SEC Crypto Enforcement in 2026: The Rulebook Replaces the Lawsuit

The Week Washington Stopped Writing Crypto’s Rules

On October 16, 2026, Bitcoin trades near 81,300 dollars and Ether near 2,480 dollars, both well below their 2025 highs, and the most consequential crypto policy news of the month has nothing to do with price. It is procedural. The comment window on the largest crypto rulemaking the US Securities and Exchange Commission has ever attempted closes in days, on October 20. A month earlier, the Senate let the market structure bill that was supposed to settle who regulates crypto collapse on the floor. Two weeks after that, the commissioner who spent eight years arguing the SEC should write rules instead of filing lawsuits walked out the door.

What is left is a strange arrangement. The agency that spent the Gensler years suing exchanges is now the agency drafting the rulebook, and it is doing so with two commissioners, a failed statute behind it, and a deadline in front of it. The courtroom has gone quiet; the comment file has filled up. For anyone issuing, custodying, or trading a token in the United States, the question is no longer which lawsuit to fear. It is which proposed rule to read.

This explainer walks through how SEC crypto enforcement actually works in late 2026: why the center of gravity moved from litigation to rulemaking, what the two big proposals on the table would do, how the CLARITY Act’s failure handed the job back to the regulators, and why a framework drawn up by a shrinking commission may be less durable than it looks. Here is the whole docket at a glance.

From Lawsuits to Line-Drawing: What Changed

Under Gary Gensler, who ran the SEC from April 2021 to January 2025, the agency practiced what its critics called regulation by enforcement. It filed roughly 125 crypto-related actions and collected about 6.05 billion dollars in penalties, according to Cornerstone Research. The theory was that most tokens were unregistered securities under the Howey test, and the way to prove it was to sue exchanges and issuers and let the courts sort out the doctrine.

After the 2024 election, acting chair Mark Uyeda and then chairman Paul Atkins, sworn in during April 2025, reversed the strategy. The marquee registration cases were dropped one after another: Coinbase in February 2025, Kraken, ConsenSys, and Cumberland DRW with prejudice in March, Binance in May, and the Ripple appeals in August, leaving Ripple’s 125 million dollar institutional-sales penalty standing but ending the fight. Cornerstone counted just 13 crypto enforcement actions in fiscal 2025 against 33 the year before, a drop of about 60 percent.

Enforcement, though, is a broader word than lawsuit. In late 2026 it means three things stacked on top of each other: a fraud backstop, because fraud is still fraud; a set of non-binding staff guidance statements on activities like staking; and, increasingly, formal notice-and-comment rulemaking that draws the lines in advance. The Howey test still governs what counts as an investment contract, but the agency is now trying to answer that question by rule rather than by subpoena. That shift, from litigation to line-drawing, is the single most important thing to understand about US crypto policy this year.

There is a constitutional reason the courtroom route lost some of its appeal, too. In June 2024 the Supreme Court decided SEC v. Jarkesy, holding that the Seventh Amendment entitles defendants to a jury trial whenever the agency seeks civil penalties for fraud. The ruling curtailed the SEC’s long-standing habit of pursuing contested cases through its own in-house administrative law judges and pushed those fights into federal court, where they are slower, costlier, and less certain. When winning in litigation got harder, drawing the lines in advance by rule became the more attractive path. Jarkesy did not cause the crypto pivot, but it sharpened the incentive behind it.

September 15: Congress Punts, and the Agencies Inherit the Job

The CLARITY Act (H.R. 3633) was supposed to end the turf war in statute by splitting jurisdiction between the SEC for securities and the Commodity Futures Trading Commission for digital commodities. It passed the House in July 2025 and cleared the Senate Banking Committee in spring 2026. Then it stalled. On September 15, 2026, the Senate failed to invoke cloture on the motion to proceed by a vote of 49 to 50, eleven short of the 60 needed to open debate. Every Democrat present voted no, four Republicans joined them, and Senator Chris Coons did not vote. Senator Thom Tillis switched his vote to no specifically so he could file a motion to reconsider, a procedural maneuver that keeps the bill technically alive even as its chances fade.

