BitPay To Pay $1M to New York’s Financial Services Department

An investigation found that BitPay’s cybersecurity and anti-money laundering programs were not in compliance with New York State’s Department of Financial Services regulations

article-image

Gorodenkoff/Shutterstock modified by Blockworks

share

Crypto exchange Coinbase, which disclosed receipt of an SEC Wells notice last month, was not the only major crypto company in the regulatory crosshairs. Payments provider BitPay was dealing with its own regulatory troubles.

In an underreported settlement, BitPay and the New York State Department of Financial Services (NYSDFS) came to terms on March 16, after the regulator said the company failed to ensure compliance with anti-money laundering laws and cybersecurity regulations.

“BitPay has fully cooperated with the NYSDFS and is pleased to have resolved this matter. The settlement concerned historical shortcomings in BitPay’s regulatory programs identified in a 2018 and 2021 examination conducted by NYDFS,” BitPay CEO Stephen Pair told Blockworks. 

NYSDFS said that it first examined BitPay from July 2018 to December 2018, and “found deficiencies” in regard to its cybersecurity regulations and anti-money laundering (AML) compliance programs. 

“The Virtual Currency Regulation requires that Licensees establish an effective AML program, that, at a minimum, shall provide a system of internal controls, policies, and procedures designed to ensure ongoing compliance with all applicable AML laws, rules and regulations,” the settlement said. The program requires an independent test from personnel at a “regulated entity.”

Similarly, New York’s cybersecurity regulation requires companies to “conduct a periodic risk assessment…to inform the design of the cybersecurity program and update such risk assessment(s) as necessary.” 

A second investigation starting in 2019 found that the crypto payments provider’s cybersecurity and AML programs needed “additional improvement.” 

“Throughout the exam period and since, BitPay has steadily enhanced its already rigorous compliance and cybersecurity programs to both fulfill its regulatory obligations and continue to be an example of doing business the right way in the evolving blockchain payments space,” Pair said.

BitPay agreed to a penalty of $1 million.

As part of the settlement, BitPay is required to submit an action plan to the NYSDFS before Sept. 16 this year.

“BitPay has demonstrated its commitment to remediation by devoting significant financial and other resources to enhance its cybersecurity and AML programs,” the NYSDFS said.


Get the news in your inbox. Explore Blockworks newsletters:

Tags

Decoding crypto and the markets. Daily, with Byron Gilliam.

Upcoming Events

Old Billingsgate

Mon - Wed, October 13 - 15, 2025

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

recent research

Research Report Templates.png

Research

Content Delivery Networks (CDNs) represent low-hanging fruit in a massive market ripe for Web3-driven disruption. The global CDN market was valued at ~$28B in 2024, and is projected to surpass $140B by 2034, (18.75% CAGR) underscoring the immense demand for efficient content delivery.

article-image

Long before BlackRock’s ETF, there was the Winklevoss Bitcoin Trust

article-image

Mainnet goes live with a 16-node federation, promising five-second block times, low fees and Bitcoin-native DeFi

article-image

Sponsored

WalletConnect Certified is not just a recognition program, it’s a movement to improve how users onboard, transact, and engage across the onchain ecosystem

article-image

In crypto investing, quantity has a quality all its own.

article-image

REX and Osprey prep to launch their Solana staking ETF

article-image

A 40% allocation to crypto today is safer than a 1% allocation was in 2021, Ric Edelman argues