |
| Austria (AT) | Europe | Green | MiCA imposes EU-harmonised consumer protection duties directly on FMA-authorised CASPs operating in Austria: fair/clear/non-misleading marketing communications, suitability and appropriateness… | Profile →Brief |
| Bangladesh (BD) | Asia-Pacific | Amber | Bangladesh Bank has issued repeated public warnings on the volatility, lack of legal backing, and financial/legal risk of dealing in virtual currencies, and has directed banks to post branch-level… | Profile →Brief |
| Belgium (BE) | Europe | Green | Belgium maintains a 2014 retail-marketing restriction on professionals distributing crypto-linked financial products to retail clients, layered under MiCA's EU-wide investor-protection package (white… | Profile →Brief |
| Belize (BZ) | Americas | Red | Belize has no licensed VASP population (operation being prohibited), so custody, suitability, complaint-handling, market-abuse and order-handling rules specific to crypto service providers do not… | Profile →Brief |
| Brazil (BR) | Americas | Amber | BCB Resolutions 519/520/521 extend existing financial-sector customer-protection, governance, internal-control, cybersecurity and incident-response requirements to VASPs. VASPs are barred from… | Profile →Brief |
| British Columbia, Canada (CA-BC) | Americas | Green | Consumer protection for crypto in BC operates through the national CSA/CIRO registrant framework: registered dealers/marketplaces must segregate client and proprietary assets, use acceptable… | Profile →Brief |
| Bulgaria (BG) | Europe | Green | Consumer protection for crypto-asset holders and CASP clients in Bulgaria runs through directly-applicable MiCA obligations: mandatory white paper disclosure (now in machine-readable iXBRL format… | Profile →Brief |
| Cambodia (KH) | Asia-Pacific | Amber | Cambodia's consumer-facing crypto protections are currently: (a) the 2021 Joint Statement's public risk warning on crypto-currency volatility, and (b) a newly-passed Law on Anti-Technology Fraud… | Profile →Brief |
| Cameroon (CM) | Africa | Red | No crypto-specific consumer-protection rules (marketing restriction, custody segregation, complaint handling, suitability) were identified for Cameroon. General COBAC banking-conduct supervision and… | Profile →Brief |
| Canada (CA) | Americas | Amber | Consumer protection is delivered through CIRO's custody framework (interim guidance per legal commentary), CSA pre-registration custody/leverage restrictions, and a newly proposed nationwide ban on… | Profile →Brief |
| Canada — Kahnawake (CA-KAH) | Americas | Amber | Canada's most developed crypto consumer-protection material concerns custody. <cite index="50-4">CIRO's Digital Asset Custody Framework sets clear expectations for how dealer members operating crypto… | Profile →Brief |
| Canada — Tobique First Nation (CA-TFN) | Americas | Amber | Investor-protection duties arise principally through CSA/CIRO registrant conduct rules: custody segregation, acceptable third-party custodian standards, and a newly-issued (February 2026) CIRO… | Profile →Brief |
| Chile (CL) | Americas | Red | No Chile-specific crypto consumer-protection rules (marketing restrictions, custody segregation, complaint-handling, suitability) were located. General Securities Market Law protections (disclosure… | Profile →Brief |
| China (CN) | Asia-Pacific | Red | Consumer protection in mainland China operates through prohibition and non-recognition rather than affirmative safeguards. A February 2026 clarification (referenced by China's top court in May 2026)… | Profile →Brief |
| Colombia (CO) | Americas | Amber | Colombian consumer protection for crypto-assets rests on SFC supervisory warnings rather than a statutory consumer-protection regime specific to virtual assets. The SFC has repeatedly warned that… | Profile →Brief |
| Colorado, USA (US-CO) | Americas | Amber | No bespoke crypto consumer-protection statute for Colorado was identified in this research pass. General consumer protections likely apply via the state's general deceptive-trade-practices law and… | Profile →Brief |
| Comoros (KM) | Africa | Red | No crypto-specific custody/safekeeping, marketing/promotion, complaint-handling, suitability, market-abuse or order-handling-and-conflicts regime exists in Comoros. The BCC's general consumer-alert… | Profile →Brief |
| Comoros — Anjouan (KM-A) | Africa | Red | No crypto-specific consumer-protection rules — custody/segregation of client crypto-assets, market-abuse prohibitions, order-handling/conflicts rules, marketing restrictions, complaint-handling… | Profile →Brief |
| Comoros — Mohéli (KM-M) | Africa | Red | No crypto-specific consumer-protection regime has been identified for the Union of the Comoros or Mohéli covering custody and safeguarding of client crypto-assets, marketing/promotion of crypto… | Profile →Brief |
| Connecticut, USA (US-CT) | Americas | Amber | Connecticut's Public Act 25-66 (2025, H.B. 7082) introduced crypto-specific consumer protections layered on the general MTL regime: mandatory plain-language risk disclosure for crypto… | Profile →Brief |