Had it passed, CLARITY would have done in law what the agencies are now attempting by rule: carve digital commodities out of the SEC’s remit and give their spot markets to the CFTC, set a federal route for tokens to be sold and traded, and override the patchwork of state regimes. It followed FIT21, a similar market structure bill that cleared the House in 2024 and then died without a Senate vote, so the shape of a House win followed by a Senate stall is now familiar. Tillis’s motion to reconsider leaves a narrow door open, but with a calendar compressed by the midterm elections, few expect anyone to walk through it before 2027.

Two unresolved fights sank it, according to a post-mortem from the law firm Orrick. One was ethics: language meant to stop federal officials, in a dispute that centered on President Trump’s reported crypto income, from profiting off assets they regulate. The other was stablecoin yield, the concern that interest-bearing stablecoins could pull deposits out of banks. Senator Cynthia Lummis, the bill’s lead Republican sponsor, told reporters beforehand that if cloture failed the effort was, in her word, over for this Congress. Senator Elizabeth Warren, its most vocal opponent, has argued the measure was written by the crypto industry to protect and advance the crypto industry.

The industry felt the blow. On October 16, the day this piece was written, Blockchain Association chief executive Summer Mersinger stepped down, weeks after the defeat. But the real consequence is quieter and more lasting. With no statute, the job of drawing the securities-versus-commodity line defaults back to the regulators acting under existing law. Both the SEC and the CFTC are now assembling an interim framework under their own authority, and comprehensive market structure legislation is widely viewed as unlikely before 2027. If you want the fuller legislative calendar, we mapped it in our look at Washington’s next 90 days.

A Commission of Two

On October 2, 2026, Hester Peirce left the SEC after nearly nine years. Nicknamed Crypto Mom by the industry for her innovation-friendly instincts, Peirce had led the agency’s Crypto Task Force and spent her tenure warning that using enforcement as a substitute for clear rules was counterproductive. Her exit, confirmed by the mutual fund directors forum and others, leaves the five-seat Commission with two sitting members: Chairman Paul Atkins and Commissioner Mark Uyeda, both Republicans. Caroline Crenshaw, the last Democrat, departed in January 2026.

Two is the bare minimum. The SEC needs a quorum to act, and two members form one, but it is a quorum with no slack: Atkins and Uyeda must agree on everything, and if either recuses or is away, the agency cannot formally move. The White House has not named a successor, and Senate confirmations routinely run six to twelve months, so the SEC could keep operating as a two-person body through most or all of 2027. A regulator writing the most important crypto rules in its history is doing so with the thinnest roster it has had in the modern era.

That thinness matters for a reason beyond scheduling. In June 2026 the Supreme Court decided Trump v. Slaughter, overturning the 1935 Humphrey’s Executor precedent and holding that the president may remove the heads of independent agencies at will. The for-cause protection that once insulated SEC commissioners from the White House is gone. A rulebook produced by two aligned appointees is, structurally, only as permanent as the next commission and the next election.

Regulation Crypto Assets: An Offering Rulebook for Tokens

On August 18, 2026, the SEC proposed Regulation Crypto Assets (Release 2026-76), the first comprehensive crypto rulemaking in the agency’s history. It does three things at once: it creates registration exemptions so a startup can sell a token without a full securities offering, it builds a disclosure regime tailored to crypto rather than to equities, and it codifies a safe harbor that lets a token stop being treated as a security. Comments are due October 20, 2026, after which the Commission decides whether to adopt a final rule.

The exemptions come in two shapes, as the law firm Greenberg Traurig laid out. A startup exemption (proposed Rule 200) lets an issuer raise up to 5 million dollars over a four-year window, open to non-accredited investors with general solicitation, with no SEC qualification and no audited financials, triggered simply by filing a short Form NOR. A larger fundraising exemption (proposed Rules 300 through 307) offers a Tier 1 of up to 20 million dollars and a Tier 2 of up to 75 million dollars in any 12 months, but requires a US nexus, SEC qualification, a Form 1-CRYPTO, and ongoing annual and semiannual reports; Tier 2 also requires audited financial statements, and non-accredited investors face a 10 percent investment cap.

Those contours (the 5 million over four years, the 75 million a year) are the same numbers Atkins floated in his March 2026 token safe harbor speech, now turned into actual proposed text. Crucially, Regulation Crypto Assets would also preempt state securities registration for these offerings and for certain secondary-market trades. That preemption matters precisely because CLARITY failed: without a federal statute, state regulators remain a live enforcement channel, and a rule that overrides them does by regulation what the bill could not do by law.

