How crypto rules actually get made, and why the result looks inconsistent

Crypto regulatory coverage tends to read as a series of shocks: a decision here, a contradictory one there, a consultation somewhere else. It gives the impression of institutions flailing. The reality is more mundane and much more predictable once you see the machinery.

This article deliberately names no specific rule, case or jurisdiction. Specific rules change, and an explainer that lists them is a liability within months. The structure changes far more slowly, and it is what actually lets you interpret a headline.

The default is that existing law applies

The most common misconception is that crypto is unregulated until a crypto law is passed. Almost nowhere is that true. Laws are generally written in terms of activities and economic substance rather than technologies — issuing an investment, taking custody of client assets, operating a trading venue, transmitting money, realising a gain.

So the first question a regulator asks is not „what rules should exist for this“ but „which existing category does this activity fall into“. This is why enforcement often arrives before legislation. The rules were already there; the question was whether a given arrangement fell inside them.

Six mandates, one object

Different bodies have different statutory questions, and none of them is trying to produce an overall verdict on crypto:

Read that table and the apparent contradictions dissolve. A token can genuinely be a security when sold by a promoter making promises, a commodity when traded between two parties with no promises attached, and property for tax purposes throughout. These are not competing verdicts on its nature. They are answers to three different questions.

Why the same asset gets classified differently over time

Several mandates care about the circumstances of a sale rather than the object sold. Whether something is an investment offering can depend on what buyers were told, what they were relying on, and how central a promoter was to the expected return.

The consequence is genuinely counterintuitive: the same token can be an investment offering at launch, when a team is raising funds against a roadmap, and not one years later, when it trades between strangers and no promoter is promising anything. Coverage describing this as a regulator „changing its mind“ has usually misread the test as being about the asset when it is about the transaction.

Four instruments, easily confused

Headlines flatten very different actions into „regulators say“. They are not equivalent:

• Legislation — a new statute. Slow, durable, and the only instrument that genuinely creates new categories.
• Rulemaking — an agency writing detailed rules under powers it already has. Usually preceded by public consultation.
• Guidance — an agency stating how it reads existing law. Fast, influential, and generally not binding in the way a rule is.
• Enforcement — action against a specific party. Decides one case, and signals a reading of the law that others must weigh.

The most common reporting error is treating enforcement as though it settled a general question. An enforcement action decides a dispute between named parties on particular facts. It tells you what one agency believes; it does not tell you what the law now is for everyone.

Why jurisdictions diverge, permanently

Different legal traditions produce different results from the same facts. Some systems work from broad principles applied case by case, others from detailed prescriptive rules written in advance. Some concentrate authority in one financial regulator, others distribute it across several. Some have constitutional constraints on how much an agency may decide without the legislature.

Add differing priorities — attracting business, protecting retail investors, preserving monetary control, enforcing sanctions — and permanent divergence is the expected outcome. Convergence is the unusual event and normally requires an international standard-setting body to broker it, which takes years.

How to read a regulatory headline

Five questions, and most coverage answers none of them:

Which body, and what is its mandate? That tells you the scope of what was actually decided. Which instrument? Enforcement, guidance, a rule and a statute have wildly different reach. Who is bound? One firm, a category of firms, or everyone. Is it final? Consultations, proposals and appealed decisions are routinely reported as settled. What is the effective date? Many rules are announced years before they bite.

Applied to a typical headline, these usually reveal something narrower than the framing implied. That is not a reason for cynicism about the reporting — it is a reason to read the primary document, which is nearly always public.