How Crypto Exchanges Are Regulated
Why your exchange asks for ID, why certain tokens get delisted, and how the global patchwork of licensing shapes the platforms you use.

Ashir Khan writes about cryptocurrency security, self-custody, macro market analysis, and regulatory policy at CryptoBeacon.
The shift from wild west to licensed entities
In crypto's early days, exchanges launched globally from offshore jurisdictions with zero oversight. Today, operating a centralised exchange (CEX) requires extensive licensing. Regulators categorise exchanges as Virtual Asset Service Providers (VASPs) or Money Services Businesses (MSBs), bringing them under the umbrella of traditional financial law.
What regulators require of exchanges
To receive and maintain a license in a major jurisdiction, an exchange must prove compliance in four main areas:
- AML & KYC: They must verify the identity of every customer and monitor transactions to prevent money laundering and terrorist financing. Learn more about AML.
- Asset Custody & Segregation: Post-FTX, regulators demand proof that customer funds are segregated from the exchange's corporate funds and are backed 1:1, often requiring independent Proof of Reserves audits.
- Market Integrity: The exchange must have surveillance systems to prevent wash trading, spoofing, and market manipulation on their order books.
- Capital Requirements: Exchanges must hold sufficient capital reserves to survive market downturns without risking user funds.
Geofencing and fragmentation
Because regulation varies wildly by country, exchanges use "geofencing" — restricting access based on a user's location (via IP address and KYC data). This leads to a fragmented market:
The "Global" Exchange
Often based offshore. Offers thousands of tokens, high leverage, and derivatives. Blocks US and UK users entirely to avoid the wrath of the SEC and FCA.
The "Local" Exchange
E.g., Coinbase US or Binance US. Fully licensed locally. Offers fewer tokens, lower leverage, and strict fiat on-ramps to comply with local laws.
Token listing and delisting
Exchanges do not list tokens purely based on demand. In the US, exchanges are terrified of listing a token that the SEC might later classify as an unregistered security. If they do, they face lawsuits. Therefore, compliance departments heavily vet tokens before listing, and will rapidly delist tokens if regulatory action is taken against the token's founders (e.g., XRP in 2020).
Similarly, privacy coins like Monero (XMR) have been delisted by numerous exchanges globally because their anonymity features make it impossible for the exchange to comply with the FATF Travel Rule for AML.