| Costa Rica (CR) | Americas | Amber | Costa Rica has no crypto-specific consumer-protection statute. Existing securities/fund regulation applies only when crypto exposure is wrapped in a recognized investment vehicle. In February 2025… | Profile →Brief |
| Croatia (HR) | Europe | Amber | MiCA imposes harmonized consumer-protection duties on crypto-asset issuers and CASPs operating in Croatia: white-paper disclosure, fair/clear/non-misleading marketing communications… | Profile →Brief |
| Curaçao (CW) | Caribbean | Amber | CIMA's licensing gatekeeping function for VASPs incorporates consumer protection and market confidence considerations, as demonstrated in a contested license rejection where CIMA cited risk to… | Profile →Brief |
| Cyprus (CY) | Europe | Amber | MiCA-derived consumer-protection duties (marketing fairness, custody segregation, complaint handling, risk disclosure) apply to CY-licensed CASPs. However, an ESMA peer review specifically targeting… | Profile →Brief |
| Czech Republic (CZ) | Europe | Green | Consumer protection for crypto-asset services in Czechia derives from MiCA and its delegated regulations (e.g., Regulation (EU) 2025/303 and 2025/305), which set out RTS for custody segregation and… | Profile →Brief |
| Delaware, USA (US-DE) | Americas | Amber | Delaware has no crypto-specific consumer-protection statute. General money-transmitter licensee obligations (bonding, financial-responsibility, examination) apply by extension to virtual-currency… | Profile →Brief |
| Denmark (DK) | Europe | Green | Danish consumer protection for crypto flows through MiCA's CASP conduct rules (custody segregation, complaint-handling, marketing-communication standards) plus joint ESA consumer warnings that… | Profile →Brief |
| District of Columbia, USA (US-DC) | Americas | Amber | DC-specific crypto consumer protection derives from DISB's general money-transmitter supervisory conditions (solvency, customer-fund handling) rather than any crypto-specific statute. At the federal… | Profile →Brief |
| Dominican Republic (DO) | Americas | Amber | There is no crypto-specific consumer protection statute. SIMV issues public risk-disclosure warnings about unregulated investment schemes (including crypto/FOREX/Ponzi-type structures) under its… | Profile →Brief |
| Ecuador (EC) | Americas | Green | MiCA imposes fair/clear/non-misleading marketing-communication duties (Arts 29, 66), pre-publication white-paper requirements before marketing, complaint-handling and custody-segregation obligations… | Profile →Brief |
| Egypt (EG) | Africa | Red | No dedicated consumer-protection or risk-disclosure regime specific to crypto-asset users has been issued by the CBE or the Financial Regulatory Authority (FRA); consumer exposure to unlicensed… | Profile →Brief |
| Estonia (EE) | Europe | Amber | MiCA-derived consumer protections apply in Estonia only to the specific authorised legal entity, not group affiliates, and do not extend to entities operating under the now-lapsed… | Profile →Brief |
| European Economic Area (EEA) | Europe | Amber | MiCA provides EEA-wide harmonised consumer protections for crypto-asset holders and CASP clients — mandatory white papers, marketing-communication conduct rules, suitability requirements for… | Profile →Brief |
| Finland (FI) | Europe | Green | MiCA conduct-of-business rules apply directly in Finland: CASPs must act honestly, fairly and professionally in clients' best interests, keep client crypto-assets/funds segregated from own assets… | Profile →Brief |
| Florida, USA (US-FL) | Americas | Amber | Consumer protection in Florida's crypto space rests on Chapter 560 custody/bonding obligations enforced by OFR (e.g., the 2023 Bittrex enforcement action) and on non-binding OFR consumer alerts… | Profile →Brief |
| France (FR) | Europe | Amber | French DASP/CASP requirements (via AMF General Regulation, aligned with MiCA) mandate custody segregation of client assets, complaint-handling procedures, conflict-of-interest management and… | Profile →Brief |
| Georgia, USA (US-GA) | Americas | Amber | Georgia consumer protection over crypto activity operates through general state consumer-protection and securities anti-fraud law rather than a dedicated crypto consumer-protection statute. Federal… | Profile →Brief |
| Germany (DE) | Europe | Green | MiCA's consumer protection provisions apply directly in Germany, including CASP conduct-of-business rules, custody segregation, disclosure obligations, and complaint-handling requirements, with BaFin… | Profile →Brief |
| Ghana (GH) | Africa | Amber | The BoG's VASP Act FAQ confirms virtual assets are not covered by Ghana's deposit protection scheme or any statutory compensation fund, and that regulation does not constitute endorsement of specific… | Profile →Brief |
| Gibraltar (GI) | Europe | Confirmed | Consumer and customer-asset protection in Gibraltar's crypto framework is delivered through the ten statutory regulatory principles in the Financial Services (DLT Providers and VAA Providers)… | Profile →Brief |
