Does Your AI Agent Need a Financial License? A Decision Guide

Whether your AI agent needs a financial license turns on what it does with money or securities — not on the fact that it is AI, and rarely on a single regulator. U.S. financial regulation is functional: it attaches obligations to activities, so an autonomous agent is routed to a regulator by what it does. Execute securities trades for other people, and the SEC’s broker rules apply. Advise about securities for compensation, and the investment-adviser rules apply. Trade futures, swaps, or leveraged retail crypto, and the CFTC’s rules apply. Move customer money or crypto, and FinCEN’s money-services-business rules and state money-transmitter licensing apply. A single agent can do several of these at once — and then it owes several regimes at once.

This guide is the router. It maps what an AI agent does to the regulator it answers to, and it links to a dedicated deep-dive for each regime. The one idea to carry through all of it: the regimes stack. They are not a menu you pick one item from; they are cumulative tests, each asked independently, and an agent can fail — or pass — several at the same time.

Key takeaways

• Function, not technology, triggers regulation. Autonomy does not change the analysis; what the agent does with money or securities does.
• Five functions, five regimes. Executing securities trades (SEC broker), advising on securities (SEC/state adviser), trading derivatives or leveraged retail crypto (CFTC), moving customer money or crypto (FinCEN money services business + state money transmitter), and matching users’ orders (exchange/ATS).
• The regimes stack. They are cumulative, not mutually exclusive; one agent can owe two or three registrations simultaneously.
• Security vs. commodity is the SEC/CFTC switch. Whether each instrument is a security or a commodity decides which agency governs — and some products trigger both.
• No AI-specific license exists. The existing securities, commodities, and money-transmission frameworks govern autonomous agents; there is no separate “AI license” to obtain or wait for.

The decision matrix: what your agent does, and who regulates it

Start by listing everything the agent actually does with customer money or securities, then run each function through this matrix. Each row is an independent test; a single agent can match several rows at once.

The two columns that matter most are the first and the last takeaway: identify the function precisely, and remember you may land on more than one row. Below, the three questions that do the routing.

First question: securities or commodities? (SEC vs. CFTC)

The first fork is what the agent trades, because it decides whether the SEC or the CFTC — or both — has jurisdiction. The SEC regulates transactions in securities; the CFTC regulates commodities, and specifically futures, options on futures, swaps, and leveraged or margined retail commodity transactions.⁵ Tokenized stocks and many investment-contract tokens are securities; Bitcoin and Ether have been treated as commodities; and crypto derivatives and leveraged retail crypto sit on the CFTC side even where spot crypto does not.

For an AI agent, this means the same automation can answer to different regulators depending on the instrument in front of it. An agent that trades tokenized securities is in SEC territory; an agent that trades perpetual crypto futures is in CFTC territory; an agent that does both is in both. The securities-versus-commodity classification of each asset is therefore the threshold legal question, and it is often the hardest one — which is why the token-taxonomy analysis is a prerequisite to everything else.⁶

Second question: executing, advising, or moving money? (the function within each regime)

Once the instrument is classified, the agent’s function selects the specific registration within that regulator’s world. On the securities side, executing transactions for others is broker activity, while advising others about securities for compensation is investment-adviser activity — two different hats under two different statutes, and an agent can wear both.¹² On the commodities side, advising on commodity interests is a commodity trading advisor, pooling participants’ capital is a commodity pool operator, and soliciting or accepting orders is a futures commission merchant or introducing broker.³

The money-movement function is the one builders most often miss, because it is not about trading at all. An agent that accepts and transmits customer funds — fiat or convertible virtual currency — is engaged in money transmission, which makes the operator a “money services business” that must register with FinCEN and maintain an anti-money-laundering program, and, separately, obtain money transmitter licenses in the states where it operates.⁴ FinCEN has long taken the position that accepting and transmitting convertible virtual currency is money transmission, so an agent that moves crypto for users is squarely in this regime.⁷

Third question: are you sure it is only one? (the stacking problem)

The most consequential mistake is assuming a single “main” regulator. The tests are cumulative. Consider an agent that solicits users, executes their securities trades, holds their cash balances, and moves crypto for them: that one product plausibly implicates broker-dealer registration (executing securities trades for others), the custody and customer-protection rules that ride on it, and a Bank Secrecy Act anti-money-laundering program — which the broker-dealer carries in that capacity, because a person functionally regulated by the SEC is generally excluded from FinCEN’s separate “money services business” registration. The money-movement layer does not vanish; it routes through the broker-dealer’s own anti-money-laundering rules federally and, because state money-transmitter licensing is not uniformly limited the same way, potentially through state licensing too. Each obligation is assessed on its own terms; satisfying one does not discharge the others.⁸

This is why the decision matrix above is a checklist, not a multiple-choice question. The right method is to enumerate every distinct thing the agent does with customer money or securities, run each through its own test, and treat every “yes” as a live obligation until counsel clears it. An agent that looks like a single product to its users can be three regulated activities to the government.

There is no AI-specific license to wait for

Builders sometimes hold off, expecting a dedicated “AI license” or an AI-specific rulebook to arrive and draw the lines. It has not, and nothing in force does that today. The SEC’s 2023 proposal on conflicts from the use of predictive data analytics was withdrawn in 2025; the SEC’s 2024 dealer rule was vacated by a federal court; and the CFTC has studied artificial intelligence in its markets without adopting an AI-specific registration rule.⁹ What governs an autonomous agent is the existing framework — the securities, commodities, and money-transmission laws — applied to what the agent does. The rules already exist; they simply do not care whether a human or a model pressed the button.