The Rule That Lets a Token Graduate Out of Securities Law

The most far-reaching piece is proposed Rule 400, the investment-contract safe harbor. Under Howey, something is a security when investors put money into a common enterprise expecting profits from the essential managerial efforts of others. Rule 400 says that once an issuer has completed or permanently ceased all the essential managerial efforts it promised, makes no new such promises, and files a Form TR to certify as much, the investment contract is deemed to have ceased to exist. The token keeps trading; it simply is no longer wrapped in a securities obligation.

This operationalizes the separation idea from the March 2026 joint interpretation: a token can begin life as part of an investment contract and later shed it once the network is functional and the team’s promises are fulfilled or abandoned. It is the clearest answer the agency has offered to the question that drove every registration lawsuit, which is when exactly a token like Ether or Solana stops being the thing the SEC can sue over. The catch is that it remains a conditional certification regime, not a blanket exemption, and like everything else here, it is a proposal and not yet a rule.

To see why that matters, picture a team that raises money to build a blockchain, promising investors it will develop the protocol, recruit validators, and grow the ecosystem. At the outset buyers are plainly relying on that team’s efforts, so the sale looks like an investment contract. Years later the network runs itself, the founders have stepped back, and no one is promising future work. Under the old case-by-case approach nobody could say with confidence whether the token was still a security, and that ambiguity is exactly what let the SEC sue while leaving exchanges guessing about what they could safely list. Rule 400 gives the team a defined way to mark that transition and a form to file when it happens.

The Custody Proposal and the 84 Percent Problem

On October 1, 2026, the SEC proposed its first custody framework written specifically for crypto held by investment advisers and registered funds (Release 2026-100), under the Investment Advisers Act of 1940 and the Investment Company Act of 1940. Chairman Atkins framed the need plainly: as he put it in the release, since the advent of Bitcoin in 2008 the crypto asset market has grown from a niche curiosity into a multi-trillion-dollar asset class to which investors actively seek exposure, and the custody rules had not kept up.

According to a same-day summary from the law firm Troutman Pepper Locke, the proposal expands the roster of permitted custodians to include state-chartered trust companies, banks, broker-dealers, and futures commission merchants; updates broker-dealer custodial rules for funds; and modernizes the audit requirements for advisers. It even allows self-custody, but narrowly: an adviser may self-custody only when it determines, and re-confirms each quarter, that no permitted custodian is available.

Why widen the pool? Because qualified custody has become both a bottleneck and a concentration risk. One firm now holds roughly 84 percent of US spot Bitcoin ETF assets, a single point of failure we examined in our report on crypto custody concentration in 2026. Letting state trust companies into the business is an attempt to dilute that dominance. The narrow self-custody carve-out, meanwhile, is a quiet nod to the long-running argument, familiar to anyone who runs their own wallet, that holding your own keys can be safer than trusting an intermediary, a trade-off we put to the test in our power-user wallet field test.

The Other Half of the Map: the CFTC

The SEC is not drawing lines alone. It and the CFTC signed a memorandum of understanding on March 11, 2026, and their March 2026 joint interpretation gave the CFTC primacy over digital commodities as a spot-market regulator. In the vacuum CLARITY left, the CFTC is building its own interim rules. It sent a crypto rulemaking to White House review on September 17, and on October 5 it published an advance notice for two regimes: one for retail crypto transactions and one for a new crypto asset market registration category aimed at exchanges. Comments there are due December 14, 2026.

CFTC Chairman Michael Selig has described the approach, per the Troutman summary, as a purpose-fit option that would give exchanges federal oversight without forcing them to register as a traditional securities exchange. For builders the upshot is a crowded drafting table: two proposed federal rulebooks being written in parallel by two agencies, layered on top of the state money-transmitter and trust regimes that never went anywhere. Clarity, lowercase, is still some distance off.

In practice the division of labor follows the lines the March interpretation drew. If a token is a digital commodity, its spot trading is the CFTC’s beat; if it is sold as part of an active investment contract, the SEC is in charge until that contract ends under the proposed safe harbor. The memorandum of understanding is meant to keep the two agencies from contradicting each other at the seams, a genuine risk when the same token can move between categories over its life. For now it is coordination by handshake rather than by statute, which holds together only as long as the two chairs stay aligned.