| Greece (GR) | Europe | Amber | CASPs operating in Greece under MiCAR Title V must provide clients with information that is fair, clear and not misleading, including in marketing communications, and must meet… | Profile →Brief |
| Guernsey (GG) | Europe | Amber | The only firmly evidenced consumer-protection-relevant feature is that Guernsey-licensed VASPs are restricted to institutional and wholesale clients, which the Bailiwick's own ML/TF risk analysis… | Profile →Brief |
| Guernsey — Alderney (GG-ALD) | Europe | Amber | Beyond the Bailiwick's general conduct-of-business framework applicable to all GFSC-licensed financial-services firms, no crypto-specific consumer-protection rules (custody segregation, marketing… | Profile →Brief |
| Hawaii, USA (US-HI) | Americas | Amber | Hawaii's consumer-protection posture toward crypto has been shaped primarily through money-transmitter licensing conditions rather than a dedicated crypto consumer-protection statute. DFI… | Profile →Brief |
| Hong Kong (HK) | Asia-Pacific | Amber | Retail access to virtual assets is permitted only through licensed VATPs offering SFC-vetted 'eligible large-cap' tokens, with mandatory client-asset segregation/compensation arrangements, enhanced… | Profile →Brief |
| Hungary (HU) | Europe | Amber | Hungary's domestic 2025 crypto law layered an additional consumer safeguard atop MiCA -- a mandatory 'conversion-validation certificate' for each trade -- on top of MiCA's own conduct-of-business and… | Profile →Brief |
| Iceland (IS) | Europe | Amber | No Iceland-specific consumer-protection rulebook for crypto-assets (custody segregation, complaint handling, marketing restrictions, suitability) was located; MiCA's Title V conduct-of-business… | Profile →Brief |
| Idaho, USA (US-ID) | Americas | Amber | Crypto consumer protection touching Idaho residents is shaped principally by federal SEC guidance on custody segregation and risk disclosure for broker-dealers handling non-security crypto assets; no… | Profile →Brief |
| Illinois, USA (US-IL) | Americas | Amber | Illinois' 2025 crypto statutes introduce bespoke consumer-protection obligations distinct from generic TOMA money-transmission rules: DACPA requires investment disclosures and customer-service parity… | Profile →Brief |
| India (IN) | Asia-Pacific | Red | India has no crypto-specific consumer-protection statute. Officials have suggested that investor grievances relating to VDAs would fall under the general Consumer Protection Act rather than a… | Profile →Brief |
| Indiana, USA (US-IN) | Americas | Amber | Indiana's 2026 legislative package provides two consumer-protection-relevant strands: (1) HB 1042's protection of individuals' right to accept crypto as payment and to self-custody assets via… | Profile →Brief |
| Indonesia (ID) | Asia-Pacific | Amber | Consumer protection for crypto in Indonesia currently centers on two documented pillars: a strict prohibition on financial institutions marketing or facilitating crypto trading, and OJK's regulatory… | Profile →Brief |
| Iowa, USA (US-IA) | Americas | Amber | Iowa consumer protection enforcement against crypto-related harms has been active primarily through the Iowa Attorney General's use of the Iowa Consumer Fraud Act against crypto-ATM (kiosk)… | Profile →Brief |
| Ireland (IE) | Europe | Green | MiCA Title V imposes uniform, directly applicable conduct-of-business rules on Irish CASPs, including complaints-handling procedures (Article 71), management of conflicts of interest… | Profile →Brief |
| Isle of Man (IM) | Europe | Red | Isle of Man authorities have repeatedly flagged that unlicensed digital-currency activity outside the FSA perimeter carries no consumer-protection backstop, while security-like tokens attract… | Profile →Brief |
| Italy (IT) | Europe | Amber | Consob applies MiCA-derived consumer protection rules including marketing/white-paper compliance, custody safeguards, and staff knowledge/competence assessment, supplemented by an April 2025 Consob… | Profile →Brief |
| Ivory Coast (CI) | Africa | Red | No crypto-specific consumer protection regime (marketing restrictions, risk disclosure, custody segregation, complaint handling, suitability rules) has been identified for Côte d'Ivoire. General… | Profile →Brief |
| Japan (JP) | Asia-Pacific | Green | Crypto-asset exchange service providers are subject to statutory user-asset segregation and risk-disclosure duties under the PSA, layered with self-regulatory rules issued by the FSA-recognized Japan… | Profile →Brief |
| Jersey (JE) | Europe | Amber | Jersey's consumer protection for crypto is thin outside AML/CFT. The general Control of Borrowing (Jersey) Order 1958 consent gateway applies to offers/circulars of securities, and the JFSC issued a… | Profile →Brief |
| Kansas, USA (US-KS) | Americas | Amber | Kansas has no crypto-specific consumer-protection statute. The Kansas Office of the Securities Commissioner issued a public investor warning in January 2018 flagging risks in cryptocurrency and ICO… | Profile →Brief |
