New York Ordered Crypto Firms to Police Market Manipulation

New York’s Department of Financial Services issued supervisory guidance on February 7, 2018 requiring every state-regulated virtual-currency business to maintain controls for detecting, preventing and responding to fraud, with special vigilance for market manipulation. The letter applied to businesses licensed under 23 NYCRR Part 200 and virtual-currency companies chartered as limited-purpose trust companies under New York Banking Law, including firms that also held a New York money-transmitter license.

The development mattered because it translated broad anti-fraud obligations into an operational standard for the small but institutionally important group of crypto businesses supervised in New York. It did not establish a nationwide market-abuse regime. It did, however, tell covered exchanges, custodians and other regulated firms that manipulation risk belonged inside their compliance systems rather than outside them as a problem for the wider market.

What the guidance required

Superintendent Maria T. Vullo’s letter required a written policy with four minimum elements: identification and assessment of fraud-related risks, procedures and controls against those risks, assigned responsibility for monitoring, and periodic review and revision. Market manipulation was included where applicable.

DFS gave two examples without claiming they were exhaustive. Customers acting alone or in coordination might misuse an exchange service to move a virtual currency’s price. An employee might trade improperly on nonpublic information about a company’s plan to add or remove services for a particular asset. Those examples placed both customer conduct and insider conduct within the covered firm’s risk assessment.

The letter also required an effective investigation process for suspected or actual wrongdoing. Once wrongdoing was discovered, the firm had to report the facts then known to DFS immediately, preserve incident records for examination and submit material updates as soon as practicable. DFS said it expected the first follow-up report within 48 hours in most cases, accompanied by actions taken or proposed and any operational changes intended to prevent recurrence. That 48-hour period was an expressed supervisory expectation, not a universal statutory deadline stated in the letter.

Why New York’s move was consequential

The guidance arrived one day after the chairs of the Commodity Futures Trading Commission and Securities and Exchange Commission testified before the U.S. Senate Banking Committee on virtual currencies. CFTC Chairman J. Christopher Giancarlo described federal enforcement activity but also emphasized the limited size of the new regulated bitcoin-futures market. Using February 2, 2018 open-interest data, he reported exposure equal to 6,695 bitcoin at CME and 5,569 bitcoin at Cboe. At an approximate bitcoin price of $7,700, the combined notional was about $94 million, according to the CFTC.

That comparison helps define the institutional setting without turning the DFS letter into a market-price story. Federal commodities oversight reached derivatives and anti-fraud enforcement within the CFTC’s authority, while New York directly supervised a defined group of virtual-currency businesses. DFS used that supervisory relationship to demand internal surveillance, investigation and reporting even though crypto spot trading lacked one comprehensive U.S. market regulator.

Scope and limits

Verified fact: the February 7 letter imposed expectations on DFS-regulated entities and grounded them in existing New York financial-services, banking and virtual-currency rules. Interpretation: its significance lay in making market-integrity controls examinable compliance obligations for those firms.

The surviving record does not show that DFS found manipulation at a named company on February 7, 2018, and the letter announced no enforcement case or penalty. It also did not cover every U.S. trading venue or offshore platform. Those limits matter: the action was a targeted supervisory intervention, not proof that manipulation had occurred and not a complete solution for fragmented crypto markets.