California DFAL License Requirements: Who Needs One in 2026?

Updated August 17, 2026 to reflect S.B. 97’s repeal of the DFAL’s stablecoin chapter and its narrowed definition of digital financial asset, and to replace the widely-circulated $500,000 surety-bond figure with what the rulemaking record actually shows. That analysis was first published as Complying With Calif. Crypto License Law’s 11th-Hour Rewrite, Law360 Expert Analysis, August 13, 2026, by Chanté Eliaszadeh and Brandon Orewyler.

Do You Need a License Under California’s Digital Financial Assets Law?

If your business exchanges, transfers, or stores digital financial assets with or on behalf of California residents, then as of July 1, 2026 you need one of three things: a license from the Department of Financial Protection and Innovation (DFPI), a completed license application filed on or before July 1, 2026 that is awaiting decision, or an exemption under Financial Code section 3103—most commonly the de minimis carve-out for activity reasonably expected to total $50,000 or less per year. Operating outside those three lanes is unlicensed activity exposed to civil penalties of up to $100,000 per day.¹

The Digital Financial Assets Law (DFAL), Cal. Fin. Code Division 1.25 (commencing with section 3101), is California’s first dedicated digital-asset licensing regime, and it sits on top of—not instead of—the state’s money transmitter framework.² The three lawful lanes come straight from the operative section:

The decision logic reduces to a few lines:

def needs_dfal_license(activity, ca_residents, annual_value_usd):
    covered = activity in {"exchange", "transfer", "store_custody"}  # Fin. Code 3102
    if not (covered and ca_residents):
        return False
    if annual_value_usd <= 50_000:        # 3103 de minimis exemption
        return False
    # otherwise: license (3203), pending application filed
    # on or before 2026-07-01 (3201(b)), or another 3103 exemption
    return True

What Counts as “Digital Financial Asset Business Activity”

The statute defines a digital financial asset as a “digital representation of value that is used as a medium of exchange, unit of account, or store of value, and that is not legal tender.”³ Covered business activity centers on “[e]xchanging, transferring, or storing a digital financial asset” for or on behalf of a California resident, with storage and exchange defined through assuming or maintaining control of the asset on the resident’s behalf.³

Two practical consequences follow. First, custody is the gravitational center: businesses that hold customer assets—exchanges, hosted wallets, custodians—are squarely covered. Second, the “on behalf of a resident” framing means an out-of-state or offshore platform serving California customers is inside the perimeter; the license obligation follows the resident, not the server.

How California Got Here: The Canonical Dates

Note the compressed endgame: the implementing regulations became effective two days before the licensure trigger, after an OAL disapproval and a second modification round. Businesses that built compliance plans on the proposed rules should re-check them against the final text.⁷

The Exemptions, Including the $50,000 De Minimis Carve-Out

Financial Code section 3103 lists the exempt categories, including banks and government entities. The exemption most relevant to startups is de minimis: the law does not reach a person whose covered activity with California residents “is reasonably expected to be valued, in the aggregate, on an annual basis at fifty thousand dollars ($50,000) or less.”⁸

Three cautions. The measure is aggregate annual value of activity, not revenue or profit—a small business moving customer crypto can blow through $50,000 of transaction value quickly. The test is what is “reasonably expected,” so a growth-stage business cannot ride the exemption while projecting past it. And exemptions are fact-specific: confirm the current section 3103 list before relying on any of them.

A New York License Helps. A California MTL Does Not.

The DFAL’s only licensing head start goes to New York licensees. Under section 3205, the DFPI may issue a conditional license to an applicant that holds a New York virtual-currency license under 23 NYCRR Part 200 (the BitLicense) or a New York limited-purpose trust company charter with approval to conduct virtual-currency business—but only if that New York authority was issued or approved no later than January 1, 2025.⁹

What section 3205 does not do is grandfather California’s own money transmitter licensees. An MTL under the Money Transmission Act covers money transmission; the DFAL is a separate, parallel regime for digital financial asset business activity, and a business subject to both needs both. For the multi-state picture—including which states require no license at all for standalone crypto activity—see our 50-state crypto licensing map.