The Fraud Floor Never Moved

Dropping the registration cases did not mean dropping enforcement. The agency rebuilt its crypto unit as the Cyber and Emerging Technologies Unit, roughly 30 specialists aimed at fraud rather than registration theory. The largest crypto judgment on the books is still the 2024 Terraform and Do Kwon fraud case, which settled for about 4.47 billion dollars after the collapse of the UST stablecoin erased tens of billions of dollars in 2022.

2026 kept the fraud docket busy. In August, the SEC and CFTC moved against Goliath Ventures and its chief executive Christopher Delgado over a crypto Ponzi scheme that took in roughly 397 million dollars from about 1,600 investors; the CFTC complaint followed Delgado’s guilty plea to wire fraud and money laundering, and reporting by The Block put investor losses around 250 million dollars. In late September, the SEC charged Cryptoaiml Capital Foundation and TSAI Pro over investment-confidence scams aimed at retail investors. Earlier cases, including Nathan Fuller’s fake AI-trading-bot scheme and the 198 million dollar PGI Global fraud, fit the same template.

The machinery behind these cases did not shrink either. The fraud unit leans on the agency’s whistleblower program, which in fiscal 2025 fielded more than 53,000 tips, complaints, and referrals and paid roughly 60 million dollars to 48 whistleblowers, and on tip-driven referrals rather than sweeping registration theories. That is a deliberately different posture from the Gensler years: instead of testing novel arguments about what counts as a security, the unit pursues conduct almost anyone would recognize as theft, namely misappropriated customer funds, fabricated returns, and invented trading technology.

The message is consistent. The SEC retreated from the argument that selling a token is itself illegal. It did not retreat from fraud, misappropriation, or lying to investors. If anything, freeing litigators from registration fights gave the fraud beat more oxygen. The table below shows how the posture shifted without the enforcers packing up.

The Taxonomy That Still Does the Heavy Lifting

Even with CLARITY dead, the single most useful map of how US regulators classify tokens is the March 2026 joint SEC-CFTC interpretive release, filed on March 17 and published in the Federal Register on March 23. As law firm Sullivan and Cromwell summarized, it sorts crypto into five buckets: digital commodities, whose value comes from how a protocol runs rather than from a manager’s effort; digital collectibles such as NFTs; digital tools like memberships, credentials, and tickets; payment stablecoins, which sit in their own lane under the GENIUS Act; and tokenized securities, equity deliberately placed on-chain.

The release explicitly named 16 tokens as digital commodities rather than securities, among them Bitcoin, Ether, Solana, XRP, Cardano, and Chainlink, a classification the Chainlink team publicly called a landmark. The legal hinge is the essential managerial efforts test: when an issuer promises active, essential work that would reasonably lead buyers to expect profits, you have an investment contract; vague promises with no milestones or funding plan usually do not. Regulation Crypto Assets and its Rule 400 safe harbor are simply the machinery that turns this interpretation into enforceable procedure.

Stablecoins, Staking, and the Unsettled Edges

Not everything is resolved. Payment stablecoins got their own statute, the GENIUS Act, signed in July 2025, which keeps them out of the securities and commodity buckets if they hold full reserves and pay no yield to holders. That no-yield line is exactly what helped kill CLARITY: the fight over whether stablecoins can pay interest, and whether that would drain bank deposits, was one of the two issues that sank the September vote. The economics of that fight, and how other jurisdictions are answering it, run through our survey of stablecoin rules in 2026.

Staking got comfort, too. Staff said in May 2025 that protocol staking is not a securities transaction, and extended that shelter to liquid staking tokens in August 2025. But this is staff guidance, not a rule or a law; it binds no court and can be withdrawn at any time. Restaking and liquid restaking tokens, DeFi lending markets, and the fee tokens of oracle and infrastructure networks all remain gray. The March 2026 taxonomy did not mention oracles, artificial intelligence inference, or verifiable compute at all. For now those activities live in the space between a non-binding staff letter and a proposed rule that has not been adopted.

How Durable Is a Rulebook Two People Wrote?