What to do first

In order: (1) write down every distinct thing the agent does with customer money or securities; (2) classify each instrument as a security or a commodity, because that sets the SEC/CFTC fork; (3) map each function to its regime using the matrix above — executing (broker), advising (adviser or CTA), pooling (CPO), order-taking (FCM/IB), moving money (money services business + state licensing), and order-matching (exchange/ATS); (4) assume the regimes stack until counsel confirms otherwise; and (5) read the dedicated guide for each regime the agent touches. Resolve all of this before the agent handles real customer money or securities.

---

This article provides general information only and is not legal advice. Securities, commodities, and money-transmission requirements are fact-specific and evolving, and their application to autonomous AI agents is an emerging area under active regulatory attention. Statutory and rule citations, agency positions, and the status of proposed, vacated, or withdrawn rules should be confirmed against the controlling authority before you rely on them. Whether and how any requirement applies to a particular business is a determination to make with qualified counsel. No attorney-client relationship is formed by this article. Attorney Advertising.

Work with Astraea Counsel

Astraea Counsel advises fintech, crypto, and AI companies on securities, commodities, and money-transmission regulation, registration strategy, and the questions raised by autonomous AI agents. Explore our Regulatory Compliance services or contact us to map your agent to the regimes it actually triggers.

Related resources

• Does Your AI Trading Agent Need to Register as a Broker-Dealer? — executing securities trades, and the exchange/ATS line
• Does Your AI Trading Agent Need to Register as an Investment Adviser? — advising about securities for compensation
• Does Your AI Trading Agent Need to Register with the CFTC? — futures, swaps, and leveraged retail crypto
• Does Your Agentic-Payments Startup Need a Money Transmitter License? — moving customer money or crypto
• The SEC/CFTC Token Taxonomy: Five Categories — the security-vs-commodity classification that sets the fork

Notes

See our AI agent licensing lawyer page, or contact us to discuss your agent.

Footnotes

1. See Astraea Counsel, “Does Your AI Trading Agent Need to Register as a Broker-Dealer?” (the broker-dealer analysis: Securities Exchange Act § 3(a)(4)-(5), 15 U.S.C. § 78c(a)(4)-(5); registration and FINRA membership under § 15, 15 U.S.C. § 78o; and the Rule 3b-16 exchange/ATS line). ↩ ↩² ↩³

2. See Astraea Counsel, “Does Your AI Trading Agent Need to Register as an Investment Adviser?” (the adviser analysis: Investment Advisers Act § 202(a)(11), 15 U.S.C. § 80b-2(a)(11), and the state-vs-SEC registration thresholds). ↩ ↩²

3. See Astraea Counsel, “Does Your AI Trading Agent Need to Register with the CFTC?” (the commodities analysis: Commodity Exchange Act § 1a, 7 U.S.C. § 1a, defining the commodity trading advisor, commodity pool operator, futures commission merchant, and introducing broker roles, plus NFA membership). ↩ ↩²

4. See Astraea Counsel, “Does Your Agentic-Payments Startup Need a Money Transmitter License?” (the money-transmission analysis: FinCEN money-services-business rules and state money-transmitter licensing). ↩ ↩²

5. Securities Exchange Act § 3(a)(10), 15 U.S.C. § 78c(a)(10) (definition of “security”); Commodity Exchange Act § 1a, 7 U.S.C. § 1a (definitions of “commodity” and related terms) and § 2(c)(2)(D), 7 U.S.C. § 2(c)(2)(D) (leveraged/margined retail commodity transactions). The SEC administers the securities laws and the CFTC the Commodity Exchange Act. ↩

6. See Astraea Counsel, “The SEC/CFTC Token Taxonomy: Five Categories” (framework for classifying a digital asset as a security or a commodity), and In the Matter of Coinflip, Inc., CFTC Docket No. 15-29 (Sept. 17, 2015), and CFTC v. McDonnell, 287 F. Supp. 3d 213 (E.D.N.Y. 2018) (virtual currency treated as a commodity within the CFTC’s jurisdiction). ↩

7. 31 CFR 1010.100(ff)(5) (defining “money transmitter” within the “money services business” definition); 31 CFR 1022.380 and 31 U.S.C. 5330 (FinCEN registration of money services businesses); FinCEN, Application of FinCEN’s Regulations to Certain Business Models Involving Convertible Virtual Currencies, FIN-2019-G001 (May 9, 2019) (accepting and transmitting convertible virtual currency is money transmission). State money transmitter licensing is separate and administered state by state. ↩

8. The securities broker-dealer, CFTC intermediary, and money-services-business regimes each impose registration on their own statutory terms; compliance with one regime does not satisfy another. This “stacking” is a consequence of the functional structure of U.S. financial regulation, in which each activity is regulated independently. Note the interaction: FinCEN’s money-services-business definition excludes a person “functionally regulated or examined by, the SEC or the CFTC” (31 CFR 1010.100(ff)(8)), so an SEC-registered broker-dealer carries Bank Secrecy Act obligations as a broker-dealer (see 31 CFR Part 1023) rather than registering with FinCEN as a money services business. State money-transmitter licensing is a separate regime and is not uniformly subject to that exclusion. ↩

9. SEC, Conflicts of Interest Associated with the Use of Predictive Data Analytics by Broker-Dealers and Investment Advisers, Release No. 34-97990 (proposed 2023; withdrawn 2025); Further Definition of “As a Part of a Regular Business” in the Definition of Dealer and Government Securities Dealer, Exchange Act Release No. 34-99477 (2024), vacated, National Association of Private Fund Managers v. SEC, No. 4:24-cv-00250 (N.D. Tex. Nov. 21, 2024); CFTC staff, Request for Comment on the Use of Artificial Intelligence in CFTC-Regulated Markets (Jan. 25, 2024). No AI-specific registration rule is in force as of mid-2026. ↩