Bond and Net Worth: What the Statute Says vs. What DFPI Expects

The statute deliberately fixes no dollar amounts. Section 3207 requires each licensee to “maintain a surety bond or trust account in United States dollars in a form and amount as determined by the department,” and capital requirements are likewise set by the DFPI in the application process.¹⁰

What the DFPI has actually signaled is one number, and it is not the bond: its application guidance states the department “expects an initial amount of $100,000 in tangible net worth as part of the DFAL license application,” with the final figure set later in review under section 3207(b).⁶

The $500,000 Bond That Isn’t

A $500,000 surety bond figure circulates through client alerts and compliance-vendor guides, in at least one instance as a fixed floor. We ran it down for a Law360 Expert Analysis piece, and it appears nowhere in the regime: not in the statute, not in the final regulations, not in the rulemaking file, not in the DFPI’s licensing guidance, and not in the Nationwide Multistate Licensing System checklist—which records the minimum bond amount as $0.00.¹⁰

The number’s absence is deliberate rather than accidental. The Office of Administrative Law had flagged the proposed surety-bond rule as unclear, faulting the proposed section because it was “unclear from the proposed section how the Department will determine the amount of the surety bond to be maintained by a licensee.”¹⁰ The DFPI’s fix was not to publish a flat number. Told to explain how it would decide, the department directed the commissioner to consider “only the factors” the statute already supplies for capital and liquidity, applied “on a case-by-case basis”—pointing at the capital test and closing the list.¹⁰

A business that budgets for a hard $500,000 line is budgeting against a figure the agency has declined to adopt. Both the bond and the net-worth number are calibration points the DFPI moves case by case; confirm current amounts directly with the department before relying on either.

Stablecoins Under the DFAL: The Chapter That Was Repealed

The DFAL no longer has a stablecoin chapter. As enacted, Chapter 6 would have barred a covered person from dealing in a stablecoin unless the issuer held eligible securities at least equal to its outstanding stablecoins, with DFPI commissioner approval under section 3603 as the alternative path. One day before the licensing trigger, S.B. 97 deleted the whole of it. The operative language is flat: “Chapter 6 (commencing with Section 3601) of Division 1.25 of the Financial Code is repealed.”¹¹

The Legislature did not give its reasons, but the repeal is hard to separate from the federal calendar. Rather than run bespoke state reserve rules for the few months before the GENIUS Act’s national framework takes over, California appears to have stepped back.

That leaves a gap, and it is the practical point for any stablecoin business: California’s dedicated stablecoin rules are gone, the federal regime is not yet operative, and general DFAL licensing still reaches stablecoin activity in the meantime. GENIUS Act preemption for permitted payment stablecoin issuers begins on the earlier of January 18, 2027 or 120 days after final federal payment-stablecoin rules. Until then, a business that exchanges, transfers, or stores stablecoins for California residents sits inside the licensing perimeter on the ordinary three-lane analysis above—with or without Chapter 6. Our GENIUS Act stablecoin compliance roadmap tracks the federal timeline.

S.B. 97 also narrowed the definition of digital financial asset itself, carving out two categories: merchant affinity and rewards points that cannot be exchanged for legal tender, bank credit, or a digital asset; and in-game or game-platform assets used only inside the game.¹¹ For retailers running points programs and game publishers with in-platform currencies, that is a meaningful clarification.

Crypto Kiosks: SB 401’s Separate Overlay

California paired the DFAL with a dedicated kiosk statute (SB 401, Stats. 2023, ch. 871) that was operative well before the licensing trigger:

• Transaction cap—an operator may not accept or dispense more than $1,000 in a day from or to a single customer via a digital financial asset transaction kiosk (Fin. Code § 3902).¹²
• Fee cap—on or after January 1, 2025, kiosk fees are capped at the greater of $5 or 15% of the U.S. dollar equivalent of the transaction (Fin. Code § 3904).¹²
• Licensing compliance—kiosk operators must ensure the digital financial asset business activity running through their machines complies with the DFAL’s licensing regime (Fin. Code § 3907).¹²

Kiosk operators also face a separate federal layer; see our FinCEN CVC kiosk compliance guide.

Enforcement Exposure: $100,000 Per Day

The DFAL’s enforcement section is blunt. A person that engages in covered activity without a license faces a civil penalty of up to $100,000 for each day of violation; a licensee or covered person that materially violates the law faces up to $20,000 per day. The penalty “continues to accrue until the date the violation ceases.”¹

The DFPI now has a dedicated digital-asset regime, final regulations, and an application pipeline that opened in March—the ingredients of an enforcement program. For how aggressively regulators are using their crypto authority elsewhere, see our crypto enforcement tracker.