This is the question hanging over everything. The entire 2026 framework, the dropped cases, the staff letters, the taxonomy, the two big proposals, rests on the discretion of a two-member commission aligned with the current administration. Three things make it fragile.

First, process. Regulation Crypto Assets and the custody framework are proposals. They have to survive their comment periods (October 20 for the offering rule, mid-December for custody and for the CFTC’s package), a final vote, and the near-certainty of a legal challenge under the Administrative Procedure Act. Rules that are rushed or thinly reasoned get vacated in court, and a framework assembled this quickly offers plenty of surface to attack.

Second, quorum. With two commissioners and no successor nominated, a single recusal or absence can freeze the agency, and any 1-1 split simply kills a vote. Third, removability. After Trump v. Slaughter, commissioners serve at the president’s pleasure, which means a future chair, or a future president, can reverse the current posture with far fewer legal guardrails than existed a year ago. A government shutdown was averted when Congress passed a continuing resolution funding agencies through December 11, so the SEC is at least open for business while it drafts. But open for business is not the same as settled, and a rulebook that the next commission can rewrite is a rulebook built on sand, however sensible its contents.

What It Means for Builders, Investors, and Exchanges

For token issuers, the safe harbor and exemptions are, for the first time, a plausible on-ramp to raise money onshore without betting the company on a Howey argument. But nothing is final, and the state-law preemption only takes effect if the rules are adopted as written. The sensible move is to build toward the Form NOR and Form 1-CRYPTO path while planning as if it might not arrive.

For investors, classification is clearer than it has ever been, with 16 named tokens treated as commodities rather than securities and custody options widening. Yet the consumer-protection floor that CLARITY would have written into statute does not exist, so state regulators and private class actions remain the real backstop. The firms that audit and vouch for code are stepping into that trust gap as well, a repositioning we traced in our profile of CertiK as a would-be trust layer.

For exchanges, the CFTC’s proposed crypto asset market category is the thing to watch, because it could offer federal registration without full securities-exchange status. Until it lands, the patchwork of state money-transmitter and trust rules still governs who may list and custody what. The through-line for all three groups is the same: the United States now has a crypto rulebook, it is just a draft, written by two people, against a deadline, with no statute underneath it. Read the proposals, file your comments, and watch who fills the empty seats, because they will decide whether any of this survives into 2027.

Frequently Asked Questions

Did the SEC stop enforcing crypto rules in 2026?

No. The SEC dropped its major registration lawsuits against exchanges like Coinbase and Binance and filed far fewer cases, but it kept prosecuting fraud, Ponzi schemes, and misappropriation through its Cyber and Emerging Technologies Unit. Enforcement shifted from suing companies for selling tokens toward policing outright fraud, while rulemaking took over the job of defining what the rules are.

What is the Regulation Crypto Assets proposal?

It is the SEC’s first comprehensive crypto rulemaking, proposed on August 18, 2026, with comments due October 20, 2026. It creates registration exemptions that let startups raise up to 5 million dollars over four years or up to 75 million dollars a year under tighter conditions, a crypto-specific disclosure regime, and a safe harbor that lets a token stop being treated as a security once the issuer ends the essential managerial efforts it promised.

Why did the CLARITY Act fail?

The Senate failed to invoke cloture on September 15, 2026, by a vote of 49 to 50, short of the 60 votes needed to advance the bill. Democrats objected to its ethics provisions covering federal officials’ crypto holdings and to its treatment of yield-bearing stablecoins. Comprehensive market structure legislation is now widely considered unlikely before 2027.

How many commissioners does the SEC have now?

Two. After Hester Peirce left on October 2, 2026, only Chairman Paul Atkins and Commissioner Mark Uyeda remain on the five-seat Commission. Two members form the minimum quorum, so the agency can still act but has no room for disagreement, and no successor has been nominated.

Is Bitcoin a security according to the SEC?

No. The March 2026 joint SEC-CFTC interpretation classified Bitcoin, along with Ether, Solana, XRP, Cardano, Chainlink, and ten other tokens, as a digital commodity rather than a security. Tokens tied to an issuer’s ongoing managerial efforts can still be investment contracts, but the largest networks are treated as commodities.

By Priya Reddy, senior markets and policy correspondent at HOGE Wire.