| Kazakhstan (KZ) | Asia-Pacific | Amber | AFSA has progressively proposed consumer-protection measures for AIFC-licensed digital asset exchanges in the wake of the FTX collapse, including customer-asset segregation, liquidity-risk checks… | Profile →Brief |
| Kentucky, USA (US-KY) | Americas | Amber | Kentucky consumer protection in crypto has to date been enforced primarily through securities law actions by the Division of Securities (part of KY DFI) against yield-bearing crypto lending products… | Profile →Brief |
| Kenya (KE) | Africa | Red | Publicly available secondary reporting on the VASP Act 2025 and draft 2026 Regulations discloses limited detail on retail consumer-protection mechanics. The clearest identified provisions relate to… | Profile →Brief |
| Laos (LA) | Asia-Pacific | Amber | BoL treats consumer protection as central to its regulatory approach for licensed trading platforms, though crypto uptake and consumer risk are currently assessed as limited. There are no formal… | Profile →Brief |
| Latin America bloc (LATAM) | Americas | Amber | GAFILAT's regional risk assessment does not create binding consumer-protection rules, but its threat and vulnerability analysis flags fraud and investment scams, and cyberattacks/ransomware demanding… | Profile →Brief |
| Latvia (LV) | Europe | Green | MiCA Title V obligations (Articles 66-75), applied directly by Latvijas Banka, require CASPs to segregate client crypto-assets and funds, maintain complaint-handling procedures, and support… | Profile →Brief |
| Liechtenstein (LI) | Europe | Green | FMA Liechtenstein has confirmed compliance with ESMA guidelines on crypto-asset transfer service client rights under MiCA, and MiCA's general transparency/disclosure and market-integrity provisions… | Profile →Brief |
| Lithuania (LT) | Europe | Amber | MiCA imposes EU-wide conduct-of-business obligations on CASPs (honesty/fairness, fair and non-misleading marketing, fee/pricing disclosure, complaints handling, custody safeguards) directly… | Profile →Brief |
| Louisiana, USA (US-LA) | Americas | Amber | Louisiana's VCBA-derived licensing framework embeds baseline consumer-protection-adjacent elements within its licensing gate — including investigation of an applicant's/executive's 'experience… | Profile →Brief |
| Luxembourg (LU) | Europe | Green | MiCA imposes consumer-protection and market-conduct obligations on CSSF-authorised CASPs operating from Luxembourg, including client-asset segregation, proof-of-reserves, fit-and-proper governance… | Profile →Brief |
| Macau SAR, China (MO) | Asia-Pacific | Amber | AMCM's crypto-related consumer protection posture consists of cautionary public statements/circulars warning of crypto-asset risk, without binding marketing restrictions, custody-segregation rules… | Profile →Brief |
| Maine, USA (US-ME) | Americas | Amber | No crypto-specific consumer-protection statute has been identified for Maine. General MSB/money-transmitter consumer protections (bonding, licensee verification via NMLS) apply by extension, but… | Profile →Brief |
| Malaysia (MY) | Asia-Pacific | Amber | SC enforcement practice shows consumer-protection levers operating through registration conditions: unregistered platforms are ordered to cease advertising/marketing to Malaysian investors, and the… | Profile →Brief |
| Malta (MT) | Europe | Amber | Consumer protection for Malta-based crypto-asset services flows from MiCA's harmonised conduct-of-business rules: Article 66 mandates fair, clear, non-misleading client information including… | Profile →Brief |
| Marshall Islands (MH) | Asia-Pacific | Red | No crypto-specific consumer-protection statute (custody/segregation, market-abuse, marketing/promotions, complaint-handling, or suitability rules) was identified. FATF's November 2024 mutual… | Profile →Brief |
| Maryland, USA (US-MD) | Americas | Amber | Maryland relies on general state consumer-protection law and the bonding/customer-fund provisions embedded in its general Money Transmission Act rather than any crypto-specific statute. Unlike… | Profile →Brief |
| Massachusetts, USA (US-MA) | Americas | Amber | Massachusetts consumer protection relevant to crypto is enforced primarily through the Attorney General's Office (general consumer-protection authority) and the Securities Division (investment-fraud… | Profile →Brief |
| Mexico (MX) | Americas | Amber | Consumer protection in the crypto space is addressed principally through repeated joint public-risk warnings by SHCP, Banxico and CNBV (2014, 2017, 2019, and June 2021), reiterated in Banxico's… | Profile →Brief |
| Michigan, USA (US-MI) | Americas | Amber | Michigan has not enacted a crypto-kiosk/ATM-specific consumer protection statute comparable to Illinois's Digital Asset Kiosk Act or Minnesota's kiosk ban. Consumer protection currently rests on (a)… | Profile →Brief |
| Minnesota, USA (US-MN) | Americas | Amber | Minnesota consumer protection activity around crypto has intensified in 2026: the new bank/credit-union custody law mandates segregation of customer digital-asset holdings, while the state's… | Profile →Brief |
