BitPay To Pay $1M to New York’s Financial Services Department

An investigation found that BitPay’s cybersecurity and anti-money laundering programs were not in compliance with New York State’s Department of Financial Services regulations


Gorodenkoff/Shutterstock modified by Blockworks


Crypto exchange Coinbase, which disclosed receipt of an SEC Wells notice last month, was not the only major crypto company in the regulatory crosshairs. Payments provider BitPay was dealing with its own regulatory troubles.

In an underreported settlement, BitPay and the New York State Department of Financial Services (NYSDFS) came to terms on March 16, after the regulator said the company failed to ensure compliance with anti-money laundering laws and cybersecurity regulations.

“BitPay has fully cooperated with the NYSDFS and is pleased to have resolved this matter. The settlement concerned historical shortcomings in BitPay’s regulatory programs identified in a 2018 and 2021 examination conducted by NYDFS,” BitPay CEO Stephen Pair told Blockworks. 

NYSDFS said that it first examined BitPay from July 2018 to December 2018, and “found deficiencies” in regard to its cybersecurity regulations and anti-money laundering (AML) compliance programs. 

“The Virtual Currency Regulation requires that Licensees establish an effective AML program, that, at a minimum, shall provide a system of internal controls, policies, and procedures designed to ensure ongoing compliance with all applicable AML laws, rules and regulations,” the settlement said. The program requires an independent test from personnel at a “regulated entity.”

Similarly, New York’s cybersecurity regulation requires companies to “conduct a periodic risk assessment…to inform the design of the cybersecurity program and update such risk assessment(s) as necessary.” 

A second investigation starting in 2019 found that the crypto payments provider’s cybersecurity and AML programs needed “additional improvement.” 

“Throughout the exam period and since, BitPay has steadily enhanced its already rigorous compliance and cybersecurity programs to both fulfill its regulatory obligations and continue to be an example of doing business the right way in the evolving blockchain payments space,” Pair said.

BitPay agreed to a penalty of $1 million.

As part of the settlement, BitPay is required to submit an action plan to the NYSDFS before Sept. 16 this year.

“BitPay has demonstrated its commitment to remediation by devoting significant financial and other resources to enhance its cybersecurity and AML programs,” the NYSDFS said.

Start your day with top crypto insights from David Canellis and Katherine Ross. Subscribe to the Empire newsletter.

Explore the growing intersection between crypto, macroeconomics, policy and finance with Ben Strack, Casey Wagner and Felix Jauvin. Subscribe to the On the Margin newsletter.

The Lightspeed newsletter is all things Solana, in your inbox, every day. Subscribe to daily Solana news from Jack Kubinec and Jeff Albus.


Upcoming Events

Salt Lake City, UT

MON - TUES, OCT. 7 - 8, 2023

Blockworks and Bankless in collaboration with buidlbox are excited to announce the second installment of the Permissionless Hackathon – taking place October 7-8 in Salt Lake City, Utah. We’ve partnered with buidlbox to bring together the brightest minds in crypto for […]

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Pack your bags, anon — we’re heading west! Join us in the beautiful Salt Lake City for the third installment of Permissionless. Come for the alpha, stay for the fresh air. Permissionless III promises unforgettable panels, killer networking opportunities, and mountains […]

recent research

Unlocked by Template.png


With the spot ETH ETF approval, the institutions are coming. stETH - given its dominance in marketshare, existing liquid market structures, and highly desirable properties - is poised for institutions.


The distributed cell plan provider started selling its own hotspots in October 2023


The Brazil-based asset manager’s filing comes during a year of milestone bitcoin and ether fund approvals


The purchase of five sites in Georgia set to help CleanSpark hit its mid-year operating hash rate target of 20 EH/s


Plus, it’s beginning to look like we may be in for a cruel summer



Engaging with XDC provides access to cutting-edge financial tools and places investors at the forefront of the trade finance revolution


Plus, an update on spot ETH ETFs and what’s on this week’s economic calendar