What to Do Now

• If you applied by July 1, 2026—you may operate while the application is pending. Keep activity within the scope described in the application, and expect the DFPI to set your bond and net-worth figures during review.
• If you did not apply and serve California residents—get an exemption analysis done now. If no exemption fits, the choices are stopping or restructuring the covered activity, or applying and staying out of the California market until the license issues. Daily-accruing penalties make “keep operating while we apply” the one indefensible option.
• If you hold a pre-2025 New York BitLicense or trust charter—evaluate the section 3205 conditional-license path; it is the only licensing head start the statute offers.
• If California is one state among many—the DFAL adds to, rather than replaces, the money-transmission analysis. Start from the 50-state map and the multi-state licensing cost guide.

Need California DFAL Guidance?

Astraea Counsel advises crypto and fintech companies on California DFAL licensing, exemption analysis, DFPI applications, and multi-state licensing strategy. Our analysis of the regime’s final-week rewrite was published by Law360 as Complying With Calif. Crypto License Law’s 11th-Hour Rewrite (Expert Analysis, August 13, 2026). Explore our Regulatory Compliance services or contact us to discuss your position.

Related Resources

• State-by-State Crypto Licensing Map (2026)—Where a license is, and is not, required for standalone crypto activity across all fifty states.
• Do Crypto Companies Need a Money Transmitter License?—The threshold question, answered by business model.
• What Multi-State Crypto Money Transmitter Licensing Actually Costs—Fees, bonds, and net-worth thresholds across states.
• GENIUS Act Stablecoin Compliance Roadmap—The federal stablecoin timeline that will eventually preempt part of the state picture.
• FinCEN’s CVC Kiosk Crackdown—The federal MSB layer for kiosk operators.
• Crypto Enforcement Tracker (2024-2026)—Federal SEC and CFTC enforcement actions and penalties.
• Complying With Calif. Crypto License Law’s 11th-Hour Rewrite—Our Law360 Expert Analysis on what S.B. 97 moved in the final 48 hours, and the bond figure that is not in the regime (August 13, 2026).

---

Disclaimer: This article provides general information only and does not constitute legal advice. California DFAL requirements, DFPI guidance, and regulatory amounts change; verify current requirements against the statute, the final regulations, and the DFPI, and consult qualified counsel before relying on this guide.

---

Sources and Citations

Footnotes

1. Cal. Fin. Code § 3201 (licensure requirement operative July 1, 2026; lawful lanes are a license under § 3203, a completed application submitted on or before July 1, 2026 that is “awaiting approval or denial,” or an exemption; section text as most recently amended by SB 97, Stats. 2026, ch. 52, effective June 30, 2026); Cal. Fin. Code § 3407 (civil penalties: up to $100,000 per day for unlicensed activity; up to $20,000 per day for licensee violations; penalties accrue “until the date the violation ceases”). https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=FIN&sectionNum=3201; https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=FIN&sectionNum=3407. ↩ ↩² ↩³

2. Digital Financial Assets Law, Cal. Fin. Code Division 1.25 (commencing § 3101), enacted by AB 39 (Stats. 2023, ch. 792, effective Jan. 1, 2024). Section 3101: “This division shall be known as the Digital Financial Assets Law.” https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=FIN&sectionNum=3101. ↩ ↩²

3. Cal. Fin. Code § 3102 (definitions): a digital financial asset is a “digital representation of value that is used as a medium of exchange, unit of account, or store of value, and that is not legal tender”; digital financial asset business activity includes “[e]xchanging, transferring, or storing a digital financial asset,” with storage and exchange defined through assuming or maintaining control on behalf of a resident. https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=FIN&sectionNum=3102. ↩ ↩²

4. AB 2269 (2021-2022 Reg. Sess.), vetoed by Governor Newsom in September 2022; the veto message called it “premature to lock a licensing structure in statute without considering both previous research and outreach work and forthcoming federal actions.” ↩

5. AB 1934 (Stats. 2024, ch. 945), amending Fin. Code § 3201 to substitute July 1, 2026 for July 1, 2025. https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202320240AB1934. ↩