| Mississippi, USA (US-MS) | Americas | Amber | Mississippi does not maintain a crypto-specific consumer-protection code. Baseline safeguards for virtual-currency money transmitters (bonding, net-worth, and customer-fund handling standards typical… | Profile →Brief |
| Missouri, USA (US-MO) | Americas | Amber | Missouri's principal live consumer-protection vector for crypto is Attorney General enforcement against virtual-currency kiosk (crypto-ATM) operators under general state consumer-protection law… | Profile →Brief |
| Montana, USA (US-MT) | Americas | Amber | Montana consumer protection touchpoints for crypto are limited to two state-law strands: (1) the HB 584 utility-token notice-of-intent filing, which functions as a disclosure mechanism, and (2) SB… | Profile →Brief |
| Morocco (MA) | Africa | Red | The 2017 BAM/AMMC/MEF communiqué functions as the primary consumer-facing risk-disclosure instrument, warning of the absence of protection against exchange-platform failure, absence of a specific… | Profile →Brief |
| Mozambique (MZ) | Africa | Amber | Banco de Moçambique operates a general financial consumer protection and market-conduct framework (Notice No. 9/GBM/2020) covering credit institutions, financial companies, and other BM-supervised… | Profile →Brief |
| Myanmar (MM) | Asia-Pacific | Amber | CBM has issued a public advisory (undated, referencing recent CBDC research context) warning the public against buying, selling, transferring, or storing crypto assets not authorised by CBM, citing… | Profile →Brief |
| Nebraska, USA (US-NE) | Americas | Green | Nebraska's principal crypto consumer-protection instrument is LB609 (Controllable Electronic Record Fraud Prevention Act, 2025), which mandates fraud-warning disclosures and full terms disclosure for… | Profile →Brief |
| Nepal (NP) | Asia-Pacific | Red | There is no dedicated consumer-protection statute for virtual assets in Nepal. NRB's approach to consumer protection in this space is achieved through prohibition itself plus periodic public warning… | Profile →Brief |
| Netherlands (NL) | Europe | Amber | AFM has published public warnings on virtual currencies, crypto-assets and ICOs since 2017, and the EU's three European Supervisory Authorities issued a joint consumer warning after MiCA's… | Profile →Brief |
| Nevada, USA (US-NV) | Americas | Amber | Nevada consumer protection for crypto activity relies on general NRS 671 (money transmission) and NRS 669 (trust company) custodial-account and bonding requirements, enforced through NFID examination… | Profile →Brief |
| New Brunswick, Canada (CA-NB) | Americas | Amber | Consumer protection for crypto in New Brunswick flows through the CSA's enhanced pre-registration undertaking commitments and the national CIRO Digital Asset Custody Framework. These instruments… | Profile →Brief |
| New Hampshire, USA (US-NH) | Americas | Amber | Consumer protection touching virtual currency in New Hampshire flows mainly through the general money-transmitter bonding requirement (where applicable) rather than a bespoke crypto… | Profile →Brief |
| New Jersey, USA (US-NJ) | Americas | Amber | New Jersey consumer protection for crypto is presently enforcement-driven rather than statute-driven: the NJ Attorney General and Bureau of Securities have issued cease-and-desist orders against… | Profile →Brief |
| New Mexico, USA (US-NM) | Americas | Red | No New Mexico-specific crypto consumer-protection statute, rule, or regulator guidance (e.g., marketing restrictions, mandated risk disclosures, or crypto-specific custody segregation rules) has been… | Profile →Brief |
| New Zealand (NZ) | Asia-Pacific | Amber | The FMA has publicly warned that cryptocurrencies are 'not regulated in New Zealand' as a general asset class and are 'high risk and highly volatile,' cautioning consumers that they should be… | Profile →Brief |
| Nigeria (NG) | Africa | Amber | Consumer protection for Nigerian crypto users is fragmented across the CBN's banking-access guidelines, SEC's 2022 exchange rules, and ongoing public investor advisories. Remedial account controls… | Profile →Brief |
| North Carolina, USA (US-NC) | Americas | Amber | North Carolina's principal crypto-relevant consumer protection is embedded in the Money Transmitters Act's surety-bond regime, which scales bond amounts to annual transmission volume to secure… | Profile →Brief |
| North Dakota, USA (US-ND) | Americas | Amber | North Dakota consumer protection for crypto activity is concentrated in the crypto-kiosk-specific fraud-warning and disclosure requirements of House Bill 1447, alongside the state securities… | Profile →Brief |
| Norway (NO) | Europe | Amber | MiCA's investor/consumer-protection provisions (suitability assessment, knowledge/competence standards, disclosure) now apply to Norwegian CASPs, but Finanstilsynet has repeatedly emphasised that it… | Profile →Brief |
