NYDFS tightens virtual-currency advertising rules, May 2027 deadline

The New York State Department of Financial Services (DFS) issued new guidance on Nov 12, 2026 requiring virtual currency entities (VCEs) licensed or chartered by the regulator to adopt comprehensive advertising and marketing policies by May 10, 2027. The Block covered the release the same afternoon.

What the guidance requires

VCEs must maintain policies and procedures covering every advertising and marketing material for virtual currency products, services and activities. The DFS release lists six substantive obligations:

• Marketing claims must be fair, evidence-based and verifiable, and must not exaggerate performance or regulatory status.
• Customer disclosures must be clear, prominent and easy for a general audience to understand, and must clearly identify the VCE providing the product, service or activity.
• Testimonials must disclose whether the speaker was compensated.
• Zero-fee trading claims may not omit other costs borne by the customer.
• Firms must stand up a governance process for reviewing advertising and marketing materials, with named individuals responsible.
• Firms must conduct due diligence on third-party promoters and monitor for — and promptly address — fraudulent or wrongful use of the VCE's name or brand.

Policies must be reviewed at least annually, and records kept for DFS review. The regulator will assess them through examinations and ongoing supervisory monitoring.

Scope and timeline

The guidance applies to entities authorized under the BitLicense regime (23 NYCRR Part 200) and limited-purpose trust companies chartered under the state Banking Law. It takes the form of supervisory expectations rather than a new rulemaking, so no rulemaking notice-and-comment process preceded it — the Jan 2025 "sentiment-based cryptoassets" industry letter was issued on the same posture.

The compliance window closes May 10, 2027. Acting Superintendent Kaitlin Asrow said in the release:

For more than a decade, DFS has set the global standard for virtual currency oversight and consumer protection.

Enforcement posture

The release does not announce a specific penalty regime for advertising violations. DFS existing tools — BitLicense suspension or revocation, cease-and-desist orders, and civil money penalties — already cover deceptive-marketing conduct. Earlier this year the regulator issued cease-and-desist orders with civil penalties of $100,000 to $500,000 to three platforms serving New Yorkers without a BitLicense; the same enforcement track remains the default lever here.

The "third-party promoter" line is the most operationally live piece. VCEs that pay influencers, affiliates or paid-media partners now need a documented diligence and monitoring process, and the testimonial-compensation disclosure requirement lands directly on the paid-creator economy around New York-licensed exchanges and custodians.

What to watch

1. The underlying industry letter text (not yet linked from the press release at publication time) — it will dictate the exact scope of "review" and "governance" that examiners expect.
2. First examination cycle after May 10, 2027: whether DFS cites advertising non-conformance in a public enforcement action, which would set the de facto severity bar.
3. Whether other state regulators — California's DFPI and Texas's DoB have both tightened crypto marketing posture this year — issue parallel guidance that forces national firms to run to the strictest state line.
4. The treatment of sentiment-based tokens: the Jan 2025 industry letter asked VCEs to screen for them pre-listing; the new advertising rules will interact with how those tokens are promoted once listed.

Context

The guidance lands in a year when New York has already been the most active US state regulator on crypto conduct. DFS proposed 23 NYCRR Part 202 in June to codify its stablecoin supervisory regime and align it with the federal GENIUS Act, and its 2025 industry letters on custody, insolvency and sentiment-based assets already shifted the compliance baseline for VCEs. Advertising is the next surface, and the testimonial and third-party-promoter language mirrors the direction federal and state regulators have taken on paid influencer disclosure in recent years.