6. California Department of Financial Protection and Innovation, Monthly Bulletin (March 2026) (DFAL license applications accepted through NMLS beginning March 9, 2026, using forms MU1 and MU2), https://dfpi.ca.gov/news/monthly-bulletins/monthly-bulletin-march-2026/; California Department of Financial Protection and Innovation, “Digital Financial Assets Law: Preparing for Your Application” (“The Department expects an initial amount of $100,000 in tangible net worth as part of the DFAL license application,” with the final amount determined under Fin. Code § 3207(b) “later in the application process”), https://dfpi.ca.gov/regulated-industries/digital-financial-assets/digital-financial-assets-law-frequently-asked-questions/digital-financial-assets-law-preparing-for-your-application/. ↩ ↩²

7. California Department of Financial Protection and Innovation, Digital Financial Assets Law Regulations, Opinions and Releases (rulemaking PRO 02-23: Office of Administrative Law disapproval May 12, 2026; Notice of Second Modification June 5, 2026; final regulations approved with an effective date of June 29, 2026). https://dfpi.ca.gov/rules-enforcement/laws-and-regulations/digital-financial-assets-law-regulations-opinions-releases/. ↩ ↩² ↩³

8. Cal. Fin. Code § 3103(b) (exempting, inter alia, a person whose digital financial asset business activity with or on behalf of residents “is reasonably expected to be valued, in the aggregate, on an annual basis at fifty thousand dollars ($50,000) or less”). https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=FIN&sectionNum=3103. ↩

9. Cal. Fin. Code § 3205 (conditional licenses for holders of a New York virtual-currency license under 23 NYCRR Part 200 or a New York limited-purpose trust company charter with approval to conduct virtual-currency business, issued or approved no later than January 1, 2025). https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=FIN&sectionNum=3205. ↩

10. Cal. Fin. Code § 3207 (licensee “shall maintain a surety bond or trust account in United States dollars in a form and amount as determined by the department”); Cal. Code Regs. tit. 10, § 1230(b) (surety-bond amount set “on a case-by-case basis”); Office of Administrative Law, Decision of Disapproval of Regulatory Action, OAL Matter No. 2026-0330-04 (May 19, 2026; reciting the May 12, 2026 notice) (clarity standard, Cal. Gov. Code § 11349.1(a)(3); surety-bond defect in proposed Cal. Code Regs. tit. 10, § 1230); DFPI, “Digital Financial Assets Law — Preparing for Your Application”; DFPI, Notice of Second Modification to Text (June 5, 2026); NMLS, CA-DFPI DFAL License new-application checklist (updated June 8, 2026) (ESB minimum bond amount $0.00). The $500,000 figure circulating in practitioner alerts appears in none of these sources. Analysis first published as Chanté Eliaszadeh and Brandon Orewyler, “Complying With Calif. Crypto License Law’s 11th-Hour Rewrite,” Law360 (Aug. 13, 2026), https://www.law360.com/articles/2510279. https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=FIN&sectionNum=3207. ↩ ↩² ↩³ ↩⁴

11. S.B. 97, Stats. 2026, ch. 52 (urgency statute, eff. June 30, 2026), sec. 9 (“Chapter 6 (commencing with Section 3601) of Division 1.25 of the Financial Code is repealed”); compare A.B. 39 (former Cal. Fin. Code §§ 3601, 3603). S.B. 97 also amended Cal. Fin. Code §§ 3102, 3103, 3201, and 3205; the definitional carve-outs for non-redeemable merchant rewards points and in-game assets are at § 3102 as amended. See S.B. 97 committee analyses (2025 Reg. Sess.). https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260SB97. ↩ ↩²

12. SB 401 (Stats. 2023, ch. 871), Cal. Fin. Code §§ 3901-3907: § 3902 ($1,000 daily per-customer kiosk limit: “An operator shall not accept or dispense more than one thousand dollars ($1,000) in a day from or to a customer”); § 3904 (on or after January 1, 2025, fee cap of the greater of $5 or 15% of the dollar equivalent); § 3907 (kiosk-operator duty to ensure DFAL licensing compliance, as amended by Stats. 2024, ch. 945). https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=FIN&sectionNum=3902. ↩ ↩² ↩³