| Ohio, USA (US-OH) | Americas | Amber | Ohio has no bespoke crypto consumer-protection statute covering marketing restrictions, custody segregation, or suitability specific to digital assets; general Ohio consumer-fraud and securities… | Profile →Brief |
| Oklahoma, USA (US-OK) | Americas | Amber | Oklahoma's HB 3594 (2024) is the principal consumer-protection-relevant instrument, enshrining a fundamental right to self-custody digital assets. No Oklahoma-specific marketing-restriction… | Profile →Brief |
| Ontario, Canada (CA-ON) | Americas | Green | Ontario's registration regime imposes custody-segregation, disclosure, and complaint-handling requirements as terms and conditions of OSC registration. The 2023 enhanced PRU required segregation of… | Profile →Brief |
| Oregon, USA (US-OR) | Americas | Amber | Consumer protection in the crypto space in Oregon is currently most visible through the Attorney General's securities-enforcement theory against Coinbase, which frames unregistered crypto-asset sales… | Profile →Brief |
| Pakistan (PK) | Asia-Pacific | Amber | Consumer protection for virtual asset activity in Pakistan is emerging through SBP's conditional framework for bank-facilitated VASP accounts, which mandates segregated, non-remunerative client money… | Profile →Brief |
| Palau (PW) | Asia-Pacific | Red | No crypto-specific consumer-protection rules (marketing restrictions, custody/segregation duties, market-abuse prohibitions, order-handling/conflicts rules, complaint-handling deadlines… | Profile →Brief |
| Panama (PA) | Americas | Amber | General consumer-protection matters (misleading advertising, commercial quality/warranty complaints) fall to the Autoridad de Protección al Consumidor y Defensa de la Competencia (ACODECO) under Law… | Profile →Brief |
| Pennsylvania, USA (US-PA) | Americas | Amber | General Pennsylvania consumer-protection law applies to crypto activity in the absence of crypto-specific rules. House Bill 2481 ('Bitcoin Rights'), which would clarify residents' rights to… | Profile →Brief |
| Peru (PE) | Americas | Amber | The principal consumer-facing instrument identified is the SMV's public communiqué warning investors that no specific regulation in Peru backs or supervises the offer or promotion of virtual… | Profile →Brief |
| Philippines (PH) | Asia-Pacific | Amber | Consumer protection for crypto activity is being built on two tracks: (i) SEC public warnings/advisories against unauthorized platforms, and (ii) the broader Financial Products and Services Consumer… | Profile →Brief |
| Poland (PL) | Europe | Red | MiCA's consumer-protection provisions (marketing restrictions, risk disclosure, custody segregation, complaint handling) are directly applicable EU law but not enforceable by a Polish supervisor for… | Profile →Brief |
| Portugal (PT) | Europe | Green | MiCA imposes uniform EU-wide consumer protection duties on issuers and CASPs operating in Portugal: publication of a crypto-asset white paper and marketing communications, honest/fair/professional… | Profile →Brief |
| Qatar (QA) | Middle East | Amber | Mainland consumer protection is achieved via prohibition: the QCB has publicly cited volatility and financial-crime risk as rationale for barring virtual-asset trading. Within the QFC, the Digital… | Profile →Brief |
| Quebec, Canada (CA-QC) | Americas | Amber | Quebec's AMF, jointly with the national CSA/CIRO framework, imposes custody-segregation and risk-disclosure obligations on crypto platforms. The AMF's original 2014 virtual-currency guidance warned… | Profile →Brief |
| Rhode Island, USA (US-RI) | Americas | Amber | Rhode Island's virtual-currency money-transmitter overlay imposes consumer-protection-adjacent obligations derived from the general money-transmission regime: licensees must demonstrate operational… | Profile →Brief |
| Romania (RO) | Europe | Amber | MiCA imposes uniform EU-wide consumer-protection obligations on CASPs and token issuers — fair/clear/non-misleading marketing, client asset segregation, complaint-handling and conflict-of-interest… | Profile →Brief |
| Russia (RU) | Europe | Amber | The 2026 crypto-market law introduces securities-style investor-protection guardrails: mandatory risk-awareness/knowledge testing before purchase, an annual purchase cap of roughly ₽300,000 per… | Profile →Brief |
| Rwanda (RW) | Africa | Amber | The law introduces consumer-facing safeguards: marketing of virtual asset services is restricted to licensed providers or approved issuers, tokenised-asset custody must sit with licensed custodians… | Profile →Brief |
| Saudi Arabia (SA) | Middle East | Red | Consumer protection in respect of crypto assets is addressed only indirectly, through the 2018 Standing Committee's public warning about the risks of unsupervised virtual-currency trading and the… | Profile →Brief |
| Senegal (SN) | Africa | Amber | BCEAO has repeatedly issued public risk warnings characterising crypto-assets as volatile, cross-border, anonymous and cybersecurity-exposed, but no binding crypto-specific consumer-protection rules… | Profile →Brief |
| Serbia (RS) | Europe | Amber | Consumer protection is delivered mainly through mandatory white-paper risk disclosure, advertising restrictions on unapproved-white-paper assets, and record-keeping requirements for providers holding… | Profile →Brief |
| Seychelles (SC) | Africa | Red | No crypto-specific consumer-protection statute (marketing/promotions, custody segregation, market abuse, order handling/conflicts, suitability, or complaint-handling rules) was identified for… | Profile →Brief |
| Singapore (SG) | Asia-Pacific | Green | Since phased implementation from mid-2024, DPT service providers are subject to a detailed consumer-protection package: statutory-trust segregation and custody safeguards (PS Regulations, PS-G03)… | Profile →Brief |
| Slovakia (SK) | Europe | Amber | CASPs authorised in or passporting into Slovakia must maintain effective complaint-handling procedures under MiCA Article 71; NBS operates a dedicated complaint-submission channel for crypto-asset… | Profile →Brief |
| Slovenia (SI) | Europe | Green | MiCA imposes EU-wide, Slovenia-applicable consumer protections including mandatory white-paper disclosures for crypto-asset offerors, custody-segregation duties for CASPs, marketing-communication… | Profile →Brief |
| South Africa (ZA) | Africa | Amber | Licensed Crypto Asset FSPs are subject to the General Code of Conduct for Authorised Financial Services Providers and Fit and Proper Requirements, subject to a draft General Exemption still being… | Profile →Brief |
| South Carolina, USA (US-SC) | Americas | Amber | South Carolina's S.163 (2026) creates limited consumer-facing crypto protections: it bars prohibitions on individuals/businesses accepting digital assets as payment and on using self-hosted or… | Profile →Brief |
| South Dakota, USA (US-SD) | Americas | Amber | South Dakota has no crypto-specific consumer protection statute. General money-transmission law imposes some consumer safeguards applicable by extension to virtual-currency transmitters, including a… | Profile →Brief |
| South Korea (KR) | Asia-Pacific | Amber | VAUPA (in force since July 2024) mandates cold-storage segregation of at least 80% of user crypto deposits, matched cryptocurrency reserves, licensed-bank custody of cash deposits, and mandatory… | Profile →Brief |
| Spain (ES) | Europe | Green | CNMV enforces MiCA's consumer-protection provisions in Spain, including marketing-communication controls, custody-segregation rules, suitability assessments for advice/portfolio management, and… | Profile →Brief |
| Sri Lanka (LK) | Asia-Pacific | Red | CBSL has issued repeated public warnings (2018, 2021, 2022, 2023, 2024) disclosing financial, operational, legal and security risks of crypto investment, and urging promoters of crypto investment… | Profile →Brief |
| Sweden (SE) | Europe | Green | MiCA's Title V/VI consumer and investor protection provisions — covering risk disclosure, marketing restrictions, custody segregation, complaint handling and (where advice/portfolio management is… | Profile →Brief |
| Switzerland (CH) | Europe | Amber | Switzerland's consumer-protection posture for crypto rests on (i) a proposed/enacted amendment to the Debt Enforcement and Bankruptcy Act intended to segregate crypto assets from an insolvent… | Profile →Brief |
| Taiwan (TW) | Asia-Pacific | Amber | Consumer-protection obligations currently rest on the FSC's 2023 Guiding Directions and industry self-regulation, requiring segregation of customer assets, transaction transparency, and… | Profile →Brief |
| Tanzania (TZ) | Africa | Amber | There is no crypto-specific consumer-protection regime. BOT's public notices function as informal risk-disclosure/marketing-caution instruments advising the public against crypto trading. The Bank of… | Profile →Brief |
| Tennessee, USA (US-TN) | Americas | Amber | Tennessee's principal crypto-specific consumer-protection intervention is the statewide ban on virtual-currency kiosks (HB 2505, effective July 1, 2026), enacted directly in response to elder-fraud… | Profile →Brief |
| Texas, USA (US-TX) | Americas | Amber | Consumer protection for crypto activity in Texas is distributed across DOB's MSB/DASP supervisory framework (custody authorization for banks, complaint-handling channels, Chapter 160 disclosure… | Profile →Brief |
| Thailand (TH) | Asia-Pacific | Green | Thailand's SEC has built out custody-segregation rules for digital-asset custodians (final 2023 rules following a 2021 draft), imposed stricter advertising controls on licensed operators, and… | Profile →Brief |
| Trinidad and Tobago (TT) | Caribbean | Red | TT has no crypto-specific consumer-protection rulebook. CBTT's general statutory mandate includes promoting public understanding of the financial system and 'ensuring that customers get a fair deal'… | Profile →Brief |
| Tunisia (TN) | Africa | Red | No crypto-specific consumer-protection obligations (marketing restriction, custody segregation, complaint handling, suitability) exist in Tunisian law. General consumer-protection and… | Profile →Brief |
| Turkey (TR) | Europe | Amber | The 2024 crypto legislative package was reported to expand CMB inspection and supervisory scope over crypto service providers explicitly for customer protection purposes, but granular… | Profile →Brief |
| Uganda (UG) | Africa | Amber | The Bank of Uganda has repeatedly and publicly stated that virtual assets are not legal tender and that participation carries own-risk, most recently reiterated in the Governor's November 2025… | Profile →Brief |
| Ukraine (UA) | Europe | Red | No enforceable consumer-protection framework specific to crypto (marketing restrictions, custody segregation, complaint handling, suitability/appropriateness) is currently in force in Ukraine. The… | Profile →Brief |
| United Arab Emirates (AE) | Middle East | Green | VARA imposes a dedicated Marketing Regulations regime (2024) applicable to all entities marketing virtual assets in/from Dubai, whether VARA-licensed or not, alongside VASP obligations around risk… | Profile →Brief |
| United Kingdom (UK) | Europe | Amber | Financial promotions regime in force since Oct 2023: authorisation/registration or approved-marketing required, standardised risk warnings, Restricted Mass Market Investment classification limiting… | Profile →Brief |
| United States (US) | Americas | Amber | Consumer protection for crypto in the US is currently anchored in state-level custody/cybersecurity standards (notably NY BitLicense), the GENIUS Act's holder-priority and reserve-disclosure… | Profile →Brief |
| United States — California (US-CA) | Americas | Amber | California consumer protection for crypto is anchored in DFAL's examination, recordkeeping and fee-disclosure requirements for licensees, a dedicated crypto-kiosk regulatory law, and AB 1052/SB 822's… | Profile →Brief |
| United States — New York (US-NY) | Americas | Green | Part 200 imposes baseline consumer-protection duties on BitLicensees (and analogous duties on LPTCs): asset protection, comprehensive recordkeeping, disclosure of material product/service terms, and… | Profile →Brief |
| Uruguay (UY) | Americas | Amber | The August 2025 draft PSAV regulation differentiates the regulatory and supervisory focus by provider type: PSAVF (financial virtual-asset providers) are proposed to be subject to both… | Profile →Brief |
| Utah, USA (US-UT) | Americas | Amber | Utah's crypto-specific consumer protection is concentrated on virtual currency kiosks. The Virtual Currency Kiosk Regulation Act (H.B. 72, Title 13 Chapter 82, effective 6 May 2026) caps transactions… | Profile →Brief |
| Vanuatu (VU) | Asia-Pacific | Red | Vanuatu has no crypto-specific consumer-protection code: no custody-segregation rule for virtual assets, no crypto market-abuse regime beyond general (and incomplete) criminalisation of insider… | Profile →Brief |
| Venezuela (VE) | Americas | Red | The 2019 Decree and SUNACRIP's exchange-licensing framework are stated to exist in part to provide 'the necessary safeguard of user rights' by requiring licensed intermediation of crypto-fiat… | Profile →Brief |
| Vermont, USA (US-VT) | Americas | Amber | Vermont's DFR applies existing general consumer-protection and securities-enforcement tools to crypto products rather than a bespoke crypto consumer-protection statute, including… | Profile →Brief |
| Vietnam (VN) | Asia-Pacific | Amber | Consumer/investor protection in the crypto pilot regime is addressed indirectly through the licensing framework's ownership, staffing, and infrastructure requirements rather than through a standalone… | Profile →Brief |
| Virginia, USA (US-VA) | Americas | Amber | Virginia has no crypto-specific consumer-protection statute. General Virginia consumer-protection and money-transmitter bonding/net-worth requirements apply to licensed transmitters. Virginia has… | Profile →Brief |
| Washington State, USA (US-WA) | Americas | Green | Washington's SB 5031 amendments to the Uniform Money Services Act impose specific consumer-facing obligations on virtual currency licensees: disclosure of whether products are insured/guaranteed, an… | Profile →Brief |
| West Virginia, USA (US-WV) | Americas | Amber | No West Virginia-specific crypto consumer-protection statute has been identified. Crypto exchanges licensed as money transmitters are subject to the general customer-fund safeguarding obligations… | Profile →Brief |
| Wisconsin, USA (US-WI) | Americas | Amber | Investor-protection outreach for Wisconsin crypto/digital-asset investors runs primarily through the Wisconsin DFI's Securities Division in coordination with the SEC and NASAA, rather than through… | Profile →Brief |
| Wyoming, USA (US-WY) | Americas | Amber | Consumer protection for digital-asset customers in Wyoming is delivered principally through SPDI prudential rules (100% fiat-deposit backing, prohibition on lending customer deposits) rather than a… | Profile →Brief |
| Zambia (ZM) | Africa | Amber | The Bank of Zambia has publicly disclosed that it does not supervise the crypto sector and that consumers engage with crypto-assets entirely at their own risk. Beyond this general risk disclosure, no… | Profile →Brief |